last executing test programs: 20.462775912s ago: executing program 3 (id=4959): r0 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000100)=@req={0x28, &(0x7f0000000080)={'geneve0\x00', @ifru_ivalue=0x6}}) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, 0x0, 0x6a) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, 0x0, 0x24040084) write$nci(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="60060409"], 0x16) unshare(0x20000400) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000010900020073797a310000000400038000"/48], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x104}}, 0x0) write(0xca, &(0x7f0000000000)="045afdffff", 0x5) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="01000000fbff0000050000000100000000000000", @ANYRES32, @ANYBLOB="0000534d2226c2399fd8b6000000870000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x2d, &(0x7f0000000000)=0x80000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000e9ffffffffffffff0000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b703000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1f3fc89771a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) 19.972864619s ago: executing program 0 (id=4964): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc0c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x99}, {&(0x7f0000000440)}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000015c0)="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", 0xdf1}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 19.618397727s ago: executing program 3 (id=4971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) (fail_nth: 2) 19.302184105s ago: executing program 3 (id=4976): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xe}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0xa00}}}, 0x88}}, 0x0) 18.994558867s ago: executing program 3 (id=4978): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x7) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e30000000080001"], 0x40}}, 0x8084) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x100, {0x0, 0x0, 0x0, 0x0, 0x8603}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 18.886228776s ago: executing program 3 (id=4980): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe4, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 18.659123731s ago: executing program 3 (id=4981): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 18.658740031s ago: executing program 1 (id=4982): r0 = epoll_create(0x1) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_buf(r1, 0x1, 0x37, 0x0, &(0x7f0000001000)=0x29) r2 = epoll_create(0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x20, 0x1, 0x3, 0x80000000, {{0x13, 0x4, 0x0, 0x9, 0x4c, 0x64, 0x0, 0x69, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote, {[@timestamp_prespec={0x44, 0x14, 0x99, 0x3, 0xd, [{@local, 0x9}, {@broadcast}]}, @generic={0x94, 0x10, "192b6e0404848f0376b0ce2c5148"}, @lsrr={0x83, 0x13, 0xf3, [@remote, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x4, 0x3, 0x3a2, 0x7fff, 0x20000, 0xffffffffffffffff, 0x1, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000000)={0x20000000}) r4 = socket$inet6(0xa, 0x800, 0x4) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x3, 0x3fd, @private2, 0x2}, 0x1c) 18.401940453s ago: executing program 4 (id=4984): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x38}, 0x9}]}, &(0x7f0000000040)=0x10) shutdown(r1, 0x2) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0xdb9, 0x7}, &(0x7f0000000180)=0x10) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xd80}}, 0x2004c880) accept4$tipc(r3, 0x0, 0x0, 0x800) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.20475129s ago: executing program 0 (id=4986): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x1d, 0x500}}) 17.987290792s ago: executing program 1 (id=4988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r2, @ANYBLOB="2c005a8028000380240008"], 0x48}, 0x1, 0x0, 0x0, 0x42000}, 0x0) 17.987148586s ago: executing program 0 (id=4989): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88aefe86, 0x40000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x50}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003601008000008001500700f0d0008000700ac1414bb0800", @ANYRES32=r7], 0x5c}}, 0x40) 17.750904795s ago: executing program 4 (id=4990): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) syz_emit_ethernet(0x16, &(0x7f00000001c0)={@local, @local, @void, {@llc_tr={0x11, {@snap={0xab, 0xfe, "d3", "718c8a", 0x88ca}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@map, 0x1f, 0x0, 0xa, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r3, 0xffffffffffffffff, 0x6, 0x0, @val=@netkit={@void, @value, @void, @void, r4}}, 0x1c) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xb, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x32, 0xffffffffffffffff, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r8, 0x0, 0xd0, 0x0, &(0x7f0000000080)) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r5], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 17.445225065s ago: executing program 1 (id=4991): r0 = epoll_create1(0x80000) r1 = socket(0x1, 0x80802, 