last executing test programs: 2m38.025151728s ago: executing program 4 (id=5025): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x4, &(0x7f0000000140)="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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000032c0)={0xffffffffffffffff, 0xe0, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000012c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000001300)=[0x0, 0x0], &(0x7f0000003080)=[0x0, 0x0], 0x0, 0x96, &(0x7f00000030c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000003100), &(0x7f0000003140), 0x8, 0x95, 0x8, 0x8, &(0x7f0000003180)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000003300)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000033c0)={'ip6tnl0\x00', &(0x7f0000003340)={'ip6gre0\x00', 0x0, 0x4, 0xf8, 0x1, 0x8001, 0x22, @private0, @private1, 0x80, 0x20, 0x8001, 0x8}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000003500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000034c0)={&(0x7f0000003400)={0xc0, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x111}, 0x20000814) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_dellink={0x3c, 0x13, 0x1, 0x70bd25, 0x0, {}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x18, 0x4, 0x0, 0x1, {0x14, 0xa, 0x0, 0x1, [{0x8, 0x2, 0x0, 0x0, 0x2}, {0x8, 0x1}]}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000040) sendmmsg$inet6(r10, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001140)='@R*', 0x3}, {&(0x7f0000001180)="d5ad39586c52fc40fe536f38db3335c5719c3a84312f3711b6d51ccade0e368356acf844192132b44439bb780a655acb1f2d6126d6bc0878ae2e8bc6bd320226f958fab03130e7537f1eab6317f6b01c12a9440088a9bef1798999cc042b2f956d323d1a1822e5146bb3e9b38a51743b257f4484e2defd6cefe2fe08b1aea2858aba9cf71cb982c6ce0165296adf5a6593deb68f52c9b660971c48626e9215963d090f55597d874899e00fcda77e034168880cb5b82441eeda9ec24b5e48523798c2cdd9723f5b8553da10213c80e77fb070cbb25644", 0xd6}, {&(0x7f00000013c0)="45b0bd82e266bec576edf83df8331a48eacd531c19c4182490c07aeb93bfa7d9c76b570c14618c54302f1779882f00d74e2431f56673da94b0dff2a41a0b071eb4192b8956ec36fbaf7528a864e2a8f1988c2b79d1ff6fe9cfb24475d428d3644006034df3f31b28fa65a69d40a9d891896db97b030cc336a89d8dc3f9e528e0f49e8bf4db47fc80006545f3996948ec2add9de0a0698136408ad83104a40114399ae810d0d36c4a2d4ea1463c6dc87f4ab26de70811751b7e68da6d301e41c0ee9d", 0xc2}, {&(0x7f00000014c0)="5dd1dbe90672964a692bf0d237e9ec005cb7486ce4100576f24e64e456dec7efefc5b8fccf57e2785529305c8225463eb5cbdf4afe947dcf6aff2c27268530de6d53610010f9fa8907f6c9fcdac0d0257ad10beff969b58e5d40d3660a5d1a33f17eac2eb751413a5f6e", 0x6a}, {&(0x7f0000001540)="8e856bdee463e62c4c006b58bb6b541e7637e1dabce03da17e1e04182855c988f034fbeddac5e71ac2d806a3e88503fea151be732c613a3e028ac6b562fec34f695dbd4360745eab4814aa44e0dbd1db979db6d9e170700009dfbf3ae37b4f2d7abe29a0b999ba8497752aaa20", 0x6d}], 0x5, &(0x7f0000001640)=[@hoplimit={{0x14}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x5c, 0x8, 0x2, 0x7, 0x0, [@local, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x0, 0xea, 0x0, [@private0, @ipv4={'\x00', '\xff\xff', @loopback}, @private2]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0xe0}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001740)="9da16655b68dcd5c423aebfded5397a9ce08da699a8633853d7f422909bde84e027c11155123d2b4e815ebab67003326ed7131c70d1b2f1ee2e8c10a146192a1c36f9a3dade16de58c633502f663a612daa035f2662b08d49e7a7d40d11665a2f603b1a8881572efd7b5fa5eb454d31abb87bd3525a4cd57d2770cd017d2", 0x7e}, {&(0x7f00000017c0)="7d238bfc298fda316a1bcb563ec4bd57a32437e7ad0c6a03d5fbc08b71b17003", 0x20}, {&(0x7f0000001800)="bd5d8d01693e0e787aea2fb8277aa7bc9079e2bcacf92c7412f8a72d9aa0e4eed8a537ae06469f724194cf17add41391fddbb6a85b2a4ea1d4ce249ee11809c48ea1fd7c1aab70ba836d6723d7a20f1b730ceb36c518d9cdb1be4442fffaab42ea956176ccba2688ec79b767d90f41bfa630196fc5d5b4adc4a7142bc392914ad1f5451126a59e751b7885e65ebfe2ce8d579dbc76b02fc7bfb0142df500ee7d7c4dc0e0cca51e4e630d924962aca4bd214991707397c20082300fd0410bdb339508b377bdd354441ede353364a7f6", 0xcf}], 0x3, &(0x7f0000001940)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x62, 0x2, 0x2, 0xce, 0x0, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}, @rthdrdstopts={{0x148, 0x29, 0x37, {0x84, 0x25, '\x00', [@generic={0x6, 0xac, "4647b7039012ac2ba21ae92060a352b2bbc3652e82ba360dab0977bd8a2e8ccfdefe978a0a980318faae3a6edc2b83d54d548509bcf00dca1f81a09985e8d04135191bcb88c40da1d197c638828d442814fb65a7165c4db9ec00942f99390dca9335ec388f7a3853db80714a9a689be5b0115c8467e9a9b1ed32fb085a6ed59ecaccda40c8cf04f65f067239dc09395892c7e2dfd0ed31e9d9f30b552d57014cb163099559e82fa1c86a0372"}, @jumbo={0xc2, 0x4, 0x342}, @calipso={0x7, 0x10, {0x3, 0x2, 0x6, 0x7fff, [0x40]}}, @generic={0x6, 0x1b, "7475b9c88df0f600fd5d01062c38b075bc47f022a70aa913e58147"}, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0xd55}, @calipso={0x7, 0x30, {0x3, 0xa, 0x80, 0x4, [0x9, 0x3ff, 0xff, 0xd, 0x6d]}}, @ra={0x5, 0x2, 0x8}]}}}], 0x170}}, {{&(0x7f0000001ac0)={0xa, 0x4e21, 0x60, @remote, 0x8}, 0x1c, &(0x7f0000002e80)=[{&(0x7f0000001b00)="50af98962278e5ead7df5d434074656d01c8d8f2c7e39c922238eaf2912459e4b9c33417c68cc8657b7e5f5260887250c6651b4b2631804f926af1c7023bca9eea02bc15efef505f748fd7721ca9b25bcab5f6712b2f4500da415d7aeb5262565584dc4c08dd59937779bc512ea45bcdd7158090ae487b961cc1b7eec4b597b1a256da8c20b4f590842e6a4e653f2c87a88b645e6ba95f0d5a5868469d706966466bffdab495947619d686ec8bf793444a9f8ddf1dbbd9daa5325b53f29cbe7bb0351c94219a2cdf3155142106d3b0631daa3e73191c20ef", 0xd8}, {&(0x7f0000001c00)="1ae0556615cdb5958221847cec01ca35b968414c30b43e9c3499cc064dfd9479ef7057eecc975b4e7e312dae4510ca711b140bb3c36d0fa6934f76f16b8e644e47ef86bb1c7091db851d69fd86b283db3da54ce7bf133b7d6b2571953f2205adeb213f870adbd0fe1e6321e0bbbd6f96759d508f4fa8a6f2c9df0f71f1f8fa78a8b352c3cd2753790413fdc60b395ccea2a3ff4dc7fe6be02a06f4ddeec311b2ca1cc2da47066690b8e489c9ede0b72952d475c6f4360a40833d0ee6f098de9d3fec300c06c8715b6955caafd2463661a19f30384c45175930c38d89a0cb462d87393d5b9cdaa387bd81e626dc4c52f7163f62547ff3c689", 0xf8}, {&(0x7f0000001d00)="31e19218e1450ccfd40bae0d50121e79b1d143f479d6f3fbcadccf964386792282daee07f76e69de", 0x28}, {&(0x7f0000001d40)="d7e6a6deacb18794239115be6e8bd5284bb0438cc3faf5c7e96e9727ba07147070", 0x21}, {&(0x7f0000001d80)="3ecd6053d90399d3d1be68ff7cf58cacc64ce9863886759309b0333ab3ac10572c7b530bb3aa9700ae52ab473332689988eda7c93c78e3759528dffe413d1542c5fa49d0553db81c18bfc495ff4541e7b08fe943234f5fc6fde4078b3283a6b6ce5a586d226313528e12a0ad21b2b7ea65d85b58d27f2c8d9e13b1f6f21f30728e6e5b806f50b9e99f8cd7bcbee286989acb8913a3b14cf301868dd12263610d1c21001987985b2c940b33b25a343606fd7c429d0341bcccd714f7d6cd52aaca59b9b610fd67478538577d96136bbbbc7d860b29ab3a16475d611147ce70f71b0e989bb174f48366fd224834aeb60362b786", 0xf2}, {&(0x7f0000001e80)="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", 0x1000}], 0x6, &(0x7f0000002f00)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x7fffffff}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0xc}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x33, 0x2, 0x1, 0x9, 0x0, [@remote]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}, @rthdrdstopts={{0x30, 0x29, 0x37, {0x5e, 0x3, '\x00', [@hao={0xc9, 0x10, @empty}, @jumbo={0xc2, 0x4, 0x8}]}}}], 0xc0}}], 0x3, 0xc804) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba"], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) 2m37.777735741s ago: executing program 4 (id=5031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) close(r0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x10000, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) (async) close(r0) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000002c0)={0xe0, 0x11, 0x509, 0x0, 0x0, "", [@generic="113c2d9b38402aff6ec2f31166d97833f0f8ac30073eff5aaa90ef4e67d4d71828ded4e460d643d5fe600b15cafc4e6367740fd939728fe10c222557a0e48cc54ad5fdfc9d96eab83adb23e6ea0e30003b415709fe9e9350a9b902a2fb292a57b89faa24ff367c2ce45b80daa96489871ba8845ef4d57736723c2ec516cbbcde6afb99d265f81bc4e9", @generic="1847a803d02973685ab61f218a66b934b7160571e984e5f5d6ad7eff4305326d0affb35c79b457adbe3f0bf08fc949402f059090cf6bf0007718a6968a12e721a9f1fa73"]}, 0xe0}], 0x1}, 0x0) (async) 2m37.576043935s ago: executing program 4 (id=5035): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="98080000020000ddfe", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100fff30000950000000000000075090200020000007b9a00fe00000000b509000000000000c39a04fef1000000bf8700000000000007080000f8ffffffbfa40000", @ANYBLOB="07dbddb2ef9806ebff8675d9d5321d4b419d66516fb7804e915ff5c85785c1d2"], 0x0, 0xde2, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001700090025bd7000fddbdf25060000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4008083}, 0x4000080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd75c, &(0x7f00000006c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) 2m37.339923557s ago: executing program 4 (id=5039): openat$tun(0xffffffffffffff9c, 0x0, 0x109000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x144, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x110, 0x2, [@TCA_BPF_ACT={0x10c, 0x1, [@m_skbmod={0x108, 0x18, 0x0, 0x0, {{0xb}, {0x4}, {0xd9, 0x6, "0c5720b707e41992f7d3e03eb0a83101ab1330a7c10ee2be34aa729f8f7f65d3fd4b0a3be1976c3538da2fa427f5a41285ad8376e443f0471df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134ca0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9af1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168072b0c7f2371622ccdc3d34c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000", 0xe, 0x4044084, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100800}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)={0xdc, 0x0, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x830}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x83}]}, @TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x722}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x343ccad7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x987}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40800}, 0x800) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m37.297828108s ago: executing program 4 (id=5041): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x80) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r5, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x4001) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r6, 0x40106e8c, &(0x7f0000000380)=[0x9, 0x3]) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFC_CMD_GET_TARGET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0x25dfdbfe}, 0x14}}, 0x80) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r3) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x100}, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) (async) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r5, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}}, 0x0) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x64}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x2}, {0xc, 0x90, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040040}, 0x4001) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r6, 0x40106e8c, &(0x7f0000000380)=[0x9, 0x3]) (async) 2m36.860155053s ago: executing program 4 (id=5048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c0006000100000001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000540), 0x8) write$cgroup_devices(r6, &(0x7f0000000500)={'b', ' *:* ', 'rwm\x00'}, 0xa) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x6, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r11, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r12}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4220e000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 2m29.115520013s ago: executing program 2 (id=5168): socket(0x10, 0x803, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddr={0x48, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004051}, 0x0) 2m28.921255503s ago: executing program 2 (id=5173): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002a40)=@delchain={0x7a0, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x774, 0x2, [@TCA_BPF_ACT={0x770, 0x1, [@m_bpf={0xfc, 0x11, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x5, 0x6, '\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x9d, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd569bd27d4a70df1d4a123ffc42d2592c81751e15e260622f14aeaaca5dc8acab93651fdd1d5614d98f28fc76d402e1028d910282"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x110, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xe8, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5"}, {0xc, 0x7, {0x0, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xbc, 0x8, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xf8, 0x8, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @local}]}, {0x81, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc1571"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x3ac, 0x13, 0x0, 0x0, {{0x7}, {0x274, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xc1, 0x6, {0x9, 'nat\x00', 0xef, 0x7, "859b467c76be5255b2d4f6101cf6d6cb72c6b46512ecba82df24523b07075e859fd68154d7171a2ca3415ec79cc8ff85b058dae9f1d49e867787957d80637320c0378f6dd94a52c2fc850929bb787aaf6e604a1f57d44fa7775cf7a4a456f808f135c349fb4aefe7e2bc180a4665f5c90321659b9d7722c18c63d8c5ac244a1245b6673adcb794eced4f5288970c153c5b1cd1be29cd92"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xc1, 0x6, {0x800, 'security\x00', 0x1, 0x7, "d5e486c3628c9e8c7a111651b758fe819fd071b9b7f85b09d69fe633753b56c91ebb716bda7cbe3f10db8feb7bc1aa6f7814145a0e3654c9f2b23521e6b910aa4c428134bb648bffc21f0a74a340b278cc3949b549385a407cd95c5697ed222bd3d4e4c2a0bf56c7937d87120b4f89a05bbde47670503d8a27ee2823502a90679b7fb497e236ea19c82fa844f28657c37f81f51a102feb"}}, @TCA_IPT_TARG={0x9d, 0x6, {0x8, 'filter\x00', 0xd, 0x6ccd, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x111, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x7a0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2m28.701523236s ago: executing program 2 (id=5177): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000370427bd70000000000000000000", @ANYRES32=r3, @ANYBLOB="c30803000b2ebe2650001280080001006774700044000280080007000a010101080004000100000008000700ac1414330500", @ANYRES32=r2], 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)={0x40, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_TID={0xc, 0x3, 0x3}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6}, @GTPA_FAMILY={0x5, 0xd, 0x15}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200080d4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x200080d4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x3], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x0, 0x2, 0xfffd, 0x0, 0x0, 0xfffe, 0x1000]}}}}]}, 0x3e}}, 0x20000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000003000000000000000000000903000000010000000000000f03000000000000000000000202000000005f"], 0x0, 0x3f}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00), 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x2}, 0x38) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x11, 0x18, 0x0, 0x0, '\x00', 0x0, r8, 0x1, 0x3}, 0x48) write(r7, &(0x7f0000000100)="60000000100001000100000000000000000000000000000000000000000000000900030063616e3000000000340012800800010063616e00280002802400010020a10700"/96, 0x60) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) 2m28.238104835s ago: executing program 2 (id=5184): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710447000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd81, &(0x7f0000010800)=ANY=[], 0x0) r5 = socket$alg(0x26, 0x5, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) poll(&(0x7f0000019080)=[{r5, 0x18}, {r6, 0x134}], 0x2, 0x401) (async) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x148, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x642}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x6}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xaa}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}]}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000}, 0x4000801) (async) close(r0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x80, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 2m28.009010259s ago: executing program 2 (id=5188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) socket(0x10, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2m27.809536697s ago: executing program 2 (id=5191): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) (async) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0x76, 0x1, 0xf}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) socket$packet(0x11, 0xa, 0x300) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x47, &(0x7f0000000700)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100, @val=0x80}, "83"}}}}}}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @remote}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xfeed, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}, {0xb, 0x5}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x40814) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0xc, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0xfffffe92}, 0x1, 0x0, 0x0, 0x4041}, 0x20008000) close(r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 2m21.809725195s ago: executing program 32 (id=5048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x14, 0x27, 0x9, 0x70bd24, 0x25dfdc00, {0x6}}, 0x14}}, 0x4040080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25150000002c002b8020000380080002000300000006000100000000000c0004000203aaaaaaaaaaaa08000100000000000c0006000100000001"], 0x54}, 0x1, 0x0, 0x0, 0x4045}, 0x8004) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@private=0xa010101, 0x4908, 0x0, 0x1}}, 0x44) r5 = socket$inet(0x2, 0x1, 0x6) connect(r5, &(0x7f0000000200)=@in={0x2, 0x15, @loopback}, 0x10) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)='devices.allow\x00', 0x2, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x0, 0x1, 0x70bd22, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r8, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r6, 0x28, 0x0, &(0x7f0000000540), 0x8) write$cgroup_devices(r6, &(0x7f0000000500)={'b', ' *:* ', 'rwm\x00'}, 0xa) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r9) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x6, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r11, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000000c0)='%-010d \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r12}, &(0x7f0000000780)=0x40000000, &(0x7f00000007c0)='%pS \x00', 0x2}, 0x20) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r10, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4220e000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x50, r3, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6a9}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000040) 2m12.740004201s ago: executing program 33 (id=5191): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) (async) syz_emit_ethernet(0x3a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x3c, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@timestamp_addr={0x44, 0x4, 0x76, 0x1, 0xf}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) (async) socket$packet(0x11, 0xa, 0x300) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) (async) syz_emit_ethernet(0x47, &(0x7f0000000700)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private0, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2, 0x0, 0x1, 0x6, 0x100, @val=0x80}, "83"}}}}}}}, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @private, @remote}, &(0x7f0000000240)=0xc) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0xfeed, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1}, {0xb, 0x5}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x40814) (async) sendmsg$nl_route_sched(r3, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000980)=@newtfilter={0x38, 0x2c, 0x601, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0xc, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xd, 0xe}}]}}]}, 0xfffffe92}, 0x1, 0x0, 0x0, 0x4041}, 0x20008000) close(r0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000002700090025bd5cb881f28a200fd400000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1m4.186940368s ago: executing program 0 (id=6385): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000080)='\x00', 0x420040, &(0x7f00000000c0)={@_ha_fsid={[0x8]}, {0xfffa, 0x4, 0x1, 0x1}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x1ff}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000006000061104c00000000005f500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0xfffffffc}, 0x10}, 0x94) 1m3.896474685s ago: executing program 0 (id=6388): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newqdisc={0x84c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x820, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x1, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x3fc, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0x5, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x1, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80021c08, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x14, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}, @TCA_TBF_RATE64={0xc, 0x4, 0x87a0136f3e28d700}, @TCA_TBF_BURST={0x8, 0x6, 0x5}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x400, 0x81, 0x1, 0x80, 0xffffffff, 0xffff, 0x3, 0x2, 0x1f5a, 0x2, 0x0, 0xaac, 0x6, 0x935b, 0x81, 0x7, 0x4, 0xcf3, 0x8, 0x5, 0x8, 0x800, 0x4, 0x4, 0xfffffff7, 0x0, 0x800, 0x9, 0x0, 0x3, 0x4, 0x1, 0x8, 0x24000, 0x2, 0x0, 0xff, 0x5629, 0x2, 0x6, 