last executing test programs: 3.455444921s ago: executing program 2 (id=1424): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4020000) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) r2 = socket$kcm(0x10, 0x2, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) sendmsg$kcm(r2, 0x0, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x14, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000006000000000000000d0000008520000005000000180100002020782500000000002020207b1af8ff00000000bfa100000007010000f8ffffffb702000008000000b70300000200000085000000060000001811000000000016c5b948b06140a058a22277521a26cefedf4f374b17a87c50d1a2f59ccb38e080e664385a1d1f65a4f6cd76db8ed2f0d25ebebb16f6504c0e44fd23fc5afdc9844f9500a9fa9d7c75d7192d6fec43f2ec7c165d8309e44ba331daef48a5a6aa0001dbe5be2e1b3c8ef9c7691bb2d87543cbb0d5b90262a7937e68b1b30ff0683c9cf7037155aba5ddcc000000000000000000", @ANYRESOCT=r1, @ANYRESHEX=r2], 0x0, 0x7fff, 0x4e, &(0x7f0000000380)=""/78, 0x41000, 0x13, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4, 0xd, 0xfffff469, 0xfffffffd}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000005c0), 0x10, 0x3fc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000240)='bcache_invalidate\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) poll(&(0x7f0000000040)=[{r4, 0x2124}, {r4, 0xb0c4}], 0x2, 0x11ff) shutdown(r4, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="74010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088048010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a0000000000080009000000000008000a000000000008000a000000000008000a000000"], 0x174}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x12, r0, 0xbdd94000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000000)={'veth0_macvtap\x00', 0x6}) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f00000017c0)=""/4096, &(0x7f0000000100)=0x1000) r7 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, 0x0, &(0x7f0000000400)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x80, 0x5}, &(0x7f0000000140)=0x8) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r9, &(0x7f0000000780), 0x12) bind$x25(r8, &(0x7f0000000080), 0x12) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 3.319857137s ago: executing program 1 (id=1427): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @local}]}, 0x30}}, 0x0) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f00000015c0)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0xe, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0xffffff33}, 0x3, 0x0, 0x2, 0x401, 0x16, 'syz0\x00', "afb5f82e68578bffa16f123b4afbdb533ccdf7ee6904b342c7c4010379139ca0", "8853adffb2bfddf9dbee9dcc287dd1490064c46c7ca92cc40e13fc106ef6fb9e", [{0xa9, 0x1, {0x0, 0x27}}, {0x2, 0xd, {0x3, 0x1}}, {0x7, 0x9, {0x2, 0x2}}, {0x8, 0x5, {0x2, 0x4}}, {0x400, 0x9, {0x2, 0xd2f}}, {0x8001, 0x0, {0x1, 0x100}}, {0x7, 0x8, {0x2, 0x6}}, {0x7, 0xffff, {0x0, 0x6621}}, {0x5, 0x3, {0x0, 0x5d7}}, {0x8, 0x7, {0x0, 0xfff}}, {0x3, 0x1, {0x2, 0x79b5}}, {0x4, 0x5, {0x1, 0x8dd}}, {0x0, 0x6, {0x0, 0x7f}}, {0x4b8, 0xffff, {0x1, 0x401}}, {0x6, 0x3, {0x3, 0x4}}, {0xa55, 0x5, {0x0, 0x9}}, {0x100, 0x8, {0x3, 0xffffffff}}, {0xd, 0x2, {0x0, 0x80000000}}, {0x2, 0xdd, {0x1, 0x3}}, {0x2, 0x80, {0x2, 0x9}}, {0x8001, 0x100, {0x3, 0x66b}}, {0xfff, 0x9, {0x0, 0x1}}, {0xf85, 0x7, {0x2, 0xfffffc00}}, {0x1a, 0xfff, {0x2, 0xfffffff5}}, {0x8000, 0x2, {0x3, 0x81}}, {0x6, 0xa, {0x0, 0x3}}, {0x86b, 0x225, {0x1, 0x81}}, {0x2, 0x6, {0x2, 0x7}}, {0x1, 0xe, {0x3, 0x6}}, {0x7a7, 0x7, {0x1, 0x9}}, {0x80, 0x4, {0x3}}, {0x7, 0xa, {0x0, 0x1}}, {0x2, 0x1, {0x3, 0x3}}, {0xa, 0x8000, {0x2, 0x7}}, {0x1, 0x5e, {0x3, 0x1000}}, {0x100, 0xd9f, {0x0, 0x82}}, {0x26, 0x8, {0x3, 0x8}}, {0x2, 0x581, {0x2, 0x6}}, {0x4, 0x1, {0x1, 0x3}}, {0x1, 0x8001, {0x2, 0xe98f}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000800) 2.920905988s ago: executing program 2 (id=1432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r1}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000035c0)=@newtaction={0xeb0, 0x30, 0xb, 0x0, 0x0, {}, [{0xe9c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xe50, 0x2, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0xa, 0x1000, 0x8, 0x5, 0x3}, 0xa3}, [{0x6, 0x5, 0x9, 0x5, 0x5, 0x8}, {0x0, 0x4, 0x7, 0x7, 0x3, 0x3}, {0x0, 0x6, 0x324, 0x5, 0x10, 0x5}, {0x80, 0x8, 0xc, 0x7, 0x400, 0x1000}, {0x4, 0x0, 0x4, 0x6, 0xffffffd3, 0x6}, {0xf, 0x2, 0x8001, 0xfffffffa, 0x800, 0xe5d}, {0xf, 0x6d7, 0x7, 0x1000, 0x2, 0xff}, {0x4, 0x0, 0x6, 0x4, 0x7, 0x1}, {0xe8b, 0x8, 0x7, 0x3, 0x8, 0x8}, {0x45ca, 0x8, 0x0, 0x5, 0x0, 0x5}, {0xd0c, 0x4, 0x7, 0x800, 0x4, 0x5}, {0x4, 0x0, 0x7f, 0x8, 0xb4, 0x3}, {0x5, 0x100, 0x2, 0x1ff, 0x10000, 0xffffffff}, {0x6, 0x3, 0x9, 0x6, 0x6, 0xfffffff8}, {0x7f, 0x3, 0x2, 0x5, 0x563, 0x8}, {0x0, 0x9, 0x87, 0x5, 0x8, 0x800}, {0x5, 0x585e, 0x6, 0x3, 0x400, 0x7}, {0x7, 0x6fc, 0x7fff, 0x6, 0x6, 0x4}, {0x3, 0xef0a, 0x9, 0x4, 0x7c1103b4, 0x5}, {0x7f, 0x4, 0x5, 0x1, 0x6, 0xffff}, {0x80, 0x56, 0x4, 0x9, 0xfffffff4, 0xdff}, {0x7, 0x1, 0x2400, 0x81, 0x0, 0x2}, {0x8, 0x3, 0x4, 0x1, 0xffff8f3e, 0x94e}, {0x0, 0x80, 0x5, 0xc5c3, 0x5, 0xb}, {0xfb, 0x540fb8a0, 0x3, 0x400, 0x8000, 0x8001}, {0xfcf, 0xe0, 0x3, 0x4, 0x1000, 0x4923fb63}, {0x6, 0x5, 0xff, 0x7ff, 0x3, 0x401}, {0x4745c803, 0x9, 0x9, 0x6e, 0x39, 0x9}, {0x0, 0x0, 0x4, 0x3, 0x5, 0x4b9d252f}, {0x40000000, 0x0, 0x7d1, 0xb7, 0x7, 0x8}, {0x9909, 0x3, 0x800, 0x1, 0x7b, 0xffffffc0}, {0x3, 0x200, 0x1, 0x81, 0x10, 0x401}, {0xfffffff4, 0x1, 0x3, 0x10000, 0x5, 0x1}, {0x6, 0xcc6e, 0xee1, 0x3ff, 0xa4f, 0x3}, {0x9, 0x6, 0xc, 0x7, 0x23, 0x200}, {0x5, 0x3, 0x0, 0x6, 0x2, 0x100}, {0x1ff, 0x78d, 0x7, 0x5, 0x942d, 0x8}, {0x6, 0x9, 0xf, 0x401, 0x0, 0xe6}, {0xffffffe8, 0x81, 0x8000, 0x40, 0x0, 0xf192d4b}, {0x5, 0x100, 0x6, 0x4, 0x7, 0x400}, {0x8000, 0x5, 0x4, 0x4, 0x3, 0x8cfa}, {0x0, 0x9, 0x9, 0x2, 0x4, 0x1}, {0x4, 0x7, 0x5, 0x3ff, 0x8, 0x80000000}, {0xb, 0x6, 0x3dcd, 0x5, 0x0, 0x7}, {0x4, 0x7f, 0x8, 0x7, 0xa, 0xdc5}, {0x3, 0x5, 0x6543, 0x8, 0x5, 0x4}, {0x9, 0x1ab, 0xf, 0x7, 0x8001, 0x8}, {0xe, 0x6, 0xfffffc00, 0x9876, 0x81, 0x9}, {0x3, 0x10001, 0xa, 0x400, 0x4c9e, 0xffffff01}, {0x0, 0xce000000, 0xe, 0xfffffff9, 0x401, 0x6}, {0x6, 0xf, 0x2, 0x0, 0x5, 0x2}, {0x80000001, 0x2, 0xf9, 0x9, 0x2, 0x4}, {0x1, 0x400, 0x5, 0x200, 0xed, 0x3}, {0x7, 0x7, 0x899, 0x1000, 0xfff, 0xfffffffb}, {0x3, 0x1, 0xe2, 0x6, 0x160, 0xb8}, {0x3, 0x0, 0xbf6, 0x3, 0x0, 0x81}, {0x2000009, 0x1, 0xed, 0x11e, 0x7fffffff, 0x7}, {0x100, 0xc, 0x7, 0xaa, 0x50000, 0x7fff}, {0x3, 0x19a8, 0x6, 0x529, 0x4, 0x9c2}, {0x4, 0xb, 0x9, 0x3, 0x5, 0x8001}, {0x9, 0x5ad, 0x1, 0x4, 0x10000, 0x25}, {0x0, 0x2, 0x3, 0x1, 0x6, 0x80}, {0x101, 0x1, 0x5, 0xb, 0x1a0d, 0xad47}, {0x9, 0x8, 0x3, 0xb, 0x8, 0xce65}, {0xd, 0x10000000, 0x0, 0x7, 0x7, 0xeee}, {0x9, 0xc8, 0x9e1, 0x55, 0x2, 0x2}, {0x15bd, 0x6, 0x68d, 0x10001, 0xb, 0x5}, {0x1, 0x9, 0x59a, 0x1, 0x6, 0x3ff}, {0x8456, 0x7, 0x3, 0x0, 0x7, 0x2}, {0x759, 0x11, 0x3, 0x9, 0x3, 0x628}, {0x3, 0x4, 0x4, 0x1, 0x9, 0x2}, {0xc71, 0x2, 0x6, 0x7fff, 0x9, 0x5c0}, {0x1, 0x1, 0x5, 0x7, 0xde9, 0x8}, {0x8, 0xfffffffe, 0x1, 0x3, 0x7, 0x36}, {0x0, 0x8, 0x4c6, 0x0, 0x7863, 0x1}, {0x0, 0x8, 0x7152, 0x5, 0x1, 0x6}, {0x0, 0xe08, 0x7, 0x9, 0x7, 0x8}, {0x3, 0xcb86, 0x100, 0x976, 0x935, 0x800}, {0x4, 0x40, 0x0, 0x2, 0x2, 0x80000000}, {0x3, 0x3, 0x0, 0x15, 0x3, 0xa}, {0x4, 0x7fc, 0xb2, 0x7, 0x1}, {0x3, 0x6f15, 0x101, 0x401, 0x8, 0x1}, {0x1, 0x1, 0x0, 0x800, 0x1, 0xfffffe01}, {0x8, 0xa, 0x8000, 0x3, 0x0, 0x6}, {0x6, 0x1, 0x1, 0x46a, 0x5, 0x8001}, {0x0, 0x9a9, 0x9, 0x29b, 0xfffffffc, 0x5}, {0x9, 0x3e0, 0x4, 0x80000001, 0x6, 0x80000000}, {0x6, 0xd, 0xfffffffc, 0x325, 0x8, 0x1}, {0x7fff, 0x7, 0x3ff, 0x0, 0x6}, {0x100, 0xfffffc00, 0x2e, 0x5, 0xfffffffa, 0x9}, {0x0, 0x8f, 0x100, 0x3, 0x4, 0x7}, {0x7ff, 0x4, 0x435d, 0x125, 0x10, 0xfffffff9}, {0x36, 0x2, 0xf, 0xfffffffd, 0x3, 0x8}, {0x7, 0x7, 0x1, 0x0, 0x6, 0x10001}, {0xd609, 0xcd6, 0x0, 0x3, 0xfffffba5, 0x401}, {0x8, 0x7fff, 0x37, 0x8d45, 0x952f, 0x8}, {0x8, 0x4, 0x8, 0x8, 0x0, 0x5}, {0xffff, 0x80000000, 0x8, 0x3ff, 0xff, 0x2}, {0x6, 0xb, 0x9, 0x6, 0x1, 0x1}, {0x4, 0x8, 0x7, 0x0, 0x4, 0x297efd19}, {0x663e, 0x8, 0x81, 0x1, 0x7, 0x8001}, {0x5, 0x2, 0x4b42, 0x5, 0x5, 0x401}, {0xa20, 0xfffffffa, 0x5, 0x6, 0x0, 0xae}, {0x7fff, 0x800, 0x6, 0x262e, 0x5, 0x2}, {0x7fffffff, 0x4, 0x3, 0x2, 0x5, 0xb339}, {0x96, 0x758, 0x9, 0x400, 0x3ff, 0x5}, {0x3, 0x7, 0x4, 0x4, 0x7, 0x9}, {0x3, 0x2, 0x9, 0x7, 0x4, 0xb5}, {0x8, 0x0, 0x2, 0x9, 0x2, 0x200}, {0xff, 0xaf9a, 0x0, 0x7, 0x1, 0x6}, {0xe, 0x9, 0xf, 0x1, 0x460, 0x7}, {0x5e82, 0x0, 0x32, 0xffffffff, 0x81, 0x6}, {0x2, 0x2, 0xfff, 0x1728, 0x200, 0x7}, {0x7, 0x3, 0x6, 0x8, 0x1, 0x6}, {0x7f, 0xfff, 0x9, 0xe037, 0x3, 0xfffffff7}, {0xa0000000, 0xd, 0x8000, 0xf05, 0x6, 0x6b}, {0xffffffff, 0x8, 0x5f94, 0xfffff1f5, 0x7fffffff, 0x1000}, {0x0, 0x3e2, 0x9, 0xfffffffb, 0x0, 0x9}, {0x1, 0x5, 0x9, 0x0, 0x800, 0x401}, {0x513f, 0x8, 0x0, 0x80000000, 0x28e, 0x9}, {0x2, 0x8, 0x80, 0x3, 0x9f8, 0x80000001}, {0x80000001, 0xc1, 0x4, 0xeb3, 0x40000005, 0x2568}, {0xc14c, 0x6, 0x2, 0x71, 0x3062, 0x7}, {0x9, 0x2, 0xd920, 0x1, 0x8, 0x1}, {0x7f, 0x9, 0x7, 0x4, 0xdd2b}, {0x0, 0x8000, 0x819, 0x8, 0x81, 0xb8}, {0x5, 0x2, 0x7, 0x0, 0x2, 0x687d7ec1}, {0x8, 0x80, 0xfffffff7, 0x8001, 0x4, 0x6}], [{0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {}, {0x4, 0x1}, {}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {}, {0x7, 0x1}, {}, {0x2}, {0x3}, {0x1}, {}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x6}, {}, {0x1}, {0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x2, 0x7e76235531e31529}, {0x2}, {0x3, 0x1}, {0xa}, {0x4}, {}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x6}, {0x4}, {0x4, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x0, 0x1}, {0x5}, {0x2}, {0x3, 0x1}, {0x6}, {0x5, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xeb0}}, 0x0) 2.070409671s ago: executing program 2 (id=1442): r0 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) recvmmsg(r2, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) (fail_nth: 68) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) shutdown(r2, 0x0) bind$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@bloom_filter={0x1e, 0x10001, 0x33, 0xfffff9c5, 0x1000, 0x1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) unshare(0x26020480) connect$bt_sco(r6, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xa9}}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, 0x0, 0x0) 1.999650619s ago: executing program 1 (id=1443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 1.961101475s ago: executing program 3 (id=1444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000391900"/20, @ANYRES32=0x0, @ANYBLOB="8106010000000000140012800b000100627269646765000004000280"], 0x34}, 0x1, 0x0, 0x0, 0x44084}, 0x20044002) 1.61682893s ago: executing program 1 (id=1448): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wg1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x18, 0x0, 0x0) socket(0x2, 0x3, 0x100000001) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="9200000000000000000000001ec5264831528129509d047545aee7b4fdc24503f090e778854bda8d1768056b123d6b155daa6b0222080f32b4ddf18400a4b86ba2e9e1b1d3261ed7908de5d783e99ce82fd93041671361e22c7fff850d9041c37ac13a392fcde06fc698c78a8deb61e3df68c5c3de49f95b3b", 0x79) accept4(r4, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e20, 0x3, 'none\x00', 0x30, 0x4, 0x68}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e21, 0x3, 'fo\x00', 0x11, 0x3240, 0x3a}, {@loopback, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r9, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 1.526529035s ago: executing program 2 (id=1449): socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) close(0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f00000002c0)={0xa, 0x4e23, 0x509, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x1c, 0x0}}], 0x1, 0x20004808) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010029bd7000ffdbdf25010000000806"], 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x404) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) 1.525832768s ago: executing program 3 (id=1450): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x401, 0x5, 0x43, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xf}, 0x48) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000b40), &(0x7f0000000b80)=0x30) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) sendto$inet(r1, 0x0, 0xc3012aa9b37dbc88, 0x200007fd, &(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xd0, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2003}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xa3, 0xc, "d57b634cf8cfe985fc22875aa78dbfb729152c31f34c0f37a53e3e01be908df41b3cb0eb5703b288d74d748333f408fb1e4e561d474d26b9369715b4e460e73eda181a8f6cdcf9d99a854cdc6475300a4e89aee735f25f908e4bedb94da573b949f1e19aaddaa5d5397993154cc38cd8d4d4ea833bd2aa55d45be6887e8eef0015facf08b097e2938689592fbc596c33b63e2c6db2fc6408c37d190a9db11e"}]}], {0x14}}, 0x144}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000840)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0x23, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x401, 0x5, 0x43, 0x41, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0xf}, 0x48) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000180)=0x8, 0x4) (async) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000000b40), &(0x7f0000000b80)=0x30) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) (async) sendto$inet(r1, 0x0, 0xc3012aa9b37dbc88, 0x200007fd, &(0x7f0000000580)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELCHAIN={0xd0, 0x5, 0xa, 0x2915024094f4014f, 0x0, 0x0, {0x1, 0x0, 0x2003}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xa3, 0xc, "d57b634cf8cfe985fc22875aa78dbfb729152c31f34c0f37a53e3e01be908df41b3cb0eb5703b288d74d748333f408fb1e4e561d474d26b9369715b4e460e73eda181a8f6cdcf9d99a854cdc6475300a4e89aee735f25f908e4bedb94da573b949f1e19aaddaa5d5397993154cc38cd8d4d4ea833bd2aa55d45be6887e8eef0015facf08b097e2938689592fbc596c33b63e2c6db2fc6408c37d190a9db11e"}]}], {0x14}}, 0x144}}, 0x0) (async) 1.518832976s ago: executing program 0 (id=1451): socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x80802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400000000000000000ffe0000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) 1.454710721s ago: executing program 4 (id=1452): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000240)=0x10) syz_80211_join_ibss(&(0x7f00000002c0)='wlan0\x00', 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5, 0x0, 0x5}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5, 0x0, 0x5}, 0x18) r6 = socket(0x1, 0x2, 0x0) connect$rose(r6, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) (async) connect$rose(r6, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @null}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267dc5be7897c84a89a72097bc2cf211a7ea330c86604e"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="100000002c400600000000000000000017181fd8e1c06d877b36d1a030a9e4ee6aa3deb243d6fe1ab7b9e7"], 0x10}, {&(0x7f0000000680)={0x10, 0x101d, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x10}], 0x2}, 0x1000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r11, &(0x7f0000000280)=ANY=[@ANYRES16=r2, @ANYRES8=r1, @ANYRES32=r0, @ANYRES16=r7, @ANYRES32=r3], 0x47) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r12, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) (async) r13 = openat$cgroup_devices(r12, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r10, 0x0, r13, 0x0, 0x8, 0x0) close(0x4) unshare(0x6a040000) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 1.314217099s ago: executing program 1 (id=1453): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r2, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r1, 0x0, 0x57, 0xbf, &(0x7f0000000180)="5f5f4f5e39fb65761fd10eb58753918035f784c2e121d7e957fa6f69a2b426f92d0bd60ccd4e1c896d43c71d9846cf6de167093cbfb9ec412914bc7769fac165c20ffd605e8da4d7c76491fab6a0721f1efb38775b11f4", &(0x7f0000000240)=""/191, 0x40, 0x0, 0xdb, 0x36, &(0x7f00000004c0)="503cbaa7f3966de37c88766b28f7b16c299c45edb26beca42837fb00537cad8e323f8bf0776c7241e1fa5301d1b0f072e1ad2b7dc74661bfbd1c049c996090dd02cbe16e23d776b3ba3e6bbf3d23007e85e14efcfcdd6b70ed85e0ddd38f98c40219269099c9880fdf0f69a4b6f3f67de5ffe3515e198f84c0f8d7f0ded6e01207e2d56940299fe0227883c5bf84dd937762ac50515e3473e1046542ddef6fb32085a2240386aedc1360a51f9f4d98398686608ac1f86354b9c540d22a245427c47e8b467cf7dedb29619b3e5e09ebab0c4d39025f971130c7c0bc", &(0x7f0000000300)="473593177595d2d7976fd37e92ce42d3f82232de1ba57425b4ffb742328705619af4725b0edd829618c03392396074f29c66a7db4c32", 0xa, 0x0, 0x1}, 0x50) syz_emit_ethernet(0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) 1.258352007s ago: executing program 3 (id=1454): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000280)="25fd47d9dfc1ca0204df363e5efd1a1cfb6e718b485ff2262bd70a84953cde901a48bc", 0x23}, {&(0x7f0000000b80)="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", 0x1000}, {&(0x7f00000002c0)="64cbea25de6b5c4b140fb25e4429f4d2486c8d0b7083916dced449abb09dd002c006cd6ccddc88c8e482cb54d434c4a5d4bd9aefac7732a6d15915165547d8f9e80b5051484f880510374ab2bd2a0b29ec8cf0ebe7fe71bb1d36bbdd7af61ecbd8e548a92db2b90a81dd9bc481114b9a9cc2289ce1dc5765d3060dd90761052bd41216ef9d4ce946e64d63af752a52a6263b115cf3ee376367c65e5e53efa967aaf0b7d03fa4464dea6e26a225ac", 0xae}, {&(0x7f0000000380)="cfc811e6eb9fc7f262f5cf9bac1d641524f2bc4c2303577083f6843b466f29b8c405eeb836bb318720f6a86bcec0bb0e862e7a6b4796a625067cd5145f6bc94b47e480d4b3b0c96ba380b50c84fdfacdefcba8bb7a6f62b032c646a7d75bc6d51d78d4fbef6ece172abfb982212872cbb8c0a7fbf970733bdb1a3f529ff8cc4bc0df3edf9ed727123ac4ce9e0bad6bfe61be7466eeb30a393d5d4ab7db7342c80b9da1381cc48e", 0xa7}], 0x4) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000b40)=[{&(0x7f0000000ac0)=""/103, 0x67}], 0x1, 0x4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000", @ANYRES32, @ANYBLOB="4000800045b6569800e4bd000000000000000000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000000020000000300"/28], 0x50) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x10, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x2e, 0x200, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0xb, 0xb}, {0xb, 0xffff}, {0xa, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r3) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[@ANYRES8=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x107ebc083658ba38}, 0x94) socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r9, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r9, &(0x7f0000000100)={0xa, 0x4e27, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x44fd4b3f}, 0x1c) 1.254005255s ago: executing program 0 (id=1455): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002840)=ANY=[@ANYBLOB="b7000000810003c3bfa300000000000007030000f0ffffff720af1fff8ffffff71a4f0ff0000000065040200000000ff2d400400000000003400000001ede4ff7b1300ff000000001d440100000000007a0af0ff00ffffffdb030000a1000000b500f7ff350900009500000000000000023bc065b78111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4fc2495f74baaa876156de9078d687348ef1e50becb19bc461e94f4061cff1db39271a7168e51815548000000000000000275dff00000001b6bf01c8e8b19aa0d7f300c095199fe3ff3128e599b0eaebbdbd732c9cd90eec36574a8f6456e2ccae25ea21714eca8cf5d803e04d83b46e21557c0afc646cb7790b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845b9f75dd08d123deda8ebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987af1714e72ba7616536fd9aa58f2477184b6a89adaf17b0baf587aef370a2d426a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d64364c82770c8204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee7d26b34381fcb59b854e9d5a17f4720082f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67051d355d84ce97bb0c6b4a595e487efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599ddd71063be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d96c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d38df9ba60248d9a0d61282dfb15eb6841bb64a1b3045024a982f3c48153baae2c4e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c3560811ea6c3560a43364d402ccdd9069bd50b994fd6a34ee18022a579dfc0229cc0dc9881610270928eaeb883418f562ae00003ea96d10f172c0374d6eed826407000000000000004a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a950812d7aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea52acb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d851680f6f2f9a6a8906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f4ca2195234648e0a1ca50db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031bc2f52c8785fe0721719b3d654026c6ea08b83b123145eb6dc5f6a9037d2283c42efc54fa84323a3304f41ff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f928ba7554ba583fef3ec7932f5954f31a878e2fae6691df8b4b7ecd27ce82f7df3e7d1daac43738612e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d040000000000000090205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e96735600000554f327a353511ccedde99493c31ac05a7b57f03ca91a01ba2c60ca99e8ebc15ecb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d40460780000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120968308c31db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd0000000069ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a003fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9e0600f86909bc90addb7b9aee813df534aac4b32fd691b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d86047f601fa88a000000000000000000000000000006acc19808d7cf29bc974b0ea92499a419aa095e203c1bafbb9b9a7c2bca3f0a18ee4952f2d325a56390578f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa84feda91f3edb32231ec75300000000000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b88b5e7885e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035ab63de71a30f1240de52536941242d23886ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db1829f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2744c46570e8f46da1ab990ca053cbfe801000000000000000000000000000000d55d7182af2ea5f8d0ad495e3eb9421963a5a683c3dcb2d300aa3b2cfe946d2348c35f5d67d68ac07c8f84b3679e77c2e629ecec7c12c35d6b6971b8ae13cc00956d2227db60c0a461ed2b3ecfb16d19037c8c88c91dda1f904fbbc864e95ad43d6dd6d5eadbcea25682ba4b91e14c3fbfdfd1d680aa1af102d97681656bf56ff0674237ce097d39008cc3257778de878bcd37467386f993be6d20c93a7791e7f2a155ce379b4cda2500108052aeb9bd03ff6d4c5dbda9ff485d6576a492d436d52edcd420e7deaa4343a0add3941ae7c5f58af43866ca64750f43e583ca1ceb3a805e46beef9dca77a4edcbb42aa0caf0bbd6cec72d85540293cb4849b0610800000000000000000000000000000000f9814d5f6c8673c143ff2f901e71b8818665b56f7a03afe3d900007656859db4cb06aaaf9f02cfab5b9e61cc00e8e19429921b8df4c4c53bddea4cc48737842952ff08aeac15685df194ca89da8cf6d29a2be9779181fd5d105af5786094d9130f5826b18b9667b971a994f3fd069629a1052f441e96884f90c91f4a97429ca27955b5c90f0bd9a46ed044272383d3768871a9c8cfd7948aea445c55684351002ed4a4af45341de8e5e1f33624bd2ec1591dd00bbe05000000f89a928662e9b9449db34394fc5e946fadaee576e28ac0feab4e3585ed43d206218f524083840a78b7236bb7f5e42b5376642f8ad4028d4ead407240e7467d1b37afe20690d7672c7e926fded95cf805516ad836eb730619a05af36fb28329d6feb33219cc9164461a8ba3afd5949b9a6046c53663df30a049414089c1ae8f3476236b05dde8dda4843a62c591f8d2b1a62d0db8dc826219bd87398b33e140792297d023ef52de2e75b9dbbfb8712ccc15c69cfb4c6c1bc2ae74621e536b9d3f09a15dada1561a8192d65cc59d7ed5a6bd61000000000000000000000000000000000000000000000000000000000000000000000000f637782e317d492b2392fd0ea81397a80227f271bad21d688af35a2bd02c15d20f3d62a50e20260642c25f304c8034a5f4d8e45e701dbd84294d1096e715662b8223e10ef454c7702c98c4c38451fc5c702084e3fa9b184e0d0fba44acf3bb8a846cf680dfbf312cddfdb2043288fa6b67fa762c8b75d4478756ef240f2b314e4d77a3afb4fcec92248327004d1dac7ac87a6f8cb04d82acc307d60e4713bd9a8f29091d3048c669a5f5439e0a906ce098d177b9579882586511cfe6a23e57c44d1654899f077b5636e4181f3de6b814bedcac5290ad801800"/3222], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffec2}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x208441, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg0\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x3) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000140)=""/194) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) setsockopt$sock_int(r2, 0x1, 0x23, &(0x7f0000000280)=0x18, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x3, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_flow={{0x9}, {0x50, 0x2, [@TCA_FLOW_POLICE={0x4c, 0xa, 0x0, 0x1, [@TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0x80000000, 0x6, 0x7ff, 0x3eb, 0x0, {0x7, 0x0, 0x22c6, 0x400, 0x6, 0x401}, {0x3, 0x1, 0x1000, 0xa, 0x800, 0x80000000}, 0x65, 0x5, 0x8001}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff}}]}, 0x88}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xffffffff, 0x1}]}]}}, &(0x7f0000000500)=""/16, 0x46, 0x10, 0x1}, 0x1f) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r6, 0x11, 0x68, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000080)=0x2, 0x4) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x8001000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x1e}, 0xffffffff, 0x0, 'ip_vti0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x73, 0x3, 0x20}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x6]}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xff, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x1000) 1.141574888s ago: executing program 1 (id=1456): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000001140)=ANY=[@ANYBLOB="a0010000100001000000000000000000fe88000101ac1414bb00000000000000000000000000000000000000000a00000064000000000000000000008f8fa27a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1414350000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a000000fdffffffffffffff00000000000000000000000800000000000200000000000000000000000000000200000000000000000000000a000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c00170000"], 0x1a0}}, 0x0) 962.866562ms ago: executing program 4 (id=1457): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x8c, r2, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}}, @val={0x0, 0xf, @random="9db4a84f2beb2f4ecb945a20a904b0"}, @val={0x1, 0x6, [{0x4}, {0x18}, {0x2, 0x1}, {0x9, 0x1}, {0x1}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x9}}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xffff]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1295}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}]}, 0x8c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20b631}, 0x24008080) 962.135917ms ago: executing program 3 (id=1458): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}}, 0x0) 961.372929ms ago: executing program 0 (id=1459): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="56a8", 0x2}], 0x1}, 0x4051) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000180)=[{0x1d, 0x5, 0xa, 0x5}, {0xd, 0x81, 0xd, 0x403}]}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) recvmsg$unix(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="ac9a", 0x2}], 0x1}, 0x20000081) 825.534539ms ago: executing program 3 (id=1460): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008800) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x4100, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$can_bcm(0x1d, 0x2, 0x2) r5 = epoll_create1(0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x34, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x4, 0xe3, 0x0, 0x0, @binary}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) epoll_pwait(r5, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}], 0x6, 0x7, &(0x7f0000000000)={[0x3]}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)=ANY=[@ANYBLOB="ec0000001000010800"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000cc001a801800028014000700fe8000000000000000000000000000aa30000280040001800300000000000000080000000000000004000000000000000800000000000000080000000000000018000280140001801100000000000000080000000000000018000a8014000700ff02000000000000000000000000000100000700ff02000000000000000000000000000100000700fe8000000000000000000000000000002800028024000180080000000000000008000000000000000800000000000000080000000000000004001c0000000a80000007002001000000000000f3318f36a39632e61519cb9411bb6d00000000000000000000080000000000000008000000000000000700fe80000000000000000000000000000000000700ff020000000000000000000000000001000007002001000000000000000000000000000000000700fc0100000000000000000000000000000000080000000000000008000000000004001c00e39bcf79c722509b67eb246eeebcf5b3a9d8d6addd98fdc72c3484935581303f7083cfbe6564c873bcf7df59a49018114a1e6de7f18d7bb44ef67cfb5268ad26b88e728be59afcd04024ecab05c1f5cfe10413b8d3f61cd0727b9a8862bd61aedfafbb846ad190239d109081e78fe430081001ea735eae76610b4c79929720272a1cfe1af3826ef24d10e36cec237aafb6f3a2c1a773a37243e4aaac3f04f950fe1de7de0797d4358b3a254ec5fb7b15c5cb9439813bde61e28ac7f0ea21f41c17dc84f7b9bfd6278a87c3c97313faeb6e90d89cd9b9e770195f606a02064cb7e70549", @ANYBLOB="c79fc3fdf6f0170e602e3c274c3505af4cea46b8db80a44b06a8f76b9a0d78f22f9d172a936189969f256430d366519db262e579267d3e74abae5bf09e943538221db43a459ec66105ec376448f75253274e295e7398b88cf3c7255d1fa0c66d0518e63211c4cdc8a673012feabfa277ba2585b785f57ca2a80e66a701f6136619087746bb531d9468966aec392b51868bf94b8e7dbf013336cd"], 0xec}}, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000800)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000007000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4008, r1}, 0x18) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x10, 0x7, 0x8, 0x800, 0x1, 0x1, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a00)={0x0, 0x3, 0x30}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x9, &(0x7f0000000600)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x1, 0xb, 0x7, 0x3, 0x100, 0x8}, @generic={0xc8, 0x4, 0x9, 0x9, 0x80}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @map_fd={0x18, 0x5, 0x1, 0x0, r8}], &(0x7f0000000780)='syzkaller\x00', 0x5, 0x14, &(0x7f00000007c0)=""/20, 0x41100, 0xd, '\x00', r3, 0x25, r9, 0x8, &(0x7f0000000840)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000a40)=[r10, r11, r6, r2, r12, r13, r14, 0x1], &(0x7f0000000a80)=[{0x4, 0x5, 0xc, 0x3}, {0x2, 0x4, 0xc, 0x5}, {0x0, 0x5, 0x4, 0xa}]}, 0x94) r15 = socket$alg(0x26, 0x5, 0x0) bind(r15, &(0x7f0000000400)=@l2tp6={0xa, 0x0, 0x4, @loopback, 0x585f, 0x3}, 0x80) 745.373019ms ago: executing program 4 (id=1461): setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140)=0x4, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x20048084}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x8000000, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x6, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x7}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r5, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x9}, @TCA_CAKE_NAT={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4000000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da97e22f4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ad0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bff3b89c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c2ed01faa7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497dad64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6fba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd2310801570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb414c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000000000000000000000000000000a0cc2b89ce1525748ce167cbabb881f060599a6a59f645edca1d5c24b2f6b8c997a8f3e1b7679984a566d98d4d31198ee4c5ea7be0d99cf89bba4a6fd0bec12e7792bec3c5038e13b1982f80cdecd07f8908a983a7c9fb81c2ba7f7e87c991f30e50d1b3bbe4cf2a2f5d4571b6568ada51bc121c9139d2a8e0638c84066b1759081802"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='\a'], 0x10) unshare(0x22020600) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 554.350606ms ago: executing program 0 (id=1462): socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24001040}, 0x40010) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a30000000"], 0xc0}}, 0x8000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000180)}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3d, 0x9, 0xffffffff, 0x0, {0x1}, [@typed={0x4, 0x11f}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @typed={0x8, 0xf, 0x0, 0x0, @pid}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'lc\x00', 0x1, 0x4, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x1, @private=0xa010101, 0x4e21, 0x3, 'rr\x00', 0x23, 0x81, 0x5}, {@private=0xa010101, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x0, 0x7, 0x200, 0x9, 0x8, 0x0, 0x6, 0x0, 0x0}, &(0x7f00000002c0)=0x20) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000300)={r5, @in={{0x2, 0x4e24, @loopback}}, 0x1, 0x9}, &(0x7f0000000440)=0x90) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000180)={"cc496bb2bf464ea459cdf1d7b99f9886", 0x0, 0x0, {0x0, 0x7}, {0x3, 0x3}, 0x3, [0x0, 0x8000000000000001, 0x4919, 0x5, 0x100000001, 0x400, 0x130, 0x8000, 0x80, 0x9, 0x6, 0x9, 0x2a1b, 0xfffffffffffffff7, 0x1, 0x4]}) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 498.088897ms ago: executing program 2 (id=1463): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x8c, r3, 0x1, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x51, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x1}, @device_b, @device_a, @initial, {0x4, 0x9}}, @val={0x0, 0xf, @random="9db4a84f2beb2f4ecb945a20a904b0"}, @val={0x1, 0x6, [{0x4}, {0x18}, {0x2, 0x1}, {0x9, 0x1}, {0x1}, {0x36}]}, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x0, 0x0, {0x10, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x6, 0x9}}, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xffff]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x1295}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x93}]}, 0x8c}, 0x1, 0x0, 0x0, 0x6a845ecb4f20b631}, 0x24008080) 404.840144ms ago: executing program 2 (id=1464): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) close(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)={0x100, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x100}, 0x1, 0x0, 0x0, 0x10008000}, 0x850) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x12) r3 = socket(0x2, 0x80805, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) unshare(0x2c020400) writev(r4, 0x0, 0x0) write$tun(r4, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r6, 0x5}, 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="380000000c141000d41308814ed0c8eb08003d0001000000380003000300000008003d000300000008003d000100000008003d000200000017b622893972e0985350f694d25210f556836b"], 0x38}}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @log={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0xfffffffd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={0x3c4, 0x12, 0x200, 0x70bd2d, 0x25dfdbfc, {0x29, 0x4, 0x8, 0xf4, {0x4e21, 0x4e20, [0x5, 0x9, 0xb5d, 0x8], [0x6000000, 0x405b74, 0x6, 0xb], r2, [0x5, 0xfffffff7]}, 0x4, 0xfff}, [@INET_DIAG_REQ_BYTECODE={0x103, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0xaa, 0x1, "78b68a744e09dea6593a3a390f773d85cbf00926904ceeee769852513adf1531cb072f5003912b9805106b6dddd509deb12144a140eadc42583b8014526973c1eaadaf707d09a985b12bf11380b13e6fd9f411e31ad1796d37163dce5eb1bb75b239b69719d449dcc53da6f163c768820832ab6539769d224fc8aa978322244d6213bbe91cb8c282515e50572a25772c359ac41d1bd5f33684396342c992bb7dfe5fea00ca16"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "9746710e009df9df37badf585a6c91e9a97beeb87d92b48ca3b81bd8eb3fa40528e9aff4ebc828007f6bb152754027e7a0a906577fa0c1c8e48b370bf124a2685e7d6e06b876c6e09cb2b603f40da332dd01c36648ea647100f5c139c4d0dce059acff614731c2aa86eba4757b672f3debf563f950bd0174e5f8e60210f1f8e1a4eda4c481cd720af996feeed1bcef648d6534347b33b1ac2b7556393d7e06eccf6c9c8edae5c0db76db9b53900429a01de0760dcd757df99e040c6c0db47d4c68dd326c518751"}, @INET_DIAG_REQ_BYTECODE={0x74, 0x1, "491e0c4b15b79fa3b9388989a40ec8ebe4a29d7a70b4ef37736eafd23b0bc391e435ba7056d94cf0f93a52dd484616460056798f61cb4d425787e8bdfbdcc6cbdc26bc05a84fce309e11939132c83bdc21784b7013eb3a9f499218436a74a5d9fd1619b35ae1696fbfb9e0807285a653"}, @INET_DIAG_REQ_BYTECODE={0x40, 0x1, "a10f2ed18bb3862a234a537dbdaa16dc833ea92e763325830bb190da6e32f581d7a6dff1dac99f3635cd321209104c437904593862bbf87eae85fdbd"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "0a3da58c3d3bd9dfe1d194e75d60919fbb66884763b39644da8db66eeabba3b2dc042d882d7d1b5a8b047237111655f1cd1f973479a4ae0b0e12dee1ead6"}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8810}, 0x24004804) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)={r1, 0x8, 0x0, "fdbacb6d354ed4206f07a85ccb1352c7e3bc751edc17109c0c32173c41389700fb3ee2269b028386f4be893b70017bd6c2607320fca8ccc4f155dac307e6292719aad786859f6cb8ad4a516e2c8f273e30c211be7c9cc51499e5735075eef88cff8808917247ece325915c0f8b5817780ecc8095d8131460061c353f952d887f10ee99b7d6d9f3576dbe16acc0768515cf9f18b646869e71cdf7de64499e0e5a9c738b1df26d1e1fbe53e9557c33cb1a98f94f5bffef8ee997d55b4d48"}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@getqdisc={0x44, 0x26, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff6, 0x5}, {0xb, 0xc}, {0xb, 0x8}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x44}}, 0x24040005) 375.02133ms ago: executing program 4 (id=1465): socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x80802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) socket$netlink(0x10, 0x3, 0xa) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="6400000010000304000000fe0f00000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x48010) 374.106287ms ago: executing program 0 (id=1466): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000005c0)={0x5c, r2, 0x405, 0x70bd28, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x2}}, {0x8, 0x6, r3}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="8000000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c0002"], 0x80}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0xc) splice(r4, 0x0, r6, 0x0, 0x10d00, 0xf) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@can_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x2}, [@CGW_SRC_IF={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) connect$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r9 = socket$unix(0x1, 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newsa={0xf0, 0x10, 0x413, 0x70bd28, 0x0, {{@in=@multicast1, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0xa0, 0x20}, {@in=@dev={0xac, 0x14, 0x14, 0x1d}, 0x0, 0x32}, @in=@private=0xa010100, {0x4, 0x1, 0x0, 0x40000000000004, 0xffffffffffffffff, 0x6, 0x7f}, {0x0, 0x0, 0x4}, {0xf6, 0x0, 0x4}, 0x1000000, 0x0, 0x2, 0x1, 0xfe}}, 0xf0}}, 0x804) ioctl$int_in(r9, 0x5421, &(0x7f0000000300)=0x101) connect$unix(r9, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) 206.238572ms ago: executing program 0 (id=1467): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff}) (rerun: 32) sendmmsg$alg(r2, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="53f596d89572debe398e20eafdacee3412dc127d11884104b79002df01a27a6f75a5a3cba3373d495861fd6423bcc2db9a2d0408f4d817d85cc11c443ccde2994806726fbaa008379dbe25efd9d6a362070ba51a5c3582699f7d066622309fdd5f67d38408361d576e53c684082cb22dfb64e91f", 0x74}, {&(0x7f00000000c0)="ee86aa", 0x3}, {&(0x7f0000000100)="1af32300929b7017dfbd95127e09bcd543b24003b9117cab71748c1362c961314b27106e88192edc59c2637c60d04f8de6428863f00128d45850d97ed0f3be78608c64e4d4d2be2426b2fc6d96eb00ccb23251f2bd12299489ab6b91f77675c9ac6536499e99a089b545f7e3439d01d5f34e2453a95f6f14591abdc9223682c61036cb353ae8ccbf687d46015a49986b0fb3f5d849527e4bbe30eee4c324061ab0822718838aeb4949", 0xa9}, {&(0x7f0000000200)}, {&(0x7f0000000240)="6efceb200e74557b0b415978bf25ccd90537fdc00233268b1e9298a2b7f29dbe2e0c218862171a1f4679b3f6d9839dfd19be5388c820b2de1457ae61f7ae8798", 0x40}, {&(0x7f0000000280)="a35898bb8025a4d9ecb3b4557f31895ba65aa6751ceb", 0x16}], 0x6, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x4}], 0x18, 0x20000000}, {0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000003c0)="cd4a00e7fe1a11de0b2613055af6b59b8b9b501e612d2af85829e0d123df16d5d7484a0ba2a0738ce61f83979ef1291fc74ad89d13c80f858917c134a753dec14cabf35df6e7269bb07e6a1755e7a3a9bcf3753e79975a235efda4b7a6ac9a5831a5bca18fc7142cd4f535be0c15ab00f86be31fa813940f5b5566", 0x7b}], 0x1, &(0x7f0000000480)=[@iv={0x18, 0x117, 0x2, 0x3, "268037"}], 0x18}], 0x2, 0x2000408c) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8854}, 0x0) 205.534754ms ago: executing program 4 (id=1468): setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x1be) (async) bind$tipc(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x18) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) (async) shutdown(0xffffffffffffffff, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r3) (rerun: 32) sendmsg$NLBL_CIPSOV4_C_ADD(r3, 0x0, 0x0) (async) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) (async, rerun: 32) shutdown(r5, 0x1) (async, rerun: 32) recvmmsg(r5, &(0x7f0000005000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/19, 0x13}, 0x3}], 0x4000169, 0x60, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000080)) (async, rerun: 32) socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40050) 90.625685ms ago: executing program 1 (id=1469): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x34, 0x0, 0x7, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x1fffe000000000}, @NFACCT_FLAGS={0x7, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x40810) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000100)={0xc, 0x8, 0x5, 0xff, 0xd}, 0x14) 39.012602ms ago: executing program 3 (id=1470): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="68ee6890bbe4e55e9047a4cdbba0e701cb710b26f863c98a19a8842b6cb0628180643fce800114b20bb34564cb2e7872d2a6a83acba3eaab1e1ce589fe41ebf4926bc39d41b850545309dfda074eaedd04467742b26a51f3330b36fcb364e57aca5c62005fd822cb29d96be8e9bfaf1bc8f279aa812f700393513b3565be1522a381939465f7c068c129c3d29d6233713bf4b324dd43fca3f8e29b948d19d9a52552afc154de90a0ac419917250157b3503f2778c8dbc795df9f70df42dc309743f9d284da94becba7f5062a641cab"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) 