0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x828}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x10000001}) epoll_create1(0x80000) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000140)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r0, &(0x7f0000000080)={0x60002008}) bpf$MAP_CREATE(0x0, 0x0, 0x50) 17.388160887s ago: executing program 2 (id=4992): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xe5, 0x1800}}, &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 17.386224709s ago: executing program 0 (id=4993): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480), &(0x7f00000004c0)=0x1f) r1 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @broadcast}, &(0x7f0000000240)=0x10, 0x80800) r2 = accept$inet(r1, &(0x7f0000000300)={0x2, 0x0, @multicast1}, &(0x7f00000002c0)=0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r4, 0x106, 0x1, &(0x7f0000000400), 0x4) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r2, 0x8983, &(0x7f0000000180)={0x7, 'ip6erspan0\x00', {0x8}, 0x9}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r6, 0xffffffff) r7 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r7, 0x84, 0x71, &(0x7f0000000300)={0x0, 0xa}, &(0x7f0000000380)=0x8) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0xfdff, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000000)={'syzkaller1\x00', &(0x7f0000000140)=@ethtool_cmd={0x7, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000aa, 0x0, 0x0, 0x0, 0xfeea, [0x1]}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast2, 0x8}}, 0x9, 0x5, 0x5, 0x3, 0x10, 0x5, 0x6}, 0x9c) 17.178635624s ago: executing program 2 (id=4994): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, r1, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000800) 17.178434953s ago: executing program 4 (id=4995): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001c00357428bd7000fed3df", @ANYRES32, @ANYBLOB="1000a204080001"], 0x2c}, 0x1, 0x0, 0x0, 0x20040001}, 0x200080c0) 17.144992176s ago: executing program 0 (id=4996): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc0c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x99}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a8", 0x5b}, {&(0x7f0000000500)="de21cff472aa580c2ee9f8", 0xb}, {&(0x7f00000015c0)="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", 0xdf1}], 0x5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 17.024509726s ago: executing program 1 (id=4997): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}}, 0x50004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb0, 0x17, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'ip6gre0\x00'}, {0x14, 0x1, 'pimreg0\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}]}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}]}, 0xb0}}, 0x80) sendmsg$inet(r3, &(0x7f0000001400)={&(0x7f00000002c0)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001340)=[{&(0x7f0000000300)="fc64d6450bde7648d1d5e6ad4d546fb2d084dc3a6d7977af8e8c530bbde32a409b5af60723be8a5e773472d5fce257e9f266c3", 0x33}, {&(0x7f0000000340)="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", 0x1000}], 0x2, &(0x7f0000001380)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x48}, 0x20000045) syz_genetlink_get_family_id$ieee802154(&(0x7f0000001440), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9a4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000016c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000001700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000001740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000001840)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x44, r6, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xae}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r9, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004080) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000019c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001a00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r5, &(0x7f0000001ac0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r10, 0x20, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}]}, 0x28}, 0x1, 0x0, 0x0, 0xf68460a3e36114be}, 0x4010) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000001b40), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r12, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x808}, 0x4800) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000001c40)) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001d40)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001d00)={&(0x7f0000001cc0)={0x28, r6, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_KEY_ID={0x14, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040081}, 0x880) sendmsg$NLBL_UNLABEL_C_LIST(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000001d80), 0xc, &(0x7f0000001e40)={&(0x7f0000001dc0)={0x48, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) socket$inet(0x2, 0x3, 0x6) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001f00), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r2, &(0x7f0000002000)={&(0x7f0000001ec0), 