0x9, 0x4, 0xfffffff9, 0x0, 0xff, 0x9, 0x3, 0xa4fd, 0x3, 0xa, 0x6, 0x101, 0x2, 0x80d6, 0x3, 0x0, 0x3, 0x5, 0x0, 0x0, 0x4, 0x8001, 0x401, 0x2, 0x1, 0x4, 0xffffffff, 0x2, 0x405e75c1, 0x0, 0x0, 0x5, 0x4, 0x400, 0x4, 0x0, 0xffffff0d, 0x5000000, 0x1, 0x6a7, 0xff, 0xb, 0x1dd2, 0xfffffffb, 0xffff8000, 0x9, 0x8, 0x5, 0x1, 0x4, 0x1, 0x20c6, 0x7, 0x10c69f23, 0xc9, 0x7, 0x7, 0x6, 0x80000001, 0x40, 0x80, 0x2, 0x80, 0x9, 0x9, 0x7, 0x1, 0x3ee, 0x2, 0x1, 0x3, 0x5, 0x2, 0x9, 0x6, 0x7, 0x0, 0x9, 0x7ff, 0x9, 0x0, 0x0, 0x81, 0x7, 0xffff8000, 0x6, 0x3, 0x0, 0x4, 0x2, 0x7, 0x2, 0x0, 0x5, 0x7, 0x75b, 0x10001, 0x0, 0x7, 0x8, 0x8, 0x2, 0x93, 0x0, 0x4, 0x1, 0x7, 0x7, 0x9, 0x8, 0x3ff, 0x2, 0x4, 0x6, 0xb, 0x10001, 0x9, 0x9, 0xfffffffc, 0x40, 0x2, 0x5, 0x7fff, 0x9, 0x6, 0xfffff726, 0xffffff01, 0x800, 0x10000, 0x4, 0x800, 0x10000, 0x697, 0x6, 0x9, 0x539b, 0x4a28e313, 0x2, 0xb, 0x1, 0x8, 0x3d50, 0x1, 0x40, 0x3, 0x0, 0x1c3, 0xfffffffd, 0x0, 0x80000001, 0x4, 0x9, 0x4, 0x4, 0x4, 0x4, 0x2, 0x3, 0x400, 0xff, 0x1, 0x8, 0x2, 0x0, 0x0, 0x5, 0x5, 0x2, 0x7, 0x3, 0xff, 0x9, 0x4, 0x100, 0xeb, 0x7, 0x9, 0x1, 0x1, 0x3ed4, 0x200, 0x0, 0x5, 0x3ff, 0x2, 0xa92a, 0x8, 0x605cb02, 0x0, 0x3, 0x1, 0x0, 0x4, 0x8, 0x30, 0x9, 0x3, 0x4, 0xfffffffd, 0x4, 0x8, 0x2, 0x8ae0, 0x5, 0x1, 0x2, 0x100, 0x7, 0x4, 0x3, 0x7fffffff, 0x1, 0x400, 0x70e9, 0x7]}]}}]}, 0x84c}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 1m3.580787787s ago: executing program 0 (id=6393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2e, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x102, 0xf2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x770, 0x53}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x70}, 0x1, 0x0, 0x0, 0x44}, 0x706ebf02a5f22cc3) (async) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x58, r2, 0x1, 0x80000000, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x82}}]}, 0xfffd}, 0x1, 0x0, 0x0, 0x4080}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000280)="d52704", 0x3}, {&(0x7f00000002c0)="7aa0", 0x2}, {&(0x7f0000000300)="b9623e1055f3567264650bc07157c3ab48d44675b21d11897fec37c0f17e9b9452022389ebdcc69cfaaae619170574203074012c11723b4c878922c583be47eca9510ccf90f38f0c6e78a1ca8b58b748b1accf771786279b2d5f06055666df5b9c316a38cc3f20f746732a2c272b153fe529d750cd7f", 0x76}], 0x3, &(0x7f00000003c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x30}, 0x1) 1m3.079280259s ago: executing program 0 (id=6397): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000000200000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) write(r5, &(0x7f00000001c0)="b4", 0x1) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x158, r6, 0x4, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1c}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_IE={0x12, 0x2a, [@chsw_timing={0x68, 0x4, {0x80, 0xffff}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0xce, 0x2a, [@chsw_timing={0x68, 0x4, {0x1, 0x8}}, @mesh_chsw={0x76, 0x6, {0x8, 0x8, 0x2e, 0xa5c}}, @rann={0x7e, 0x15, {{0x1, 0x9}, 0x6, 0x2d, @device_b, 0x4, 0x1, 0x409}}, @tim={0x5, 0x93, {0xf, 0xab, 0x65, "7cc74e0cb5a5864c1d90cb69e3b37676dd16a41f3a71e8545d9a688c0466c9892aa9b9afe35b854236888ac67ae090be5773070d761f7f33228870f4311f4bdf9f29eca1f61f4c0cbd5997e3840f3ce9190f008709a8bbbc79544f71dd3a6b140e20a9ae5a7de8f9a418b1e13af37a193e9b75e6278b49f084abcca254612585f17db624e469779d87ee6aa34fdf0f6a"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @mesh_chsw={0x76, 0x6, {0xb4, 0x7, 0x3e, 0x8}}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0xd}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x158}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$BTRFS_IOC_BALANCE(r3, 0x5000940c, 0x0) r8 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000880)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)='\b', 0x1}], 0x1, 0x0, 0x0, 0x804}], 0x1, 0x4048091) sendmsg$alg(r8, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000900)="e0", 0x1}], 0x1, 0x0, 0x0, 0x48044}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f0000000080)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x856}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1m2.647660885s ago: executing program 0 (id=6404): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) sendto$inet6(r0, &(0x7f0000000040)='l', 0xfffd, 0x80ffffffff, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000180), &(0x7f0000000200)=0x8) 1m2.262299954s ago: executing program 0 (id=6410): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffb, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x8, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010106, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) listen(r3, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c582ed7247ea46b482482d961aa6a8646474140e3fb11eadd6962304a4d0645fcdbfa3dd86e026b093551063ae2f539ac735e6ec9a931bc9522a622e7e5516d4c36616e058a4fc16"], 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000000)={0x1d, r6}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000380)="562e80ae64e25a9069f9ec8d1b73039cb726a9d1c57c80e0a2bdeeffe36017e7d5a66f438cd8f3f8f24f500d061863b32e3f21aefa64e9ecc370d3a023e01c972346e049a3c22a8b437514112203fbd91862699b43d9cda918ee5ae13ca4adeb21395f8b2f844566047c731f868ca7f2a31e0b92", 0x74}, {&(0x7f0000000780)="d721a3ddac0bce7e1dba71f577fc14b4d70844158af0e03fb4a9139f5cdfdfe47f6be1e817cd6b8d9aa401fcd466ccdfbda738af794eb28efe2278c8a38eee3ae70d375d0b8881cffbc4cfe3691bd036c69fc74028cdaf62d46f01b398c13dca1babdea4616f8ea1d06c2b06624ba58ad33fde65aab633567ab19b0d0ef0c9f9e9b0747353f781e984489921caf1ff4ba203d763fd7b510a628ab1763d8b847b7e2e8cd71cdfafa0c59334c156d1b19e59c17ba76229a61a9cca98597d4e9337681d05fb22fcdf6862912e218dff18442cdace525f386ccf94da30a86737caf38e89", 0xe2}, {&(0x7f0000000980)="4f6a024dda66d3283143fd0c8f0885d0a0b7349151311c68460d896f8141cb620be0c609fa2e4a4610e37d1f2b7488b23e48e48eba113be84bf6624824a8a75bb284b1590910b00c0908224cf4805e782dbcc3815ab9209e8bdd3f5b5d9b6a7d933c042b35bcec711e2e0a38d491487d89904189e863935fa2e77188f683f21a8636724bef88a077b226d928c4f8320f7e174bc5cc5d44ad7c266fa1b816f1684c681d5b23d5deab42f5d01c98f7d6473cfbd7b605577053e5", 0xb9}, {&(0x7f0000000a40)="b3c2e210da6d90d4a4aa54f40c65c26bb17e07d2a98cbbace48653d87ef0c96dc5c82669564bdeeb6ca04a9866375c1b5ce8c4db30109b3408b8411f925585232bc76b86a20de126c25bde0c49925b5d8776189d2d5207ba74833898a5b1", 0x5e}, {&(0x7f0000000ac0)="7e076830b89f0938c174a84039057bbed14ed17b6e93f4491cdd45abfad0408ffe14ac935be008d59a5bdfaa7681a5be39bac95eae5ecabb73abf4e5d7b13a3b4e619b1ddba8e4bbba444f22d14343d8d1bbf00a3a2fa749414fcd6800052cdcb13d534c08aefcfadedb8f7457be79cc0c0ee2fac5ea1b5e8ee57f5696a5450aad10007b0bb2f0c6c831aa7a5ce317d9688f401bda663fd4ec786d9a7dddde54f6025fc80cf79c86e8c18c241c1d2925f3ebafbf3d4200d658431532d6806d4956df76614b5d28d8ebe8", 0xca}, {&(0x7f0000000bc0)="c3094b2b73dd9dadc5", 0x9}], 0x6, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf, [@empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x51, [@loopback, @broadcast, @loopback]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @broadcast}}}], 0x68}}, {{&(0x7f0000000dc0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e00)="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", 0xfa}, {&(0x7f0000000f00)="e28c62bd1dfbfb201f", 0x9}], 0x2, &(0x7f0000000f80)=ANY=[@ANYBLOB="14000000000000000000000001000000da31146500000000140000000000000000000000010000000300000000000000140000000000000000000000010000000d0000000000000098000000000000000000000007000000940401000703180713b7ac1414aa7f000001ac1414bb7f000001442c4c23ac141430000000017f000001000000080a01010000000001ac1414bb00000002e0000001000000088913a3e000000100000000640101010a01010094040100070f4e7f0000017f000001ac1e0101891b6564010101ac1416bbac1e00017f000001e0000001ac1414aa001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="e0000002ac1e010100000000"], 0x100}}], 0x2, 0x24000891) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r9) (async) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 47.21893261s ago: executing program 34 (id=6410): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x128, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x248, 0xffffffff, 0xffffffff, 0x248, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x25}}, [0xff, 0xff000000, 0x0, 0xffffff00], [0xff000000, 0xff, 0xbfa6c1dfb8cc9f2d], 'wg2\x00', 'veth0_virt_wifi\x00', {}, {}, 0x29, 0x10, 0x0, 0x60}, 0x0, 0xa8, 0xf0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00', {0x8}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0xff000000, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'ip6gre0\x00', '\x00', {0xff}, {}, 0x0, 0x2, 0x4}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x7, 0x0, [0x1, 0xa2e8, 0x4, 0x0, 0x9, 0xc, 0x7, 0x6f, 0x3a, 0x489, 0x2c, 0x8, 0x8, 0xfffb, 0x5, 0x9], 0xb}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x8000002, 0x6, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x4e22, 0x10c, 0x2, 0x0, 0x0, 0x89, 0x0, 0xee01}, {0x2e6, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x800000000}, {0x1, 0x0, 0x0, 0x1ffffffffe}, 0x8, 0x800000, 0x0, 0x1, 0x0, 0x1}, {{@in=@private=0xa010106, 0x0, 0x33}, 0x0, @in=@broadcast, 0x4, 0x3, 0x0, 0x0, 0xfffffc01, 0x5001, 0x6}}, 0xe8) listen(r3, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000280000000000069078000000000000000000044e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="c582ed7247ea46b482482d961aa6a8646474140e3fb11eadd6962304a4d0645fcdbfa3dd86e026b093551063ae2f539ac735e6ec9a931bc9522a622e7e5516d4c36616e058a4fc16"], 0x0) (async) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) connect$can_bcm(r4, &(0x7f0000000000)={0x1d, r6}, 0x10) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001080)=[{{&(0x7f0000000340)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000380)="562e80ae64e25a9069f9ec8d1b73039cb726a9d1c57c80e0a2bdeeffe36017e7d5a66f438cd8f3f8f24f500d061863b32e3f21aefa64e9ecc370d3a023e01c972346e049a3c22a8b437514112203fbd91862699b43d9cda918ee5ae13ca4adeb21395f8b2f844566047c731f868ca7f2a31e0b92", 0x74}, {&(0x7f0000000780)="d721a3ddac0bce7e1dba71f577fc14b4d70844158af0e03fb4a9139f5cdfdfe47f6be1e817cd6b8d9aa401fcd466ccdfbda738af794eb28efe2278c8a38eee3ae70d375d0b8881cffbc4cfe3691bd036c69fc74028cdaf62d46f01b398c13dca1babdea4616f8ea1d06c2b06624ba58ad33fde65aab633567ab19b0d0ef0c9f9e9b0747353f781e984489921caf1ff4ba203d763fd7b510a628ab1763d8b847b7e2e8cd71cdfafa0c59334c156d1b19e59c17ba76229a61a9cca98597d4e9337681d05fb22fcdf6862912e218dff18442cdace525f386ccf94da30a86737caf38e89", 0xe2}, {&(0x7f0000000980)="4f6a024dda66d3283143fd0c8f0885d0a0b7349151311c68460d896f8141cb620be0c609fa2e4a4610e37d1f2b7488b23e48e48eba113be84bf6624824a8a75bb284b1590910b00c0908224cf4805e782dbcc3815ab9209e8bdd3f5b5d9b6a7d933c042b35bcec711e2e0a38d491487d89904189e863935fa2e77188f683f21a8636724bef88a077b226d928c4f8320f7e174bc5cc5d44ad7c266fa1b816f1684c681d5b23d5deab42f5d01c98f7d6473cfbd7b605577053e5", 0xb9}, {&(0x7f0000000a40)="b3c2e210da6d90d4a4aa54f40c65c26bb17e07d2a98cbbace48653d87ef0c96dc5c82669564bdeeb6ca04a9866375c1b5ce8c4db30109b3408b8411f925585232bc76b86a20de126c25bde0c49925b5d8776189d2d5207ba74833898a5b1", 0x5e}, {&(0x7f0000000ac0)="7e076830b89f0938c174a84039057bbed14ed17b6e93f4491cdd45abfad0408ffe14ac935be008d59a5bdfaa7681a5be39bac95eae5ecabb73abf4e5d7b13a3b4e619b1ddba8e4bbba444f22d14343d8d1bbf00a3a2fa749414fcd6800052cdcb13d534c08aefcfadedb8f7457be79cc0c0ee2fac5ea1b5e8ee57f5696a5450aad10007b0bb2f0c6c831aa7a5ce317d9688f401bda663fd4ec786d9a7dddde54f6025fc80cf79c86e8c18c241c1d2925f3ebafbf3d4200d658431532d6806d4956df76614b5d28d8ebe8", 0xca}, {&(0x7f0000000bc0)="c3094b2b73dd9dadc5", 0x9}], 0x6, &(0x7f0000000c80)=[@ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x7, 0xf, [@empty]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x51, [@loopback, @broadcast, @loopback]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @broadcast}}}], 0x68}}, {{&(0x7f0000000dc0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e00)="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", 0xfa}, {&(0x7f0000000f00)="e28c62bd1dfbfb201f", 0x9}], 0x2, &(0x7f0000000f80)=ANY=[@ANYBLOB="14000000000000000000000001000000da31146500000000140000000000000000000000010000000300000000000000140000000000000000000000010000000d0000000000000098000000000000000000000007000000940401000703180713b7ac1414aa7f000001ac1414bb7f000001442c4c23ac141430000000017f000001000000080a01010000000001ac1414bb00000002e0000001000000088913a3e000000100000000640101010a01010094040100070f4e7f0000017f000001ac1e0101891b6564010101ac1416bbac1e00017f000001e0000001ac1414aa001c000000000000000000000008000000", @ANYRES32=r6, @ANYBLOB="e0000002ac1e010100000000"], 0x100}}], 0x2, 0x24000891) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r9) (async) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, 0x0, 0x0) (async) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101001, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) (async) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101002, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101003, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c101004, @empty=0xe00003a4, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) sendmsg$L2TP_CMD_SESSION_GET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000ffdbdf2507000000050013008100000014000800"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) 14.065369888s ago: executing program 1 (id=6961): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x1b8, 0x65, 0x400, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x184, 0x2, [@TCA_BPF_ACT={0x180, 0x1, [@m_skbmod={0x17c, 0x18, 0x0, 0x0, {{0xb}, {0x78, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x9, 0x1, 0x1, 0x0, 0xab6d}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="addd8ec7b991"}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="c42d89d0476d"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6e2, 0x6, 0x3, 0x7fa80, 0x7}, 0xc}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}]}, {0xd9, 0x6, "0c5720b707e41992f7d3e03eb0a83101ab1330a7c10ee2be34aa729f8f7f65d3fd4b0a3be1976c3538da2fa427f5a41285ad8376e443f0471df1a6abb6bf6be48dac58dd2b082bacfab3bcd53757683c1c0d212191fa3f0ec2d327fed0b2eab4bc9a2c74b4134ca0c5a9c1d5271da9a31296bde60257f2440d5e2a30e4e80d2148172961982fa14afb0c1e46c90998b87dcb9fe848ca94cccb28a2548a07b4f6c66706c6972ec9af1e162134eaa471dae8349e2457250eb954363e269d1ff96cfe0d1ff0455bc96168072b0c7f2371622ccdc3d34c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x4}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x8, 0x42, 0x40, 0x42}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) r14 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r15) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r14, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r15, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r16, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r17], 0x1c}}, 0x840) (async) sendmsg$NFC_CMD_ENABLE_SE(r4, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x3c, r7, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r17}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004000) sendmsg$IPSET_CMD_LIST(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040808) (async) recvmmsg(r3, &(0x7f0000001d40)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x12022, 0x0) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r2}, 0x4) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1003, r2}, 0x38) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000200001"], 0x24}}, 0x0) 13.597681124s ago: executing program 1 (id=6967): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008040}, 0x4040) r1 = socket$rxrpc(0x21, 0x2, 0x2) close(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000a00000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x401, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x800) socket$pppl2tp(0x18, 0x1, 0x1) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000001000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) 13.432273086s ago: executing program 1 (id=6968): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x2, 0x1, 0x0, 0x9, 0x27, 0x0, 0x0, 0x0, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0xb, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7fff}, @in={0x2, 0x4e21, @local}}, @sadb_key={0x19, 0x8, 0x5f0, 0x0, "c97bfdf034356f507391c0ff6ec28d320fd1bfd22f02f562d3b78dfd7fe1eb4cb6c55de0462ee4b04d41cf09a5cc85168142168cef18411126964d35916bb6124393c04a16f73bbab14aeec920bae87cbd2e9771cd13d97932da45cc2ac258a97f84e75ae3d0fbaf487e60be9abd0ca4bd48b43c96364f5ad3ca5b04162ab8622c265d6758657735c21ab3d78a2a70689a4f5ee92bea8229ca4bcb67568da848da8a310976b8e48562026492f842078572b5ecdf75aed8dfeea12fab3989"}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x138}}, 0x0) 13.332089715s ago: executing program 1 (id=6971): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0005062cbd7005000000000000000000000ec0080005", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) 13.128649407s ago: executing program 1 (id=6973): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010429bd7000fbdbdf252e00000008000300", @ANYRES32=r1, @ANYBLOB="0a003400020202020202000004004c00080049004c"], 0x34}, 0x1, 0x0, 0x0, 0x8020}, 0x0) 12.71557773s ago: executing program 1 (id=6975): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) (async) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x8, 0x10002, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x81, r3, 0x4}, 0x38) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 4.897521641s ago: executing program 7 (id=7044): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001340)={0xffffffffffffffff, 0x0, 0x0, 0x2e, 0x0, &(0x7f0000001240)=""/46, 0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0), 0x6, 0x0, 0x7ed}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001540)={0x18, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xb6df4c32c1d5c814, 0x52}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e00000004000000040000000e", @ANYRES32=0x0], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.788796131s ago: executing program 7 (id=7062): unshare(0x20000400) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, 0x0, &(0x7f0000000000)) 2.715071484s ago: executing program 7 (id=7063): syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x48, 0x0, 0x0, 0x1}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) r6 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, r6, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r7}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) 2.115922761s ago: executing program 3 (id=7067): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) write(r0, &(0x7f0000000800)=',Xj', 0x3) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) 1.974175238s ago: executing program 3 (id=7069): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, 0x25, 0x301, 0x670bd24, 0x25dfdbfc, {0x15}, [@typed={0xf, 0x15e, 0x0, 0x0, @binary="378d39000000000245cd29"}]}, 0x24}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) 1.80095348s ago: executing program 3 (id=7071): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="500000001000210404000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d000000001400028008000100030f0000080002"], 0x50}}, 0xc080) 1.800745844s ago: executing program 6 (id=7072): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 1.741907611s ago: executing program 6 (id=7073): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 1.660918972s ago: executing program 6 (id=7074): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 1.501268308s ago: executing program 6 (id=7075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0x8, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.436015149s ago: executing program 5 (id=7076): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r1, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x84, r1, 0x5, 0x0, 0x0, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x50}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8}]}]}, 0x84}}, 0x0) 1.31310528s ago: executing program 5 (id=7077): socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r1], 0x48}}, 0x0) 1.240743594s ago: executing program 7 (id=7078): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.240609353s ago: executing program 3 (id=7079): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10106, 0x46951}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}]}, 0x3c}}, 0x2000000) 1.043641879s ago: executing program 6 (id=7080): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40eff, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xffe, &(0x7f0000000140)=ANY=[], 0x0) 823.026092ms ago: executing program 3 (id=7081): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001340)={0x20, 0x1e, 0x21, 0x70bd2b, 0x0, {0x7}, [@typed={0x5, 0x12c, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xf}]}, 0x20}}, 0x0) 767.990344ms ago: executing program 5 (id=7082): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000640)={0x14, 0x2, 0x9, 0x3, 0x0, 0x0, {0x3, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 674.952609ms ago: executing program 5 (id=7083): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xe, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @multicast1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d892}, 0x0) 621.354555ms ago: executing program 6 (id=7084): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000000)=0x80020000, 0x4) unshare(0x6a060200) socket$igmp(0x2, 0x3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) listen(r0, 0x2) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000068001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 