0s ago: executing program 4 (id=1471): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x81, 0x0, 0x0, 0x4000}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001a00010000000000fbdbdf250a8080fc0000000000000000080001000000000008000100ffffffff08000400", @ANYRES32=0x0, @ANYBLOB="08001f00", @ANYRES32=r0, @ANYBLOB="08000f"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): c: Enabling of bearer rejected, already enabled [ 137.042231][ T7201] syzkaller0: entered promiscuous mode [ 137.052606][ T7201] syzkaller0: entered allmulticast mode [ 137.213515][ T7201] tipc: Resetting bearer [ 137.284240][ T7201] tipc: Disabling bearer [ 137.375321][ T7210] bridge0: entered allmulticast mode [ 137.463391][ T7210] pim6reg: entered allmulticast mode [ 137.485677][ T7210] __nla_validate_parse: 5 callbacks suppressed [ 137.485697][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 137.618887][ T7222] netlink: 211160 bytes leftover after parsing attributes in process `syz.3.338'. [ 137.696908][ T7210] bridge0 (unregistering): left allmulticast mode [ 138.528133][ T7255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 139.080416][ T7280] sctp: [Deprecated]: syz.4.349 (pid 7280) Use of int in max_burst socket option deprecated. [ 139.080416][ T7280] Use struct sctp_assoc_value instead [ 139.303647][ T7289] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 139.518491][ T7296] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.354'. [ 139.816305][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058dd9000: rx timeout, send abort [ 140.102370][ T7320] netlink: 'syz.3.359': attribute type 11 has an invalid length. [ 140.131106][ T7320] netlink: 36 bytes leftover after parsing attributes in process `syz.3.359'. [ 140.257081][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 140.296694][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.362'. [ 140.317013][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058dd8c00: rx timeout, send abort [ 140.325756][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058dd9000: abort rx timeout. Force session deactivation [ 140.352193][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.362'. [ 140.438029][ T7328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.362'. [ 140.608739][ T7340] veth0: entered promiscuous mode [ 140.622392][ T7339] netlink: 'syz.4.367': attribute type 8 has an invalid length. [ 140.644843][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.366'. [ 140.826250][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058dd8c00: abort rx timeout. Force session deactivation [ 142.126131][ T7368] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 142.188856][ T7368] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 142.223448][ T7368] IPVS: lc: FWM 3 0x00000003 - no destination available [ 142.238345][ C0] IPVS: lc: FWM 3 0x00000003 - no destination available [ 142.337250][ T7372] dvmrp8: entered allmulticast mode [ 142.437497][ T7372] dvmrp8: left allmulticast mode [ 142.590768][ T7389] __nla_validate_parse: 1 callbacks suppressed [ 142.590788][ T7389] netlink: 36 bytes leftover after parsing attributes in process `syz.4.377'. [ 143.096868][ T7406] netlink: 236 bytes leftover after parsing attributes in process `syz.4.379'. [ 143.233708][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.380'. [ 143.282521][ T7418] IPVS: length: 18 != 8 [ 143.282775][ T7414] tipc: Invalid UDP bearer configuration [ 143.308317][ T7414] tipc: Enabling of bearer rejected, failed to enable media [ 143.806163][ T7435] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 144.315368][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 144.376983][ T7454] netlink: 'syz.3.391': attribute type 30 has an invalid length. [ 144.436413][ T1143] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.448257][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 144.457090][ T7454] netlink: 'syz.3.391': attribute type 30 has an invalid length. [ 144.481309][ T2922] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.512338][ T2922] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.547265][ T2922] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.957793][ T7481] netlink: 28 bytes leftover after parsing attributes in process `syz.2.398'. [ 144.980874][ T2922] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x7 [ 144.995290][ T7481] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 145.018657][ T7481] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 145.043666][ T7481] IPVS: lc: FWM 3 0x00000003 - no destination available [ 145.061619][ C1] IPVS: lc: FWM 3 0x00000003 - no destination available [ 145.683560][ T7505] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 145.778244][ T7502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.400'. [ 145.822540][ T7509] bond1: entered promiscuous mode [ 145.831332][ T7509] bond1: entered allmulticast mode [ 145.904753][ T7509] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.075097][ T7511] bridge1: entered promiscuous mode [ 146.119927][ T7511] bridge1: entered allmulticast mode [ 146.126106][ T7511] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 146.158808][ T37] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.328085][ T37] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 146.366028][ T7525] netlink: 24 bytes leftover after parsing attributes in process `syz.3.404'. [ 146.962797][ T7505] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.971512][ T7505] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.574040][ T7505] batman_adv: batadv0: Interface deactivated: 26±ÿ [ 147.747387][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.0.407'. [ 148.102932][ T37] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.145253][ T37] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.179739][ T37] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.217399][ T37] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.285668][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.3.411'. [ 148.482183][ T7562] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 148.508966][ T7562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 148.531367][ T7563] netlink: 'syz.2.415': attribute type 4 has an invalid length. [ 148.595650][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 148.738660][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 148.747511][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 148.803141][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.418'. [ 148.804395][ T2922] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.855809][ T7573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.418'. [ 148.891702][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.925486][ T7578] netlink: 1 bytes leftover after parsing attributes in process `syz.3.421'. [ 148.973614][ T2922] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.041915][ T2922] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.446418][ T7601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 149.491555][ T7604] netlink: 20 bytes leftover after parsing attributes in process `syz.1.427'. [ 150.257199][ T7637] tipc: Enabled bearer , priority 0 [ 150.286541][ T7637] syzkaller0: entered promiscuous mode [ 150.304416][ T7637] syzkaller0: entered allmulticast mode [ 150.326535][ T7637] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 150.383915][ T7637] tipc: Resetting bearer [ 150.428945][ T7635] tipc: Resetting bearer [ 150.468286][ T7635] tipc: Disabling bearer [ 150.844208][ T7677] IPVS: set_ctl: invalid protocol: 29 172.20.20.16:20002 [ 151.152347][ T7690] FAULT_INJECTION: forcing a failure. [ 151.152347][ T7690] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 151.198958][ T7690] CPU: 0 UID: 0 PID: 7690 Comm: syz.1.450 Not tainted syzkaller #0 PREEMPT(full) [ 151.198986][ T7690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 151.199006][ T7690] Call Trace: [ 151.199014][ T7690] [ 151.199024][ T7690] dump_stack_lvl+0x189/0x250 [ 151.199054][ T7690] ? __pfx____ratelimit+0x10/0x10 [ 151.199076][ T7690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.199100][ T7690] ? __pfx__printk+0x10/0x10 [ 151.199129][ T7690] ? __might_fault+0xb0/0x130 [ 151.199169][ T7690] should_fail_ex+0x414/0x560 [ 151.199202][ T7690] _copy_from_user+0x2d/0xb0 [ 151.199227][ T7690] ___sys_recvmsg+0x12e/0x510 [ 151.199260][ T7690] ? __pfx____sys_recvmsg+0x10/0x10 [ 151.199320][ T7690] ? __might_fault+0xb0/0x130 [ 151.199352][ T7690] do_recvmmsg+0x307/0x770 [ 151.199388][ T7690] ? __pfx_do_recvmmsg+0x10/0x10 [ 151.199428][ T7690] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 151.199470][ T7690] __x64_sys_recvmmsg+0x190/0x240 [ 151.199500][ T7690] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 151.199524][ T7690] ? rcu_is_watching+0x15/0xb0 [ 151.199551][ T7690] ? do_syscall_64+0xbe/0x3b0 [ 151.199578][ T7690] do_syscall_64+0xfa/0x3b0 [ 151.199600][ T7690] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.199620][ T7690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.199641][ T7690] ? clear_bhb_loop+0x60/0xb0 [ 151.199666][ T7690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.199686][ T7690] RIP: 0033:0x7fb5e6f8eba9 [ 151.199704][ T7690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.199720][ T7690] RSP: 002b:00007fb5e7d57038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 151.199756][ T7690] RAX: ffffffffffffffda RBX: 00007fb5e71d5fa0 RCX: 00007fb5e6f8eba9 [ 151.199771][ T7690] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 151.199783][ T7690] RBP: 00007fb5e7d57090 R08: 0000000000000000 R09: 0000000000000000 [ 151.199795][ T7690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.199807][ T7690] R13: 00007fb5e71d6038 R14: 00007fb5e71d5fa0 R15: 00007ffc0e6d9cf8 [ 151.199840][ T7690] [ 151.426723][ T7699] warning: `syz.3.454' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 151.765199][ T7711] bond2: entered promiscuous mode [ 151.804363][ T7711] bond2: entered allmulticast mode [ 151.822368][ T7711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.062223][ T7729] netlink: 'syz.3.461': attribute type 1 has an invalid length. [ 152.145679][ T7729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.280517][ T7730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 152.287619][ T7730] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 152.345440][ T7730] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 152.507593][ T7750] netlink: 'syz.4.465': attribute type 13 has an invalid length. [ 152.525447][ T7750] netlink: 'syz.4.465': attribute type 17 has an invalid length. [ 153.064425][ T7776] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 153.173144][ T7750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.227096][ T7750] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.281507][ T7750] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 153.310158][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880597aac00: rx timeout, send abort [ 153.659038][ T7789] __nla_validate_parse: 11 callbacks suppressed [ 153.659058][ T7789] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'. [ 153.810283][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805796b000: rx timeout, send abort [ 153.818788][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880597aac00: abort rx timeout. Force session deactivation [ 154.165315][ T7800] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.318857][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805796b000: abort rx timeout. Force session deactivation [ 154.642219][ T7814] tipc: Enabling of bearer rejected, failed to enable media [ 155.547982][ T7839] netlink: 20 bytes leftover after parsing attributes in process `syz.3.483'. [ 155.632530][ T7839] vlan2: entered promiscuous mode [ 155.637686][ T7839] erspan0: entered promiscuous mode [ 156.136610][ T7867] netlink: 'syz.0.488': attribute type 1 has an invalid length. [ 156.343038][ T7867] 8021q: adding VLAN 0 to HW filter on device bond2 [ 156.614120][ T7875] veth5: entered promiscuous mode [ 156.732091][ T7900] netlink: 256 bytes leftover after parsing attributes in process `syz.3.496'. [ 157.120735][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.501'. [ 157.129927][ T7923] netlink: 32 bytes leftover after parsing attributes in process `syz.0.501'. [ 157.143822][ T7923] netlink: 'syz.0.501': attribute type 2 has an invalid length. [ 157.153158][ T7923] netlink: 132 bytes leftover after parsing attributes in process `syz.0.501'. [ 157.230373][ T7925] netlink: 'syz.1.502': attribute type 13 has an invalid length. [ 157.258841][ T7925] netlink: 'syz.1.502': attribute type 17 has an invalid length. [ 157.441993][ T7930] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 157.449695][ T7925] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.463010][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 157.522128][ T7925] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 157.556533][ T7930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.504'. [ 157.698322][ T7942] tipc: Enabling of bearer rejected, failed to enable media [ 157.753411][ T7944] sctp: [Deprecated]: syz.4.507 (pid 7944) Use of int in maxseg socket option. [ 157.753411][ T7944] Use struct sctp_assoc_value instead [ 157.772646][ T7948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.508'. [ 157.981147][ T7959] openvswitch: netlink: ufid size 18 bytes exceeds the range (1, 16) [ 158.007331][ T7959] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 158.033719][ T7959] netlink: 'syz.3.511': attribute type 12 has an invalid length. [ 158.125378][ T7966] pimreg: entered allmulticast mode [ 158.147495][ T7961] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 158.164751][ T7961] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 158.205539][ T7961] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 158.222991][ T7961] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 158.274981][ T7961] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.281515][ T7961] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 158.320180][ T7979] netlink: 'syz.3.517': attribute type 3 has an invalid length. [ 158.329503][ T7961] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.337764][ T7961] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 158.346960][ T7979] netlink: 132 bytes leftover after parsing attributes in process `syz.3.517'. [ 158.445901][ T7988] netlink: 'syz.3.518': attribute type 21 has an invalid length. [ 159.121301][ T8010] __nla_validate_parse: 1 callbacks suppressed [ 159.121320][ T8010] netlink: 288 bytes leftover after parsing attributes in process `syz.3.525'. [ 159.852190][ T51] Bluetooth: hci4: command 0x0405 tx timeout [ 159.859140][ T7961] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 159.865086][ T7961] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 160.056493][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.1.535'. [ 160.307266][ T8060] bridge0: entered promiscuous mode [ 160.359953][ T8060] vlan3: entered promiscuous mode [ 160.366956][ T8060] bridge0: port 3(vlan3) entered blocking state [ 160.393523][ T8060] bridge0: port 3(vlan3) entered disabled state [ 160.409990][ T8060] vlan3: entered allmulticast mode [ 160.415910][ T8060] bridge0: entered allmulticast mode [ 160.441507][ T8060] vlan3: left allmulticast mode [ 160.446431][ T8060] bridge0: left allmulticast mode [ 160.581323][ T8067] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 160.702292][ T8078] netlink: 68 bytes leftover after parsing attributes in process `syz.2.544'. [ 160.881838][ T8089] netlink: 16 bytes leftover after parsing attributes in process `syz.2.546'. [ 161.358819][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.549'. [ 161.385639][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.551'. [ 161.432269][ T8110] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 161.469565][ T8110] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 161.532596][ T8117] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 161.672533][ T8127] FAULT_INJECTION: forcing a failure. [ 161.672533][ T8127] name failslab, interval 1, probability 0, space 0, times 1 [ 161.720047][ T8129] netlink: 36 bytes leftover after parsing attributes in process `syz.0.556'. [ 161.743420][ T8127] CPU: 1 UID: 0 PID: 8127 Comm: syz.4.555 Not tainted syzkaller #0 PREEMPT(full) [ 161.743446][ T8127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 161.743457][ T8127] Call Trace: [ 161.743464][ T8127] [ 161.743471][ T8127] dump_stack_lvl+0x189/0x250 [ 161.743500][ T8127] ? __pfx____ratelimit+0x10/0x10 [ 161.743520][ T8127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.743542][ T8127] ? __pfx__printk+0x10/0x10 [ 161.743573][ T8127] ? __pfx___might_resched+0x10/0x10 [ 161.743596][ T8127] should_fail_ex+0x414/0x560 [ 161.743627][ T8127] should_failslab+0xa8/0x100 [ 161.743655][ T8127] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 161.743681][ T8127] ? __alloc_skb+0x112/0x2d0 [ 161.743704][ T8127] __alloc_skb+0x112/0x2d0 [ 161.743727][ T8127] netlink_sendmsg+0x5c6/0xb30 [ 161.743757][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.743781][ T8127] ? aa_sock_msg_perm+0xf1/0x1d0 [ 161.743801][ T8127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 161.743821][ T8127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.743860][ T8127] __sock_sendmsg+0x21c/0x270 [ 161.743893][ T8127] ____sys_sendmsg+0x505/0x830 [ 161.743932][ T8127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.743967][ T8127] ? import_iovec+0x74/0xa0 [ 161.743995][ T8127] ___sys_sendmsg+0x21f/0x2a0 [ 161.744022][ T8127] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.744086][ T8127] ? __fget_files+0x2a/0x420 [ 161.744102][ T8127] ? __fget_files+0x3a0/0x420 [ 161.744131][ T8127] __x64_sys_sendmsg+0x19b/0x260 [ 161.744159][ T8127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 161.744194][ T8127] ? __pfx_ksys_write+0x10/0x10 [ 161.744218][ T8127] ? rcu_is_watching+0x15/0xb0 [ 161.744244][ T8127] ? do_syscall_64+0xbe/0x3b0 [ 161.744270][ T8127] do_syscall_64+0xfa/0x3b0 [ 161.744290][ T8127] ? lockdep_hardirqs_on+0x9c/0x150 [ 161.744310][ T8127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.744329][ T8127] ? clear_bhb_loop+0x60/0xb0 [ 161.744353][ T8127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.744372][ T8127] RIP: 0033:0x7fcb0518eba9 [ 161.744389][ T8127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.744405][ T8127] RSP: 002b:00007fcb060a4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.744424][ T8127] RAX: ffffffffffffffda RBX: 00007fcb053d6090 RCX: 00007fcb0518eba9 [ 161.744438][ T8127] RDX: 0000000000004000 RSI: 00002000000001c0 RDI: 0000000000000004 [ 161.744449][ T8127] RBP: 00007fcb060a4090 R08: 0000000000000000 R09: 0000000000000000 [ 161.744460][ T8127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.744471][ T8127] R13: 00007fcb053d6128 R14: 00007fcb053d6090 R15: 00007ffc36d163c8 [ 161.744501][ T8127] [ 162.104970][ T8128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.127629][ T8125] netlink: 32 bytes leftover after parsing attributes in process `syz.0.556'. [ 162.267669][ T8125] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 162.663618][ T8163] netem: incorrect gi model size [ 162.676855][ T8163] netem: change failed [ 162.816344][ T8171] netlink: 'syz.1.571': attribute type 13 has an invalid length. [ 162.844721][ T8171] netlink: 'syz.1.571': attribute type 17 has an invalid length. [ 162.880438][ T8171] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.976760][ T8183] netlink: 8 bytes leftover after parsing attributes in process `syz.4.574'. [ 163.087295][ T8186] vxcan4: entered allmulticast mode [ 163.113098][ T8177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.160904][ T8192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.171810][ T8194] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.192115][ T8194] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.241704][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.253801][ T8186] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.272433][ T8194] sch_tbf: burst 2 is lower than device lo mtu (65550) ! [ 163.363951][ T8202] tipc: Started in network mode [ 163.371029][ T8202] tipc: Node identity 6e972f16ab5d, cluster identity 4711 [ 163.378635][ T8202] tipc: Enabled bearer , priority 0 [ 163.390051][ T8202] syzkaller0: entered promiscuous mode [ 163.395967][ T8202] syzkaller0: entered allmulticast mode [ 163.421913][ T8202] tipc: Resetting bearer [ 163.506572][ T8211] tipc: Enabling of bearer rejected, already enabled [ 163.633286][ T8218] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 163.949375][ T8232] netlink: 