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x58, r13, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) connect(r4, &(0x7f0000002040)=@generic={0x27, "759d77e6c1826d471dbf7d296b502cc425e9bf395fa679567d98593e116d83edf9a215a90e28e6b84685660af7b63c2612190358538f844bdd4bc9509cc65720b7e5c8b2ca494ac85baa4cf9118879e89c675f6b24519500359674e634fc424dba5072744481ea5dbeb4edb73fa0b7267a7b126dec984821190efc4abcce"}, 0x80) 17.005161458s ago: executing program 4 (id=4998): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) (fail_nth: 4) 16.917504759s ago: executing program 2 (id=4999): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x2b, 0x80801, 0x1) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0xd001010000000000) 16.714890968s ago: executing program 4 (id=5000): r0 = socket$igmp(0x2, 0x3, 0x2) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x12001) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x90, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x60, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x90}}, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x28, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7200fddbdf253900000008000300", @ANYRES32=r5, @ANYBLOB="24005a8020000080140005"], 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 16.659583172s ago: executing program 2 (id=5001): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delroute={0x1c, 0x19, 0x1}, 0x1c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="140400002d001347ce2d3d7000fbdb0100000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20008040) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000680)=""/171}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f00000000c0), &(0x7f0000000380)=""/75}, 0x20) r3 = socket$inet(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r5, 0x1, 0x55, &(0x7f0000000080)=0x7, 0x4) r6 = socket(0x10, 0x803, 0x0) writev(r3, &(0x7f00000000c0), 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r3, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r8, &(0x7f0000000180)}, 0x20) r9 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet(r9, &(0x7f0000000000)={0x2, 0x5e21, @local}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r10, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000400)={0x1c0, r11, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1a4, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x90}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x144, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x10c, 0xd, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x18, 0x5]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x30, 0x2, [{0x1}, {0x3, 0x7}, {0x0, 0x8}, {0x5, 0x2}, {0x0, 0x1}, {0x7, 0x8}, {0x4, 0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x3, 0x4}, {0x5, 0x7}, {0x1, 0x2}, {0x1, 0x8}, {0x2, 0x9}, {0x4, 0x9}, {0x2, 0x8}, {0x2, 0x2}, {0x0, 0x6}, {0x2, 0x8}, {0x2, 0x3}, {0x4}, {0x0, 0x7}, {0x2, 0x8}, {0x3, 0x8}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x9}, {0x2, 0x7}, {0x4, 0xa}, {0x0, 0x5}, {0x4, 0x3}, {0x4, 0x8}, {0x5, 0x8}, {0x2, 0x7}, {0x5, 0x6}, {0x0, 0xa}, {0x3}, {0x3}, {0x2}, {0x5, 0x7}, {0x5, 0x5}, {0x4, 0x2}, {0x7, 0x9}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x2, 0x8}, {0x0, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x5}, {0x6, 0x7}, {}, {0x0, 0x2}, {0x6, 0x1}, {0x6, 0x8}, {0x7, 0x8}, {0x6, 0x5}, {}, {0x1}, {0x6, 0x8}, {0x4}, {0x1, 0x3}, {0x2, 0x5}, {0x1, 0xa}, {0x1, 0x1}, {0x3}, {0x1, 0x8}, {0x7, 0xa}, {0x2}, {0x5, 0x6}, {}, {0x1}, {0x0, 0x3}, {0x1, 0x6}, {0x2, 0x5}, {0x4, 0x4}, {0x4, 0x1}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x2}, {0x0, 0xa}, {0x0, 0x8}, {0x6, 0x3}, {0x4, 0x4}, {0x3, 0x6}, {0x0, 0x4}, {0x4, 0x8}, {0x4}, {0x2, 0x2}, {0x0, 0x2}, {0x1, 0x8}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x9}, {0x0, 0x6}, {0x1, 0x4}, {0x5, 0x9}, {0x7, 0x7}, {0x3, 0x9}, {0x6, 0x3}, {0x1, 0x5}, {0x7, 0x7}, {0x1, 0x5}, {0x5, 0xa}, {0x6, 0x3}, {0x4}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0x1}, {0x7}, {0x0, 0x5}, {0x2}, {0x0, 0x7}, {0x1, 0x5}, {0x1, 0x6}, {0x4}, {0x3, 0x9}, {0x7, 0xa}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x1, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xaa, 0x6, 0x0, 0x3, 0x2, 0x8, 0x8001]}}]}, @NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x16, 0x1b, 0x9, 0xc, 0xb, 0x3, 0x6, 0x5, 0xc, 0x6, 0x6c, 0x48]}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xab7, 0x3, 0x42, 0x1004, 0x96, 0xb5fd, 0x80, 0x1]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x6a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x44}]}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x4e24, @remote}, 0x10) 16.42666988s ago: executing program 4 (id=5002): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r3, 0x0, 0x3d, 0x4088010, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x20}}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1bbd250597c6418c03b6dafcff300467858399b7d31b1a209126bf7a75"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x803, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}}, 0x20040080) 16.069879016s ago: executing program 2 (id=5003): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_CARRIER={0x5, 