544.816743ms ago: executing program 5 (id=7085): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x20, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004085}, 0x4000880) 478.939559ms ago: executing program 3 (id=7086): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfe) writev(r0, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) 389.110188ms ago: executing program 5 (id=7087): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB="24000000070607060000fcffffff000003000008050001000600b000080006"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0xc440) 224.303148ms ago: executing program 7 (id=7088): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x4e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa258100000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e204e22", @ANYRES32=0x41424344, @ANYBLOB="e1ea74e56610"], 0x0) 0s ago: executing program 7 (id=7089): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) kernel console output (not intermixed with test programs): 610.632728][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 610.696278][T23680] bond12 (unregistering): Released all slaves [ 610.781257][T23686] xt_esp: unknown flags DD [ 611.112812][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 611.381148][T23717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5928'. [ 611.393812][T23700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.416279][T23700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.439187][T23722] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5928'. [ 611.641690][T23705] h: entered promiscuous mode [ 611.642018][T23706] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 611.683941][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 611.701483][T23715] bond11: option arp_validate: mode dependency failed, not supported in mode balance-tlb(5) [ 611.716713][T23715] bond11 (unregistering): Released all slaves [ 611.753365][ T43] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 611.753418][ T43] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.754268][ T43] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 611.754304][ T43] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.754387][ T43] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 611.754418][ T43] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.754457][ T43] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 611.754487][ T43] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.315006][T23747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5939'. [ 612.354724][T23750] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5941'. [ 612.354786][T23750] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5941'. [ 612.712724][ C0] net_ratelimit: 1 callbacks suppressed [ 612.712777][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 613.193010][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 613.701873][T23799] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 613.719981][T23799] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 613.752748][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 614.029340][T23812] netlink: zone id is out of range [ 614.141435][T23819] __nla_validate_parse: 11 callbacks suppressed [ 614.141504][T23819] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5969'. [ 614.188120][T23824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5970'. [ 614.197450][T23824] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5970'. [ 614.244088][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 614.632253][T23841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5979'. [ 614.632338][T23841] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5979'. [ 614.803166][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 614.867615][T23855] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5983'. [ 615.008184][T23847] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5982'. [ 615.021482][T23847] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5982'. [ 615.055669][T23848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5981'. [ 615.272713][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 615.351032][T23881] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5994'. [ 615.375891][T23876] nbd: couldn't find device at index 15663104 [ 615.832815][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 616.312786][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 616.510412][T23918] SET target dimension over the limit! [ 617.922941][ C0] net_ratelimit: 2 callbacks suppressed [ 617.923004][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 618.392837][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 618.952788][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 619.114120][T23922] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 619.336216][T23971] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.345958][T23971] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.432730][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 619.445663][T23979] mac80211_hwsim hwsim2 syzkaller0: entered promiscuous mode [ 619.445721][T23979] mac80211_hwsim hwsim2 syzkaller0: entered allmulticast mode [ 619.522057][T23981] xt_ecn: cannot match TCP bits for non-tcp packets [ 619.993209][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 620.170997][T24021] __nla_validate_parse: 2 callbacks suppressed [ 620.171054][T24021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6034'. [ 620.262523][T24022] syzkaller0: entered promiscuous mode [ 620.262583][T24022] syzkaller0: entered allmulticast mode [ 620.379147][T24029] team0 (unregistering): Port device team_slave_0 removed [ 620.418028][T24029] team0 (unregistering): Port device team_slave_1 removed [ 620.453671][T24029] team0 (unregistering): Port device dummy0 removed [ 620.472912][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 620.481850][T24044] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 620.489359][T24027] netlink: 'syz.6.6037': attribute type 12 has an invalid length. [ 620.497989][T24043] netlink: 'syz.6.6037': attribute type 12 has an invalid length. [ 620.510728][T20101] bond0: (slave bond_slave_0): interface is now down [ 620.510791][T20101] bond0: (slave bond_slave_1): interface is now down [ 620.535684][T20101] bond0: now running without any active interface! [ 620.545478][T24034] FAULT_INJECTION: forcing a failure. [ 620.545478][T24034] name failslab, interval 1, probability 0, space 0, times 0 [ 620.545538][T24034] CPU: 0 UID: 0 PID: 24034 Comm: syz.1.6039 Not tainted syzkaller #0 PREEMPT(full) [ 620.545563][T24034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.545574][T24034] Call Trace: [ 620.545583][T24034] [ 620.545593][T24034] dump_stack_lvl+0xe8/0x150 [ 620.545627][T24034] should_fail_ex+0x410/0x560 [ 620.545662][T24034] should_failslab+0xa8/0x100 [ 620.545687][T24034] __kvmalloc_node_noprof+0x176/0x820 [ 620.545709][T24034] ? __mutex_lock+0x5d4/0x1550 [ 620.545738][T24034] ? xp_create_and_assign_umem+0xbf/0xda0 [ 620.545830][T24034] ? xp_create_and_assign_umem+0xbf/0xda0 [ 620.545864][T24034] xp_create_and_assign_umem+0xbf/0xda0 [ 620.545899][T24034] ? dev_get_by_index+0x22/0x2d0 [ 620.545924][T24034] ? dev_get_by_index+0x22/0x2d0 [ 620.545945][T24034] ? dev_get_by_index+0x22/0x2d0 [ 620.545975][T24034] xsk_bind+0x4a5/0x1380 [ 620.545999][T24034] ? apparmor_socket_bind+0x147/0x210 [ 620.546036][T24034] __sys_bind+0x2e3/0x410 [ 620.546066][T24034] ? __pfx___sys_bind+0x10/0x10 [ 620.546105][T24034] ? __pfx_ksys_write+0x10/0x10 [ 620.546138][T24034] __x64_sys_bind+0x7a/0x90 [ 620.546164][T24034] do_syscall_64+0x166/0x520 [ 620.546189][T24034] ? trace_irq_disable+0x3b/0x140 [ 620.546207][T24034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.546226][T24034] ? clear_bhb_loop+0x70/0xc0 [ 620.546258][T24034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.546278][T24034] RIP: 0033:0x7fc91759e159 [ 620.546297][T24034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.546313][T24034] RSP: 002b:00007fc9183d0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 620.546335][T24034] RAX: ffffffffffffffda RBX: 00007fc917825fa0 RCX: 00007fc91759e159 [ 620.546350][T24034] RDX: 0000000000000010 RSI: 00002000000001c0 RDI: 0000000000000004 [ 620.546362][T24034] RBP: 00007fc9183d0090 R08: 0000000000000000 R09: 0000000000000000 [ 620.546375][T24034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.546386][T24034] R13: 00007fc917826038 R14: 00007fc917825fa0 R15: 00007ffe423297b8 [ 620.546419][T24034] [ 620.836031][T24053] 8021q: adding VLAN 0 to HW filter on device bond2 [ 620.895590][T24062] netlink: 'syz.5.6045': attribute type 6 has an invalid length. [ 620.911095][T24067] netlink: 'syz.5.6045': attribute type 6 has an invalid length. [ 621.032742][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 621.078057][T24077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6050'. [ 621.452201][T24089] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 621.512780][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.073022][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 622.140185][T24108] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6062'. [ 622.286789][T24119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6063'. [ 622.510990][T24140] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6071'. [ 622.552816][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 622.581983][T24134] FAULT_INJECTION: forcing a failure. [ 622.581983][T24134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.582042][T24134] CPU: 1 UID: 0 PID: 24134 Comm: syz.1.6069 Not tainted syzkaller #0 PREEMPT(full) [ 622.582065][T24134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.582076][T24134] Call Trace: [ 622.582084][T24134] [ 622.582092][T24134] dump_stack_lvl+0xe8/0x150 [ 622.582124][T24134] should_fail_ex+0x410/0x560 [ 622.582158][T24134] _copy_to_user+0x31/0xb0 [ 622.582182][T24134] simple_read_from_buffer+0xe1/0x170 [ 622.582216][T24134] proc_fail_nth_read+0x1bb/0x230 [ 622.582242][T24134] ? common_file_perm+0x20e/0x2b0 [ 622.582265][T24134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.582294][T24134] ? rw_verify_area+0x24a/0x4c0 [ 622.582322][T24134] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.582347][T24134] vfs_read+0x213/0xa80 [ 622.582377][T24134] ? __pfx___mutex_lock+0x10/0x10 [ 622.582406][T24134] ? __pfx_vfs_read+0x10/0x10 [ 622.582433][T24134] ? __fget_files+0x2a/0x420 [ 622.582461][T24134] ? __fget_files+0x3a2/0x420 [ 622.582483][T24134] ? __fget_files+0x2a/0x420 [ 622.582515][T24134] ksys_read+0x150/0x270 [ 622.582542][T24134] ? __pfx_ksys_read+0x10/0x10 [ 622.582579][T24134] do_syscall_64+0x166/0x520 [ 622.582612][T24134] ? trace_irq_disable+0x3b/0x140 [ 622.582631][T24134] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.582650][T24134] ? clear_bhb_loop+0x70/0xc0 [ 622.582673][T24134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.582692][T24134] RIP: 0033:0x7fc91755e98e [ 622.582711][T24134] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 622.582727][T24134] RSP: 002b:00007fc9183cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 622.582748][T24134] RAX: ffffffffffffffda RBX: 00007fc9183d06c0 RCX: 00007fc91755e98e [ 622.582763][T24134] RDX: 000000000000000f RSI: 00007fc9183d00a0 RDI: 0000000000000005 [ 622.582775][T24134] RBP: 00007fc9183d0090 R08: 0000000000000000 R09: 0000000000000000 [ 622.582787][T24134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.582799][T24134] R13: 00007fc917826038 R14: 00007fc917825fa0 R15: 00007ffe423297b8 [ 622.582830][T24134] [ 622.934381][T24158] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 622.940906][T24158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6077'. [ 623.112798][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 623.173716][T24164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6078'. [ 623.326825][T24163] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6081'. [ 623.393640][T24178] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 623.592832][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 623.682420][T24192] FAULT_INJECTION: forcing a failure. [ 623.682420][T24192] name failslab, interval 1, probability 0, space 0, times 0 [ 623.697323][T24192] CPU: 0 UID: 0 PID: 24192 Comm: syz.1.6090 Not tainted syzkaller #0 PREEMPT(full) [ 623.697355][T24192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.697368][T24192] Call Trace: [ 623.697378][T24192] [ 623.697388][T24192] dump_stack_lvl+0xe8/0x150 [ 623.697426][T24192] should_fail_ex+0x410/0x560 [ 623.697470][T24192] should_failslab+0xa8/0x100 [ 623.697499][T24192] __kmalloc_cache_noprof+0xa3/0x600 [ 623.697532][T24192] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 623.697555][T24192] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 623.697586][T24192] ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 623.697624][T24192] genl_family_rcv_msg_doit+0x233/0x340 [ 623.697663][T24192] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 623.697708][T24192] ? bpf_lsm_capable+0x9/0x20 [ 623.697737][T24192] ? security_capable+0x7e/0x2c0 [ 623.697766][T24192] genl_rcv_msg+0x614/0x7a0 [ 623.697800][T24192] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.697829][T24192] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 623.697867][T24192] netlink_rcv_skb+0x226/0x4a0 [ 623.697893][T24192] ? __pfx_genl_rcv_msg+0x10/0x10 [ 623.697924][T24192] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 623.697966][T24192] ? down_read+0x2be/0x330 [ 623.697993][T24192] genl_rcv+0x28/0x40 [ 623.698020][T24192] netlink_unicast+0x7bd/0x940 [ 623.698056][T24192] netlink_sendmsg+0x813/0xb40 [ 623.698092][T24192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.698136][T24192] ? apparmor_socket_sendmsg+0x98/0x360 [ 623.698170][T24192] ? __pfx_netlink_sendmsg+0x10/0x10 [ 623.698194][T24192] sock_sendmsg_nosec+0x13a/0x180 [ 623.698227][T24192] ____sys_sendmsg+0x54e/0x850 [ 623.698257][T24192] ? __pfx_____sys_sendmsg+0x10/0x10 [ 623.698292][T24192] ? import_iovec+0x73/0xa0 [ 623.698320][T24192] ___sys_sendmsg+0x2a5/0x360 [ 623.698343][T24192] ? __lock_acquire+0x6df/0x2e50 [ 623.698371][T24192] ? __pfx____sys_sendmsg+0x10/0x10 [ 623.698435][T24192] ? __fget_files+0x2a/0x420 [ 623.698461][T24192] ? __fget_files+0x3a2/0x420 [ 623.698500][T24192] __x64_sys_sendmsg+0x1b1/0x290 [ 623.698528][T24192] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 623.698577][T24192] do_syscall_64+0x166/0x520 [ 623.698607][T24192] ? trace_irq_disable+0x3b/0x140 [ 623.698628][T24192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.698650][T24192] ? clear_bhb_loop+0x70/0xc0 [ 623.698677][T24192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.698699][T24192] RIP: 0033:0x7fc91759e159 [ 623.698721][T24192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.698739][T24192] RSP: 002b:00007fc9183d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 623.698764][T24192] RAX: ffffffffffffffda RBX: 00007fc917825fa0 RCX: 00007fc91759e159 [ 623.698780][T24192] RDX: 0000000004008094 RSI: 00002000000002c0 RDI: 0000000000000003 [ 623.698795][T24192] RBP: 00007fc9183d0090 R08: 0000000000000000 R09: 0000000000000000 [ 623.698809][T24192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.698824][T24192] R13: 00007fc917826038 R14: 00007fc917825fa0 R15: 00007ffe423297b8 [ 623.698860][T24192] [ 624.152729][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 624.188964][T24207] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6096'. [ 624.250225][T24218] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 624.278770][T24218] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 624.638751][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 624.697644][T24244] netlink: zone id is out of range [ 624.963857][T24254] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6113'. [ 625.192991][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 625.366924][T24262] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6119'. [ 625.672849][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 625.851045][T24300] netlink: 'syz.1.6128': attribute type 17 has an invalid length. [ 625.859814][T24300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6128'. [ 625.870886][T24300] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6128'. [ 626.048426][T24305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6129'. [ 626.232783][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 626.282905][T24318] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6130'. [ 626.420361][T24325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6136'. [ 626.518746][T24325] 8021q: adding VLAN 0 to HW filter on device bond12 [ 626.519652][T24332] veth1_macvtap: left promiscuous mode [ 626.564377][T24329] vlan5: entered promiscuous mode [ 626.564419][T24329] bond12: entered promiscuous mode [ 626.564617][T24329] vlan5: entered allmulticast mode [ 626.564636][T24329] bond12: entered allmulticast mode [ 626.640202][T24325] bond12: (slave gtp1): refused to change device type [ 626.713142][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 626.762470][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6142'. [ 626.763949][T24339] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6140'. [ 626.781346][T24344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6142'. [ 626.836787][T24347] netlink: 'syz.1.6139': attribute type 1 has an invalid length. [ 626.836831][T24347] netlink: 'syz.1.6139': attribute type 3 has an invalid length. [ 626.837213][T24347] netlink: 'syz.1.6139': attribute type 7 has an invalid length. [ 626.837665][T24347] netlink: 'syz.1.6139': attribute type 8 has an invalid length. [ 626.837744][T24347] netlink: 184 bytes leftover after parsing attributes in process `syz.1.6139'. [ 626.837761][T24347] NCSI netlink: No device for ifindex 131092 [ 627.240970][T24364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 628.312845][ C0] net_ratelimit: 2 callbacks suppressed [ 628.312933][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 628.787416][T24421] tipc: Enabling of bearer rejected, already enabled [ 628.802696][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 629.028139][T24453] tipc: Enabling of bearer rejected, already enabled [ 629.153124][T24461] openvswitch: netlink: Message has 8 unknown bytes. [ 629.352723][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 629.371581][T24474] netlink: 'syz.3.6181': attribute type 97 has an invalid length. [ 629.374519][T24474] netlink: 'syz.3.6181': attribute type 97 has an invalid length. [ 629.832817][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 630.392800][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 630.652296][T24534] __nla_validate_parse: 7 callbacks suppressed [ 630.652354][T24534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6195'. [ 630.652381][T24534] netlink: 'syz.0.6195': attribute type 19 has an invalid length. [ 630.652394][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6195'. [ 630.659054][T24534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6195'. [ 630.659084][T24534] netlink: 'syz.0.6195': attribute type 19 has an invalid length. [ 630.659098][T24534] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6195'. [ 630.727700][T24544] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6197'. [ 630.737395][T24538] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6197'. [ 630.815332][T24540] netlink: 'syz.5.6198': attribute type 3 has an invalid length. [ 630.873528][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 631.442778][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 631.488109][T24576] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6204'. [ 631.488247][T24576] netlink: 292 bytes leftover after parsing attributes in process `syz.0.6204'. [ 631.691897][T24546] netlink: 'syz.5.6198': attribute type 3 has an invalid length. [ 631.779641][T24580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6204'. [ 631.912787][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 632.472898][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 632.580757][T24617] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6216'. [ 632.690744][T24624] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 632.837693][T24632] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:20002 [ 633.001015][T24644] ksmbd: Unknown IPC event: 1, ignore. [ 633.280082][T24656] sctp: [Deprecated]: syz.3.6226 (pid 24656) Use of int in maxseg socket option. [ 633.280082][T24656] Use struct sctp_assoc_value instead [ 633.302447][ T31] audit: type=1107 audit(1788926400.330:5): pid=24655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ZñêQš¥˜COY°¢ºDÂR¹-m¡ êLŠ²ç`®¹”iA¨BE¬Dì=žš9‚ãM>X‹ÃœNÉåpBNø)u̾޾x`ZÃÜ¡v–—qyÅ$óiã5äØú8,j¦S3Ÿ¡®Ì+f³µ³óhLÜ>yý)üj‡RLmé ·Û63"á‚ïí1é=ªùˆêîšÈ•‰¡)g§"Á´íL-Ë–·£„6¿ëõÙŠãBEÝõD õ>ƒVCeÛÿF“8,Ü]3WŸ®| [¤8#Åß [ 633.302447][ T31] Á\à»!…â"önø¦›Ò²–¡_³¨ÊHôƒd3¾k´Ó‚¢"!ôÆв.s( [ 633.302447][ T31] ·Ü¶RŸí˜Èþ¹{Y:>ëÆÜ{¼=ÏT¼D— *(~h…”oçBc«¸Ry!