'syz.0.588': attribute type 3 has an invalid length. [ 163.957169][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 164.243922][ T8244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.593'. [ 164.272495][ T8243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 164.410249][ T5939] tipc: Node number set to 3318361878 [ 164.590207][ T8259] netlink: 'syz.3.598': attribute type 21 has an invalid length. [ 164.652478][ T8259] ip6erspan0: entered promiscuous mode [ 164.743698][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.601'. [ 165.000685][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.607'. [ 165.458960][ T8302] netlink: 24 bytes leftover after parsing attributes in process `syz.4.612'. [ 165.566236][ T8302] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.612'. [ 165.611169][ T8308] netlink: 'syz.2.613': attribute type 6 has an invalid length. [ 165.651246][ T8310] netlink: 'syz.2.613': attribute type 6 has an invalid length. [ 165.861567][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 165.936109][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.613'. [ 165.959163][ T8320] lo speed is unknown, defaulting to 1000 [ 165.969780][ T8323] FAULT_INJECTION: forcing a failure. [ 165.969780][ T8323] name failslab, interval 1, probability 0, space 0, times 0 [ 165.993317][ T8320] lo speed is unknown, defaulting to 1000 [ 166.018074][ T8323] CPU: 1 UID: 0 PID: 8323 Comm: syz.0.618 Not tainted syzkaller #0 PREEMPT(full) [ 166.018102][ T8323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.018114][ T8323] Call Trace: [ 166.018122][ T8323] [ 166.018131][ T8323] dump_stack_lvl+0x189/0x250 [ 166.018161][ T8323] ? __pfx____ratelimit+0x10/0x10 [ 166.018184][ T8323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.018209][ T8323] ? __pfx__printk+0x10/0x10 [ 166.018244][ T8323] ? __pfx___might_resched+0x10/0x10 [ 166.018268][ T8323] should_fail_ex+0x414/0x560 [ 166.018302][ T8323] should_failslab+0xa8/0x100 [ 166.018334][ T8323] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 166.018364][ T8323] ? __alloc_skb+0x112/0x2d0 [ 166.018391][ T8323] __alloc_skb+0x112/0x2d0 [ 166.018417][ T8323] netlink_sendmsg+0x5c6/0xb30 [ 166.018451][ T8323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.018477][ T8323] ? aa_sock_msg_perm+0xf1/0x1d0 [ 166.018499][ T8323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 166.018528][ T8323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.018551][ T8323] __sock_sendmsg+0x21c/0x270 [ 166.018585][ T8323] ____sys_sendmsg+0x505/0x830 [ 166.018617][ T8323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.018652][ T8323] ? import_iovec+0x74/0xa0 [ 166.018681][ T8323] ___sys_sendmsg+0x21f/0x2a0 [ 166.018709][ T8323] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.018775][ T8323] ? __fget_files+0x2a/0x420 [ 166.018792][ T8323] ? __fget_files+0x3a0/0x420 [ 166.018822][ T8323] __x64_sys_sendmsg+0x19b/0x260 [ 166.018851][ T8323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 166.018887][ T8323] ? __pfx_ksys_write+0x10/0x10 [ 166.018911][ T8323] ? rcu_is_watching+0x15/0xb0 [ 166.018937][ T8323] ? do_syscall_64+0xbe/0x3b0 [ 166.018965][ T8323] do_syscall_64+0xfa/0x3b0 [ 166.018987][ T8323] ? lockdep_hardirqs_on+0x9c/0x150 [ 166.019008][ T8323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.019027][ T8323] ? clear_bhb_loop+0x60/0xb0 [ 166.019052][ T8323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.019071][ T8323] RIP: 0033:0x7fbffa98eba9 [ 166.019089][ T8323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.019106][ T8323] RSP: 002b:00007fbffb7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 166.019127][ T8323] RAX: ffffffffffffffda RBX: 00007fbffabd5fa0 RCX: 00007fbffa98eba9 [ 166.019141][ T8323] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 166.019153][ T8323] RBP: 00007fbffb7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 166.019164][ T8323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.019175][ T8323] R13: 00007fbffabd6038 R14: 00007fbffabd5fa0 R15: 00007fff67108018 [ 166.019207][ T8323] [ 166.295473][ T8320] lo speed is unknown, defaulting to 1000 [ 166.316012][ T8320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 166.381168][ T8320] lo speed is unknown, defaulting to 1000 [ 166.388853][ T8320] lo speed is unknown, defaulting to 1000 [ 166.396447][ T8320] lo speed is unknown, defaulting to 1000 [ 166.406500][ T8320] lo speed is unknown, defaulting to 1000 [ 166.414779][ T8320] lo speed is unknown, defaulting to 1000 [ 166.422657][ T8320] lo speed is unknown, defaulting to 1000 [ 166.452884][ T8320] lo speed is unknown, defaulting to 1000 [ 166.664613][ T8341] netlink: 4 bytes leftover after parsing attributes in process `syz.1.622'. [ 166.832131][ T8351] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 167.121675][ T8369] netlink: 32 bytes leftover after parsing attributes in process `syz.3.628'. [ 167.454414][ T8382] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.500793][ T8380] Àÿ: renamed from team_slave_1 [ 167.586262][ T8397] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 167.642303][ T8382] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.783424][ T8382] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.986510][ T8387] lo speed is unknown, defaulting to 1000 [ 168.044021][ T8382] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.073184][ T8423] netlink: 'syz.1.644': attribute type 2 has an invalid length. [ 168.187132][ T8423] þ: entered promiscuous mode [ 168.262771][ T8427] bridge_slave_0: left allmulticast mode [ 168.275002][ T8427] bridge_slave_0: left promiscuous mode [ 168.303734][ T8427] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.375656][ T8438] netlink: 'syz.4.646': attribute type 10 has an invalid length. [ 168.705932][ T8427] bridge_slave_1: left allmulticast mode [ 168.722503][ T8427] bridge_slave_1: left promiscuous mode [ 168.730130][ T8427] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.755633][ T8427] bond0: (slave bond_slave_0): Releasing backup interface [ 168.770489][ T8427] bond0: (slave bond_slave_1): Releasing backup interface [ 168.782650][ T8427] team0: Port device team_slave_0 removed [ 168.791752][ T8427] team0: Port device 56Àÿ removed [ 168.797685][ T8427] batman_adv: batadv0: Removing interface: 26±ÿ [ 168.805258][ T8427] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 168.833337][ T7540] lo speed is unknown, defaulting to 1000 [ 168.902872][ T8438] bond0: (slave wlan1): Opening slave failed [ 169.005646][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.034473][ T8439] syz.4.646 (8439) used greatest stack depth: 17808 bytes left [ 169.107829][ T13] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.148030][ T1143] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.156401][ T1143] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.242247][ T8448] netlink: ct family unspecified [ 169.256648][ T8448] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.274142][ T8448] __nla_validate_parse: 8 callbacks suppressed [ 169.274163][ T8448] netlink: 16 bytes leftover after parsing attributes in process `syz.1.649'. [ 169.314296][ T8448] netlink: 'syz.1.649': attribute type 1 has an invalid length. [ 169.833905][ T8478] netlink: 16386 bytes leftover after parsing attributes in process `syz.1.656'. [ 169.859300][ T8481] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'. [ 169.912864][ T8485] netlink: 16 bytes leftover after parsing attributes in process `syz.4.657'. [ 169.939123][ T8487] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 169.959751][ T8487] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 169.998511][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 170.074174][ T8499] netlink: 16 bytes leftover after parsing attributes in process `syz.0.660'. [ 170.355715][ T8516] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan1, syncid = 3, id = 0 [ 170.428714][ T8520] netlink: 8 bytes leftover after parsing attributes in process `syz.4.667'. [ 170.674713][ T8532] lo speed is unknown, defaulting to 1000 [ 172.202563][ T8555] lo speed is unknown, defaulting to 1000 [ 172.375055][ T8572] netlink: 32 bytes leftover after parsing attributes in process `syz.2.682'. [ 172.404444][ T8577] netlink: 72 bytes leftover after parsing attributes in process `syz.0.683'. [ 172.451897][ T8580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.681'. [ 172.582130][ T8576] macvlan2: entered allmulticast mode [ 172.601351][ T8576] hsr0: entered allmulticast mode [ 172.606721][ T8576] hsr_slave_0: entered allmulticast mode [ 172.612821][ T8576] hsr_slave_1: entered allmulticast mode [ 172.899444][ T8576] hsr0: left allmulticast mode [ 172.905330][ T8576] hsr_slave_0: left allmulticast mode [ 172.911628][ T8576] hsr_slave_1: left allmulticast mode [ 173.206646][ T8616] tipc: Failed to remove unknown binding: 66,1,1/0:2495501761/2495501763 [ 173.635524][ T8642] netlink: 'syz.3.699': attribute type 14 has an invalid length. [ 173.683917][ T8642] netlink: 'syz.3.699': attribute type 14 has an invalid length. [ 174.121750][ T8665] : entered promiscuous mode [ 174.173535][ T8666] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.284728][ T8666] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.346650][ T8669] lo speed is unknown, defaulting to 1000 [ 174.410839][ T8679] __nla_validate_parse: 6 callbacks suppressed [ 174.410860][ T8679] netlink: 10 bytes leftover after parsing attributes in process `syz.1.711'. [ 174.445763][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 174.452086][ T8672] lo speed is unknown, defaulting to 1000 [ 174.555629][ T8666] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.784924][ T8666] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.799404][ T8696] netlink: 'syz.1.716': attribute type 4 has an invalid length. [ 174.924672][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.718'. [ 175.375440][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.399419][ T8713] netlink: 56 bytes leftover after parsing attributes in process `syz.1.720'. [ 175.432302][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.720'. [ 175.456024][ T37] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.505375][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz.1.720'. [ 175.522430][ T37] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.612306][ T37] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.045770][ T8731] netlink: 20 bytes leftover after parsing attributes in process `syz.0.725'. [ 176.171587][ T8735] netlink: 20 bytes leftover after parsing attributes in process `syz.2.726'. [ 176.475187][ T8748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.729'. [ 176.565100][ T8733] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.573020][ T8733] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.191030][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.732'. [ 177.366898][ T8786] netlink: 'syz.1.735': attribute type 13 has an invalid length. [ 177.381069][ T8786] netlink: 'syz.1.735': attribute type 17 has an invalid length. [ 177.790696][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.860627][ T8733] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.502341][ T8786] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.544737][ T1135] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.567712][ T1135] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.585897][ T8810] netlink: 'syz.0.737': attribute type 1 has an invalid length. [ 178.597297][ T8801] macvtap1: entered allmulticast mode [ 178.603557][ T8801] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 178.612750][ T8801] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 178.647134][ T8808] ip6erspan0: entered promiscuous mode [ 178.654678][ T1135] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.670380][ T13] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.723992][ T8810] 8021q: adding VLAN 0 to HW filter on device bond3 [ 178.742024][ T8792] lo speed is unknown, defaulting to 1000 [ 178.780435][ T8811] bond3: (slave veth7): Enslaving as an active interface with a down link [ 178.841015][ T8815] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 178.863654][ T8815] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 179.719687][ T8840] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 180.162414][ T8853] __nla_validate_parse: 3 callbacks suppressed [ 180.162434][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz.2.747'. [ 180.485025][ T8868] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.495773][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.2.754'. [ 180.504860][ T8874] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 180.524827][ T8871] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 180.540176][ T8871] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 180.913932][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.758'. [ 180.932051][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.760'. [ 180.971674][ T8899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.761'. [ 180.987492][ T8899] netlink: 3 bytes leftover after parsing attributes in process `syz.0.761'. [ 181.183493][ T8907] netlink: 76 bytes leftover after parsing attributes in process `syz.1.764'. [ 181.213126][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.0.766'. [ 181.261227][ T8911] lo speed is unknown, defaulting to 1000 [ 181.287112][ T8916] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 181.307632][ T8916] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 181.319457][ T8916] IPVS: nq: FWM 3 0x00000003 - no destination available [ 181.339841][ C0] IPVS: nq: FWM 3 0x00000003 - no destination available [ 181.400286][ T8921] netlink: 56 bytes leftover after parsing attributes in process `syz.3.767'. [ 181.438846][ T8921] netlink: 24 bytes leftover after parsing attributes in process `syz.3.767'. [ 182.232410][ T8956] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 182.275008][ T8960] netlink: 'syz.0.781': attribute type 14 has an invalid length. [ 182.386869][ T8969] FAULT_INJECTION: forcing a failure. [ 182.386869][ T8969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.412814][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.2.782 Not tainted syzkaller #0 PREEMPT(full) [ 182.412842][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.412854][ T8969] Call Trace: [ 182.412862][ T8969] [ 182.412870][ T8969] dump_stack_lvl+0x189/0x250 [ 182.412899][ T8969] ? __pfx____ratelimit+0x10/0x10 [ 182.412921][ T8969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.412945][ T8969] ? __pfx__printk+0x10/0x10 [ 182.412972][ T8969] ? __might_fault+0xb0/0x130 [ 182.413011][ T8969] should_fail_ex+0x414/0x560 [ 182.413044][ T8969] _copy_from_user+0x2d/0xb0 [ 182.413068][ T8969] ___sys_recvmsg+0x12e/0x510 [ 182.413100][ T8969] ? __pfx____sys_recvmsg+0x10/0x10 [ 182.413159][ T8969] ? __might_fault+0xb0/0x130 [ 182.413187][ T8969] do_recvmmsg+0x307/0x770 [ 182.413219][ T8969] ? __pfx_do_recvmmsg+0x10/0x10 [ 182.413256][ T8969] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 182.413297][ T8969] __x64_sys_recvmmsg+0x190/0x240 [ 182.413326][ T8969] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 182.413349][ T8969] ? rcu_is_watching+0x15/0xb0 [ 182.413375][ T8969] ? do_syscall_64+0xbe/0x3b0 [ 182.413401][ T8969] do_syscall_64+0xfa/0x3b0 [ 182.413422][ T8969] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.413442][ T8969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.413461][ T8969] ? clear_bhb_loop+0x60/0xb0 [ 182.413485][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.413503][ T8969] RIP: 0033:0x7ff37d58eba9 [ 182.413521][ T8969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.413536][ T8969] RSP: 002b:00007ff37e3cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 182.413556][ T8969] RAX: ffffffffffffffda RBX: 00007ff37d7d5fa0 RCX: 00007ff37d58eba9 [ 182.413570][ T8969] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 182.413582][ T8969] RBP: 00007ff37e3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 182.413593][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 182.413603][ T8969] R13: 00007ff37d7d6038 R14: 00007ff37d7d5fa0 R15: 00007ffd79fb00c8 [ 182.413634][ T8969] [ 182.483514][ T8977] netlink: 'syz.4.783': attribute type 5 has an invalid length. [ 182.665635][ T8977] netlink: 'syz.4.783': attribute type 7 has an invalid length. [ 182.687419][ T8977] : entered promiscuous mode [ 182.852538][ T8991] lo speed is unknown, defaulting to 1000 [ 183.033864][ T8998] lo speed is unknown, defaulting to 1000 [ 183.444987][ T9014] lo speed is unknown, defaulting to 1000 [ 183.682501][ T9025] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 183.697120][ T9025] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 183.722807][ T9025] IPVS: nq: FWM 3 0x00000003 - no destination available [ 183.749654][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 183.991308][ T9032] tipc: Enabled bearer , priority 0 [ 184.106734][ T9032] syzkaller0: entered promiscuous mode [ 184.117469][ T9032] syzkaller0: entered allmulticast mode [ 184.131672][ T9032] tipc: Resetting bearer [ 184.251914][ T9030] tipc: Resetting bearer [ 184.495841][ T9055] xt_l2tp: v2 tid > 0xffff: 37482740 [ 184.820679][ T9064] netlink: 'syz.2.807': attribute type 6 has an invalid length. [ 185.099152][ T8756] tipc: Node number set to 3653931324 [ 186.117677][ T9030] tipc: Disabling bearer [ 186.283997][ T9053] ipvlan2: entered promiscuous mode [ 186.371413][ T9070] netlink: 'syz.1.810': attribute type 10 has an invalid length. [ 186.388012][ T9070] __nla_validate_parse: 8 callbacks suppressed [ 186.388029][ T9070] netlink: 40 bytes leftover after parsing attributes in process `syz.1.810'. [ 186.396730][ T9077] tipc: Enabled bearer , priority 0 [ 186.453543][ T9070] geneve0: entered promiscuous mode [ 186.473691][ T9070] team0: Port device geneve0 added [ 186.483530][ T9077] syzkaller0: entered promiscuous mode [ 186.489754][ T9077] syzkaller0: entered allmulticast mode [ 186.593628][ T9080] tipc: Resetting bearer [ 186.628796][ T9083] netlink: 8 bytes leftover after parsing attributes in process `syz.1.814'. [ 186.748462][ T9088] netlink: 204 bytes leftover after parsing attributes in process `syz.1.817'. [ 186.796700][ T9095] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 186.850484][ T9094] FAULT_INJECTION: forcing a failure. [ 186.850484][ T9094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.893676][ T5867] cgroup: fork rejected by pids controller in /syz1 [ 186.938213][ T9094] CPU: 0 UID: 0 PID: 9094 Comm: syz.3.818 Not tainted syzkaller #0 PREEMPT(full) [ 186.938242][ T9094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 186.938253][ T9094] Call Trace: [ 186.938262][ T9094] [ 186.938270][ T9094] dump_stack_lvl+0x189/0x250 [ 186.938301][ T9094] ? __pfx____ratelimit+0x10/0x10 [ 186.938323][ T9094] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.938347][ T9094] ? __pfx__printk+0x10/0x10 [ 186.938374][ T9094] ? __might_fault+0xb0/0x130 [ 186.938414][ T9094] should_fail_ex+0x414/0x560 [ 186.938446][ T9094] _copy_from_user+0x2d/0xb0 [ 186.938471][ T9094] ___sys_recvmsg+0x12e/0x510 [ 186.938504][ T9094] ? __pfx____sys_recvmsg+0x10/0x10 [ 186.938563][ T9094] ? __might_fault+0xb0/0x130 [ 186.938594][ T9094] do_recvmmsg+0x307/0x770 [ 186.938635][ T9094] ? __pfx_do_recvmmsg+0x10/0x10 [ 186.938674][ T9094] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 186.938717][ T9094] __x64_sys_recvmmsg+0x190/0x240 [ 186.938745][ T9094] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 186.938769][ T9094] ? rcu_is_watching+0x15/0xb0 [ 186.938795][ T9094] ? do_syscall_64+0xbe/0x3b0 [ 186.938822][ T9094] do_syscall_64+0xfa/0x3b0 [ 186.938843][ T9094] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.938863][ T9094] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.938883][ T9094] ? clear_bhb_loop+0x60/0xb0 [ 186.938907][ T9094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.938925][ T9094] RIP: 0033:0x7f135db8eba9 [ 186.938942][ T9094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.938959][ T9094] RSP: 002b:00007f135ea58038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 186.938979][ T9094] RAX: ffffffffffffffda RBX: 00007f135ddd5fa0 RCX: 00007f135db8eba9 [ 186.938993][ T9094] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 186.939006][ T9094] RBP: 00007f135ea58090 R08: 0000000000000000 R09: 0000000000000000 [ 186.939018][ T9094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.939029][ T9094] R13: 00007f135ddd6038 R14: 00007f135ddd5fa0 R15: 00007ffe83845e98 [ 186.939061][ T9094] [ 187.225573][ T9076] tipc: Resetting bearer [ 187.262927][ T9109] netlink: 76 bytes leftover after parsing attributes in process `syz.0.821'. [ 187.321064][ T9076] tipc: Disabling bearer [ 187.642336][ T8765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.669733][ T8765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.686278][ T8765] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.733222][ T9127] netlink: 'syz.4.825': attribute type 4 has an invalid length. [ 187.840605][ T8765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.857182][ T8765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.868881][ T8765] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 187.948908][ T8765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 187.963224][ T8765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.975237][ T8765] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.081109][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 188.129994][ T8765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.150898][ T8765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.176579][ T8765] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 188.229402][ T9137] netlink: 32 bytes leftover after parsing attributes in process `syz.4.830'. [ 188.246044][ T9137] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 188.616890][ T9162] netlink: 76 bytes leftover after parsing attributes in process `syz.0.837'. [ 188.825521][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.842028][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.872443][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.882542][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.890623][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 188.920203][ T5182] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 188.928083][ T5182] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 188.936595][ T5182] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 188.946290][ T5182] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 188.955259][ T5182] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.161752][ T8765] geneve0 (unregistering): left promiscuous mode [ 189.169906][ T8765] team0: Port device geneve0 removed [ 189.280681][ T9182] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 189.289090][ T9182] netlink: 'syz.0.840': attribute type 1 has an invalid length. [ 189.319497][ T8765] bond0 (unregistering): Released all slaves [ 189.335257][ T8765] bond1 (unregistering): (slave vcan1): Releasing backup interface [ 189.345162][ T8765] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 189.355984][ T8765] bond1 (unregistering): Released all slaves [ 189.492960][ T8765] bond2 (unregistering): Released all slaves [ 189.692224][ T9169] lo speed is unknown, defaulting to 1000 [ 189.758392][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.4.842'. [ 190.000176][ T9206] IPVS: set_ctl: invalid protocol: 33 172.20.20.29:20002 [ 190.040633][ T9199] IPVS: set_ctl: invalid protocol: 255 224.0.0.2:20002 [ 190.217574][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 190.468441][ T9212] lo speed is unknown, defaulting to 1000 [ 190.517742][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.537567][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.557051][ T9169] bridge_slave_0: entered allmulticast mode [ 190.571902][ T9169] bridge_slave_0: entered promiscuous mode [ 190.630824][ T9229] macsec1: entered promiscuous mode [ 190.639142][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.652635][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.660566][ T9169] bridge_slave_1: entered allmulticast mode [ 190.668859][ T9169] bridge_slave_1: entered promiscuous mode [ 190.693908][ T9214] lo speed is unknown, defaulting to 1000 [ 190.922907][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.964626][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.048075][ T51] Bluetooth: hci0: command tx timeout [ 191.220413][ T9169] team0: Port device team_slave_0 added [ 191.237584][ T9236] netlink: 36 bytes leftover after parsing attributes in process `syz.2.854'. [ 191.304910][ T9169] team0: Port device team_slave_1 added [ 191.342305][ T8765] þ: left promiscuous mode [ 191.411673][ T9238] lo speed is unknown, defaulting to 1000 [ 191.479043][ T8765] : left promiscuous mode [ 191.523548][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.531578][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.558254][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.572682][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.579921][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.606558][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.630489][ T8765] tipc: Left network mode [ 191.913546][ T9248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 192.027797][ T9244] vlan3: entered promiscuous mode [ 192.033443][ T9244] vlan3: entered allmulticast mode [ 192.039238][ T9244] hsr_slave_1: entered allmulticast mode [ 192.104478][ T9169] hsr_slave_0: entered promiscuous mode [ 192.120625][ T9169] hsr_slave_1: entered promiscuous mode [ 192.160255][ T9169] debugfs: 'hsr0' already exists in 'hsr' [ 192.166065][ T9169] Cannot create hsr debugfs directory [ 192.290945][ T9257] tipc: Enabling of bearer rejected, failed to enable media [ 192.355089][ T8765] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 192.561870][ T8765] hsr_slave_0: left promiscuous mode [ 192.587733][ T8765] hsr_slave_1: left promiscuous mode [ 192.635042][ T8765] veth1_macvtap: left promiscuous mode [ 192.641191][ T8765] veth0_macvtap: left promiscuous mode [ 192.647886][ T8765] veth1_vlan: left promiscuous mode [ 192.653559][ T8765] veth0_vlan: left promiscuous mode [ 192.811164][ T8765] pimreg (unregistering): left allmulticast mode [ 192.832032][ T8765] pim6reg (unregistering): left allmulticast mode [ 193.128285][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 194.190148][ T9267] lo speed is unknown, defaulting to 1000 [ 194.382662][ T9283] netlink: 'syz.0.865': attribute type 10 has an invalid length. [ 194.412122][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424855][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.442628][ T9287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 194.795255][ T8756] lo speed is unknown, defaulting to 1000 [ 194.801254][ T8756] syz2: Port: 1 Link DOWN [ 194.844659][ T9283] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.852926][ T9283] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.880303][ T9283] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.887625][ T9283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.895200][ T9283] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.902441][ T9283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.929301][ T9283] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 194.938405][ T9287] bridge_slave_1: left allmulticast mode [ 194.944117][ T9287] bridge_slave_1: left promiscuous mode [ 194.951613][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.961443][ T9287] bridge_slave_0: left allmulticast mode [ 194.967215][ T9287] bridge_slave_0: left promiscuous mode [ 194.975627][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.007307][ T9287] bond0: (slave bridge0): Releasing backup interface [ 195.092091][ T12] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.100811][ T12] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.169089][ T12] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.208059][ T5182] Bluetooth: hci0: command 0x041b tx timeout [ 195.255255][ T12] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.381610][ T9298] lo speed is unknown, defaulting to 1000 [ 195.443556][ T8765] IPVS: stop unused estimator thread 0... [ 195.768221][ T9304] lo speed is unknown, defaulting to 1000 [ 196.050071][ T9169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 196.094758][ T9169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 196.151677][ T9169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 196.182810][ T9169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 196.220775][ T9325] FAULT_INJECTION: forcing a failure. [ 196.220775][ T9325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.267134][ T9325] CPU: 1 UID: 0 PID: 9325 Comm: syz.4.877 Not tainted syzkaller #0 PREEMPT(full) [ 196.267161][ T9325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 196.267172][ T9325] Call Trace: [ 196.267180][ T9325] [ 196.267188][ T9325] dump_stack_lvl+0x189/0x250 [ 196.267216][ T9325] ? __pfx____ratelimit+0x10/0x10 [ 196.267238][ T9325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.267261][ T9325] ? __pfx__printk+0x10/0x10 [ 196.267289][ T9325] ? __might_fault+0xb0/0x130 [ 196.267327][ T9325] should_fail_ex+0x414/0x560 [ 196.267359][ T9325] _copy_from_user+0x2d/0xb0 [ 196.267383][ T9325] ___sys_recvmsg+0x12e/0x510 [ 196.267415][ T9325] ? __pfx____sys_recvmsg+0x10/0x10 [ 196.267473][ T9325] ? __might_fault+0xb0/0x130 [ 196.267503][ T9325] do_recvmmsg+0x307/0x770 [ 196.267537][ T9325] ? __pfx_do_recvmmsg+0x10/0x10 [ 196.267574][ T9325] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.267616][ T9325] __x64_sys_recvmmsg+0x190/0x240 [ 196.267645][ T9325] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 196.267668][ T9325] ? rcu_is_watching+0x15/0xb0 [ 196.267693][ T9325] ? do_syscall_64+0xbe/0x3b0 [ 196.267719][ T9325] do_syscall_64+0xfa/0x3b0 [ 196.267739][ T9325] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.267759][ T9325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.267777][ T9325] ? clear_bhb_loop+0x60/0xb0 [ 196.267801][ T9325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.267826][ T9325] RIP: 0033:0x7fcb0518eba9 [ 196.267847][ T9325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.267862][ T9325] RSP: 002b:00007fcb060c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 196.267882][ T9325] RAX: ffffffffffffffda RBX: 00007fcb053d5fa0 RCX: 00007fcb0518eba9 [ 196.267895][ T9325] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 196.267907][ T9325] RBP: 00007fcb060c5090 R08: 0000000000000000 R09: 0000000000000000 [ 196.267918][ T9325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 196.267929][ T9325] R13: 00007fcb053d6038 R14: 00007fcb053d5fa0 R15: 00007ffc36d163c8 [ 196.267960][ T9325] [ 196.561211][ T9334] netlink: 268 bytes leftover after parsing attributes in process `syz.3.879'. [ 196.812709][ T9351] netlink: 'syz.2.884': attribute type 4 has an invalid length. [ 197.033713][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.057700][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.122779][ T9169] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 197.163849][ T9169] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 197.231439][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.238713][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.287956][ T51] Bluetooth: hci0: command 0x041b tx timeout [ 197.315060][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.322302][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.504455][ T9367] netlink: 'syz.3.888': attribute type 10 has an invalid length. [ 197.517223][ T9368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 197.524719][ T9372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.887'. [ 197.556563][ T9367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.888'. [ 197.875271][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.986226][ T9169] veth0_vlan: entered promiscuous mode [ 198.012613][ T9169] veth1_vlan: entered promiscuous mode [ 198.049531][ T9382] tc_dump_action: action bad kind [ 198.133822][ T9169] veth0_macvtap: entered promiscuous mode [ 198.164877][ T9169] veth1_macvtap: entered promiscuous mode [ 198.203306][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.237241][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.308895][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.328379][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.471052][ T9385] FAULT_INJECTION: forcing a failure. [ 198.471052][ T9385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.495907][ T9385] CPU: 0 UID: 0 PID: 9385 Comm: syz.0.891 Not tainted syzkaller #0 PREEMPT(full) [ 198.495933][ T9385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.495944][ T9385] Call Trace: [ 198.495952][ T9385] [ 198.495959][ T9385] dump_stack_lvl+0x189/0x250 [ 198.495986][ T9385] ? __pfx____ratelimit+0x10/0x10 [ 198.496007][ T9385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.496029][ T9385] ? __pfx__printk+0x10/0x10 [ 198.496054][ T9385] ? __might_fault+0xb0/0x130 [ 198.496097][ T9385] should_fail_ex+0x414/0x560 [ 198.496127][ T9385] _copy_from_user+0x2d/0xb0 [ 198.496150][ T9385] ___sys_recvmsg+0x12e/0x510 [ 198.496184][ T9385] ? __pfx____sys_recvmsg+0x10/0x10 [ 198.496240][ T9385] ? __might_fault+0xb0/0x130 [ 198.496269][ T9385] do_recvmmsg+0x307/0x770 [ 198.496302][ T9385] ? __pfx_do_recvmmsg+0x10/0x10 [ 198.496338][ T9385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.496379][ T9385] __x64_sys_recvmmsg+0x190/0x240 [ 198.496406][ T9385] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 198.496427][ T9385] ? rcu_is_watching+0x15/0xb0 [ 198.496451][ T9385] ? do_syscall_64+0xbe/0x3b0 [ 198.496476][ T9385] do_syscall_64+0xfa/0x3b0 [ 198.496495][ T9385] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.496520][ T9385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.496539][ T9385] ? clear_bhb_loop+0x60/0xb0 [ 198.496561][ T9385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.496579][ T9385] RIP: 0033:0x7fbffa98eba9 [ 198.496595][ T9385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.496610][ T9385] RSP: 002b:00007fbffb7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 198.496629][ T9385] RAX: ffffffffffffffda RBX: 00007fbffabd5fa0 RCX: 00007fbffa98eba9 [ 198.496643][ T9385] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 198.496654][ T9385] RBP: 00007fbffb7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 198.496665][ T9385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 198.496676][ T9385] R13: 00007fbffabd6038 R14: 00007fbffabd5fa0 R15: 00007fff67108018 [ 198.496706][ T9385] [ 198.922257][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.933027][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.136762][ T9405] netlink: 68 bytes leftover after parsing attributes in process `syz.4.897'. [ 199.237493][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.278010][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.362142][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.396905][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.649177][ T9425] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 200.147144][ T9440] netlink: 28 bytes leftover after parsing attributes in process `syz.2.904'. [ 200.210821][ T9440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.904'. [ 200.392730][ T9459] netlink: 68 bytes leftover after parsing attributes in process `syz.0.909'. [ 200.799764][ T9494] netlink: 76 bytes leftover after parsing attributes in process `syz.0.917'. [ 200.913615][ T9498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.918'. [ 200.923909][ T9498] veth1_macvtap: left promiscuous mode [ 201.275872][ T9516] tipc: Enabling of bearer rejected, already enabled [ 201.541094][ T9527] netlink: 'syz.0.927': attribute type 10 has an invalid length. [ 202.113627][ T9561] team_slave_0: entered promiscuous mode [ 202.119627][ T9561] team_slave_1: entered promiscuous mode [ 202.128975][ T9561] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 202.154611][ T9557] netlink: 'syz.0.935': attribute type 10 has an invalid length. [ 202.214081][ T9557] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 202.254497][ T9567] wireguard0: entered promiscuous mode [ 202.260630][ T9567] wireguard0: entered allmulticast mode [ 202.607761][ T9587] lo speed is unknown, defaulting to 1000 [ 202.790983][ T9601] FAULT_INJECTION: forcing a failure. [ 202.790983][ T9601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.824337][ T9601] CPU: 0 UID: 0 PID: 9601 Comm: syz.4.946 Not tainted syzkaller #0 PREEMPT(full) [ 202.824363][ T9601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.824374][ T9601] Call Trace: [ 202.824381][ T9601] [ 202.824390][ T9601] dump_stack_lvl+0x189/0x250 [ 202.824417][ T9601] ? __pfx____ratelimit+0x10/0x10 [ 202.824438][ T9601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.824460][ T9601] ? __pfx__printk+0x10/0x10 [ 202.824486][ T9601] ? __might_fault+0xb0/0x130 [ 202.824523][ T9601] should_fail_ex+0x414/0x560 [ 202.824554][ T9601] _copy_from_user+0x2d/0xb0 [ 202.824577][ T9601] ___sys_recvmsg+0x12e/0x510 [ 202.824607][ T9601] ? __pfx____sys_recvmsg+0x10/0x10 [ 202.824662][ T9601] ? __might_fault+0xb0/0x130 [ 202.824691][ T9601] do_recvmmsg+0x307/0x770 [ 202.824724][ T9601] ? __pfx_do_recvmmsg+0x10/0x10 [ 202.824760][ T9601] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 202.824800][ T9601] __x64_sys_recvmmsg+0x190/0x240 [ 202.824827][ T9601] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 202.824849][ T9601] ? rcu_is_watching+0x15/0xb0 [ 202.824873][ T9601] ? do_syscall_64+0xbe/0x3b0 [ 202.824902][ T9601] do_syscall_64+0xfa/0x3b0 [ 202.824922][ T9601] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.824940][ T9601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.824959][ T9601] ? clear_bhb_loop+0x60/0xb0 [ 202.824982][ T9601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.825000][ T9601] RIP: 0033:0x7fcb0518eba9 [ 202.825015][ T9601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.825030][ T9601] RSP: 002b:00007fcb060c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 202.825049][ T9601] RAX: ffffffffffffffda RBX: 00007fcb053d5fa0 RCX: 00007fcb0518eba9 [ 202.825062][ T9601] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 202.825073][ T9601] RBP: 00007fcb060c5090 R08: 0000000000000000 R09: 0000000000000000 [ 202.825084][ T9601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 202.825094][ T9601] R13: 00007fcb053d6038 R14: 00007fcb053d5fa0 R15: 00007ffc36d163c8 [ 202.825129][ T9601] [ 203.215211][ T9612] lo speed is unknown, defaulting to 1000 [ 203.267402][ T9615] siw: device registration error -23 [ 203.457505][ T9624] sctp: [Deprecated]: syz.0.951 (pid 9624) Use of int in max_burst socket option. [ 203.457505][ T9624] Use struct sctp_assoc_value instead [ 203.769281][ T9631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.848919][ T9631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.875630][ T9641] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.958064][ T9634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.991615][ T9631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.079761][ T9652] tipc: Enabled bearer , priority 0 [ 204.162909][ T9650] tipc: Disabling bearer [ 205.230854][ T9683] netlink: 'syz.2.968': attribute type 8 has an invalid length. [ 205.239098][ T9683] __nla_validate_parse: 4 callbacks suppressed [ 205.239131][ T9683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.968'. [ 205.263416][ T9683] bond0: entered promiscuous mode [ 205.272188][ T9683] bond_slave_0: entered promiscuous mode [ 205.286784][ T9683] bond_slave_1: entered promiscuous mode [ 205.353045][ T9683] bond0: left promiscuous mode [ 205.359684][ T9683] bond_slave_0: left promiscuous mode [ 205.365624][ T9683] bond_slave_1: left promiscuous mode [ 205.713523][ T9698] tipc: Enabled bearer , priority 0 [ 205.756336][ T9697] tipc: Disabling bearer [ 205.804784][ T9701] FAULT_INJECTION: forcing a failure. [ 205.804784][ T9701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.852494][ T9701] CPU: 1 UID: 0 PID: 9701 Comm: syz.3.973 Not tainted syzkaller #0 PREEMPT(full) [ 205.852522][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 205.852534][ T9701] Call Trace: [ 205.852543][ T9701] [ 205.852552][ T9701] dump_stack_lvl+0x189/0x250 [ 205.852582][ T9701] ? __pfx____ratelimit+0x10/0x10 [ 205.852604][ T9701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.852628][ T9701] ? __pfx__printk+0x10/0x10 [ 205.852664][ T9701] ? __might_fault+0xb0/0x130 [ 205.852704][ T9701] should_fail_ex+0x414/0x560 [ 205.852737][ T9701] _copy_from_user+0x2d/0xb0 [ 205.852762][ T9701] ___sys_recvmsg+0x12e/0x510 [ 205.852795][ T9701] ? __pfx____sys_recvmsg+0x10/0x10 [ 205.852855][ T9701] ? __might_fault+0xb0/0x130 [ 205.852887][ T9701] do_recvmmsg+0x307/0x770 [ 205.852923][ T9701] ? __pfx_do_recvmmsg+0x10/0x10 [ 205.852962][ T9701] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 205.853005][ T9701] __x64_sys_recvmmsg+0x190/0x240 [ 205.853035][ T9701] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 205.853059][ T9701] ? rcu_is_watching+0x15/0xb0 [ 205.853085][ T9701] ? do_syscall_64+0xbe/0x3b0 [ 205.853113][ T9701] do_syscall_64+0xfa/0x3b0 [ 205.853136][ T9701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.853155][ T9701] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 205.853176][ T9701] ? clear_bhb_loop+0x60/0xb0 [ 205.853200][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.853220][ T9701] RIP: 0033:0x7f135db8eba9 [ 205.853238][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.853254][ T9701] RSP: 002b:00007f135ea58038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 205.853275][ T9701] RAX: ffffffffffffffda RBX: 00007f135ddd5fa0 RCX: 00007f135db8eba9 [ 205.853290][ T9701] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 205.853303][ T9701] RBP: 00007f135ea58090 R08: 0000000000000000 R09: 0000000000000000 [ 205.853315][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 205.853326][ T9701] R13: 00007f135ddd6038 R14: 00007f135ddd5fa0 R15: 00007ffe83845e98 [ 205.853359][ T9701] [ 206.216253][ T9716] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 206.258183][ T9716] netlink: 'syz.4.976': attribute type 2 has an invalid length. [ 206.335657][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.3.978'. [ 206.688777][ T9735] lo speed is unknown, defaulting to 1000 [ 206.717291][ T9734] bond1: (slave ip6gretap1): making interface the new active one [ 206.726308][ T9734] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 206.896458][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 206.921011][ T9747] netlink: 8 bytes leftover after parsing attributes in process `syz.2.986'. [ 207.065799][ T9753] FAULT_INJECTION: forcing a failure. [ 207.065799][ T9753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 207.105163][ T9753] CPU: 0 UID: 0 PID: 9753 Comm: syz.3.988 Not tainted syzkaller #0 PREEMPT(full) [ 207.105188][ T9753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 207.105199][ T9753] Call Trace: [ 207.105207][ T9753] [ 207.105215][ T9753] dump_stack_lvl+0x189/0x250 [ 207.105242][ T9753] ? __pfx____ratelimit+0x10/0x10 [ 207.105263][ T9753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.105285][ T9753] ? __pfx__printk+0x10/0x10 [ 207.105311][ T9753] ? __might_fault+0xb0/0x130 [ 207.105347][ T9753] should_fail_ex+0x414/0x560 [ 207.105377][ T9753] _copy_from_user+0x2d/0xb0 [ 207.105401][ T9753] ___sys_recvmsg+0x12e/0x510 [ 207.105435][ T9753] ? __pfx____sys_recvmsg+0x10/0x10 [ 207.105489][ T9753] ? __might_fault+0xb0/0x130 [ 207.105518][ T9753] do_recvmmsg+0x307/0x770 [ 207.105551][ T9753] ? __pfx_do_recvmmsg+0x10/0x10 [ 207.105586][ T9753] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 207.105626][ T9753] __x64_sys_recvmmsg+0x190/0x240 [ 207.105653][ T9753] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 207.105675][ T9753] ? rcu_is_watching+0x15/0xb0 [ 207.105698][ T9753] ? do_syscall_64+0xbe/0x3b0 [ 207.105729][ T9753] do_syscall_64+0xfa/0x3b0 [ 207.105749][ T9753] ? lockdep_hardirqs_on+0x9c/0x150 [ 207.105768][ T9753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.105786][ T9753] ? clear_bhb_loop+0x60/0xb0 [ 207.105808][ T9753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.105826][ T9753] RIP: 0033:0x7f135db8eba9 [ 207.105842][ T9753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.105857][ T9753] RSP: 002b:00007f135ea58038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 207.105876][ T9753] RAX: ffffffffffffffda RBX: 00007f135ddd5fa0 RCX: 00007f135db8eba9 [ 207.105889][ T9753] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 207.105900][ T9753] RBP: 00007f135ea58090 R08: 0000000000000000 R09: 0000000000000000 [ 207.105911][ T9753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 207.105922][ T9753] R13: 00007f135ddd6038 R14: 00007f135ddd5fa0 R15: 00007ffe83845e98 [ 207.105951][ T9753] [ 207.106384][ T9750] netlink: 'syz.0.987': attribute type 5 has an invalid length. [ 207.415130][ T9759] vxcan2: entered allmulticast mode [ 207.437297][ T9763] netlink: 37 bytes leftover after parsing attributes in process `syz.3.990'. [ 208.500887][ T9771] !: renamed from dummy0 [ 208.780862][ T9774] lo speed is unknown, defaulting to 1000 [ 208.909214][ T9787] netlink: 36 bytes leftover after parsing attributes in process `syz.2.996'. [ 208.947163][ T9786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.997'. [ 209.244545][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.998'. [ 209.318419][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.999'. [ 209.358114][ T9797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.999'. [ 210.080294][ T9807] syz.2.1002: vmalloc error: size 69206016, failed to allocated page array size 135168, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 210.102651][ T9816] tipc: Enabling of bearer rejected, failed to enable media [ 210.116489][ T9819] tipc: Enabling of bearer rejected, failed to enable media [ 210.124988][ T9807] CPU: 1 UID: 0 PID: 9807 Comm: syz.2.1002 Not tainted syzkaller #0 PREEMPT(full) [ 210.125024][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.125043][ T9807] Call Trace: [ 210.125057][ T9807] [ 210.125071][ T9807] dump_stack_lvl+0x189/0x250 [ 210.125102][ T9807] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 210.125132][ T9807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 210.125156][ T9807] ? __pfx__printk+0x10/0x10 [ 210.125185][ T9807] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.125209][ T9807] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 210.125239][ T9807] warn_alloc+0x214/0x310 [ 210.125277][ T9807] ? __pfx_warn_alloc+0x10/0x10 [ 210.125318][ T9807] ? __get_vm_area_node+0x28f/0x300 [ 210.125347][ T9807] ? nf_tables_newset+0x132b/0x2530 [ 210.125379][ T9807] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 210.125436][ T9807] ? alloc_pages_mpol+0x3cd/0x4a0 [ 210.125468][ T9807] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 210.125511][ T9807] ? rcu_is_watching+0x15/0xb0 [ 210.125533][ T9807] ? nf_tables_newset+0x132b/0x2530 [ 210.125558][ T9807] ? nf_tables_newset+0x132b/0x2530 [ 210.125580][ T9807] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 210.125613][ T9807] ? nf_tables_newset+0x132b/0x2530 [ 210.125637][ T9807] ? nft_table_lookup+0x211/0x230 [ 210.125660][ T9807] ? nft_set_lookup+0x128/0x150 [ 210.125687][ T9807] ? nft_hash_privsize+0x2f/0xf0 [ 210.125710][ T9807] nf_tables_newset+0x132b/0x2530 [ 210.125751][ T9807] ? __pfx_nf_tables_newset+0x10/0x10 [ 210.125800][ T9807] ? __nla_parse+0x40/0x60 [ 210.125822][ T9807] nfnetlink_rcv+0x112f/0x2520 [ 210.125885][ T9807] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 210.125971][ T9807] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.126013][ T9807] netlink_unicast+0x82f/0x9e0 [ 210.126055][ T9807] ? __pfx_netlink_unicast+0x10/0x10 [ 210.126089][ T9807] ? netlink_sendmsg+0x642/0xb30 [ 210.126108][ T9807] ? skb_put+0x11b/0x210 [ 210.126136][ T9807] netlink_sendmsg+0x805/0xb30 [ 210.126168][ T9807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.126194][ T9807] ? aa_sock_msg_perm+0xf1/0x1d0 [ 210.126217][ T9807] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 210.126240][ T9807] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.126263][ T9807] __sock_sendmsg+0x21c/0x270 [ 210.126309][ T9807] ____sys_sendmsg+0x505/0x830 [ 210.126338][ T9807] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.126373][ T9807] ? import_iovec+0x74/0xa0 [ 210.126405][ T9807] ___sys_sendmsg+0x21f/0x2a0 [ 210.126432][ T9807] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.126501][ T9807] ? __fget_files+0x2a/0x420 [ 210.126518][ T9807] ? __fget_files+0x3a0/0x420 [ 210.126547][ T9807] __x64_sys_sendmsg+0x19b/0x260 [ 210.126574][ T9807] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.126610][ T9807] ? rcu_is_watching+0x15/0xb0 [ 210.126635][ T9807] ? do_syscall_64+0xbe/0x3b0 [ 210.126663][ T9807] do_syscall_64+0xfa/0x3b0 [ 210.126684][ T9807] ? lockdep_hardirqs_on+0x9c/0x150 [ 210.126704][ T9807] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.126723][ T9807] ? clear_bhb_loop+0x60/0xb0 [ 210.126748][ T9807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.126766][ T9807] RIP: 0033:0x7ff37d58eba9 [ 210.126785][ T9807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.126802][ T9807] RSP: 002b:00007ff37e3cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.126823][ T9807] RAX: ffffffffffffffda RBX: 00007ff37d7d5fa0 RCX: 00007ff37d58eba9 [ 210.126838][ T9807] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 210.126850][ T9807] RBP: 00007ff37d611e19 R08: 0000000000000000 R09: 0000000000000000 [ 210.126862][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.126873][ T9807] R13: 00007ff37d7d6038 R14: 00007ff37d7d5fa0 R15: 00007ffd79fb00c8 [ 210.126906][ T9807] [ 210.127034][ T9807] Mem-Info: [ 210.158937][ T9827] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 210.170615][ T9807] active_anon:3773 inactive_anon:0 isolated_anon:0 [ 210.170615][ T9807] active_file:3205 inactive_file:39916 isolated_file:0 [ 210.170615][ T9807] unevictable:768 dirty:272 writeback:0 [ 210.170615][ T9807] slab_reclaimable:11974 slab_unreclaimable:118028 [ 210.170615][ T9807] mapped:29101 shmem:1356 pagetables:882 [ 210.170615][ T9807] sec_pagetables:0 bounce:0 [ 210.170615][ T9807] kernel_misc_reclaimable:0 [ 210.170615][ T9807] free:1296618 free_pcp:17471 free_cma:0 [ 210.567635][ T9807] Node 0 active_anon:15292kB inactive_anon:0kB active_file:12820kB inactive_file:159464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116504kB dirty:1088kB writeback:0kB shmem:3888kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12108kB pagetables:3688kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.578343][ T9835] __nla_validate_parse: 5 callbacks suppressed [ 210.578366][ T9835] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1008'. [ 210.668148][ T9807] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 210.731785][ T9807] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 210.770773][ T9807] lowmem_reserve[]: 0 2497 2499 2499 2499 [ 210.787656][ T9835] netlink: 16102 bytes leftover after parsing attributes in process `syz.3.1008'. [ 210.819819][ T9807] Node 0 DMA32 free:1281476kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15240kB inactive_anon:0kB active_file:12820kB inactive_file:157904kB unevictable:1536kB writepending:1084kB present:3129332kB managed:2557400kB mlocked:0kB bounce:0kB free_pcp:50084kB local_pcp:33060kB free_cma:0kB [ 210.956542][ T9807] lowmem_reserve[]: 0 0 1 1 1 [ 210.968766][ T9807] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:4kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 211.072246][ T9807] lowmem_reserve[]: 0 0 0 0 0 [ 211.077396][ T9807] Node 1 Normal free:3889288kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:19944kB local_pcp:10184kB free_cma:0kB [ 211.133740][ T9848] lo speed is unknown, defaulting to 1000 [ 211.168117][ T9807] lowmem_reserve[]: 0 0 0 0 0 [ 211.179237][ T9807] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 211.206880][ T9807] Node 0 DMA32: 419*4kB (ME) 363*8kB (M) 206*16kB (UME) 70*32kB (ME) 51*64kB (UME) 49*128kB (UM) 23*256kB (UME) 13*512kB (UME) 16*1024kB (UME) 6*2048kB (ME) 298*4096kB (UM) = 1281476kB [ 211.277815][ T9855] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 211.305444][ T9807] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 211.346992][ T9807] Node 1 Normal: 192*4kB (UE) 41*8kB (UME) 38*16kB (UME) 81*32kB (UME) 31*64kB (UME) 8*128kB (UME) 2*256kB (M) 5*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 946*4096kB (M) = 3889288kB [ 211.375977][ T9807] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.404776][ T9807] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.417305][ T9807] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 211.427186][ T9807] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 211.436854][ T9807] 44724 total pagecache pages [ 211.441839][ T9807] 0 pages in swap cache [ 211.465806][ T9807] Free swap = 124996kB [ 211.470524][ T9807] Total swap = 124996kB [ 211.474864][ T9807] 2097051 pages RAM [ 211.482697][ T9807] 0 pages HighMem/MovableOnly [ 211.487582][ T9807] 425675 pages reserved [ 211.505487][ T9807] 0 pages cma reserved [ 211.523254][ T9864] netlink: 205296 bytes leftover after parsing attributes in process `syz.0.1014'. [ 211.770779][ T9874] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1020'. [ 211.822344][ T9876] netlink: 'syz.0.1019': attribute type 10 has an invalid length. [ 212.024919][ T9887] tipc: Started in network mode [ 212.039764][ T9887] tipc: Node identity de0be1116335, cluster identity 4711 [ 212.055069][ T9887] tipc: Enabled bearer , priority 0 [ 212.082182][ T9880] syzkaller0: entered promiscuous mode [ 212.087721][ T9880] syzkaller0: entered allmulticast mode [ 212.165831][ T9879] tipc: Resetting bearer [ 212.189801][ T9879] tipc: Disabling bearer [ 212.436582][ T9898] lo speed is unknown, defaulting to 1000 [ 213.083764][ T9925] bond1: entered promiscuous mode [ 213.090774][ T9925] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.615469][ T9955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 213.748947][ T9958] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1044'. [ 213.759572][ T9963] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 213.878299][ T9967] netlink: 'syz.0.1048': attribute type 2 has an invalid length. [ 213.886343][ T9967] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1048'. [ 214.154980][ T9986] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 214.182292][ T9986] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1055'. [ 214.213668][ T9986] netlink: 'syz.2.1055': attribute type 1 has an invalid length. [ 214.219404][ T9984] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1054'. [ 214.231796][ T9986] netlink: 'syz.2.1055': attribute type 2 has an invalid length. [ 214.508767][T10002] team_slave_0: entered promiscuous mode [ 214.514559][T10002] team_slave_1: entered promiscuous mode [ 214.520350][T10002] geneve0: entered promiscuous mode [ 214.535858][T10002] macsec0: entered promiscuous mode [ 214.542452][T10002] team0: entered promiscuous mode [ 214.585698][T10020] veth1_to_bond: entered allmulticast mode [ 214.664229][T10018] veth1_to_bond: left allmulticast mode [ 214.794470][T10024] netlink: 'syz.3.1065': attribute type 4 has an invalid length. [ 214.860662][T10032] vlan0: entered promiscuous mode [ 214.876131][T10032] team0: entered promiscuous mode [ 214.992508][T10036] netlink: 'syz.2.1068': attribute type 66 has an invalid length. [ 215.267446][T10058] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.275914][T10053] lo speed is unknown, defaulting to 1000 [ 215.559906][T10078] sctp: [Deprecated]: syz.4.1083 (pid 10078) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.559906][T10078] Use struct sctp_sack_info instead [ 215.656731][T10072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.403464][T10109] lo speed is unknown, defaulting to 1000 [ 216.441790][T10117] netlink: 'syz.1.1094': attribute type 1 has an invalid length. [ 216.461358][T10117] __nla_validate_parse: 5 callbacks suppressed [ 216.461377][T10117] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1094'. [ 216.515328][T10117] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1094'. [ 216.882967][T10134] netlink: 'syz.3.1098': attribute type 83 has an invalid length. [ 216.897439][T10132] netlink: 'syz.1.1097': attribute type 21 has an invalid length. [ 216.967291][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 216.985623][T10136] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 217.325658][T10157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1106'. [ 217.354320][T10157] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.1106'. [ 217.461755][T10161] openvswitch: netlink: IP tunnel dst address not specified [ 217.648537][T10173] netlink: 'syz.0.1112': attribute type 3 has an invalid length. [ 217.656421][T10173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 217.973291][T10194] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1115'. [ 218.024234][T10196] syz_tun: refused to change device tx_queue_len [ 218.230532][T10205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1122'. [ 218.240164][T10205] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1122'. [ 218.249619][T10205] tipc: Invalid UDP bearer configuration [ 218.249674][T10205] tipc: Enabling of bearer rejected, failed to enable media [ 218.873750][T10236] FAULT_INJECTION: forcing a failure. [ 218.873750][T10236] name failslab, interval 1, probability 0, space 0, times 0 [ 218.898026][T10236] CPU: 0 UID: 0 PID: 10236 Comm: syz.1.1130 Not tainted syzkaller #0 PREEMPT(full) [ 218.898055][T10236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 218.898068][T10236] Call Trace: [ 218.898076][T10236] [ 218.898085][T10236] dump_stack_lvl+0x189/0x250 [ 218.898115][T10236] ? __pfx____ratelimit+0x10/0x10 [ 218.898137][T10236] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.898162][T10236] ? __pfx__printk+0x10/0x10 [ 218.898193][T10236] ? __lock_acquire+0xab9/0xd20 [ 218.898232][T10236] should_fail_ex+0x414/0x560 [ 218.898264][T10236] should_failslab+0xa8/0x100 [ 218.898295][T10236] kmem_cache_alloc_noprof+0x73/0x3c0 [ 218.898321][T10236] ? skb_clone+0x212/0x3a0 [ 218.898351][T10236] skb_clone+0x212/0x3a0 [ 218.898380][T10236] __netlink_deliver_tap+0x404/0x850 [ 218.898415][T10236] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.898438][T10236] netlink_deliver_tap+0x19c/0x1b0 [ 218.898461][T10236] netlink_unicast+0x7fa/0x9e0 [ 218.898501][T10236] ? __pfx_netlink_unicast+0x10/0x10 [ 218.898534][T10236] ? netlink_sendmsg+0x642/0xb30 [ 218.898553][T10236] ? skb_put+0x11b/0x210 [ 218.898578][T10236] netlink_sendmsg+0x805/0xb30 [ 218.898611][T10236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.898636][T10236] ? aa_sock_msg_perm+0xf1/0x1d0 [ 218.898657][T10236] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.898690][T10236] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.898713][T10236] __sock_sendmsg+0x21c/0x270 [ 218.898765][T10236] ____sys_sendmsg+0x505/0x830 [ 218.898798][T10236] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.898834][T10236] ? import_iovec+0x74/0xa0 [ 218.898862][T10236] ___sys_sendmsg+0x21f/0x2a0 [ 218.898890][T10236] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.898959][T10236] ? __fget_files+0x2a/0x420 [ 218.898976][T10236] ? __fget_files+0x3a0/0x420 [ 218.899011][T10236] __x64_sys_sendmsg+0x19b/0x260 [ 218.899041][T10236] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.899077][T10236] ? __pfx_ksys_write+0x10/0x10 [ 218.899101][T10236] ? rcu_is_watching+0x15/0xb0 [ 218.899128][T10236] ? do_syscall_64+0xbe/0x3b0 [ 218.899156][T10236] do_syscall_64+0xfa/0x3b0 [ 218.899177][T10236] ? lockdep_hardirqs_on+0x9c/0x150 [ 218.899198][T10236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.899218][T10236] ? clear_bhb_loop+0x60/0xb0 [ 218.899243][T10236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.899263][T10236] RIP: 0033:0x7fe39278eba9 [ 218.899281][T10236] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.899299][T10236] RSP: 002b:00007fe393537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.899320][T10236] RAX: ffffffffffffffda RBX: 00007fe3929d5fa0 RCX: 00007fe39278eba9 [ 218.899335][T10236] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000011 [ 218.899349][T10236] RBP: 00007fe393537090 R08: 0000000000000000 R09: 0000000000000000 [ 218.899361][T10236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.899373][T10236] R13: 00007fe3929d6038 R14: 00007fe3929d5fa0 R15: 00007ffff6252d38 [ 218.899408][T10236] [ 219.217732][T10236] vlan1: entered promiscuous mode [ 219.225025][T10236] team0: entered promiscuous mode [ 219.674849][T10257] tipc: Enabling of bearer rejected, already enabled [ 219.734404][T10257] validate_nla: 1 callbacks suppressed [ 219.734425][T10257] netlink: 'syz.3.1137': attribute type 2 has an invalid length. [ 220.094924][T10276] netlink: 'syz.0.1144': attribute type 7 has an invalid length. [ 220.252303][T10286] FAULT_INJECTION: forcing a failure. [ 220.252303][T10286] name failslab, interval 1, probability 0, space 0, times 0 [ 220.265075][T10286] CPU: 0 UID: 0 PID: 10286 Comm: syz.0.1146 Not tainted syzkaller #0 PREEMPT(full) [ 220.265102][T10286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 220.265114][T10286] Call Trace: [ 220.265122][T10286] [ 220.265130][T10286] dump_stack_lvl+0x189/0x250 [ 220.265160][T10286] ? __pfx____ratelimit+0x10/0x10 [ 220.265182][T10286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.265205][T10286] ? __pfx__printk+0x10/0x10 [ 220.265231][T10286] ? skb_network_protocol+0x4fe/0x760 [ 220.265258][T10286] ? __lock_acquire+0xab9/0xd20 [ 220.265292][T10286] should_fail_ex+0x414/0x560 [ 220.265324][T10286] should_failslab+0xa8/0x100 [ 220.265356][T10286] kmem_cache_alloc_noprof+0x73/0x3c0 [ 220.265383][T10286] ? skb_clone+0x212/0x3a0 [ 220.265414][T10286] skb_clone+0x212/0x3a0 [ 220.265437][T10286] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 220.265463][T10286] dev_queue_xmit_nit+0x416/0xcc0 [ 220.265485][T10286] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 220.265521][T10286] dev_hard_start_xmit+0x1be/0x830 [ 220.265574][T10286] __dev_queue_xmit+0x1b8d/0x3b50 [ 220.265613][T10286] ? __dev_queue_xmit+0x27b/0x3b50 [ 220.265658][T10286] ? __pfx___dev_queue_xmit+0x10/0x10 [ 220.265701][T10286] ? __copy_skb_header+0xa7/0x550 [ 220.265728][T10286] ? __asan_memcpy+0x40/0x70 [ 220.265772][T10286] ? skb_clone+0x246/0x3a0 [ 220.265801][T10286] __netlink_deliver_tap+0x5ad/0x850 [ 220.265838][T10286] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.265860][T10286] netlink_deliver_tap+0x19c/0x1b0 [ 220.265883][T10286] netlink_unicast+0x7fa/0x9e0 [ 220.265924][T10286] ? __pfx_netlink_unicast+0x10/0x10 [ 220.265956][T10286] ? netlink_sendmsg+0x642/0xb30 [ 220.265975][T10286] ? skb_put+0x11b/0x210 [ 220.266001][T10286] netlink_sendmsg+0x805/0xb30 [ 220.266034][T10286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.266078][T10286] ? aa_sock_msg_perm+0xf1/0x1d0 [ 220.266101][T10286] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.266123][T10286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.266147][T10286] __sock_sendmsg+0x21c/0x270 [ 220.266182][T10286] ____sys_sendmsg+0x505/0x830 [ 220.266215][T10286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.266273][T10286] ? import_iovec+0x74/0xa0 [ 220.266303][T10286] ___sys_sendmsg+0x21f/0x2a0 [ 220.266332][T10286] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.266402][T10286] ? __fget_files+0x2a/0x420 [ 220.266420][T10286] ? __fget_files+0x3a0/0x420 [ 220.266451][T10286] __x64_sys_sendmsg+0x19b/0x260 [ 220.266480][T10286] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.266519][T10286] ? __pfx_ksys_write+0x10/0x10 [ 220.266551][T10286] ? rcu_is_watching+0x15/0xb0 [ 220.266578][T10286] ? do_syscall_64+0xbe/0x3b0 [ 220.266608][T10286] do_syscall_64+0xfa/0x3b0 [ 220.266629][T10286] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.266651][T10286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.266672][T10286] ? clear_bhb_loop+0x60/0xb0 [ 220.266697][T10286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.266717][T10286] RIP: 0033:0x7fbffa98eba9 [ 220.266735][T10286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.266753][T10286] RSP: 002b:00007fbffb7f9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.266775][T10286] RAX: ffffffffffffffda RBX: 00007fbffabd5fa0 RCX: 00007fbffa98eba9 [ 220.266790][T10286] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000011 [ 220.266804][T10286] RBP: 00007fbffb7f9090 R08: 0000000000000000 R09: 0000000000000000 [ 220.266816][T10286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.266828][T10286] R13: 00007fbffabd6038 R14: 00007fbffabd5fa0 R15: 00007fff67108018 [ 220.266864][T10286] [ 220.632835][T10286] vlan0: entered promiscuous mode [ 220.823043][T10293] lo speed is unknown, defaulting to 1000 [ 221.315624][T10318] netlink: 'syz.4.1154': attribute type 13 has an invalid length. [ 221.347222][T10318] netlink: 'syz.4.1154': attribute type 17 has an invalid length. [ 221.596177][T10318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.630318][T10341] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 221.643464][T10318] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.657560][T10341] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 221.667436][T10318] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 221.694361][ T7540] lo speed is unknown, defaulting to 1000 [ 221.704453][T10341] IPVS: lc: FWM 3 0x00000003 - no destination available [ 221.706086][ T7540] syz2: Port: 1 Link ACTIVE [ 221.729837][T10339] kthread_run failed with err -4 [ 221.768599][T10314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.795657][T10352] tipc: Enabling of bearer rejected, already enabled [ 221.861587][T10333] lo speed is unknown, defaulting to 1000 [ 221.996993][T10358] FAULT_INJECTION: forcing a failure. [ 221.996993][T10358] name failslab, interval 1, probability 0, space 0, times 0 [ 222.033809][T10358] CPU: 0 UID: 0 PID: 10358 Comm: syz.1.1163 Not tainted syzkaller #0 PREEMPT(full) [ 222.033839][T10358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.033852][T10358] Call Trace: [ 222.033860][T10358] [ 222.033870][T10358] dump_stack_lvl+0x189/0x250 [ 222.033900][T10358] ? __pfx____ratelimit+0x10/0x10 [ 222.033924][T10358] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.033946][T10358] ? __pfx__printk+0x10/0x10 [ 222.033979][T10358] ? __pfx___might_resched+0x10/0x10 [ 222.033997][T10358] ? fs_reclaim_acquire+0x7d/0x100 [ 222.034020][T10358] should_fail_ex+0x414/0x560 [ 222.034053][T10358] should_failslab+0xa8/0x100 [ 222.034082][T10358] __kmalloc_cache_noprof+0x70/0x3d0 [ 222.034109][T10358] ? rtnl_newlink+0xed/0x1c70 [ 222.034135][T10358] ? kasan_save_free_info+0x46/0x50 [ 222.034160][T10358] rtnl_newlink+0xed/0x1c70 [ 222.034178][T10358] ? netlink_sendmsg+0x805/0xb30 [ 222.034197][T10358] ? __sock_sendmsg+0x21c/0x270 [ 222.034224][T10358] ? ____sys_sendmsg+0x505/0x830 [ 222.034246][T10358] ? ___sys_sendmsg+0x21f/0x2a0 [ 222.034268][T10358] ? __x64_sys_sendmsg+0x19b/0x260 [ 222.034291][T10358] ? do_syscall_64+0xfa/0x3b0 [ 222.034312][T10358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.034342][T10358] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.034389][T10358] ? kasan_quarantine_put+0xdd/0x220 [ 222.034415][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.034443][T10358] ? nlmon_xmit+0xb0/0x100 [ 222.034469][T10358] ? kmem_cache_free+0x18f/0x400 [ 222.034506][T10358] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.034527][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.034550][T10358] ? __local_bh_enable_ip+0x12d/0x1c0 [ 222.034571][T10358] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 222.034596][T10358] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.034623][T10358] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.034647][T10358] ? __dev_queue_xmit+0x27b/0x3b50 [ 222.034676][T10358] ? __dev_queue_xmit+0x1d79/0x3b50 [ 222.034709][T10358] ? __lock_acquire+0xab9/0xd20 [ 222.034768][T10358] ? __pfx_rtnl_newlink+0x10/0x10 [ 222.034788][T10358] rtnetlink_rcv_msg+0x7cc/0xb70 [ 222.034814][T10358] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 222.034834][T10358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.034853][T10358] ? ref_tracker_free+0x63a/0x7d0 [ 222.034884][T10358] ? __asan_memcpy+0x40/0x70 [ 222.034906][T10358] ? __pfx_ref_tracker_free+0x10/0x10 [ 222.034948][T10358] netlink_rcv_skb+0x205/0x470 [ 222.034971][T10358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 222.034995][T10358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 222.035029][T10358] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.035058][T10358] netlink_unicast+0x82f/0x9e0 [ 222.035096][T10358] ? __pfx_netlink_unicast+0x10/0x10 [ 222.035136][T10358] ? netlink_sendmsg+0x642/0xb30 [ 222.035154][T10358] ? skb_put+0x11b/0x210 [ 222.035179][T10358] netlink_sendmsg+0x805/0xb30 [ 222.035211][T10358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.035237][T10358] ? aa_sock_msg_perm+0xf1/0x1d0 [ 222.035258][T10358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.035279][T10358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.035301][T10358] __sock_sendmsg+0x21c/0x270 [ 222.035335][T10358] ____sys_sendmsg+0x505/0x830 [ 222.035364][T10358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.035398][T10358] ? import_iovec+0x74/0xa0 [ 222.035426][T10358] ___sys_sendmsg+0x21f/0x2a0 [ 222.035456][T10358] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.035521][T10358] ? __fget_files+0x2a/0x420 [ 222.035539][T10358] ? __fget_files+0x3a0/0x420 [ 222.035569][T10358] __x64_sys_sendmsg+0x19b/0x260 [ 222.035598][T10358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.035635][T10358] ? __pfx_ksys_write+0x10/0x10 [ 222.035661][T10358] ? rcu_is_watching+0x15/0xb0 [ 222.035687][T10358] ? do_syscall_64+0xbe/0x3b0 [ 222.035715][T10358] do_syscall_64+0xfa/0x3b0 [ 222.035737][T10358] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.035758][T10358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.035777][T10358] ? clear_bhb_loop+0x60/0xb0 [ 222.035802][T10358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.035822][T10358] RIP: 0033:0x7fe39278eba9 [ 222.035840][T10358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.035858][T10358] RSP: 002b:00007fe393537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.035879][T10358] RAX: ffffffffffffffda RBX: 00007fe3929d5fa0 RCX: 00007fe39278eba9 [ 222.035894][T10358] RDX: 0000000000048010 RSI: 0000200000000280 RDI: 0000000000000011 [ 222.035908][T10358] RBP: 00007fe393537090 R08: 0000000000000000 R09: 0000000000000000 [ 222.035920][T10358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.035931][T10358] R13: 00007fe3929d6038 R14: 00007fe3929d5fa0 R15: 00007ffff6252d38 [ 222.035964][T10358] [ 222.082979][T10364] Bluetooth: MGMT ver 1.23 [ 222.681410][T10384] __nla_validate_parse: 14 callbacks suppressed [ 222.681432][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 222.726344][T10384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1166'. [ 223.151249][T10404] lo speed is unknown, defaulting to 1000 [ 223.179413][T10406] netlink: 'syz.1.1176': attribute type 3 has an invalid length. [ 223.189692][T10411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 223.208497][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1175'. [ 223.232370][T10406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 223.288574][T10414] ieee802154 phy0 wpan0: encryption failed: -22 [ 223.370110][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 223.394911][T10408] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1174'. [ 223.803665][T10432] lo speed is unknown, defaulting to 1000 [ 223.878239][T10448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1184'. [ 223.921514][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1184'. [ 224.032284][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1186'. [ 224.046629][T10453] 8021q: VLANs not supported on nlmon0 [ 224.053497][T10455] sch_fq: defrate 0 ignored. [ 224.236712][T10461] IPVS: stopping backup sync thread 9963 ... [ 224.835776][T10480] FAULT_INJECTION: forcing a failure. [ 224.835776][T10480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.889987][T10480] CPU: 0 UID: 0 PID: 10480 Comm: syz.1.1193 Not tainted syzkaller #0 PREEMPT(full) [ 224.890016][T10480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 224.890029][T10480] Call Trace: [ 224.890037][T10480] [ 224.890045][T10480] dump_stack_lvl+0x189/0x250 [ 224.890075][T10480] ? __pfx____ratelimit+0x10/0x10 [ 224.890097][T10480] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.890120][T10480] ? __pfx__printk+0x10/0x10 [ 224.890149][T10480] ? __might_fault+0xb0/0x130 [ 224.890188][T10480] should_fail_ex+0x414/0x560 [ 224.890219][T10480] _copy_from_user+0x2d/0xb0 [ 224.890244][T10480] ___sys_recvmsg+0x12e/0x510 [ 224.890276][T10480] ? __pfx____sys_recvmsg+0x10/0x10 [ 224.890352][T10480] ? __might_fault+0xb0/0x130 [ 224.890384][T10480] do_recvmmsg+0x307/0x770 [ 224.890420][T10480] ? __pfx_do_recvmmsg+0x10/0x10 [ 224.890460][T10480] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 224.890504][T10480] __x64_sys_recvmmsg+0x190/0x240 [ 224.890534][T10480] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 224.890558][T10480] ? rcu_is_watching+0x15/0xb0 [ 224.890585][T10480] ? do_syscall_64+0xbe/0x3b0 [ 224.890613][T10480] do_syscall_64+0xfa/0x3b0 [ 224.890634][T10480] ? lockdep_hardirqs_on+0x9c/0x150 [ 224.890655][T10480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.890675][T10480] ? clear_bhb_loop+0x60/0xb0 [ 224.890700][T10480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.890720][T10480] RIP: 0033:0x7fe39278eba9 [ 224.890738][T10480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.890756][T10480] RSP: 002b:00007fe393537038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 224.890778][T10480] RAX: ffffffffffffffda RBX: 00007fe3929d5fa0 RCX: 00007fe39278eba9 [ 224.890793][T10480] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 224.890807][T10480] RBP: 00007fe393537090 R08: 0000000000000000 R09: 0000000000000000 [ 224.890820][T10480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 224.890832][T10480] R13: 00007fe3929d6038 R14: 00007fe3929d5fa0 R15: 00007ffff6252d38 [ 224.890865][T10480] [ 225.322244][T10498] tipc: Enabled bearer , priority 0 [ 225.451753][T10498] syzkaller0: entered promiscuous mode [ 225.457477][T10498] syzkaller0: entered allmulticast mode [ 225.464851][T10498] tipc: Resetting bearer [ 225.487369][T10497] tipc: Resetting bearer [ 225.528646][T10513] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 226.338168][ T982] tipc: Node number set to 3175014673 [ 227.282703][T10497] tipc: Disabling bearer [ 227.296523][T10524] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.424505][T10524] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.511618][T10524] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.535403][T10542] tipc: Enabling of bearer rejected, already enabled [ 227.544589][T10541] tipc: Enabling of bearer rejected, already enabled [ 227.556528][T10535] FAULT_INJECTION: forcing a failure. [ 227.556528][T10535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.572749][T10535] CPU: 0 UID: 0 PID: 10535 Comm: syz.1.1208 Not tainted syzkaller #0 PREEMPT(full) [ 227.572777][T10535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 227.572789][T10535] Call Trace: [ 227.572797][T10535] [ 227.572806][T10535] dump_stack_lvl+0x189/0x250 [ 227.572835][T10535] ? __pfx____ratelimit+0x10/0x10 [ 227.572866][T10535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.572890][T10535] ? __pfx__printk+0x10/0x10 [ 227.572917][T10535] ? __might_fault+0xb0/0x130 [ 227.572956][T10535] should_fail_ex+0x414/0x560 [ 227.572988][T10535] _copy_from_user+0x2d/0xb0 [ 227.573013][T10535] ___sys_recvmsg+0x12e/0x510 [ 227.573043][T10535] ? __pfx____sys_recvmsg+0x10/0x10 [ 227.573103][T10535] ? __might_fault+0xb0/0x130 [ 227.573135][T10535] do_recvmmsg+0x307/0x770 [ 227.573170][T10535] ? __pfx_do_recvmmsg+0x10/0x10 [ 227.573214][T10535] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 227.573258][T10535] __x64_sys_recvmmsg+0x190/0x240 [ 227.573287][T10535] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 227.573310][T10535] ? rcu_is_watching+0x15/0xb0 [ 227.573335][T10535] ? do_syscall_64+0xbe/0x3b0 [ 227.573362][T10535] do_syscall_64+0xfa/0x3b0 [ 227.573382][T10535] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.573402][T10535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.573422][T10535] ? clear_bhb_loop+0x60/0xb0 [ 227.573446][T10535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.573465][T10535] RIP: 0033:0x7fe39278eba9 [ 227.573482][T10535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.573498][T10535] RSP: 002b:00007fe393537038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 227.573520][T10535] RAX: ffffffffffffffda RBX: 00007fe3929d5fa0 RCX: 00007fe39278eba9 [ 227.573534][T10535] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 227.573547][T10535] RBP: 00007fe393537090 R08: 0000000000000000 R09: 0000000000000000 [ 227.573559][T10535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.573570][T10535] R13: 00007fe3929d6038 R14: 00007fe3929d5fa0 R15: 00007ffff6252d38 [ 227.573620][T10535] [ 227.815467][T10524] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.979886][ T36] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.055886][T10555] tipc: Enabling of bearer rejected, already enabled [ 228.137584][ T1143] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.235662][ T2922] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.257025][T10567] __nla_validate_parse: 6 callbacks suppressed [ 228.257043][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1215'. [ 228.260646][T10566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1216'. [ 228.303914][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1217'. [ 228.318575][ T36] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.437517][T10568] team0: Port device geneve0 removed [ 228.459912][T10571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1218'. [ 228.900826][T10590] lo speed is unknown, defaulting to 1000 [ 229.044334][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1226'. [ 229.102896][T10602] sock: sock_timestamping_bind_phc: sock not bind to device [ 229.213642][T10604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 229.233069][T10604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1228'. [ 229.443966][T10612] lo speed is unknown, defaulting to 1000 [ 229.782243][T10620] tipc: Enabled bearer , priority 0 [ 229.808423][T10621] syzkaller0: entered promiscuous mode [ 229.813958][T10621] syzkaller0: entered allmulticast mode [ 229.892473][T10619] tipc: Resetting bearer [ 229.934979][T10619] tipc: Disabling bearer [ 231.051444][T10663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1241'. [ 231.103920][T10663] vlan3: entered allmulticast mode [ 231.122740][T10663] bridge0: entered allmulticast mode [ 231.367640][T10681] 8021q: adding VLAN 0 to HW filter on device bond3 [ 231.376798][T10681] bridge0: port 3(bond3) entered blocking state [ 231.384739][T10681] bridge0: port 3(bond3) entered disabled state [ 231.391616][T10681] bond3: entered allmulticast mode [ 231.404149][T10681] bond3: entered promiscuous mode [ 231.418755][T10685] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 231.429800][T10681] bridge0: port 3(bond3) entered blocking state [ 231.436366][T10681] bridge0: port 3(bond3) entered forwarding state [ 231.502989][ T8765] bridge0: port 3(bond3) entered disabled state [ 231.539204][T10680] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 231.591342][T10690] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 231.619401][T10686] vlan2: entered allmulticast mode [ 231.624773][T10686] bridge0: entered allmulticast mode [ 231.632380][T10686] bridge3: port 1(vlan2) entered blocking state [ 231.639382][T10686] bridge3: port 1(vlan2) entered disabled state [ 231.670591][T10686] vlan2: entered promiscuous mode [ 231.675758][T10686] bridge0: entered promiscuous mode [ 232.252633][T10712] bridge6: entered allmulticast mode [ 232.672543][T10728] lo speed is unknown, defaulting to 1000 [ 234.591388][T10800] tipc: Started in network mode [ 234.596326][T10800] tipc: Node identity cefeef86c1c3, cluster identity 4711 [ 234.627745][T10804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1279'. [ 234.643920][T10800] tipc: Enabled bearer , priority 0 [ 234.804464][T10810] nft_compat: unsupported protocol 0 [ 234.822732][T10800] tipc: Disabling bearer [ 234.969144][T10820] netlink: 'syz.2.1284': attribute type 4 has an invalid length. [ 234.979658][T10819] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1283'. [ 235.010493][T10819] netlink: 'syz.4.1283': attribute type 1 has an invalid length. [ 235.031483][T10819] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1283'. [ 235.585252][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1282'. [ 235.613154][T10808] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1282'. [ 235.655666][T10835] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1289'. [ 236.495009][T10874] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.502780][T10874] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.535488][T10874] bridge0: entered promiscuous mode [ 236.584360][T10876] macsec0: left promiscuous mode [ 236.597259][T10876] team0: left promiscuous mode [ 236.613972][T10870] lo speed is unknown, defaulting to 1000 [ 236.839656][T10889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1307'. [ 236.869952][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1309'. [ 236.884772][T10892] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1309'. [ 237.297788][T10918] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1316'. [ 237.635905][T10925] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 237.788496][T10938] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 237.917737][T10941] tipc: Enabling of bearer rejected, already enabled [ 238.142479][T10953] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 238.166350][T10953] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 238.195369][T10953] IPVS: nq: FWM 3 0x00000003 - no destination available [ 238.224852][ C1] IPVS: nq: FWM 3 0x00000003 - no destination available [ 238.738085][T10968] netlink: 'syz.2.1332': attribute type 13 has an invalid length. [ 238.746299][T10968] netlink: 'syz.2.1332': attribute type 17 has an invalid length. [ 238.815193][T10968] ip_vti0: left promiscuous mode [ 238.895400][T10968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 238.931962][T10968] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.974900][T10968] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.067459][T10990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.221681][T10991] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.229566][T10991] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.254654][T10994] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 