0x21, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000003100), r4) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r4, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000040)={0x58, r5, 0x1, 0x0, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_virt_wifi\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x84, r1, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8ed27f5f0fa72b0e}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000045}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xf, &(0x7f0000000680)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x25}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 16.02059159s ago: executing program 1 (id=5004): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x13, 0x0, &(0x7f0000000540)) 15.875823782s ago: executing program 1 (id=5005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@delchain={0xad4, 0x65, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe1, 0xf}, {0xfff2}, {0x8, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x87c, 0x2, [@TCA_CGROUP_EMATCHES={0x468, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x280, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x200}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="cd446ce7f800be", @TCF_META_TYPE_VAR="1ac6d7011a462a56", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3, 0x2}, {0x1, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x2, 0x2}, {0x5, 0x7f}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c07106", @TCF_META_TYPE_VAR="b09055d9b17a", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="de5acf5595", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1925", @TCF_META_TYPE_VAR="db"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x7, 0x3}, {0xa0, 0x7}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="b6a5a5", @TCF_META_TYPE_VAR="95e2efeadd7c2aa9"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7, 0x2}, {0x3, 0xc9, 0x2}}}]}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0xfff8, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="dcc5a6b044", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x8, 0x2}, {0x6792, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x1}, {0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6c, 0x4}, {0xfe00, 0x2, 0x2}}}]}}, @TCF_EM_CONTAINER={0xac, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xfff8}, "c03f8d5c55b4dec34693340849ea1cf0c1dfbde2a15406f703332b216b7e7dfd9dc258bbc0bf92e08ce81f8fe3e31667be0db1c503da90e6e895776715f9a01531ebf8689db8c92499402589ca8831062a992e8c706cf1d61727ea29d785f92d0dc85fa1978abb6adc205c8b54942c6d0eb1facf4a4499880b15aec658150f33e1f7b3c6c1f66f12df7a25f4dd3b5a7c52cea183a601abd544f19f868b2a"}}, @TCF_EM_IPT={0x54, 0x3, 0x0, 0x0, {{0xfffc, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x1}, {0x6c10, 0x6}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="3218ace3c04e2f", @TCF_META_TYPE_VAR="de213783174a8b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x7ff, 0x84a, 0x4, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x9}, {{0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x22}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfffd}, {0x4, 0x2, 0x1, "c552"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x9, 0x8, 0x2, "e66e9971dec4ad3c"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0x0, 0x6, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0xfff}, {0x3, 0x5, 0x6, 0x1ff}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x5c, 0x2, 0x1}, {0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x9}, {{0x2}, {0x2}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{}, {0x9, 0x4, 0x1, "9196c2a2"}}}, @TCF_EM_IPT={0x60, 0x1, 0x0, 0x0, {{0x9e6, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x3a, 0x5, "e5203953017cb26c3b2289629e0ac6de9b1a0f1b502ec6b632625271fa590ca11b26e4945c6aedeb246c3fdc6f66e6e1c2061f4eb694"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x40}, {0x43, 0x8, 0x0, "6e3d5fa5b87bab54"}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xff7f}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x50, 0x9, 0x1}, {0x200, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="14bbfe5f7d2bac1d40", @TCF_META_TYPE_VAR="709035c7a1bbe4", @TCF_META_TYPE_VAR="d97100", @TCF_META_TYPE_VAR="87581c144d329b7e"]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1f", @TCF_META_TYPE_VAR="10ee", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="3638e970", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="bd35be144d87c8"]}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x877, 0x2, 0x6}, {0x6, 0xa, 0x1, "f1046359181c627cc43e"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6b6d}}]}, @TCA_CGROUP_EMATCHES={0x194, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0x4}, "b658dc44547c3aab73bcc82f3d62bec5dca03262a3ab0b53b618f9c455f23a6832bf8a"}}, @TCF_EM_CMP={0x18, 0x6, 0x0, 0x0, {{0x0, 0x1, 0x4f}, {0x5, 0x0, 0x6, 0x0, 0xb, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0xb, 0x0, 0x8}, "0416836099c923e29cff09b4241d9fef2c71b706a20016061dc0789db03db4d43b819c1ea6f8cf"}}, @TCF_EM_CONTAINER={0xc4, 0x2, 0x0, 0x0, {{0x677, 0x0, 