‘üœB“‰aÇœÆ'„›i·‹ði/Å¿ÉUí‰×Q†‹a#õZÖ?7:‹“à×.ai§{þó†"·jw§á¢' [ 633.440662][T24667] tipc: Enabled bearer , priority 10 [ 633.512724][ C0] net_ratelimit: 2 callbacks suppressed [ 633.512781][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 633.992944][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 634.096980][T24705] veth9: entered promiscuous mode [ 634.105372][T24709] veth1_to_bond: entered allmulticast mode [ 634.208089][T24708] veth1_to_bond: left allmulticast mode [ 634.385262][T24726] Unsupported ieee802154 address type: 0 [ 634.431807][T24728] Unsupported ieee802154 address type: 0 [ 634.562823][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 634.760995][T24744] syzkaller0: left promiscuous mode [ 634.761043][T24744] syzkaller0: left allmulticast mode [ 634.815983][T24746] bridge_slave_1: left allmulticast mode [ 634.819742][T24746] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.898598][T24746] bridge_slave_0: left allmulticast mode [ 634.898660][T24746] bridge_slave_0: left promiscuous mode [ 634.906201][T24746] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.032836][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 635.592823][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 635.646836][T24780] netlink: zone id is out of range [ 635.791802][T24785] __nla_validate_parse: 14 callbacks suppressed [ 635.791857][T24785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6270'. [ 635.977319][T24794] netlink: 'syz.3.6275': attribute type 1 has an invalid length. [ 636.072896][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 636.536622][T24829] FAULT_INJECTION: forcing a failure. [ 636.536622][T24829] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.551156][T24829] CPU: 1 UID: 0 PID: 24829 Comm: syz.6.6287 Not tainted syzkaller #0 PREEMPT(full) [ 636.551188][T24829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 636.551202][T24829] Call Trace: [ 636.551212][T24829] [ 636.551222][T24829] dump_stack_lvl+0xe8/0x150 [ 636.551261][T24829] should_fail_ex+0x410/0x560 [ 636.551298][T24829] _copy_from_user+0x2d/0xb0 [ 636.551323][T24829] do_sock_getsockopt+0x200/0x7e0 [ 636.551352][T24829] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 636.551402][T24829] ? __fget_files+0x3a2/0x420 [ 636.551429][T24829] ? __fget_files+0x2a/0x420 [ 636.551464][T24829] __x64_sys_getsockopt+0x1a4/0x240 [ 636.551498][T24829] do_syscall_64+0x166/0x520 [ 636.551528][T24829] ? trace_irq_disable+0x3b/0x140 [ 636.551548][T24829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.551569][T24829] ? clear_bhb_loop+0x70/0xc0 [ 636.551596][T24829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.551618][T24829] RIP: 0033:0x7f26def9e159 [ 636.551638][T24829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.551657][T24829] RSP: 002b:00007f26dfde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 636.551682][T24829] RAX: ffffffffffffffda RBX: 00007f26df225fa0 RCX: 00007f26def9e159 [ 636.551697][T24829] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003 [ 636.551711][T24829] RBP: 00007f26dfde8090 R08: 0000200000000200 R09: 0000000000000000 [ 636.551726][T24829] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 636.551740][T24829] R13: 00007f26df226038 R14: 00007f26df225fa0 R15: 00007ffc927d8848 [ 636.551780][T24829] [ 636.643037][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 637.112787][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 637.521882][T24852] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6296'. [ 637.672789][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 637.738199][T24864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6300'. [ 637.750551][T24864] tipc: Enabling of bearer rejected, already enabled [ 637.766642][T24864] syzkaller0: entered promiscuous mode [ 637.766686][T24864] syzkaller0: entered allmulticast mode [ 637.814852][T24867] FAULT_INJECTION: forcing a failure. [ 637.814852][T24867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 637.814923][T24867] CPU: 0 UID: 0 PID: 24867 Comm: syz.3.6301 Not tainted syzkaller #0 PREEMPT(full) [ 637.814947][T24867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 637.814958][T24867] Call Trace: [ 637.814965][T24867] [ 637.814973][T24867] dump_stack_lvl+0xe8/0x150 [ 637.815006][T24867] should_fail_ex+0x410/0x560 [ 637.815041][T24867] _copy_from_user+0x2d/0xb0 [ 637.815062][T24867] sctp_getsockopt_local_auth_chunks+0xfc/0x710 [ 637.815182][T24867] ? __pfx_sctp_getsockopt_local_auth_chunks+0x10/0x10 [ 637.815204][T24867] ? sctp_getsockopt+0x12f/0xb90 [ 637.815255][T24867] ? __local_bh_enable_ip+0xd6/0x140 [ 637.815286][T24867] sctp_getsockopt+0x3e0/0xb90 [ 637.815311][T24867] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 637.815338][T24867] do_sock_getsockopt+0x51d/0x7e0 [ 637.815366][T24867] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 637.815402][T24867] ? __fget_files+0x3a2/0x420 [ 637.815426][T24867] ? __fget_files+0x2a/0x420 [ 637.815457][T24867] __x64_sys_getsockopt+0x1a4/0x240 [ 637.815487][T24867] do_syscall_64+0x166/0x520 [ 637.815538][T24867] ? trace_irq_disable+0x3b/0x140 [ 637.815557][T24867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.815576][T24867] ? clear_bhb_loop+0x70/0xc0 [ 637.815600][T24867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.815618][T24867] RIP: 0033:0x7f4917b9e159 [ 637.815637][T24867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.815654][T24867] RSP: 002b:00007f4918a16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 637.815675][T24867] RAX: ffffffffffffffda RBX: 00007f4917e25fa0 RCX: 00007f4917b9e159 [ 637.815690][T24867] RDX: 000000000000001b RSI: 0000000000000084 RDI: 0000000000000003 [ 637.815702][T24867] RBP: 00007f4918a16090 R08: 0000200000000200 R09: 0000000000000000 [ 637.815714][T24867] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 637.815727][T24867] R13: 00007f4917e26038 R14: 00007f4917e25fa0 R15: 00007ffcf6a0b218 [ 637.815758][T24867] [ 637.849295][T24866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6298'. [ 637.854299][T24866] mac80211_hwsim hwsim2 syzkaller0: left allmulticast mode [ 638.146644][T24879] FAULT_INJECTION: forcing a failure. [ 638.146644][T24879] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.146716][T24879] CPU: 0 UID: 0 PID: 24879 Comm: syz.6.6306 Not tainted syzkaller #0 PREEMPT(full) [ 638.146741][T24879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 638.146753][T24879] Call Trace: [ 638.146762][T24879] [ 638.146770][T24879] dump_stack_lvl+0xe8/0x150 [ 638.146801][T24879] should_fail_ex+0x410/0x560 [ 638.146835][T24879] _copy_from_user+0x2d/0xb0 [ 638.146862][T24879] copy_from_sockptr_offset+0x66/0xa0 [ 638.146892][T24879] do_ip6t_set_ctl+0x99a/0xe30 [ 638.146935][T24879] ? rcu_is_watching+0x16/0xb0 [ 638.146959][T24879] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 638.147000][T24879] ? __mutex_unlock_slowpath+0x731/0x900 [ 638.147032][T24879] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.147063][T24879] ? ksys_write+0x1e6/0x270 [ 638.147097][T24879] nf_setsockopt+0x26f/0x290 [ 638.147122][T24879] rawv6_setsockopt+0x276/0x5e0 [ 638.147203][T24879] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 638.147224][T24879] ? sock_common_setsockopt+0x36/0xc0 [ 638.147250][T24879] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 638.147277][T24879] do_sock_setsockopt+0x17c/0x1b0 [ 638.147301][T24879] __x64_sys_setsockopt+0x13d/0x1b0 [ 638.147325][T24879] do_syscall_64+0x166/0x520 [ 638.147351][T24879] ? trace_irq_disable+0x3b/0x140 [ 638.147368][T24879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.147388][T24879] ? clear_bhb_loop+0x70/0xc0 [ 638.147411][T24879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.147430][T24879] RIP: 0033:0x7f26def9e159 [ 638.147450][T24879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.147466][T24879] RSP: 002b:00007f26dfde8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 638.147488][T24879] RAX: ffffffffffffffda RBX: 00007f26df225fa0 RCX: 00007f26def9e159 [ 638.147502][T24879] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 638.147514][T24879] RBP: 00007f26dfde8090 R08: 00000000000005f9 R09: 0000000000000000 [ 638.147527][T24879] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 638.147539][T24879] R13: 00007f26df226038 R14: 00007f26df225fa0 R15: 00007ffc927d8848 [ 638.147569][T24879] [ 638.560905][T24893] bond13: (slave vlan1): Device is not bonding slave [ 638.560960][T24893] bond13: option active_slave: invalid value (vlan1) [ 638.581152][T24893] bond13 (unregistering): Released all slaves [ 638.640824][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6313'. [ 638.650162][T24909] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6313'. [ 638.712908][ C0] net_ratelimit: 2 callbacks suppressed [ 638.712974][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 638.928626][T24912] netlink: 'syz.6.6314': attribute type 10 has an invalid length. [ 639.007467][T24912] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 639.159346][T24930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6319'. [ 639.159399][T24930] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6319'. [ 639.192926][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 639.270235][T24939] netlink: 51 bytes leftover after parsing attributes in process `syz.6.6320'. [ 639.294576][T24939] netlink: 'syz.6.6320': attribute type 17 has an invalid length. [ 639.294627][T24939] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6320'. [ 639.343807][T24939] erspan0: entered promiscuous mode [ 639.401597][T24939] gretap0: entered promiscuous mode [ 639.432226][T24945] netlink: 'syz.6.6320': attribute type 17 has an invalid length. [ 639.762821][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 639.832915][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 640.121397][T24988] FAULT_INJECTION: forcing a failure. [ 640.121397][T24988] name failslab, interval 1, probability 0, space 0, times 0 [ 640.121463][T24988] CPU: 0 UID: 0 PID: 24988 Comm: syz.5.6335 Not tainted syzkaller #0 PREEMPT(full) [ 640.121488][T24988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.121499][T24988] Call Trace: [ 640.121506][T24988] [ 640.121515][T24988] dump_stack_lvl+0xe8/0x150 [ 640.121546][T24988] should_fail_ex+0x410/0x560 [ 640.121591][T24988] should_failslab+0xa8/0x100 [ 640.121615][T24988] __kmalloc_cache_noprof+0xa3/0x600 [ 640.121644][T24988] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 640.121664][T24988] ? ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 640.121691][T24988] ovs_ct_limit_cmd_set+0x2c9/0xc40 [ 640.121723][T24988] genl_family_rcv_msg_doit+0x233/0x340 [ 640.121758][T24988] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 640.121798][T24988] ? bpf_lsm_capable+0x9/0x20 [ 640.121822][T24988] ? security_capable+0x7e/0x2c0 [ 640.121848][T24988] genl_rcv_msg+0x614/0x7a0 [ 640.121881][T24988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.121907][T24988] ? __pfx_ovs_ct_limit_cmd_set+0x10/0x10 [ 640.121973][T24988] netlink_rcv_skb+0x226/0x4a0 [ 640.121997][T24988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.122025][T24988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 640.122063][T24988] ? down_read+0x2be/0x330 [ 640.122086][T24988] genl_rcv+0x28/0x40 [ 640.122111][T24988] netlink_unicast+0x7bd/0x940 [ 640.122143][T24988] netlink_sendmsg+0x813/0xb40 [ 640.122175][T24988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.122206][T24988] ? apparmor_socket_sendmsg+0x98/0x360 [ 640.122236][T24988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.122270][T24988] sock_sendmsg_nosec+0x13a/0x180 [ 640.122302][T24988] ____sys_sendmsg+0x54e/0x850 [ 640.122328][T24988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.122358][T24988] ? import_iovec+0x73/0xa0 [ 640.122381][T24988] ___sys_sendmsg+0x2a5/0x360 [ 640.122401][T24988] ? __lock_acquire+0x6df/0x2e50 [ 640.122425][T24988] ? __pfx____sys_sendmsg+0x10/0x10 [ 640.122481][T24988] ? __fget_files+0x2a/0x420 [ 640.122504][T24988] ? __fget_files+0x3a2/0x420 [ 640.122537][T24988] __x64_sys_sendmsg+0x1b1/0x290 [ 640.122561][T24988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 640.122603][T24988] do_syscall_64+0x166/0x520 [ 640.122628][T24988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.122647][T24988] ? clear_bhb_loop+0x70/0xc0 [ 640.122671][T24988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.122689][T24988] RIP: 0033:0x7f970cb9e159 [ 640.122709][T24988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.122724][T24988] RSP: 002b:00007f970dab1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.122747][T24988] RAX: ffffffffffffffda RBX: 00007f970ce25fa0 RCX: 00007f970cb9e159 [ 640.122761][T24988] RDX: 0000000004008094 RSI: 00002000000002c0 RDI: 0000000000000003 [ 640.122774][T24988] RBP: 00007f970dab1090 R08: 0000000000000000 R09: 0000000000000000 [ 640.122786][T24988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 640.122798][T24988] R13: 00007f970ce26038 R14: 00007f970ce25fa0 R15: 00007fff824aa678 [ 640.122830][T24988] [ 640.242766][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 640.305156][T24997] FAULT_INJECTION: forcing a failure. [ 640.305156][T24997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.305190][T24997] CPU: 0 UID: 0 PID: 24997 Comm: syz.5.6340 Not tainted syzkaller #0 PREEMPT(full) [ 640.305212][T24997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 640.305224][T24997] Call Trace: [ 640.305232][T24997] [ 640.305240][T24997] dump_stack_lvl+0xe8/0x150 [ 640.305273][T24997] should_fail_ex+0x410/0x560 [ 640.305307][T24997] _copy_from_user+0x2d/0xb0 [ 640.305328][T24997] __sys_bpf+0x2e7/0xd90 [ 640.305362][T24997] ? __pfx___sys_bpf+0x10/0x10 [ 640.305393][T24997] ? __fget_files+0x2a/0x420 [ 640.305433][T24997] ? ksys_write+0x242/0x270 [ 640.305461][T24997] ? __pfx_ksys_write+0x10/0x10 [ 640.305492][T24997] __x64_sys_bpf+0xba/0xd0 [ 640.305514][T24997] do_syscall_64+0x166/0x520 [ 640.305539][T24997] ? trace_irq_disable+0x3b/0x140 [ 640.305556][T24997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.305576][T24997] ? clear_bhb_loop+0x70/0xc0 [ 640.305599][T24997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.305618][T24997] RIP: 0033:0x7f970cb9e159 [ 640.305636][T24997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 640.305652][T24997] RSP: 002b:00007f970dab1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 640.305675][T24997] RAX: ffffffffffffffda RBX: 00007f970ce25fa0 RCX: 00007f970cb9e159 [ 640.305689][T24997] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 0000000000000000 [ 640.305702][T24997] RBP: 00007f970dab1090 R08: 0000000000000000 R09: 0000000000000000 [ 640.305714][T24997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.305725][T24997] R13: 00007f970ce26038 R14: 00007f970ce25fa0 R15: 00007fff824aa678 [ 640.305755][T24997] [ 640.758900][ T175] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 640.788357][T25002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.802747][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 640.824548][T25003] netlink: 'syz.6.6341': attribute type 2 has an invalid length. [ 641.070175][T25003] : entered promiscuous mode [ 641.272961][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 641.484429][T25039] __nla_validate_parse: 7 callbacks suppressed [ 641.484516][T25039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6354'. [ 641.567413][T25045] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6355'. [ 641.619438][T25045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6355'. [ 641.747497][T25048] netlink: 'syz.0.6358': attribute type 6 has an invalid length. [ 641.842713][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 642.104445][T25074] veth0_to_bond: entered promiscuous mode [ 642.124420][T25074] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 642.312701][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 642.594744][T25091] batadv0: entered promiscuous mode [ 642.602287][T25091] macsec0: entered promiscuous mode [ 642.609649][T25091] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 642.628264][T25091] batadv0: left promiscuous mode [ 642.872736][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 643.021812][T25112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6375'. [ 643.022380][T25112] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6375'. [ 643.057095][T25112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6375'. [ 643.192514][T25119] netlink: 348 bytes leftover after parsing attributes in process `syz.1.6379'. [ 643.226707][T25124] netlink: 65047 bytes leftover after parsing attributes in process `syz.6.6378'. [ 643.445480][T25127] syzkaller1: entered promiscuous mode [ 643.452348][T25127] syzkaller1: entered allmulticast mode [ 643.545942][T25142] netlink: 'syz.1.6382': attribute type 1 has an invalid length. [ 643.609763][T25142] 8021q: adding VLAN 0 to HW filter on device bond11 [ 643.758623][T25146] net_ratelimit: 1 callbacks suppressed [ 643.766484][T25146] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 643.912770][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 644.027125][T25165] netlink: 'syz.0.6388': attribute type 6 has an invalid length. [ 644.170882][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.170927][T25183] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6393'. [ 644.171124][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.171145][T25183] netlink: 228 bytes leftover after parsing attributes in process `syz.0.6393'. [ 644.171322][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.171487][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.171644][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.171809][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.171966][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.172127][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.172288][T25183] netlink: 'syz.0.6393': attribute type 1 has an invalid length. [ 644.392877][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 644.809720][T25210] openvswitch: netlink: IP tunnel dst address not specified [ 644.809778][T25210] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.956712][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 645.125009][T25223] vlan3: entered promiscuous mode [ 645.125062][T25223] syz_tun: entered promiscuous mode [ 645.433224][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 645.993025][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 646.472775][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 647.032984][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 649.160894][T25326] __nla_validate_parse: 11 callbacks suppressed [ 649.161218][T25326] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6415'. [ 649.805654][ C0] net_ratelimit: 3 callbacks suppressed [ 649.805730][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 649.808327][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 650.033182][T25325] 8021q: adding VLAN 0 to HW filter on device bond9 [ 650.307246][T25353] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6423'. [ 650.465497][T25360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6424'. [ 650.626764][T25371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6426'. [ 650.835032][T25373] tipc: Cannot configure node identity twice [ 650.872876][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 650.875240][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 651.050479][T25384] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6430'. [ 651.063655][T25384] veth0_to_bond: entered allmulticast mode [ 651.435862][T25402] IPVS: ip_vs_edit_dest(): server weight less than zero [ 651.442510][T25402] IPVS: ip_vs_edit_dest(): server weight less than zero [ 651.450591][ T3780] IPVS: starting estimator thread 0... [ 651.496585][T25404] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6434'. [ 651.542786][T25405] IPVS: using max 24 ests per chain, 57600 per kthread [ 651.550075][T25403] syzkaller1: entered promiscuous mode [ 651.550122][T25403] syzkaller1: entered allmulticast mode [ 651.607051][T25413] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6435'. [ 651.738680][T25420] netlink: 100 bytes leftover after parsing attributes in process `syz.5.6438'. [ 651.915926][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 651.918068][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 652.145109][T25441] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6444'. [ 652.154787][ T5629] Bluetooth: hci4: command 0x0406 tx timeout [ 652.404186][T25454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6447'. [ 652.963218][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 652.965380][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 653.330997][T25482] 8021q: adding VLAN 0 to HW filter on device bond10 [ 653.340704][T25482] bond10: entered promiscuous mode [ 653.347437][T25482] bond0: (slave bond10): Enslaving as an active interface with a down link [ 653.832773][ T43] bond0: (slave bond10): link status definitely up [ 653.839894][ T43] bond0: active interface up! [ 654.005431][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 654.007726][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 654.257006][T25503] __nla_validate_parse: 1 callbacks suppressed [ 654.257059][T25503] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6464'. [ 654.284591][T25507] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 654.809433][T25524] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6471'. [ 654.820581][T25524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6471'. [ 655.032762][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 655.035053][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 655.093360][T25532] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 655.094620][T25531] netlink: zone id is out of range [ 655.530778][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6480'. [ 655.556848][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6480'. [ 655.564122][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6480'. [ 655.564391][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6480'. [ 