239.282238][T10994] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 239.293321][T10994] IPVS: lc: FWM 3 0x00000003 - no destination available [ 239.419596][T10991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.458707][T10991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.675610][T10992] tipc: Enabling of bearer rejected, failed to enable media [ 239.686212][T10997] netlink: 'syz.3.1337': attribute type 1 has an invalid length. [ 239.702097][T10997] NCSI netlink: No device for ifindex 0 [ 239.710359][ T2922] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.719501][ T2922] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.738223][T10979] lo speed is unknown, defaulting to 1000 [ 239.746517][ T2922] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.762489][ T2922] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.772929][T10971] lo speed is unknown, defaulting to 1000 [ 239.837908][T10970] lo speed is unknown, defaulting to 1000 [ 239.853707][T11004] syzkaller1: entered promiscuous mode [ 239.860132][T11004] syzkaller1: entered allmulticast mode [ 239.905169][T11009] __nla_validate_parse: 7 callbacks suppressed [ 239.905188][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1339'. [ 240.208467][T11015] netem: incorrect ge model size [ 240.214718][T11015] netem: change failed [ 240.246335][T11015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1342'. [ 240.402316][T11022] tipc: Enabling of bearer rejected, failed to enable media [ 240.482181][T11027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1348'. [ 240.647615][T11040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1350'. [ 240.905879][T11051] netlink: ct family unspecified [ 240.938128][T11051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 241.013396][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1353'. [ 241.162118][T11060] netlink: 'syz.0.1355': attribute type 10 has an invalid length. [ 241.212287][T11065] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1357'. [ 241.255899][T11065] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 241.297929][ T5932] IPVS: starting estimator thread 0... [ 241.408645][T11072] IPVS: using max 28 ests per chain, 67200 per kthread [ 241.481632][T11074] netlink: 308 bytes leftover after parsing attributes in process `syz.1.1359'. [ 241.491434][T11074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1359'. [ 241.515042][T11074] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1359'. [ 241.559864][T11076] macvlan1: entered allmulticast mode [ 241.760740][T11089] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1364'. [ 241.775077][T11089] 8021q: VLANs not supported on nlmon0 [ 241.859432][T11092] syzkaller1: entered allmulticast mode [ 241.884306][T11098] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 243.496216][T11189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.575682][T11192] pim6reg1: entered promiscuous mode [ 243.582527][T11192] pim6reg1: entered allmulticast mode [ 243.875690][T11206] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 243.894579][T11206] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 243.963927][T11215] netlink: 'syz.4.1402': attribute type 2 has an invalid length. [ 244.344680][T11222] lo speed is unknown, defaulting to 1000 [ 244.709041][T11246] team0: Device macvtap1 is already an upper device of the team interface [ 245.016123][T11265] netlink: 'syz.0.1412': attribute type 4 has an invalid length. [ 245.182637][T11263] lo speed is unknown, defaulting to 1000 [ 245.255264][T11267] __nla_validate_parse: 10 callbacks suppressed [ 245.255282][T11267] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1413'. [ 245.592835][T11287] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1418'. [ 245.615400][T11286] netlink: 'syz.1.1417': attribute type 11 has an invalid length. [ 245.664011][T11286] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1417'. [ 245.834530][T11291] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 245.899321][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1421'. [ 245.915997][T11303] vlan0: entered promiscuous mode [ 246.033960][T11299] dvmrp1: entered allmulticast mode [ 246.040110][T11304] dvmrp1: left allmulticast mode [ 246.076104][T11310] netlink: 'syz.1.1426': attribute type 1 has an invalid length. [ 246.100540][T11308] FAULT_INJECTION: forcing a failure. [ 246.100540][T11308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.141909][T11308] CPU: 1 UID: 0 PID: 11308 Comm: syz.3.1425 Not tainted syzkaller #0 PREEMPT(full) [ 246.141958][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 246.141984][T11308] Call Trace: [ 246.141993][T11308] [ 246.142002][T11308] dump_stack_lvl+0x189/0x250 [ 246.142033][T11308] ? __pfx____ratelimit+0x10/0x10 [ 246.142056][T11308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.142080][T11308] ? __pfx__printk+0x10/0x10 [ 246.142116][T11308] ? __might_fault+0xb0/0x130 [ 246.142157][T11308] should_fail_ex+0x414/0x560 [ 246.142190][T11308] _copy_from_user+0x2d/0xb0 [ 246.142215][T11308] ___sys_recvmsg+0x12e/0x510 [ 246.142248][T11308] ? __pfx____sys_recvmsg+0x10/0x10 [ 246.142310][T11308] ? __might_fault+0xb0/0x130 [ 246.142341][T11308] do_recvmmsg+0x307/0x770 [ 246.142377][T11308] ? __pfx_do_recvmmsg+0x10/0x10 [ 246.142416][T11308] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 246.142460][T11308] __x64_sys_recvmmsg+0x190/0x240 [ 246.142491][T11308] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 246.142523][T11308] ? do_syscall_64+0xbe/0x3b0 [ 246.142551][T11308] do_syscall_64+0xfa/0x3b0 [ 246.142571][T11308] ? lockdep_hardirqs_on+0x9c/0x150 [ 246.142592][T11308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.142613][T11308] ? clear_bhb_loop+0x60/0xb0 [ 246.142637][T11308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.142657][T11308] RIP: 0033:0x7f135db8eba9 [ 246.142674][T11308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.142692][T11308] RSP: 002b:00007f135ea58038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 246.142713][T11308] RAX: ffffffffffffffda RBX: 00007f135ddd5fa0 RCX: 00007f135db8eba9 [ 246.142728][T11308] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 246.142741][T11308] RBP: 00007f135ea58090 R08: 0000000000000000 R09: 0000000000000000 [ 246.142754][T11308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 246.142766][T11308] R13: 00007f135ddd6038 R14: 00007f135ddd5fa0 R15: 00007ffe83845e98 [ 246.142799][T11308] [ 246.698953][T11332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1435'. [ 246.715903][T11332] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1435'. [ 246.894849][T11342] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1436'. [ 247.048930][T11349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 247.375257][T11363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1441'. [ 247.460776][T11365] FAULT_INJECTION: forcing a failure. [ 247.460776][T11365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.515522][T11365] CPU: 1 UID: 0 PID: 11365 Comm: syz.2.1442 Not tainted syzkaller #0 PREEMPT(full) [ 247.515552][T11365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.515565][T11365] Call Trace: [ 247.515572][T11365] [ 247.515581][T11365] dump_stack_lvl+0x189/0x250 [ 247.515611][T11365] ? __pfx____ratelimit+0x10/0x10 [ 247.515633][T11365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.515657][T11365] ? __pfx__printk+0x10/0x10 [ 247.515685][T11365] ? __might_fault+0xb0/0x130 [ 247.515724][T11365] should_fail_ex+0x414/0x560 [ 247.515757][T11365] _copy_from_user+0x2d/0xb0 [ 247.515782][T11365] ___sys_recvmsg+0x12e/0x510 [ 247.515814][T11365] ? __pfx____sys_recvmsg+0x10/0x10 [ 247.515871][T11365] ? __might_fault+0xb0/0x130 [ 247.515901][T11365] do_recvmmsg+0x307/0x770 [ 247.515934][T11365] ? __pfx_do_recvmmsg+0x10/0x10 [ 247.515973][T11365] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 247.516026][T11365] __x64_sys_recvmmsg+0x190/0x240 [ 247.516055][T11365] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 247.516078][T11365] ? rcu_is_watching+0x15/0xb0 [ 247.516104][T11365] ? do_syscall_64+0xbe/0x3b0 [ 247.516130][T11365] do_syscall_64+0xfa/0x3b0 [ 247.516151][T11365] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.516172][T11365] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.516192][T11365] ? clear_bhb_loop+0x60/0xb0 [ 247.516215][T11365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.516235][T11365] RIP: 0033:0x7ff37d58eba9 [ 247.516252][T11365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.516270][T11365] RSP: 002b:00007ff37e3cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 247.516291][T11365] RAX: ffffffffffffffda RBX: 00007ff37d7d5fa0 RCX: 00007ff37d58eba9 [ 247.516305][T11365] RDX: 0000000000040000 RSI: 0000200000002b80 RDI: 0000000000000005 [ 247.516317][T11365] RBP: 00007ff37e3cc090 R08: 0000000000000000 R09: 0000000000000000 [ 247.516328][T11365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 247.516339][T11365] R13: 00007ff37d7d6038 R14: 00007ff37d7d5fa0 R15: 00007ffd79fb00c8 [ 247.516371][T11365] [ 247.855930][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1447'. [ 248.039853][T11387] vlan0: entered promiscuous mode [ 248.127547][T11384] lo speed is unknown, defaulting to 1000 [ 248.331852][T11394] lo speed is unknown, defaulting to 1000 [ 248.756356][T11424] syzkaller0: entered promiscuous mode [ 248.762149][T11424] syzkaller0: entered allmulticast mode [ 248.849034][T11425] net_ratelimit: 6 callbacks suppressed [ 248.849053][T11425] openvswitch: netlink: Tunnel attr 227 out of range max 16 [ 248.970824][T11425] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 249.002491][T11428] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 249.016756][T11428] IPVS: set_ctl: invalid protocol: 1 10.1.1.1:20001 [ 249.385141][T11454] netlink: 'syz.1.1469': attribute type 5 has an invalid length. [ 249.435187][T11454] ------------[ cut here ]------------ [ 249.441665][T11454] WARNING: CPU: 0 PID: 11454 at net/mac80211/chan.c:844 ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 249.453178][T11454] Modules linked in: [ 249.457304][T11454] CPU: 0 UID: 0 PID: 11454 Comm: syz.1.1469 Not tainted syzkaller #0 PREEMPT(full) [ 249.466781][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.476968][T11454] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 249.484271][T11454] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bb a1 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ce 2d c1 f6 e9 ef f8 ff ff e8 c4 2d c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 b6 2d c1 f6 e9 39 07 00 00 48 83 7c 24 [ 249.504196][T11454] RSP: 0018:ffffc9001aee7220 EFLAGS: 00010283 [ 249.510373][T11454] RAX: ffffffff8afe88d2 RBX: 0000000000000000 RCX: 0000000000080000 [ 249.518455][T11454] RDX: ffffc9000bd43000 RSI: 0000000000001ed5 RDI: 0000000000001ed6 [ 249.526480][T11454] RBP: ffffc9001aee73e0 R08: ffff88803302d737 R09: 1ffff11006605ae6 [ 249.534651][T11454] R10: dffffc0000000000 R11: ffffed1006605ae7 R12: dffffc0000000000 [ 249.542734][T11454] R13: 0000000000000070 R14: ffff88802782a8c0 R15: ffff88802782a8c0 [ 249.550802][T11454] FS: 00007fe3935376c0(0000) GS:ffff888125c14000(0000) knlGS:0000000000000000 [ 249.559835][T11454] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 249.566452][T11454] CR2: 000000110c399846 CR3: 0000000076d00000 CR4: 00000000003526f0 [ 249.574528][T11454] Call Trace: [ 249.577873][T11454] [ 249.580852][T11454] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 249.587749][T11454] ? __pfx___might_resched+0x10/0x10 [ 249.593175][T11454] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 249.599264][T11454] __ieee80211_link_release_channel+0x33b/0x4a0 [ 249.605556][T11454] ieee80211_leave_mesh+0xc5/0x130 [ 249.610751][T11454] cfg80211_leave_mesh+0x290/0x800 [ 249.615914][T11454] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 249.622087][T11454] ? __lock_acquire+0xab9/0xd20 [ 249.626987][T11454] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 249.633570][T11454] ? __lock_acquire+0xab9/0xd20 [ 249.638535][T11454] ? do_raw_spin_lock+0x121/0x290 [ 249.643634][T11454] ? inetdev_event+0x464/0x15b0 [ 249.648627][T11454] ? igmp_netdev_event+0x7c/0x770 [ 249.653713][T11454] notifier_call_chain+0x1b3/0x3e0 [ 249.658918][T11454] __dev_close_many+0x106/0x6f0 [ 249.663804][T11454] ? __lock_acquire+0xab9/0xd20 [ 249.668768][T11454] ? __pfx___dev_close_many+0x10/0x10 [ 249.674299][T11454] ? __mutex_trylock_common+0x153/0x260 [ 249.679969][T11454] netif_close_many+0x225/0x410 [ 249.684863][T11454] ? __pfx_netif_close_many+0x10/0x10 [ 249.690354][T11454] ? __mutex_lock+0x335/0x1350 [ 249.695159][T11454] ? __lock_acquire+0xab9/0xd20 [ 249.700116][T11454] netif_close+0x158/0x210 [ 249.704570][T11454] ? __pfx_netif_close+0x10/0x10 [ 249.709597][T11454] ? __pfx___mutex_lock+0x10/0x10 [ 249.714678][T11454] dev_close+0x10a/0x220 [ 249.719006][T11454] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 249.725195][T11454] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 249.731447][T11454] cfg80211_rfkill_set_block+0x2d/0x50 [ 249.736953][T11454] rfkill_set_block+0x1cf/0x440 [ 249.741905][T11454] rfkill_fop_write+0x44b/0x570 [ 249.746808][T11454] ? __pfx_rfkill_fop_write+0x10/0x10 [ 249.752272][T11454] ? security_kernfs_init_security+0x240/0x290 [ 249.758524][T11454] ? rw_verify_area+0x255/0x4d0 [ 249.763418][T11454] ? __lock_acquire+0xab9/0xd20 [ 249.768399][T11454] ? __pfx_rfkill_fop_write+0x10/0x10 [ 249.773831][T11454] vfs_write+0x27b/0xb30 [ 249.778156][T11454] ? __pfx_vfs_write+0x10/0x10 [ 249.782957][T11454] ? __fget_files+0x2a/0x420 [ 249.787581][T11454] ? __fget_files+0x2a/0x420 [ 249.792274][T11454] ? __fget_files+0x3a0/0x420 [ 249.796991][T11454] ? __fget_files+0x2a/0x420 [ 249.801678][T11454] ksys_write+0x145/0x250 [ 249.806076][T11454] ? __pfx_ksys_write+0x10/0x10 [ 249.811022][T11454] ? rcu_is_watching+0x15/0xb0 [ 249.815829][T11454] ? do_syscall_64+0xbe/0x3b0 [ 249.820606][T11454] do_syscall_64+0xfa/0x3b0 [ 249.825144][T11454] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.830430][T11454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.836535][T11454] ? clear_bhb_loop+0x60/0xb0 [ 249.841296][T11454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.847218][T11454] RIP: 0033:0x7fe39278eba9 [ 249.851988][T11454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.871697][T11454] RSP: 002b:00007fe393537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.880221][T11454] RAX: ffffffffffffffda RBX: 00007fe3929d5fa0 RCX: 00007fe39278eba9 [ 249.888262][T11454] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 249.896272][T11454] RBP: 00007fe392811e19 R08: 0000000000000000 R09: 0000000000000000 [ 249.904333][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 249.912397][T11454] R13: 00007fe3929d6038 R14: 00007fe3929d5fa0 R15: 00007ffff6252d38 [ 249.920467][T11454] [ 249.923561][T11454] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 249.930874][T11454] CPU: 0 UID: 0 PID: 11454 Comm: syz.1.1469 Not tainted syzkaller #0 PREEMPT(full) [ 249.940266][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 249.950349][T11454] Call Trace: [ 249.953642][T11454] [ 249.956592][T11454] dump_stack_lvl+0x99/0x250 [ 249.961196][T11454] ? __asan_memcpy+0x40/0x70 [ 249.965798][T11454] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.971022][T11454] ? __pfx__printk+0x10/0x10 [ 249.975640][T11454] vpanic+0x281/0x750 [ 249.979630][T11454] ? __pfx__printk+0x10/0x10 [ 249.984232][T11454] ? __pfx_vpanic+0x10/0x10 [ 249.988744][T11454] ? is_bpf_text_address+0x26/0x2b0 [ 249.993973][T11454] panic+0xb9/0xc0 [ 249.997702][T11454] ? __pfx_panic+0x10/0x10 [ 250.002144][T11454] __warn+0x31b/0x4b0 [ 250.006146][T11454] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 250.012752][T11454] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 250.019377][T11454] report_bug+0x2be/0x4f0 [ 250.023714][T11454] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 250.030313][T11454] ? ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 250.036914][T11454] ? ieee80211_recalc_chanctx_chantype+0x89f/0x10f0 [ 250.043518][T11454] handle_bug+0x84/0x160 [ 250.047778][T11454] exc_invalid_op+0x1a/0x50 [ 250.052298][T11454] asm_exc_invalid_op+0x1a/0x20 [ 250.057171][T11454] RIP: 0010:ieee80211_recalc_chanctx_chantype+0x89d/0x10f0 [ 250.064387][T11454] Code: c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 bb a1 24 f7 4d 8b 36 4d 39 fe 74 22 e8 ce 2d c1 f6 e9 ef f8 ff ff e8 c4 2d c1 f6 90 <0f> 0b 90 e9 47 07 00 00 e8 b6 2d c1 f6 e9 39 07 00 00 48 83 7c 24 [ 250.084001][T11454] RSP: 0018:ffffc9001aee7220 EFLAGS: 00010283 [ 250.090076][T11454] RAX: ffffffff8afe88d2 RBX: 0000000000000000 RCX: 0000000000080000 [ 250.098051][T11454] RDX: ffffc9000bd43000 RSI: 0000000000001ed5 RDI: 0000000000001ed6 [ 250.106026][T11454] RBP: ffffc9001aee73e0 R08: ffff88803302d737 R09: 1ffff11006605ae6 [ 250.113998][T11454] R10: dffffc0000000000 R11: ffffed1006605ae7 R12: dffffc0000000000 [ 250.121972][T11454] R13: 0000000000000070 R14: ffff88802782a8c0 R15: ffff88802782a8c0 [ 250.129963][T11454] ? ieee80211_recalc_chanctx_chantype+0x10e2/0x10f0 [ 250.136668][T11454] ? __pfx_ieee80211_recalc_chanctx_chantype+0x10/0x10 [ 250.143530][T11454] ? __pfx___might_resched+0x10/0x10 [ 250.148839][T11454] ieee80211_assign_link_chanctx+0x5ca/0xd70 [ 250.154848][T11454] __ieee80211_link_release_channel+0x33b/0x4a0 [ 250.161102][T11454] ieee80211_leave_mesh+0xc5/0x130 [ 250.166221][T11454] cfg80211_leave_mesh+0x290/0x800 [ 250.171354][T11454] cfg80211_netdev_notifier_call+0x1b3/0x1450 [ 250.177435][T11454] ? __lock_acquire+0xab9/0xd20 [ 250.182297][T11454] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 250.188807][T11454] ? __lock_acquire+0xab9/0xd20 [ 250.193681][T11454] ? do_raw_spin_lock+0x121/0x290 [ 250.198754][T11454] ? inetdev_event+0x464/0x15b0 [ 250.203624][T11454] ? igmp_netdev_event+0x7c/0x770 [ 250.208669][T11454] notifier_call_chain+0x1b3/0x3e0 [ 250.213797][T11454] __dev_close_many+0x106/0x6f0 [ 250.218652][T11454] ? __lock_acquire+0xab9/0xd20 [ 250.223536][T11454] ? __pfx___dev_close_many+0x10/0x10 [ 250.229042][T11454] ? __mutex_trylock_common+0x153/0x260 [ 250.234619][T11454] netif_close_many+0x225/0x410 [ 250.239564][T11454] ? __pfx_netif_close_many+0x10/0x10 [ 250.245018][T11454] ? __mutex_lock+0x335/0x1350 [ 250.249805][T11454] ? __lock_acquire+0xab9/0xd20 [ 250.254685][T11454] netif_close+0x158/0x210 [ 250.259110][T11454] ? __pfx_netif_close+0x10/0x10 [ 250.264063][T11454] ? __pfx___mutex_lock+0x10/0x10 [ 250.269106][T11454] dev_close+0x10a/0x220 [ 250.273375][T11454] cfg80211_shutdown_all_interfaces+0xd4/0x220 [ 250.279629][T11454] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 250.285881][T11454] cfg80211_rfkill_set_block+0x2d/0x50 [ 250.291345][T11454] rfkill_set_block+0x1cf/0x440 [ 250.296208][T11454] rfkill_fop_write+0x44b/0x570 [ 250.301069][T11454] ? __pfx_rfkill_fop_write+0x10/0x10 [ 250.306451][T11454] ? security_kernfs_init_security+0x240/0x290 [ 250.312631][T11454] ? rw_verify_area+0x255/0x4d0 [ 250.317512][T11454] ? __lock_acquire+0xab9/0xd20 [ 250.322381][T11454] ? __pfx_rfkill_fop_write+0x10/0x10 [ 250.327773][T11454] vfs_write+0x27b/0xb30 [ 250.332049][T11454] ? __pfx_vfs_write+0x10/0x10 [ 250.336825][T11454] ? __fget_files+0x2a/0x420 [ 250.341423][T11454] ? __fget_files+0x2a/0x420 [ 250.346034][T11454] ? __fget_files+0x3a0/0x420 [ 250.350714][T11454] ? __fget_files+0x2a/0x420 [ 250.355314][T11454] ksys_write+0x145/0x250 [ 250.359659][T11454] ? __pfx_ksys_write+0x10/0x10 [ 250.364520][T11454] ? rcu_is_watching+0x15/0xb0 [ 250.369296][T11454] ? do_syscall_64+0xbe/0x3b0 [ 250.373987][T11454] do_syscall_64+0xfa/0x3b0 [ 250.378494][T11454] ? lockdep_hardirqs_on+0x9c/0x150 [ 250.383696][T11454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.389767][T11454] ? clear_bhb_loop+0x60/0xb0 [ 250.394460][T11454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.400371][T11454] RIP: 0033:0x7fe39278eba9 [ 250.404794][T11454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.424494][T11454] RSP: 002b:00007fe393537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 250.432919][T11454] RAX: ffffffffffffffda RBX: 00007fe3929d5fa0 RCX: 00007fe39278eba9 [ 250.440894][T11454] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 250.448869][T11454] RBP: 00007fe392811e19 R08: 0000000000000000 R09: 0000000000000000 [ 250.456840][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.464813][T11454] R13: 00007fe3929d6038 R14: 00007fe3929d5fa0 R15: 00007ffff6252d38 [ 250.472811][T11454] [ 250.476181][T11454] Kernel Offset: disabled [ 250.480506][T11454] Rebooting in 86400 seconds..