0x2}, "2ac66bc3f3246286c0166117f88cb94a1005743e00f7d82f2cf26c8902b83758f13e2b5bd9304b0f071bfcec6921d18e911c32a0904fa5e0e3b5eef1973732a4e1ba5eef9968f2c2cd548fbc1f9cfc24b4afc565472c10b291dcdf64ef681d6b8cca72ea1bc5013ec8eb2060b4337cec2325f076fccd7dbd76b88c33bace8a920d391e5b11f160dcbac999d39d35a4a6dc061c720abe0ffa5b50bc33b9d1633f6406b112d72b4f791fc1f7de855ed9f5ec2a988a22a22c"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0xffff}, {0x8, 0x9, 0x2, "60a090b2cf75a8afb9"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xc, 0x2, 0xf}, {0xa2, 0x2, 0x2, "63d9"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_EMATCHES={0x174, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x94, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x61, 0x5, "0a181f05429f449b1a738b9e6701f16252f183fbaa7a10a05f7dcccb27e20c6b17faaf9fbc2ce1747ad4e08555809527b3372338f99a12232da10cdf8b826f635f868b516b83556548bd65b8a5eaa553b5e0f3010eac8f8810bfffbc74"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xffff}, {0xc04, 0x40, 0xd, 0x7}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x74, 0x2, 0x5}, {0x6e0, 0x3, 0x2, "185737"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x5}, {0x1, 0x8, 0x0, "1bc63668546029e8"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcc93}}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xffff, 0x2, 0x3b}, {0x101, 0x0, 0x2}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="a2b6f946031b54", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6504a16001a468146c", @TCF_META_TYPE_VAR="9a907014fe17457897", @TCF_META_TYPE_VAR='CS6']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="c7ce0b15656aa424", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="e5", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0xff}, {0x6, 0x2, 0x2, "c162"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x18a}}]}, @TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb47}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcf7}]}, @TCA_CGROUP_ACT={0xec, 0x1, [@m_tunnel_key={0xe8, 0x18, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x8d, 0x6, "5597709f6c2776f40cf280c489fdcfac46fb053b1eb4b774c51252d4c00b554c519a2cef373268661ab71b2e3ed16dd2a1835644702f5aa4051a2a314a0831098bac47100d77fb5407d099945594297b16c594943ef9afbb1f9f6e3f6781d8e3d1ac4dc888f27c9b19398f6bcab261891879e747a3d1d54460068a745d0ba721065327da3067c62bb3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfa}}, @TCA_CHAIN={0x8, 0xb, 0x649}, @TCA_RATE={0x6, 0x5, {0xff, 0x50}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x77, 0x5}}, @filter_kind_options=@f_route={{0xa}, {0x1f4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_ROUTE4_ACT={0x1e8, 0x6, [@m_ctinfo={0x74, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x80000000, 0x0, 0xa16, 0xfff}}]}, {0x28, 0x6, "1458cb024da681628daa46fdcebc4d28b7754b60396dc8e3cbc1b9dae01bcbac90408774"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0xa8, 0x1e, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x63, 0x6, "92a5aaeabd5914e75060c36ce72465adde2e0355a098f20129ae34ca054ce9fac13240a7fa349c87d6cf83baf9fcdb957daa83cc707bd2473e3d8829d8183a25e24de6f1f9d672a02e9ce6a19c3d2b0eea40fe06e1eaca28716f08955ca016"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xc8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x92, 0x6, "550d6ed0fa9e689424bcb16914f0e28df61e967ae536681c47bc2fbfa7813622a833311a16d2e3570034aff7f30968e0601eb3fb3c59a356d9cf1b03ffd729d7ac30fbe327033f9db803d3dd194f60e062ca93bdf7afbbf38f7ac1f65b0db173058d79bf29dfbf932c5e8fabea33acd0462940bd9e4dccf01180ef17b827ee20939eead7d5b15d952773190f02cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xad4}}, 0x0) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) (rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'pim6reg0\x00', 0x800}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r5) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x100, 0xfffffffe, 0x0, {0x8}}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x20008000) (rerun: 64) 15.714469225s ago: executing program 2 (id=5006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @loopback, @private}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={0x0, @initdev, @private}, &(0x7f0000000880)=0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x8000) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r12], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r12, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r14, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r15 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r15, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x78, r16}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x348, 0x0, 0xf08, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x264, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x348}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="0223f3f8594c7a1891ab759405ec44e8fa30faff20337c35d2a7050ef09ad0c645633e01434ad6"], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="bf269f81e432bc0504056cec6c572312f9df9e95ea112f276cb1c1800850c00a8d443f3714b4cf2c3a252f33cd556c7527733b1c423888620228a8623960a9c115aaaf6a3a173c8e097b0bcbdc05ba66066520e1f5791ac97520593c26fb1b3143d794dcc3b2fde1d54978910f2c20b3984ce70970d47f60c80be8040b6f242a784cbe3dfd65050b064cbf6f31fc82e4e06836fb376c1bedac210a5d7e68bc1a4d83914ca66b1717aa5af76a0d41af118f55729281694e327fc9f29497b3309bafdb12f5cc8a42254f427014a24ce20f433530415e6c57c2a6ea2814ee941a775e", @ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) 