655.581653][T25550] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6480'. [ 655.605542][T25549] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6479'. [ 655.778397][T25556] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 656.076081][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 656.078244][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 656.212099][T25572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6486'. [ 656.468934][T25581] FAULT_INJECTION: forcing a failure. [ 656.468934][T25581] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 656.487092][T25581] CPU: 1 UID: 0 PID: 25581 Comm: syz.6.6490 Not tainted syzkaller #0 PREEMPT(full) [ 656.487130][T25581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 656.487145][T25581] Call Trace: [ 656.487153][T25581] [ 656.487164][T25581] dump_stack_lvl+0xe8/0x150 [ 656.487204][T25581] should_fail_ex+0x410/0x560 [ 656.487246][T25581] prepare_alloc_pages+0x223/0x600 [ 656.487277][T25581] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 656.487305][T25581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 656.487333][T25581] ? __pfx_policy_nodemask+0x10/0x10 [ 656.487361][T25581] ? __lock_acquire+0x6df/0x2e50 [ 656.487399][T25581] alloc_pages_mpol+0x21e/0x390 [ 656.487432][T25581] folio_alloc_mpol_noprof+0x39/0x160 [ 656.487461][T25581] vma_alloc_folio_noprof+0xe1/0x1e0 [ 656.487491][T25581] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 656.487531][T25581] do_wp_page+0x117d/0x4b80 [ 656.487601][T25581] ? __pfx_do_wp_page+0x10/0x10 [ 656.487625][T25581] ? do_raw_spin_lock+0x12b/0x2f0 [ 656.487666][T25581] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 656.487707][T25581] handle_mm_fault+0x15d7/0x3750 [ 656.487747][T25581] ? handle_mm_fault+0xf1/0x3750 [ 656.487787][T25581] ? __pfx_handle_mm_fault+0x10/0x10 [ 656.487812][T25581] ? lock_vma_under_rcu+0x45a/0x500 [ 656.487873][T25581] do_user_addr_fault+0xa4f/0x1340 [ 656.487908][T25581] ? trace_page_fault_user+0x84/0x1e0 [ 656.487933][T25581] exc_page_fault+0x6a/0xc0 [ 656.487969][T25581] asm_exc_page_fault+0x26/0x30 [ 656.487991][T25581] RIP: 0033:0x7f26def5df45 [ 656.488013][T25581] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 656.488032][T25581] RSP: 002b:00007f26dfde6de0 EFLAGS: 00010293 [ 656.488053][T25581] RAX: 0000000000000008 RBX: 00007f26dfd57e20 RCX: 0000000000000000 [ 656.488069][T25581] RDX: 0000000000000000 RSI: 00007f26df05275f RDI: 00007f26dfd57e20 [ 656.488083][T25581] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 656.488098][T25581] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f26df052477 [ 656.488112][T25581] R13: ffffffffffffffe8 R14: 0000000000000016 R15: 00007f26df05275f [ 656.488148][T25581] [ 656.615440][T25581] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 657.113189][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 657.115370][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 657.301772][T25618] netlink: zone id is out of range [ 657.301832][T25618] netlink: zone id is out of range [ 657.319411][T25616] Bluetooth: hci0: unsupported parameter 5161 [ 657.319474][T25616] Bluetooth: hci0: unsupported parameter 8192 [ 657.325132][T25616] Bluetooth: hci0: unsupported parameter 5161 [ 657.325165][T25616] Bluetooth: hci0: unsupported parameter 8192 [ 657.825206][T25638] syzkaller1: left promiscuous mode [ 657.830825][T25638] syzkaller1: left allmulticast mode [ 658.229310][T25657] 8021q: adding VLAN 0 to HW filter on device bond3 [ 658.240096][T25657] bond0: (slave bond3): Enslaving as an active interface with an up link [ 658.409834][T25673] validate_nla: 1 callbacks suppressed [ 658.416211][T25673] netlink: 'syz.5.6516': attribute type 1 has an invalid length. [ 658.953322][ T13] bond0: (slave bond10): interface is now down [ 658.961182][ T13] bond0: now running without any active interface! [ 659.108359][T25709] 8021q: adding VLAN 0 to HW filter on device bond11 [ 659.110233][T25709] bond11: entered promiscuous mode [ 659.110984][T25709] bond0: (slave bond11): Enslaving as an active interface with a down link [ 659.174805][T25712] bond12 (unregistering): Released all slaves [ 659.363992][T25720] netlink: 'syz.6.6530': attribute type 3 has an invalid length. [ 659.418384][T25722] __nla_validate_parse: 7 callbacks suppressed [ 659.418447][T25722] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6530'. [ 659.470636][T25719] geneve2: entered promiscuous mode [ 659.580268][T25729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6531'. [ 659.860438][T25744] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6537'. [ 659.999115][T25749] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6539'. [ 660.001797][T25752] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6540'. [ 660.001824][T25752] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6540'. [ 660.235581][ C0] net_ratelimit: 17 callbacks suppressed [ 660.235649][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 660.238165][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 660.309269][T25773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6544'. [ 660.333765][T25773] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6544'. [ 660.706608][ T5629] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 660.719651][ T5629] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 660.735348][ T5629] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 660.743972][ T5629] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 660.752497][ T5629] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 660.762401][T25789] netlink: 88 bytes leftover after parsing attributes in process `syz.6.6550'. [ 660.772057][T25789] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6550'. [ 661.129782][T25809] Cannot find set identified by id 65534 to match [ 661.187072][T25809] syzkaller0: entered promiscuous mode [ 661.194556][T25809] syzkaller0: entered allmulticast mode [ 661.273275][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 661.275488][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 661.555631][T25826] 8021q: adding VLAN 0 to HW filter on device bond12 [ 661.572065][T25833] FAULT_INJECTION: forcing a failure. [ 661.572065][T25833] name failslab, interval 1, probability 0, space 0, times 0 [ 661.589278][T25833] CPU: 1 UID: 0 PID: 25833 Comm: syz.6.6562 Not tainted syzkaller #0 PREEMPT(full) [ 661.589310][T25833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 661.589324][T25833] Call Trace: [ 661.589334][T25833] [ 661.589344][T25833] dump_stack_lvl+0xe8/0x150 [ 661.589382][T25833] should_fail_ex+0x410/0x560 [ 661.589419][T25833] should_failslab+0xa8/0x100 [ 661.589446][T25833] __kmalloc_noprof+0xfe/0x720 [ 661.589478][T25833] ? iovec_from_user+0x87/0x250 [ 661.589499][T25833] ? iovec_from_user+0x87/0x250 [ 661.589528][T25833] iovec_from_user+0x87/0x250 [ 661.589555][T25833] __import_iovec+0x15e/0x7e0 [ 661.589589][T25833] import_iovec+0x73/0xa0 [ 661.589614][T25833] ___sys_recvmsg+0x4c9/0x5a0 [ 661.589642][T25833] ? lock_acquire+0x115/0x350 [ 661.589668][T25833] ? __pfx____sys_recvmsg+0x10/0x10 [ 661.589698][T25833] ? lock_acquire+0x115/0x350 [ 661.589740][T25833] ? __fget_files+0x3a2/0x420 [ 661.589783][T25833] do_recvmmsg+0x31a/0x7f0 [ 661.589819][T25833] ? __pfx_do_recvmmsg+0x10/0x10 [ 661.589860][T25833] ? get_timespec64+0x119/0x1b0 [ 661.589885][T25833] ? __pfx_get_timespec64+0x10/0x10 [ 661.589920][T25833] __x64_sys_recvmmsg+0x1b7/0x250 [ 661.589950][T25833] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 661.589988][T25833] do_syscall_64+0x166/0x520 [ 661.590020][T25833] ? trace_irq_disable+0x3b/0x140 [ 661.590044][T25833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.590066][T25833] ? clear_bhb_loop+0x70/0xc0 [ 661.590094][T25833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.590125][T25833] RIP: 0033:0x7f26def9e159 [ 661.590146][T25833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.590165][T25833] RSP: 002b:00007f26dfde8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 661.590191][T25833] RAX: ffffffffffffffda RBX: 00007f26df225fa0 RCX: 00007f26def9e159 [ 661.590207][T25833] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 661.590223][T25833] RBP: 00007f26dfde8090 R08: 0000200000003700 R09: 0000000000000000 [ 661.590239][T25833] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 661.590254][T25833] R13: 00007f26df226038 R14: 00007f26df225fa0 R15: 00007ffc927d8848 [ 661.590288][T25833] [ 661.872953][T25839] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 661.978361][T25845] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 661.984766][T25846] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 662.315716][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 662.317878][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 662.480046][T25861] netlink: zone id is out of range [ 662.804978][T25875] ip_tables: iptables: counters copy to user failed while replacing table [ 662.879762][ T5629] Bluetooth: hci7: command tx timeout [ 663.449282][T25788] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.449483][T25788] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.449712][T25788] bridge_slave_0: entered allmulticast mode [ 663.451652][T25788] bridge_slave_0: entered promiscuous mode [ 663.455634][T25788] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.455748][T25788] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.455901][T25788] bridge_slave_1: entered allmulticast mode [ 663.457732][T25788] bridge_slave_1: entered promiscuous mode [ 663.505689][T25788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.536407][T25788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.670196][T25788] team0: Port device team_slave_0 added [ 663.682396][T25788] team0: Port device team_slave_1 added [ 663.780967][T25788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.781012][T25788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.781041][T25788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.786308][T25788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.786325][T25788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.786350][T25788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.963855][T25923] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 663.997049][T25788] hsr_slave_0: entered promiscuous mode [ 663.999934][T25788] hsr_slave_1: entered promiscuous mode [ 664.000661][T25788] debugfs: 'hsr0' already exists in 'hsr' [ 664.000681][T25788] Cannot create hsr debugfs directory [ 664.503464][T25936] __nla_validate_parse: 13 callbacks suppressed [ 664.510074][T25936] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6594'. [ 664.527159][T25788] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 664.538453][T25788] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 664.540052][T25788] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 664.556996][T25788] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 664.557957][T25788] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 664.569381][T25788] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 664.573767][T25788] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 664.583969][T25788] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 664.721432][T25788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.759233][T25788] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.812939][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.813067][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.825151][T25950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6597'. [ 664.825180][T25950] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6597'. [ 664.832495][T25950] syzkaller1: entered promiscuous mode [ 664.832518][T25950] syzkaller1: entered allmulticast mode [ 664.859292][T20096] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.859418][T20096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.924488][T25952] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6598'. [ 664.924551][T25952] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6598'. [ 664.954134][ T5629] Bluetooth: hci7: command tx timeout [ 665.232568][T25959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6601'. [ 665.389318][T25965] syzkaller0: entered promiscuous mode [ 665.389372][T25965] syzkaller0: entered allmulticast mode [ 665.433297][ C0] net_ratelimit: 4 callbacks suppressed [ 665.433355][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 665.435871][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 665.540007][T25968] 8021q: adding VLAN 0 to HW filter on device bond12 [ 665.557249][T25973] macvlan0: entered promiscuous mode [ 665.557286][T25973] macvlan0: entered allmulticast mode [ 665.561665][T25973] bond12: (slave macvlan0): Error -22 calling dev_set_mtu [ 665.646021][T25970] macvlan0: entered promiscuous mode [ 665.646077][T25970] macvlan0: entered allmulticast mode [ 665.646897][T25970] bond12: (slave macvlan0): Error -22 calling dev_set_mtu [ 665.926199][T25990] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 666.040537][T25996] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6609'. [ 666.120013][T25788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.261104][T26003] netlink: 'syz.3.6611': attribute type 3 has an invalid length. [ 666.475624][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 666.477845][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 666.539126][T25788] veth0_vlan: entered promiscuous mode [ 666.566701][T25788] veth1_vlan: entered promiscuous mode [ 666.618846][T25788] veth0_macvtap: entered promiscuous mode [ 666.714515][T25788] veth1_macvtap: entered promiscuous mode [ 666.758041][T25788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.780424][T25788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.827532][T20101] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.827605][T20101] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.827643][T20101] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.827675][T20101] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.043634][ T5629] Bluetooth: hci7: command tx timeout [ 667.071941][T20101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.071989][T20101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.080190][T26036] FAULT_INJECTION: forcing a failure. [ 667.080190][T26036] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 667.080223][T26036] CPU: 0 UID: 0 PID: 26036 Comm: syz.3.6619 Not tainted syzkaller #0 PREEMPT(full) [ 667.080245][T26036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 667.080257][T26036] Call Trace: [ 667.080266][T26036] [ 667.080274][T26036] dump_stack_lvl+0xe8/0x150 [ 667.080306][T26036] should_fail_ex+0x410/0x560 [ 667.080339][T26036] _copy_to_iter+0x59c/0x1810 [ 667.080364][T26036] ? unwind_get_return_address+0x4d/0x90 [ 667.080403][T26036] ? __pfx__copy_to_iter+0x10/0x10 [ 667.080430][T26036] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 667.080467][T26036] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 667.080491][T26036] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 667.080519][T26036] __skb_datagram_iter+0xf8/0x980 [ 667.080543][T26036] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 667.080573][T26036] skb_copy_datagram_iter+0xb5/0x240 [ 667.080599][T26036] netlink_recvmsg+0x2b9/0xa50 [ 667.080646][T26036] ? __pfx_netlink_recvmsg+0x10/0x10 [ 667.080674][T26036] ? aa_sock_msg_perm+0x144/0x210 [ 667.080700][T26036] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 667.080724][T26036] ? security_socket_recvmsg+0x7e/0x2c0 [ 667.080747][T26036] ? __pfx_netlink_recvmsg+0x10/0x10 [ 667.080771][T26036] sock_recvmsg+0x196/0x1e0 [ 667.080799][T26036] ____sys_recvmsg+0x1e6/0x4a0 [ 667.080819][T26036] ? iovec_from_user+0x87/0x250 [ 667.080847][T26036] ? __pfx_____sys_recvmsg+0x10/0x10 [ 667.080882][T26036] ? import_iovec+0x73/0xa0 [ 667.080906][T26036] ___sys_recvmsg+0x213/0x5a0 [ 667.080927][T26036] ? lock_acquire+0x115/0x350 [ 667.080950][T26036] ? __pfx____sys_recvmsg+0x10/0x10 [ 667.080976][T26036] ? lock_acquire+0x115/0x350 [ 667.081011][T26036] ? __fget_files+0x3a2/0x420 [ 667.081054][T26036] do_recvmmsg+0x31a/0x7f0 [ 667.081089][T26036] ? __pfx_do_recvmmsg+0x10/0x10 [ 667.081123][T26036] ? get_timespec64+0x119/0x1b0 [ 667.081144][T26036] ? __pfx_get_timespec64+0x10/0x10 [ 667.081176][T26036] __x64_sys_recvmmsg+0x1b7/0x250 [ 667.081200][T26036] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 667.081234][T26036] do_syscall_64+0x166/0x520 [ 667.081259][T26036] ? trace_irq_disable+0x3b/0x140 [ 667.081277][T26036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.081296][T26036] ? clear_bhb_loop+0x70/0xc0 [ 667.081320][T26036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 667.081338][T26036] RIP: 0033:0x7f4917b9e159 [ 667.081357][T26036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 667.081372][T26036] RSP: 002b:00007f4918a16028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 667.081394][T26036] RAX: ffffffffffffffda RBX: 00007f4917e25fa0 RCX: 00007f4917b9e159 [ 667.081408][T26036] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 667.081421][T26036] RBP: 00007f4918a16090 R08: 0000200000003700 R09: 0000000000000000 [ 667.081434][T26036] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 667.081446][T26036] R13: 00007f4917e26038 R14: 00007f4917e25fa0 R15: 00007ffcf6a0b218 [ 667.081477][T26036] [ 667.400733][T26030] bond4 (unregistering): Released all slaves [ 667.436190][T26044] netlink: 'syz.3.6620': attribute type 1 has an invalid length. [ 667.445475][T26044] netlink: 'syz.3.6620': attribute type 3 has an invalid length. [ 667.454020][T26044] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6620'. [ 667.493981][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 667.502314][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.513217][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 667.515411][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 667.676869][T26050] netlink: zone id is out of range [ 667.749114][T26055] openvswitch: netlink: IPv4 tun info is not correct [ 667.760368][T26054] netlink: 'syz.6.6622': attribute type 5 has an invalid length. [ 667.769373][T26054] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6622'. [ 668.080390][T26064] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6547'. [ 668.542002][T26080] x_tables: duplicate underflow at hook 4 [ 668.556461][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 668.558593][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 668.583928][T26080] xt_NETMAP: bad MAP_IPS. [ 668.979204][T26092] netlink: 'syz.6.6637': attribute type 1 has an invalid length. [ 669.026603][T26095] IPVS: length: 43 != 8 [ 669.123568][ T5629] Bluetooth: hci7: command tx timeout [ 669.161061][T26096] bond0: (slave veth0_to_bond): Releasing backup interface [ 669.191331][T26096] bond2: (slave veth0_to_bond): making interface the new active one [ 669.203347][T26096] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 669.225931][T26103] netlink: 'syz.5.6641': attribute type 1 has an invalid length. [ 669.255374][T26092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.299630][T26108] netlink: 'syz.5.6641': attribute type 1 has an invalid length. [ 669.801250][T26130] __nla_validate_parse: 9 callbacks suppressed [ 669.801351][T26130] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6649'. [ 670.025832][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6650'. [ 670.040597][T26134] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 670.636067][ C0] net_ratelimit: 2 callbacks suppressed [ 670.636142][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 670.638261][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 670.683544][T26152] bond4 (unregistering): Released all slaves [ 670.710592][ T175] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xb [ 670.781734][T26156] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 670.852376][T26158] bridge0: entered promiscuous mode [ 670.909095][T26158] bridge0: entered allmulticast mode [ 670.919255][T26171] bond0: option ad_select: unable to set because the bond device is up [ 670.919822][T26177] bond0: option ad_select: unable to set because the bond device is up [ 671.068937][T26184] netlink: zone id is out of range [ 671.068997][T26184] netlink: zone id is out of range [ 671.069032][T26184] netlink: zone id is out of range [ 671.069042][T26184] netlink: zone id is out of range [ 671.069050][T26184] netlink: zone id is out of range [ 671.069056][T26184] netlink: zone id is out of range [ 671.069063][T26184] netlink: zone id is out of range [ 671.430983][T26197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6667'. [ 671.896902][T26226] FAULT_INJECTION: forcing a failure. [ 671.896902][T26226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 671.900428][T26224] netlink: 'syz.5.6678': attribute type 1 has an invalid length. [ 671.900451][T26224] netlink: 'syz.5.6678': attribute type 3 has an invalid length. [ 671.900464][T26224] netlink: 224 bytes leftover after parsing attributes in process `syz.5.6678'. [ 671.923527][T26226] CPU: 0 UID: 0 PID: 26226 Comm: syz.1.6679 Not tainted syzkaller #0 PREEMPT(full) [ 671.923556][T26226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 671.923568][T26226] Call Trace: [ 671.923576][T26226] [ 671.923585][T26226] dump_stack_lvl+0xe8/0x150 [ 671.923619][T26226] should_fail_ex+0x410/0x560 [ 671.923652][T26226] _copy_to_iter+0x59c/0x1810 [ 671.923677][T26226] ? unwind_get_return_address+0x4d/0x90 [ 671.923714][T26226] ? __pfx__copy_to_iter+0x10/0x10 [ 671.923742][T26226] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 671.923769][T26226] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 671.923792][T26226] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 671.923820][T26226] __skb_datagram_iter+0xf8/0x980 [ 671.923844][T26226] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 671.923874][T26226] skb_copy_datagram_iter+0xb5/0x240 [ 671.923899][T26226] netlink_recvmsg+0x2b9/0xa50 [ 671.923932][T26226] ? __pfx_netlink_recvmsg+0x10/0x10 [ 671.923959][T26226] ? aa_sock_msg_perm+0x144/0x210 [ 671.923984][T26226] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 671.924005][T26226] ? security_socket_recvmsg+0x7e/0x2c0 [ 671.924028][T26226] ? __pfx_netlink_recvmsg+0x10/0x10 [ 671.924051][T26226] sock_recvmsg+0x196/0x1e0 [ 671.924080][T26226] ____sys_recvmsg+0x1e6/0x4a0 [ 671.924099][T26226] ? iovec_from_user+0x87/0x250 [ 671.924126][T26226] ? __pfx_____sys_recvmsg+0x10/0x10 [ 671.924163][T26226] ? import_iovec+0x73/0xa0 [ 671.924186][T26226] ___sys_recvmsg+0x213/0x5a0 [ 671.924206][T26226] ? lock_acquire+0x115/0x350 [ 671.924228][T26226] ? __pfx____sys_recvmsg+0x10/0x10 [ 671.924254][T26226] ? lock_acquire+0x115/0x350 [ 671.924288][T26226] ? __fget_files+0x3a2/0x420 [ 671.924326][T26226] do_recvmmsg+0x31a/0x7f0 [ 671.924357][T26226] ? __pfx_do_recvmmsg+0x10/0x10 [ 671.924390][T26226] ? get_timespec64+0x119/0x1b0 [ 671.924412][T26226] ? __pfx_get_timespec64+0x10/0x10 [ 671.924443][T26226] __x64_sys_recvmmsg+0x1b7/0x250 [ 671.924468][T26226] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 671.924509][T26226] do_syscall_64+0x166/0x520 [ 671.924535][T26226] ? trace_irq_disable+0x3b/0x140 [ 671.924553][T26226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.924573][T26226] ? clear_bhb_loop+0x70/0xc0 [ 671.924597][T26226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.924615][T26226] RIP: 0033:0x7fc91759e159 [ 671.924635][T26226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.924652][T26226] RSP: 002b:00007fc9183d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 671.924674][T26226] RAX: ffffffffffffffda RBX: 00007fc917825fa0 RCX: 00007fc91759e159 [ 671.924688][T26226] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 671.924702][T26226] RBP: 00007fc9183d0090 R08: 0000200000003700 R09: 0000000000000000 [ 671.924714][T26226] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 671.924726][T26226] R13: 00007fc917826038 R14: 00007fc917825fa0 R15: 00007ffe423297b8 [ 671.924756][T26226] [ 672.348114][T26240] netlink: 'syz.1.6686': attribute type 1 has an invalid length. [ 672.348172][T26240] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6686'. [ 672.348191][T26240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6686'. [ 672.475889][T26235] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.499830][T26244] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6687'. [ 672.541023][T26252] netlink: 'syz.1.6689': attribute type 10 has an invalid length. [ 672.779024][T26257] FAULT_INJECTION: forcing a failure. [ 672.779024][T26257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 672.779080][T26257] CPU: 1 UID: 0 PID: 26257 Comm: syz.1.6693 Not tainted syzkaller #0 PREEMPT(full) [ 672.779105][T26257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 672.779118][T26257] Call Trace: [ 672.779126][T26257] [ 672.779136][T26257] dump_stack_lvl+0xe8/0x150 [ 672.779172][T26257] should_fail_ex+0x410/0x560 [ 672.779209][T26257] _copy_to_iter+0x59c/0x1810 [ 672.779239][T26257] ? unwind_get_return_address+0x4d/0x90 [ 672.779281][T26257] ? __pfx__copy_to_iter+0x10/0x10 [ 672.779312][T26257] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 672.779343][T26257] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 672.779369][T26257] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 672.779400][T26257] __skb_datagram_iter+0xf8/0x980 [ 672.779427][T26257] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 672.779461][T26257] skb_copy_datagram_iter+0xb5/0x240 [ 672.779490][T26257] netlink_recvmsg+0x2b9/0xa50 [ 672.779527][T26257] ? __pfx_netlink_recvmsg+0x10/0x10 [ 672.779567][T26257] ? aa_sock_msg_perm+0x144/0x210 [ 672.779591][T26257] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 672.779614][T26257] ? security_socket_recvmsg+0x7e/0x2c0 [ 672.779640][T26257] ? __pfx_netlink_recvmsg+0x10/0x10 [ 672.779664][T26257] sock_recvmsg+0x196/0x1e0 [ 672.779697][T26257] ____sys_recvmsg+0x1e6/0x4a0 [ 672.779723][T26257] ? iovec_from_user+0x87/0x250 [ 672.779753][T26257] ? __pfx_____sys_recvmsg+0x10/0x10 [ 672.779793][T26257] ? import_iovec+0x73/0xa0 [ 672.779820][T26257] ___sys_recvmsg+0x213/0x5a0 [ 672.779844][T26257] ? lock_acquire+0x115/0x350 [ 672.779870][T26257] ? __pfx____sys_recvmsg+0x10/0x10 [ 672.779900][T26257] ? lock_acquire+0x115/0x350 [ 672.779936][T26257] ? __fget_files+0x3a2/0x420 [ 672.779973][T26257] do_recvmmsg+0x31a/0x7f0 [ 672.780004][T26257] ? __pfx_do_recvmmsg+0x10/0x10 [ 672.780041][T26257] ? get_timespec64+0x119/0x1b0 [ 672.780064][T26257] ? __pfx_get_timespec64+0x10/0x10 [ 672.780100][T26257] __x64_sys_recvmmsg+0x1b7/0x250 [ 672.780127][T26257] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 672.780161][T26257] do_syscall_64+0x166/0x520 [ 672.780191][T26257] ? trace_irq_disable+0x3b/0x140 [ 672.780210][T26257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.780229][T26257] ? clear_bhb_loop+0x70/0xc0 [ 672.780255][T26257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.780274][T26257] RIP: 0033:0x7fc91759e159 [ 672.780295][T26257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 672.780312][T26257] RSP: 002b:00007fc9183d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 672.780335][T26257] RAX: ffffffffffffffda RBX: 00007fc917825fa0 RCX: 00007fc91759e159 [ 672.780350][T26257] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 672.780364][T26257] RBP: 00007fc9183d0090 R08: 0000200000003700 R09: 0000000000000000 [ 672.780378][T26257] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 672.780390][T26257] R13: 00007fc917826038 R14: 00007fc917825fa0 R15: 00007ffe423297b8 [ 672.780421][T26257] [ 672.797406][T26263] Cannot find add_set index 0 as target [ 673.268800][T26274] netlink: 'syz.1.6697': attribute type 8 has an invalid length. [ 673.383742][T26282] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6701'. [ 673.409014][T26282] netlink: 348 bytes leftover after parsing attributes in process `syz.7.6701'. [ 673.626885][T26298] FAULT_INJECTION: forcing a failure. [ 673.626885][T26298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.626950][T26298] CPU: 1 UID: 0 PID: 26298 Comm: syz.7.6708 Not tainted syzkaller #0 PREEMPT(full) [ 673.626976][T26298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.626990][T26298] Call Trace: [ 673.626999][T26298] [ 673.627009][T26298] dump_stack_lvl+0xe8/0x150 [ 673.627045][T26298] should_fail_ex+0x410/0x560 [ 673.627084][T26298] _copy_to_iter+0x59c/0x1810 [ 673.627113][T26298] ? unwind_get_return_address+0x4d/0x90 [ 673.627156][T26298] ? __pfx__copy_to_iter+0x10/0x10 [ 673.627189][T26298] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 673.627220][T26298] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 673.627248][T26298] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 673.627279][T26298] __skb_datagram_iter+0xf8/0x980 [ 673.627304][T26298] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 673.627340][T26298] skb_copy_datagram_iter+0xb5/0x240 [ 673.627368][T26298] netlink_recvmsg+0x2b9/0xa50 [ 673.627413][T26298] ? __pfx_netlink_recvmsg+0x10/0x10 [ 673.627442][T26298] ? aa_sock_msg_perm+0x144/0x210 [ 673.627471][T26298] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 673.627495][T26298] ? security_socket_recvmsg+0x7e/0x2c0 [ 673.627524][T26298] ? __pfx_netlink_recvmsg+0x10/0x10 [ 673.627551][T26298] sock_recvmsg+0x196/0x1e0 [ 673.627584][T26298] ____sys_recvmsg+0x1e6/0x4a0 [ 673.627611][T26298] ? iovec_from_user+0x87/0x250 [ 673.627643][T26298] ? __pfx_____sys_recvmsg+0x10/0x10 [ 673.627684][T26298] ? import_iovec+0x73/0xa0 [ 673.627711][T26298] ___sys_recvmsg+0x213/0x5a0 [ 673.627735][T26298] ? lock_acquire+0x115/0x350 [ 673.627761][T26298] ? __pfx____sys_recvmsg+0x10/0x10 [ 673.627793][T26298] ? lock_acquire+0x115/0x350 [ 673.627832][T26298] ? __fget_files+0x3a2/0x420 [ 673.627872][T26298] do_recvmmsg+0x31a/0x7f0 [ 673.627906][T26298] ? __pfx_do_recvmmsg+0x10/0x10 [ 673.627953][T26298] ? get_timespec64+0x119/0x1b0 [ 673.627978][T26298] ? __pfx_get_timespec64+0x10/0x10 [ 673.628015][T26298] __x64_sys_recvmmsg+0x1b7/0x250 [ 673.628044][T26298] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 673.628082][T26298] do_syscall_64+0x166/0x520 [ 673.628112][T26298] ? trace_irq_disable+0x3b/0x140 [ 673.628133][T26298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.628155][T26298] ? clear_bhb_loop+0x70/0xc0 [ 673.628180][T26298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.628202][T26298] RIP: 0033:0x7fde4079e159 [ 673.628223][T26298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.628241][T26298] RSP: 002b:00007fde3e9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 673.628264][T26298] RAX: ffffffffffffffda RBX: 00007fde40a25fa0 RCX: 00007fde4079e159 [ 673.628279][T26298] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 673.628307][T26298] RBP: 00007fde3e9f6090 R08: 0000200000003700 R09: 0000000000000000 [ 673.628320][T26298] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000002 [ 673.628333][T26298] R13: 00007fde40a26038 R14: 00007fde40a25fa0 R15: 00007ffeda54c258 [ 673.628367][T26298] [ 674.749126][T26348] gtp0: entered promiscuous mode [ 674.749188][T26348] gtp0: entered allmulticast mode [ 674.807480][T26357] syzkaller0: entered promiscuous mode [ 674.807536][T26357] syzkaller0: entered allmulticast mode [ 674.930547][T26364] netlink: 'syz.5.6730': attribute type 8 has an invalid length. [ 674.976505][T26366] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 675.091641][T26372] FAULT_INJECTION: forcing a failure. [ 675.091641][T26372] name failslab, interval 1, probability 0, space 0, times 0 [ 675.091686][T26372] CPU: 1 UID: 0 PID: 26372 Comm: syz.5.6734 Not tainted syzkaller #0 PREEMPT(full) [ 675.091712][T26372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 675.091724][T26372] Call Trace: [ 675.091733][T26372] [ 675.091742][T26372] dump_stack_lvl+0xe8/0x150 [ 675.091775][T26372] should_fail_ex+0x410/0x560 [ 675.091809][T26372] should_failslab+0xa8/0x100 [ 675.091834][T26372] __kmalloc_cache_noprof+0xa3/0x600 [ 675.091863][T26372] ? rtnl_newlink+0x143/0x1c30 [ 675.091882][T26372] ? rtnl_newlink+0x143/0x1c30 [ 675.091905][T26372] rtnl_newlink+0x143/0x1c30 [ 675.091925][T26372] ? __lock_acquire+0x6df/0x2e50 [ 675.091953][T26372] ? __pfx_rtnl_newlink+0x10/0x10 [ 675.091977][T26372] ? __lock_acquire+0x6df/0x2e50 [ 675.092004][T26372] ? __lock_acquire+0x6df/0x2e50 [ 675.092038][T26372] ? lock_acquire+0x115/0x350 [ 675.092063][T26372] ? lock_acquire+0x115/0x350 [ 675.092091][T26372] ? is_bpf_text_address+0x26/0x2b0 [ 675.092120][T26372] ? __lock_acquire+0x6df/0x2e50 [ 675.092155][T26372] ? kernel_text_address+0xa5/0xe0 [ 675.092178][T26372] ? __kernel_text_address+0xd/0x30 [ 675.092198][T26372] ? unwind_get_return_address+0x4d/0x90 [ 675.092219][T26372] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 675.092247][T26372] ? arch_stack_walk+0xfb/0x150 [ 675.092305][T26372] ? lock_acquire+0x115/0x350 [ 675.092325][T26372] ? __pfx_rtnl_newlink+0x10/0x10 [ 675.092355][T26372] ? __pfx_rtnl_newlink+0x10/0x10 [ 675.092372][T26372] rtnetlink_rcv_msg+0x802/0xc00 [ 675.092398][T26372] ? netlink_sendmsg+0x5d4/0xb40 [ 675.092424][T26372] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 675.092463][T26372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 675.092492][T26372] ? __lock_acquire+0x6df/0x2e50 [ 675.092530][T26372] netlink_rcv_skb+0x226/0x4a0 [ 675.092558][T26372] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 675.092587][T26372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 675.092622][T26372] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.092644][T26372] ? netlink_deliver_tap+0x2e/0x1b0 [ 675.092670][T26372] netlink_unicast+0x7bd/0x940 [ 675.092702][T26372] netlink_sendmsg+0x813/0xb40 [ 675.092734][T26372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.092765][T26372] ? apparmor_socket_sendmsg+0x98/0x360 [ 675.092795][T26372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 675.092816][T26372] sock_sendmsg_nosec+0x13a/0x180 [ 675.092844][T26372] ____sys_sendmsg+0x54e/0x850 [ 675.092869][T26372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 675.092899][T26372] ? import_iovec+0x73/0xa0 [ 675.092922][T26372] ___sys_sendmsg+0x2a5/0x360 [ 675.092942][T26372] ? __lock_acquire+0x6df/0x2e50 [ 675.092965][T26372] ? __pfx____sys_sendmsg+0x10/0x10 [ 675.093021][T26372] ? __fget_files+0x2a/0x420 [ 675.093044][T26372] ? __fget_files+0x3a2/0x420 [ 675.093077][T26372] __x64_sys_sendmsg+0x1b1/0x290 [ 675.093101][T26372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 675.093163][T26372] do_syscall_64+0x166/0x520 [ 675.093189][T26372] ? trace_irq_disable+0x3b/0x140 [ 675.093207][T26372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.093227][T26372] ? clear_bhb_loop+0x70/0xc0 [ 675.093249][T26372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.093268][T26372] RIP: 0033:0x7f970cb9e159 [ 675.093288][T26372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.093304][T26372] RSP: 002b:00007f970dab1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 675.093327][T26372] RAX: ffffffffffffffda RBX: 00007f970ce25fa0 RCX: 00007f970cb9e159 [ 675.093341][T26372] RDX: 0000000000000040 RSI: 0000200000000040 RDI: 0000000000000003 [ 675.093354][T26372] RBP: 00007f970dab1090 R08: 0000000000000000 R09: 0000000000000000 [ 675.093366][T26372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.093378][T26372] R13: 00007f970ce26038 R14: 00007f970ce25fa0 R15: 00007fff824aa678 [ 675.093409][T26372] [ 675.140839][T26373] tipc: Started in network mode [ 675.140871][T26373] tipc: Node identity 78563412785634122143658721436587, cluster identity 4711 [ 675.432396][T26379] xt_connbytes: Forcing CT accounting to be enabled [ 675.833151][ C0] net_ratelimit: 14 callbacks suppressed [ 675.833210][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 675.835700][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 675.890686][T26396] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6745'. [ 676.086223][T26407] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 676.110991][T26409] netlink: 408 bytes leftover after parsing attributes in process `syz.1.6746'. [ 676.111039][T26409] openvswitch: netlink: Flow key attr not present in new flow. [ 676.113024][T26412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6750'. [ 676.196278][T26417] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6751'. [ 676.211545][T26412] bond3 (unregistering): Released all slaves [ 676.588847][T26429] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6756'. [ 676.613486][T26429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.630166][T26429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.645299][T26429] bond0 (unregistering): Released all slaves [ 676.659061][T26434] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 676.678575][ T13] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 676.679501][T26431] x_tables: unsorted entry at hook 4 [ 676.730506][ T13] bond2: now running without any active interface! [ 676.875769][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 676.877959][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.061125][T26448] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 677.121891][T26450] netlink: 112 bytes leftover after parsing attributes in process `syz.7.6764'. [ 677.305647][T26462] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6770'. [ 677.336414][T26462] netlink: 68 bytes leftover after parsing attributes in process `syz.5.6770'. [ 677.340702][T26461] netlink: 'syz.7.6769': attribute type 2 has an invalid length. [ 677.342249][T26463] netlink: 'syz.3.6767': attribute type 2 has an invalid length. [ 677.342266][T26463] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6767'. [ 677.505156][T26478] netlink: 52 bytes leftover after parsing attributes in process `syz.5.6773'. [ 677.604649][T26481] team0: Device gtp1 is up. Set it down before adding it as a team port [ 677.758042][T26484] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 677.776825][T26489] smc: removing ib device syz0 [ 677.822123][T26492] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 677.912763][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 677.915287][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 678.073380][T26489] smbdirect: ib_dev[syz0] removed [ 678.096449][T26455] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 678.106879][T26501] netlink: zone id is out of range [ 678.955504][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 679.963479][T26557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.058729][T26558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 680.090665][T26574] FAULT_INJECTION: forcing a failure. [ 680.090665][T26574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 680.105290][T26574] CPU: 0 UID: 0 PID: 26574 Comm: syz.3.6805 Not tainted syzkaller #0 PREEMPT(full) [ 680.105324][T26574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 680.105337][T26574] Call Trace: [ 680.105347][T26574] [ 680.105357][T26574] dump_stack_lvl+0xe8/0x150 [ 680.105395][T26574] should_fail_ex+0x410/0x560 [ 680.105438][T26574] _copy_from_iter+0x1d3/0x1660 [ 680.105472][T26574] ? __alloc_skb+0x27a/0x7a0 [ 680.105507][T26574] ? __alloc_skb+0x27a/0x7a0 [ 680.105540][T26574] ? __alloc_skb+0x27a/0x7a0 [ 680.105569][T26574] ? __pfx__copy_from_iter+0x10/0x10 [ 680.105599][T26574] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 680.105629][T26574] ? __alloc_skb+0x27a/0x7a0 [ 680.105656][T26574] ? __alloc_skb+0x27a/0x7a0 [ 680.105694][T26574] ? netlink_sendmsg+0x650/0xb40 [ 680.105719][T26574] ? skb_put+0x112/0x210 [ 680.105742][T26574] netlink_sendmsg+0x6c0/0xb40 [ 680.105796][T26574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.105832][T26574] ? apparmor_socket_sendmsg+0x18b/0x360 [ 680.105866][T26574] ? __pfx_netlink_sendmsg+0x10/0x10 [ 680.105891][T26574] sock_sendmsg_nosec+0x13a/0x180 [ 680.105923][T26574] ____sys_sendmsg+0x54e/0x850 [ 680.105951][T26574] ? __pfx_____sys_sendmsg+0x10/0x10 [ 680.105983][T26574] ? import_iovec+0x73/0xa0 [ 680.106007][T26574] ___sys_sendmsg+0x2a5/0x360 [ 680.106028][T26574] ? __lock_acquire+0x6df/0x2e50 [ 680.106068][T26574] ? __pfx____sys_sendmsg+0x10/0x10 [ 680.106129][T26574] ? __fget_files+0x2a/0x420 [ 680.106153][T26574] ? __fget_files+0x3a2/0x420 [ 680.106188][T26574] __x64_sys_sendmsg+0x1b1/0x290 [ 680.106213][T26574] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 680.106258][T26574] do_syscall_64+0x166/0x520 [ 680.106285][T26574] ? trace_irq_disable+0x3b/0x140 [ 680.106304][T26574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.106327][T26574] ? clear_bhb_loop+0x70/0xc0 [ 680.106353][T26574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.106373][T26574] RIP: 0033:0x7f4917b9e159 [ 680.106395][T26574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.106413][T26574] RSP: 002b:00007f4918a16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 680.106438][T26574] RAX: ffffffffffffffda RBX: 00007f4917e25fa0 RCX: 00007f4917b9e159 [ 680.106454][T26574] RDX: 0000000024000894 RSI: 00002000000004c0 RDI: 0000000000000003 [ 680.106469][T26574] RBP: 00007f4918a16090 R08: 0000000000000000 R09: 0000000000000000 [ 680.106483][T26574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 680.106496][T26574] R13: 00007f4917e26038 R14: 00007f4917e25fa0 R15: 00007ffcf6a0b218 [ 680.106532][T26574] [ 680.151516][T26557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 681.035956][ C0] net_ratelimit: 5 callbacks suppressed [ 681.036026][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 681.038749][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 681.099301][T26606] netlink: zone id is out of range [ 681.115706][T26606] netlink: zone id is out of range [ 681.119865][T26609] FAULT_INJECTION: forcing a failure. [ 681.119865][T26609] name failslab, interval 1, probability 0, space 0, times 0 [ 681.119898][T26609] CPU: 1 UID: 0 PID: 26609 Comm: syz.5.6817 Not tainted syzkaller #0 PREEMPT(full) [ 681.119920][T26609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 681.119932][T26609] Call Trace: [ 681.119941][T26609] [ 681.119949][T26609] dump_stack_lvl+0xe8/0x150 [ 681.119983][T26609] should_fail_ex+0x410/0x560 [ 681.120024][T26609] ? __alloc_skb+0x1db/0x7a0 [ 681.120051][T26609] should_failslab+0xa8/0x100 [ 681.120075][T26609] ? __alloc_skb+0x1db/0x7a0 [ 681.120100][T26609] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 681.120127][T26609] ? __alloc_skb+0x18d/0x7a0 [ 681.120153][T26609] ? __alloc_skb+0x1db/0x7a0 [ 681.120186][T26609] __alloc_skb+0x1db/0x7a0 [ 681.120217][T26609] netlink_dump+0x1e7/0xee0 [ 681.120243][T26609] ? __netlink_lookup+0xc6/0x8b0 [ 681.120273][T26609] ? __pfx_netlink_dump+0x10/0x10 [ 681.120307][T26609] ? netlink_lookup+0x30/0x200 [ 681.120328][T26609] ? netlink_lookup+0x30/0x200 [ 681.120354][T26609] __netlink_dump_start+0x589/0x7b0 [ 681.120381][T26609] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 681.120453][T26609] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 681.120478][T26609] nf_tables_getchain+0x261/0x7e0 [ 681.120503][T26609] ? lock_acquire+0x115/0x350 [ 681.120525][T26609] ? __pfx_nf_tables_getchain+0x10/0x10 [ 681.120544][T26609] ? __pfx_nf_tables_dump_chains+0x10/0x10 [ 681.120578][T26609] ? __nla_parse+0x40/0x60 [ 681.120600][T26609] ? __pfx_nf_tables_getchain+0x10/0x10 [ 681.120623][T26609] nfnetlink_rcv_msg+0x8a9/0x12b0 [ 681.120647][T26609] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 681.120689][T26609] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 681.120762][T26609] netlink_rcv_skb+0x226/0x4a0 [ 681.120787][T26609] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 681.120811][T26609] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 681.120847][T26609] ? bpf_lsm_capable+0x9/0x20 [ 681.120873][T26609] ? security_capable+0x7e/0x2c0 [ 681.120906][T26609] nfnetlink_rcv+0x2b9/0x28c0 [ 681.120931][T26609] ? kernel_text_address+0xa5/0xe0 [ 681.120956][T26609] ? __kernel_text_address+0xd/0x30 [ 681.120978][T26609] ? unwind_get_return_address+0x4d/0x90 [ 681.121010][T26609] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 681.121039][T26609] ? arch_stack_walk+0xfb/0x150 [ 681.121076][T26609] ? stack_trace_save+0xa9/0x100 [ 681.121109][T26609] ? __lock_acquire+0x6df/0x2e50 [ 681.121131][T26609] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 681.121151][T26609] ? __lock_acquire+0x6df/0x2e50 [ 681.121175][T26609] ? kasan_save_track+0x4f/0x80 [ 681.121194][T26609] ? kasan_save_track+0x3e/0x80 [ 681.121212][T26609] ? __kasan_slab_alloc+0x6c/0x80 [ 681.121231][T26609] ? kmem_cache_alloc_node_noprof+0x354/0x610 [ 681.121256][T26609] ? __alloc_skb+0x27a/0x7a0 [ 681.121282][T26609] ? netlink_sendmsg+0x5d4/0xb40 [ 681.121304][T26609] ? sock_sendmsg_nosec+0x13a/0x180 [ 681.121327][T26609] ? ____sys_sendmsg+0x54e/0x850 [ 681.121357][T26609] ? __lock_acquire+0x6df/0x2e50 [ 681.121390][T26609] ? __netlink_lookup+0xc6/0x8b0 [ 681.121425][T26609] ? lock_acquire+0x115/0x350 [ 681.121446][T26609] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.121477][T26609] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.121498][T26609] ? netlink_deliver_tap+0x2e/0x1b0 [ 681.121525][T26609] netlink_unicast+0x7bd/0x940 [ 681.121558][T26609] netlink_sendmsg+0x813/0xb40 [ 681.121591][T26609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.121622][T26609] ? apparmor_socket_sendmsg+0x18b/0x360 [ 681.121653][T26609] ? __pfx_netlink_sendmsg+0x10/0x10 [ 681.121674][T26609] sock_sendmsg_nosec+0x13a/0x180 [ 681.121702][T26609] ____sys_sendmsg+0x54e/0x850 [ 681.121728][T26609] ? __pfx_____sys_sendmsg+0x10/0x10 [ 681.121759][T26609] ? import_iovec+0x73/0xa0 [ 681.121783][T26609] ___sys_sendmsg+0x2a5/0x360 [ 681.121802][T26609] ? __lock_acquire+0x6df/0x2e50 [ 681.121826][T26609] ? __pfx____sys_sendmsg+0x10/0x10 [ 681.121884][T26609] ? __fget_files+0x2a/0x420 [ 681.121907][T26609] ? __fget_files+0x3a2/0x420 [ 681.121941][T26609] __x64_sys_sendmsg+0x1b1/0x290 [ 681.121965][T26609] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 681.122015][T26609] do_syscall_64+0x166/0x520 [ 681.122042][T26609] ? trace_irq_disable+0x3b/0x140 [ 681.122060][T26609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.122080][T26609] ? clear_bhb_loop+0x70/0xc0 [ 681.122103][T26609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.122122][T26609] RIP: 0033:0x7f970cb9e159 [ 681.122142][T26609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.122159][T26609] RSP: 002b:00007f970dab1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 681.122181][T26609] RAX: ffffffffffffffda RBX: 00007f970ce25fa0 RCX: 00007f970cb9e159 [ 681.122196][T26609] RDX: 0000000024000894 RSI: 00002000000004c0 RDI: 0000000000000003 [ 681.122209][T26609] RBP: 00007f970dab1090 R08: 0000000000000000 R09: 0000000000000000 [ 681.122221][T26609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.122232][T26609] R13: 00007f970ce26038 R14: 00007f970ce25fa0 R15: 00007fff824aa678 [ 681.122264][T26609] [ 681.535719][T26616] __nla_validate_parse: 7 callbacks suppressed [ 681.535740][T26616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6819'. [ 681.550620][T26616] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 681.890713][T26632] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6824'. [ 682.083326][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 682.086057][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 682.201671][T26632] bond0 (unregistering): Released all slaves [ 683.115900][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 683.118533][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 683.245809][T26663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 683.379028][T26676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6836'. [ 683.449449][T26683] netlink: zone id is out of range [ 683.575541][T26676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6836'. [ 683.608857][T26676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6836'. [ 683.612213][T26676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6836'. [ 684.121908][ T5629] Bluetooth: hci6: Received unexpected HCI Event 0x00 [ 684.196232][T26708] veth1_to_bond: entered allmulticast mode [ 684.249256][T26707] veth1_to_bond: left allmulticast mode [ 684.663070][T26731] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 684.810574][T26738] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6858'. [ 685.438091][T26771] netlink: 'syz.7.6864': attribute type 5 has an invalid length. [ 685.438146][T26771] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6864'. [ 686.040424][T21723] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 686.058474][T21723] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 686.070086][T21723] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 686.080303][T21723] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 686.090022][T21723] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 686.233084][ C0] net_ratelimit: 8 callbacks suppressed [ 686.233153][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 686.235877][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 686.310174][T26811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6875'. [ 686.310235][T26811] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6875'. [ 686.439278][T26819] Cannot find set identified by id 4 to match [ 686.665758][T26827] x_tables: duplicate underflow at hook 1 [ 687.049302][T26837] netlink: 96 bytes leftover after parsing attributes in process `syz.7.6879'. [ 687.055569][T26837] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6879'. [ 687.055591][T26837] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6879'. [ 687.109225][T26842] netlink: 9 bytes leftover after parsing attributes in process `syz.1.6883'. [ 687.109622][T26842] gretap0: entered promiscuous mode [ 687.127013][T26842] netlink: 5 bytes leftover after parsing attributes in process `syz.1.6883'. [ 687.136378][T26842] 0ªî{X¹¦: renamed from gretap0 [ 687.157087][T26842] 0ªî{X¹¦: left promiscuous mode [ 687.157139][T26842] 0ªî{X¹¦: entered allmulticast mode [ 687.165742][T26842] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 687.275413][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 687.277921][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 687.530278][T26861] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 687.531438][T26861] batman_adv: batadv0: Adding interface: gretap1 [ 687.531454][T26861] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 687.531484][T26861] batman_adv: batadv0: Interface activated: gretap1 [ 687.766031][T26870] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6892'. [ 688.006901][T26797] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.015045][T26797] bridge0: port 1(bridge_slave_0) entered disabled state [ 688.024275][T26797] bridge_slave_0: entered allmulticast mode [ 688.033977][T26797] bridge_slave_0: entered promiscuous mode [ 688.051380][T26797] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.055261][T26797] bridge0: port 2(bridge_slave_1) entered disabled state [ 688.055428][T26797] bridge_slave_1: entered allmulticast mode [ 688.061297][T26797] bridge_slave_1: entered promiscuous mode [ 688.065697][T26883] veth1_to_bond: entered allmulticast mode [ 688.128373][T26797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 688.141618][T26797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 688.152856][ T5629] Bluetooth: hci8: command tx timeout [ 688.220235][T26881] veth1_to_bond: left allmulticast mode [ 688.230933][T26797] team0: Port device team_slave_0 added [ 688.245569][T26797] team0: Port device team_slave_1 added [ 688.312728][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 688.315370][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 688.407609][T26797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.407655][T26797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.407683][T26797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.424737][T26797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.424763][T26797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.424790][T26797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.457667][T26900] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6901'. [ 688.457689][T26900] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6901'. [ 688.460229][T26899] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6900'. [ 688.463150][T26901] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6900'. [ 688.596648][T26899] bond1: option xmit_hash_policy: invalid value (64) [ 688.607045][T26899] bond1 (unregistering): Released all slaves [ 688.657164][T26901] bond1: option xmit_hash_policy: invalid value (64) [ 688.667060][T26901] bond1 (unregistering): Released all slaves [ 688.740399][T26797] hsr_slave_0: entered promiscuous mode [ 688.747861][T26797] hsr_slave_1: entered promiscuous mode [ 688.755072][T26797] debugfs: 'hsr0' already exists in 'hsr' [ 688.760920][T26797] Cannot create hsr debugfs directory [ 689.074218][T26914] can: request_module (can-proto-3) failed. [ 689.164240][T26921] netlink: 'syz.6.6907': attribute type 1 has an invalid length. [ 689.319393][T26919] 8021q: adding VLAN 0 to HW filter on device bond3 [ 689.355294][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 689.357931][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 689.373275][T26919] bond0: (slave bond3): making interface the new active one [ 689.382312][T26919] bond0: (slave bond3): Enslaving as an active interface with an up link [ 689.405955][T26932] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 689.440949][T26921] bond0: (slave gretap1): Enslaving as a backup interface with an up link [ 689.476184][T26929] IPVS: length: 24 != 888 [ 689.481541][T26919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.716462][T26797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.728230][T26797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 689.739140][T26797] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.910353][T26797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 689.922739][T26797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 689.922779][T26797] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.123671][T26797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.123749][T26797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 690.123777][T26797] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.232923][ T5629] Bluetooth: hci8: command tx timeout [ 690.393567][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 690.449737][T26969] netlink: 'syz.1.6921': attribute type 28 has an invalid length. [ 691.211580][T26797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 691.236000][T26797] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.240936][T26797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 691.259397][T26797] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.266209][T26797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 691.295144][T26797] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.300524][T26797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 691.339478][T26797] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.435346][ C0] net_ratelimit: 2 callbacks suppressed [ 691.435415][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 691.437985][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 691.477420][T26998] 8021q: adding VLAN 0 to HW filter on device bond4 [ 691.661292][T27019] bond1: entered promiscuous mode [ 691.667125][T27019] bond1: entered allmulticast mode [ 691.672837][T27019] 8021q: adding VLAN 0 to HW filter on device bond1 [ 691.686037][T27024] 8021q: VLANs not supported on ip_vti0 [ 691.723284][T20097] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.723366][T20097] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.723399][T20097] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.747272][ T43] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 691.897568][T27032] netlink: zone id is out of range [ 692.103121][T26797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 692.191625][T26797] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.216432][T20096] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.216579][T20096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.234184][T20096] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.234313][T20096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.314051][T21723] Bluetooth: hci8: command tx timeout [ 692.441831][T27055] __nla_validate_parse: 14 callbacks suppressed [ 692.449200][T27055] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6944'. [ 692.472749][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 692.475273][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 692.509095][T27056] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6944'. [ 692.621087][T27055] netlink: 'syz.5.6944': attribute type 1 has an invalid length. [ 692.710300][T27070] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6944'. [ 692.730493][T27071] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6944'. [ 692.756887][T27073] netlink: zone id is out of range [ 693.015709][T27079] sctp: [Deprecated]: syz.6.6951 (pid 27079) Use of int in max_burst socket option. [ 693.015709][T27079] Use struct sctp_assoc_value instead [ 693.040508][T27081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6953'. [ 693.040572][T27081] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6953'. [ 693.113044][T21723] Bluetooth: hci5: command 0x0406 tx timeout [ 693.469827][T27098] netlink: 'syz.6.6960': attribute type 2 has an invalid length. [ 693.515646][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 693.518289][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 693.570863][T27097] Bluetooth: hci0: unsupported parameter 5135 [ 693.570912][T27097] Bluetooth: hci0: unsupported parameter 8192 [ 693.571330][T27097] Bluetooth: hci0: unsupported parameter 5135 [ 693.571366][T27097] Bluetooth: hci0: unsupported parameter 8192 [ 693.729968][T27109] netlink: zone id is out of range [ 694.008002][T26797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.161186][T27139] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6966'. [ 694.171231][T27139] netlink: 14 bytes leftover after parsing attributes in process `syz.6.6966'. [ 694.393145][ T5629] Bluetooth: hci8: command tx timeout [ 694.421019][T26797] veth0_vlan: entered promiscuous mode [ 694.458144][T26797] veth1_vlan: entered promiscuous mode [ 694.548596][T26797] veth0_macvtap: entered promiscuous mode [ 694.554891][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 694.591321][T26797] veth1_macvtap: entered promiscuous mode [ 694.638720][T26797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.666423][T26797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.708765][T20101] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.708983][T20101] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.709130][T20101] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.726963][T20101] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 694.881696][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.890191][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 694.948110][T20096] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 694.949471][T20096] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 695.135817][T27168] veth0_to_bond: left allmulticast mode [ 695.224261][T27173] netlink: 'syz.7.6976': attribute type 1 has an invalid length. [ 695.321071][T27178] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 695.749545][T21723] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 695.763543][T21723] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 695.771577][T21723] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 695.795027][T21723] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 695.799125][T27190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6985'. [ 695.799146][T27190] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6985'. [ 695.823418][T21723] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 696.122032][ T5616] syz_tun (unregistering): left allmulticast mode [ 696.632758][ C0] net_ratelimit: 3 callbacks suppressed [ 696.632815][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 696.635411][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 696.970288][T27220] vlan1: entered allmulticast mode [ 696.976899][T27220] veth0_vlan: entered allmulticast mode [ 697.204295][T27228] openvswitch: netlink: IPv6 tunnel dst address is zero [ 697.206945][T27227] netlink: 'syz.7.6996': attribute type 3 has an invalid length. [ 697.518858][T27233] __nla_validate_parse: 3 callbacks suppressed [ 697.529113][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6998'. [ 697.538765][T27233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6998'. [ 697.614665][T27233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6998'. [ 697.614729][T27233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6998'. [ 697.650768][T27239] netlink: 'syz.7.6999': attribute type 1 has an invalid length. [ 697.675706][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 697.678373][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 697.707291][T20096] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.708546][T20096] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.708587][T20096] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.708630][T20096] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.913516][ T5629] Bluetooth: hci2: command tx timeout [ 698.225071][T27251] syzkaller0: entered promiscuous mode [ 698.225132][T27251] syzkaller0: entered allmulticast mode [ 698.262066][ T43] bridge_slave_1: left promiscuous mode [ 698.276578][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.296947][ T43] bridge_slave_0: left allmulticast mode [ 698.303163][ T43] bridge_slave_0: left promiscuous mode [ 698.303557][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.713390][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 698.716043][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.339880][ T43] bond9 (unregistering): (slave ipip2): Releasing backup interface [ 699.339990][ T43] ipip2 (unregistering): left promiscuous mode [ 699.368350][T27287] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.755354][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 699.757909][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 699.801833][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 699.817376][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 699.827869][ T43] bond0 (unregistering): Released all slaves [ 699.840641][ T43] bond1 (unregistering): Released all slaves [ 699.884165][ T43] bond2 (unregistering): Released all slaves [ 699.918182][ T43] bond3 (unregistering): Released all slaves [ 699.961979][ T43] bond4 (unregistering): Released all slaves [ 699.992066][ T43] bond5 (unregistering): Released all slaves [ 699.999886][ T5629] Bluetooth: hci2: command tx timeout [ 700.019451][ T43] bond6 (unregistering): Released all slaves [ 700.045848][ T43] bond7 (unregistering): Released all slaves [ 700.066820][ T43] bond8 (unregistering): (slave veth7): Releasing active interface [ 700.077277][ T43] bond8 (unregistering): Released all slaves [ 700.094090][ T43] bond9 (unregistering): Released all slaves [ 700.106364][ T43] bond10 (unregistering): Released all slaves [ 700.129170][ T43] bond11 (unregistering): Released all slaves [ 700.146750][ T43] bond12 (unregistering): Released all slaves [ 700.223167][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 700.620314][ T43] tipc: Disabling bearer [ 700.620563][ T43] tipc: Disabling bearer [ 700.620711][ T43] tipc: Left network mode [ 700.803066][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 701.845611][ C0] net_ratelimit: 1 callbacks suppressed [ 701.845685][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 701.848519][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 701.905942][T27373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7034'. [ 701.990672][T27187] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.990845][T27187] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.991003][T27187] bridge_slave_0: entered allmulticast mode [ 702.006194][T27187] bridge_slave_0: entered promiscuous mode [ 702.086971][ T5629] Bluetooth: hci2: command tx timeout [ 702.122551][T27187] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.125685][T27187] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.125868][T27187] bridge_slave_1: entered allmulticast mode [ 702.138649][T27187] bridge_slave_1: entered promiscuous mode [ 702.197683][T27381] netlink: 'syz.5.7035': attribute type 39 has an invalid length. [ 702.383099][T27390] netlink: 'syz.7.7037': attribute type 4 has an invalid length. [ 702.411887][T27187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.425669][T27187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.617913][T27187] team0: Port device team_slave_0 added [ 702.627349][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 702.753484][T27399] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7039'. [ 702.806802][T27187] team0: Port device team_slave_1 added [ 702.872869][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 702.875115][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 703.019838][T27187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 703.027857][T27187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 703.055098][T27187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 703.167871][T27409] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.168556][T27409] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.182476][T27409] bridge0: entered allmulticast mode [ 703.214684][T27398] lo: entered promiscuous mode [ 703.584826][T27398] tunl0: entered promiscuous mode [ 703.590334][T27398] gre0: entered promiscuous mode [ 703.660818][T27398] gretap0: entered promiscuous mode [ 703.679857][T27398] erspan0: entered promiscuous mode [ 703.699064][T27398] ip_vti0: entered promiscuous mode [ 703.706867][T27398] ip6_vti0: entered promiscuous mode [ 703.717308][T27398] sit0: entered promiscuous mode [ 703.743289][T27398] ip6tnl0: entered promiscuous mode [ 703.760546][T27398] ip6gre0: entered promiscuous mode [ 703.769244][T27398] syz_tun: entered promiscuous mode [ 703.798652][T27398] ip6gretap0: entered promiscuous mode [ 703.815436][T27398] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.816087][T27398] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.819607][T27398] bridge0: entered promiscuous mode [ 703.841481][T27398] vcan0: entered promiscuous mode [ 703.860461][T27398] bond0: entered promiscuous mode [ 703.860517][T27398] bond_slave_0: entered promiscuous mode [ 703.860774][T27398] bond_slave_1: entered promiscuous mode [ 703.889091][T27398] team0: entered promiscuous mode [ 703.889149][T27398] team_slave_0: entered promiscuous mode [ 703.889392][T27398] team_slave_1: entered promiscuous mode [ 703.915697][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 703.917828][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 703.924265][T27398] dummy0: entered promiscuous mode [ 703.944664][T27398] nlmon0: entered promiscuous mode [ 703.946809][T27398] batadv0: entered promiscuous mode [ 703.960085][T27398] vxcan0: entered promiscuous mode [ 703.965161][T27398] vxcan1: entered promiscuous mode [ 703.970455][T27398] veth0: entered promiscuous mode [ 703.988260][T27398] veth1: entered promiscuous mode [ 704.020742][T27398] wg0: entered promiscuous mode [ 704.044661][T27398] wg1: entered promiscuous mode [ 704.056679][T27398] wg2: entered promiscuous mode [ 704.065003][T27398] veth0_to_bridge: entered promiscuous mode [ 704.100953][T27398] veth1_to_bridge: entered promiscuous mode [ 704.134209][T27398] veth0_to_bond: entered promiscuous mode [ 704.140554][T27398] veth1_to_bond: entered promiscuous mode [ 704.153838][ T5629] Bluetooth: hci2: command tx timeout [ 704.160366][T27398] veth0_to_team: entered promiscuous mode [ 704.179753][T27398] veth1_to_team: entered promiscuous mode [ 704.191651][T27398] veth0_to_batadv: entered promiscuous mode [ 704.198976][T27398] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.199080][T27398] batadv_slave_0: entered promiscuous mode [ 704.210135][T27398] veth1_to_batadv: entered promiscuous mode [ 704.220883][T27398] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.220946][T27398] batadv_slave_1: entered promiscuous mode [ 704.230346][T27398] xfrm0: entered promiscuous mode [ 704.241114][T27398] veth0_to_hsr: entered promiscuous mode [ 704.256152][T27398] veth1_to_hsr: entered promiscuous mode [ 704.271361][T27398] hsr0: entered promiscuous mode [ 704.280352][T27398] veth1_virt_wifi: entered promiscuous mode [ 704.290625][T27398] veth0_virt_wifi: entered promiscuous mode [ 704.302042][T27398] virt_wifi0: entered promiscuous mode [ 704.318921][T27398] vlan0: entered promiscuous mode [ 704.328842][T27398] vlan1: entered promiscuous mode [ 704.341433][T27398] macvlan0: entered promiscuous mode [ 704.356402][T27398] macvlan1: entered promiscuous mode [ 704.369778][T27398] ipvlan0: entered promiscuous mode [ 704.377065][T27398] ipvlan1: entered promiscuous mode [ 704.399458][T27398] macvtap0: entered promiscuous mode [ 704.415279][T27398] macsec0: entered promiscuous mode [ 704.428344][T27398] geneve0: entered promiscuous mode [ 704.441509][T27398] geneve1: entered promiscuous mode [ 704.472062][T27398] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 704.506945][T27398] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 704.515925][T27398] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 704.525629][T27398] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 704.548724][T27398] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 704.573745][T27398] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 704.584875][T27398] vxlan0: entered promiscuous mode [ 704.593454][T27412] bridge_slave_1: left allmulticast mode [ 704.593508][T27412] bridge_slave_1: left promiscuous mode [ 704.593699][T27412] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.607753][T27412] bridge_slave_0: left allmulticast mode [ 704.607781][T27412] bridge_slave_0: left promiscuous mode [ 704.608559][T27412] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.699192][T27187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.708388][T27187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.735319][T27187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.763746][ T1115] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.764014][ T1115] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.765612][ T1115] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.765649][ T1115] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.765691][ T1115] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.765720][ T1115] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.765760][ T1115] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 704.765790][ T1115] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.771486][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 704.953020][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 704.955177][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 705.042131][ T43] hsr_slave_0: left promiscuous mode [ 705.053393][ T43] hsr_slave_1: left promiscuous mode [ 705.142299][T27471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 705.727428][ T43] ±ÿª¨úrBº“€ (unregistering): Port device team_slave_1 removed [ 705.761582][ T43] ±ÿª¨úrBº“€ (unregistering): Port device team_slave_0 removed [ 705.929360][T27490] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7071'. [ 705.995607][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 706.247197][T27468] bond0: (slave bond_slave_0): Releasing backup interface [ 706.274948][T27468] bond0: (slave bond_slave_1): Releasing backup interface [ 706.299721][T27468] team0: Port device team_slave_0 removed [ 706.311789][T27468] team0: Port device team_slave_1 removed [ 706.314451][T27468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.314476][T27468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.320749][T27468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.320776][T27468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 706.332136][T27471] team0: Mode changed to "activebackup" [ 706.390929][T27187] hsr_slave_0: entered promiscuous mode [ 706.404734][T27187] hsr_slave_1: entered promiscuous mode [ 706.751077][T27511] geneve2: entered promiscuous mode [ 707.033203][ C0] net_ratelimit: 2 callbacks suppressed [ 707.033254][ C0] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 707.035930][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 707.052926][T27520] netlink: 'syz.3.7081': attribute type 15 has an invalid length. [ 707.327608][ T43] IPVS: stop unused estimator thread 0... [ 707.684822][ T32] INFO: task syz.2.5191:21445 blocked for more than 143 seconds. [ 707.684871][ T32] Not tainted syzkaller #0 [ 707.684907][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 707.684922][ T32] task:syz.2.5191 state:D stack:26784 pid:21445 tgid:21444 ppid:5627 task_flags:0x400140 flags:0x00080002 [ 707.684993][ T32] Call Trace: [ 707.685006][ T32] [ 707.685024][ T32] __schedule+0x17db/0x58f0 [ 707.685091][ T32] ? __pfx___schedule+0x10/0x10 [ 707.685131][ T32] ? schedule+0x90/0x2b0 [ 707.685164][ T32] schedule+0x164/0x2b0 [ 707.685199][ T32] schedule_preempt_disabled+0x13/0x30 [ 707.685231][ T32] __mutex_lock+0x7c1/0x1550 [ 707.685270][ T32] ? __mutex_lock+0x5d4/0x1550 [ 707.685308][ T32] ? nfsd_nl_cache_flush_do ** replaying previous printk message ** [ 707.685308][ T32] ? nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 707.685424][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 707.685458][ T32] ? net_generic+0x1e/0x240 [ 707.685492][ T32] ? net_generic+0x1e/0x240 [ 707.685519][ T32] ? net_generic+0x1e/0x240 [ 707.685542][ T32] ? net_generic+0x1e/0x240 [ 707.685599][ T32] nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 707.685631][ T32] genl_family_rcv_msg_doit+0x233/0x340 [ 707.685676][ T32] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 707.685726][ T32] ? bpf_lsm_capable+0x9/0x20 [ 707.685759][ T32] ? security_capable+0x7e/0x2c0 [ 707.685793][ T32] genl_rcv_msg+0x614/0x7a0 [ 707.685834][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 707.685868][ T32] ? __pfx_nfsd_nl_cache_flush_doit+0x10/0x10 [ 707.685899][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 707.685939][ T32] netlink_rcv_skb+0x226/0x4a0 [ 707.685970][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 707.686005][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 707.686053][ T32] ? down_read+0x2be/0x330 [ 707.686185][ T32] genl_rcv+0x28/0x40 [ 707.686221][ T32] netlink_unicast+0x7bd/0x940 [ 707.686264][ T32] netlink_sendmsg+0x813/0xb40 [ 707.736574][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.736622][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 707.736655][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 707.736677][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 707.736708][ T32] ____sys_sendmsg+0x54e/0x850 [ 707.736735][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 707.736766][ T32] ? import_iovec+0x73/0xa0 [ 707.736790][ T32] ___sys_sendmsg+0x2a5/0x360 [ 707.736810][ T32] ? __lock_acquire+0x6df/0x2e50 [ 707.736835][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.736859][ T32] ? futex_wait+0x2a2/0x390 [ 707.736940][ T32] ? __fget_files+0x2a/0x420 [ 707.736964][ T32] ? __fget_files+0x3a2/0x420 [ 707.737009][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 707.737033][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.737084][ T32] do_syscall_64+0x166/0x520 [ 707.737111][ T32] ? trace_irq_disable+0x3b/0x140 [ 707.737129][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.737149][ T32] ? clear_bhb_loop+0x70/0xc0 [ 707.737174][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.737193][ T32] RIP: 0033:0x7f7d67f9e159 [ 707.737213][ T32] RSP: 002b:00007f7d68e33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.737235][ T32] RAX: ffffffffffffffda RBX: 00007f7d68225fa0 RCX: 00007f7d67f9e159 [ 707.737250][ T32] RDX: 0000000004000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 707.737301][ T32] RBP: 00007f7d6803503b R08: 0000000000000000 R09: 0000000000000000 [ 707.737315][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.737328][ T32] R13: 00007f7d68226038 R14: 00007f7d68225fa0 R15: 00007ffe237815b8 [ 707.737361][ T32] [ 707.737415][ T32] [ 707.737415][ T32] Showing all locks held in the system: [ 707.737425][ T32] locks held by pr/ttyS0/16: 2, last CPU#0: [ 707.737500][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 707.737576][ T32] #1: ffffffff9ad32098 (&port_lock_key){-.-.}-{3:3}, at: univ8250_console_device_lock+0x67/0xc0 [ 707.737676][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 707.737691][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 707.737753][ T32] locks held by kworker/u8:2/43: 4, on CPU#1: [ 707.737767][ T32] #0: ffff88801c2d6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 707.737822][ T32] #1: ffffc90000b37c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 707.737874][ T32] #2: ffffffff902424e8 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 707.737937][ T32] #3: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: ip_mc_drop_socket+0x80/0x280 [ 707.738051][ T32] locks held by udevd/4984: 1, on CPU#1: [ 707.739883][ T32] #0: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_dop_revalidate+0x9e/0x650 [ 707.739967][ T32] locks held by getty/5374: 2, on CPU#1: [ 707.739982][ T32] #0: ffff88802f32b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 707.740100][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 707.740159][ T32] locks held by syz.4.5048/20971: 2, on CPU#1: [ 707.740174][ T32] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 707.740226][ T32] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 707.740275][ T32] locks held by syz.2.5191/21445: 2, on CPU#1: [ 707.740289][ T32] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 707.740340][ T32] #1: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_cache_flush_doit+0xb5/0x1b0 [ 707.740393][ T32] locks held by syz.0.6410/25272: 3, on CPU#1: [ 707.740407][ T32] #0: ffffffff902c1be8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 707.740458][ T32] #1: ffff8880573f06e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 707.740508][ T32] #2: ffffffff8f09e400 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_svc_export_get_reqs_dumpit+0xf7/0xc40 [ 707.740588][ T32] locks held by syz-executor/25788: 4, last CPU#1: [ 707.740602][ T32] #0: ffffffff8ee35c10 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10f/0x480 [ 707.740652][ T32] #1: ffff88807ba536b8 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 707.740704][ T32] #2: ffff88802b9203b8 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 707.740760][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 707.740812][ T32] locks held by syz-executor/27187: 9, last CPU#1: [ 707.740825][ T32] #0: ffff88802ca76460 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 707.741345][ T32] #1: ffff888052b68080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 707.741398][ T32] #2: ffff8880298740f8 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 707.741456][ T32] #3: ffffffff8fac89e0 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 707.741570][ T32] #4: ffff888059387128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 707.741669][ T32] #5: ffff888059386258 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 707.741718][ T32] #6: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 707.741791][ T32] #7: ffff88801c2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140 [ 707.741842][ T32] #8: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140 [ 707.741894][ T32] locks held by syz.6.7084/27527: 1, on CPU#1: [ 707.741908][ T32] #0: ffff88807d24c378 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 707.741965][ T32] locks held by syz.6.7084/27529: 2, on CPU#0: [ 707.741978][ T32] #0: ffffffff902424e8 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 707.750105][ T32] #1: ffffffff90250d40 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 707.750218][ T32] locks held by syz.6.7084/27536: 1, last CPU#1: [ 707.750234][ T32] #0: ffff88807d24c378 (&mm->mmap_lock){++++}-{4:4}, at: __mm_populate+0x182/0x390 [ 707.750283][ T32] locks held by syz.5.7087/27532: 2, last CPU#0: [ 707.750297][ T32] #0: ffffffff9aee1520 (nfnl_subsys_ipset){+.+.}-{4:4}, at: nfnetlink_rcv_msg+0xa69/0x12b0 [ 707.750343][ T32] #1: ffff8880552096e8 (nlk_cb_mutex-NETFILTER){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 707.750408][ T32] locks held by sed/27541: 4, last CPU#1: [ 707.750421][ T32] #0: ffff88807b1f8448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 707.750473][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 707.750526][ T32] #2: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170 [ 707.750585][ T32] #3: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 707.750635][ T32] [ 707.750641][ T32] ============================================= [ 707.750641][ T32] [ 707.750650][ T32] NMI backtrace for cpu 1 [ 707.750663][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 707.750684][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.750695][ T32] Call Trace: [ 707.750703][ T32] [ 707.750711][ T32] dump_stack_lvl+0xe8/0x150 [ 707.750739][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 707.750763][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 707.750799][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 707.750825][ T32] sys_info+0x135/0x170 [ 707.750844][ T32] watchdog+0xfd7/0x1030 [ 707.750877][ T32] ? watchdog+0x1c7/0x1030 [ 707.750901][ T32] kthread+0x38b/0x480 [ 707.750921][ T32] ? __pfx_watchdog+0x10/0x10 [ 707.750937][ T32] ? __pfx_kthread+0x10/0x10 [ 707.750960][ T32] ret_from_fork+0x514/0xb70 [ 707.750982][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 707.751009][ T32] ? __switch_to+0xc89/0x1420 [ 707.751043][ T32] ? __pfx_kthread+0x10/0x10 [ 707.751063][ T32] ret_from_fork_asm+0x1a/0x30 [ 707.751105][ T32] [ 707.751151][ T32] Sending NMI from CPU 1 to CPUs 0: [ 707.751179][ C0] NMI backtrace for cpu 0 [ 707.751194][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 707.751216][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.751227][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 707.751281][ C0] Code: e8 4e b3 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f 7c c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 9a 10 75 06 cc 44 89 f9 80 e1 07 [ 707.751297][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 707.751315][ C0] RAX: 1ffffffff35a6400 RBX: 00000000000003fd RCX: 0000000000000000 [ 707.751329][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 707.751342][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 707.751355][ C0] R10: dffffc0000000000 R11: ffffffff85720780 R12: dffffc0000000000 [ 707.751369][ C0] R13: 0000000000000000 R14: ffffffff9ad320c0 R15: 0000000000000000 [ 707.751383][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 707.751400][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 707.751414][ C0] CR2: 00007f6549b0bfe8 CR3: 000000007799c000 CR4: 00000000003526f0 [ 707.751433][ C0] Call Trace: [ 707.751468][ C0] [ 707.751478][ C0] wait_for_lsr+0x184/0x2f0 [ 707.751525][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 707.751561][ C0] serial8250_console_write+0xaa1/0x1200 [ 707.751588][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 707.751618][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 707.751643][ C0] ? __schedule+0x17f1/0x58f0 [ 707.751674][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 707.751702][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 707.751725][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 707.751752][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 707.751777][ C0] nbcon_kthread_func+0x679/0x880 [ 707.751800][ C0] ? nbcon_kthread_func+0x163/0x880 [ 707.751818][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 707.751840][ C0] ? __kthread_parkme+0x71/0x1f0 [ 707.751866][ C0] ? __kthread_parkme+0x199/0x1f0 [ 707.751893][ C0] kthread+0x38b/0x480 [ 707.751911][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 707.751929][ C0] ? __pfx_kthread+0x10/0x10 [ 707.751947][ C0] ret_from_fork+0x514/0xb70 [ 707.751966][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 707.751993][ C0] ? __switch_to+0xc89/0x1420 [ 707.752018][ C0] ? __pfx_kthread+0x10/0x10 [ 707.752037][ C0] ret_from_fork_asm+0x1a/0x30 [ 707.752070][ C0] [ 707.768079][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 708.918049][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 708.927286][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 708.937450][ T32] Call Trace: [ 708.940737][ T32] [ 708.943674][ T32] vpanic+0x56d/0xa60 [ 708.947670][ T32] ? __pfx___schedule+0x10/0x10 [ 708.952529][ T32] ? __pfx_vpanic+0x10/0x10 [ 708.957063][ T32] panic+0xc5/0xd0 [ 708.960880][ T32] ? __pfx_panic+0x10/0x10 [ 708.965414][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 708.970889][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 708.976381][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 708.982569][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 708.988918][ T32] watchdog+0x1030/0x1030 [ 708.993262][ T32] ? watchdog+0x1c7/0x1030 [ 708.997689][ T32] kthread+0x38b/0x480 [ 709.001761][ T32] ? __pfx_watchdog+0x10/0x10 [ 709.006439][ T32] ? __pfx_kthread+0x10/0x10 [ 709.011032][ T32] ret_from_fork+0x514/0xb70 [ 709.015629][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 709.020749][ T32] ? __switch_to+0xc89/0x1420 [ 709.025437][ T32] ? __pfx_kthread+0x10/0x10 [ 709.030378][ T32] ret_from_fork_asm+0x1a/0x30 [ 709.035169][ T32] [ 709.038485][ T32] Kernel Offset: disabled [ 709.042807][ T32] Rebooting in 86400 seconds..