15.496974986s ago: executing program 0 (id=5007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x30000}]}, 0x70}}, 0x0) (fail_nth: 1) 3.596317059s ago: executing program 32 (id=4981): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.098240915s ago: executing program 33 (id=5002): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x100bf28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0xfffff805}, 0x1c) sendto$inet6(r3, 0x0, 0x3d, 0x4088010, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xff, 0x4, 0x6, 0x6}, 0x4, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000f40)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x20}}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1bbd250597c6418c03b6dafcff300467858399b7d31b1a209126bf7a75"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x2, 0x803, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_mreqsrc(r10, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r1], 0x20}}, 0x20040080) 597.646588ms ago: executing program 34 (id=5005): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@delchain={0xad4, 0x65, 0x20, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xffe1, 0xf}, {0xfff2}, {0x8, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x87c, 0x2, [@TCA_CGROUP_EMATCHES={0x468, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x280, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x6, 0x9, 0x200}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}, @TCF_EM_META={0xac, 0x2, 0x0, 0x0, {{0x6, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0x1b, 0x2, [@TCF_META_TYPE_VAR="cd446ce7f800be", @TCF_META_TYPE_VAR="1ac6d7011a462a56", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x9, 0x3, 0x2}, {0x1, 0x4}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x100, 0x2, 0x2}, {0x5, 0x7f}}}, @TCA_EM_META_RVALUE={0x1d, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="c07106", @TCF_META_TYPE_VAR="b09055d9b17a", @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_LVALUE={0x1c, 0x2, [@TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="de5acf5595", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1925", @TCF_META_TYPE_VAR="db"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6, 0x7, 0x3}, {0xa0, 0x7}}}, @TCA_EM_META_RVALUE={0xf, 0x3, [@TCF_META_TYPE_VAR="b6a5a5", @TCF_META_TYPE_VAR="95e2efeadd7c2aa9"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x7, 0x2}, {0x3, 0xc9, 0x2}}}]}}, @TCF_EM_META={0x40, 0x1, 0x0, 0x0, {{0xfff8, 0x4, 0x5}, [@TCA_EM_META_LVALUE={0xd, 0x2, [@TCF_META_TYPE_VAR="dcc5a6b044", @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x2, 0x8, 0x2}, {0x6792, 0x2}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0xffff, 0x1}, {0x3, 0x1}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x6c, 0x4}, {0xfe00, 0x2, 0x2}}}]}}, @TCF_EM_CONTAINER={0xac, 0x2, 0x0, 0x0, {{0x3, 0x0, 0xfff8}, "c03f8d5c55b4dec34693340849ea1cf0c1dfbde2a15406f703332b216b7e7dfd9dc258bbc0bf92e08ce81f8fe3e31667be0db1c503da90e6e895776715f9a01531ebf8689db8c92499402589ca8831062a992e8c706cf1d61727ea29d785f92d0dc85fa1978abb6adc205c8b54942c6d0eb1facf4a4499880b15aec658150f33e1f7b3c6c1f66f12df7a25f4dd3b5a7c52cea183a601abd544f19f868b2a"}}, @TCF_EM_IPT={0x54, 0x3, 0x0, 0x0, {{0xfffc, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0xc6}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xb}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_META={0x58, 0x3, 0x0, 0x0, {{0x5, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x5]}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x4, 0x1}, {0x6c10, 0x6}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x7]}, @TCA_EM_META_RVALUE={0x1e, 0x3, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="3218ace3c04e2f", @TCF_META_TYPE_VAR="de213783174a8b", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x8]}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x3, 0x3, 0x5}, {0x7ff, 0x84a, 0x4, 0x3}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6a}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x68, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x2, 0x7, 0x9}, {{0x1, 0x1, 0x1}, {0x1}}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x22}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xfffd}, {0x4, 0x2, 0x1, "c552"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x0, 0x2, 0x7}, {0x9, 0x8, 0x2, "e66e9971dec4ad3c"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x5, 0x8, 0x4}, {0x0, 0x6, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x154, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x3, 0xfff}, {0x3, 0x5, 0x6, 0x1ff}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x5c, 0x2, 0x1}, {0x1}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x5, 0x7, 0x9}, {{0x2}, {0x2}}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{}, {0x9, 0x4, 0x1, "9196c2a2"}}}, @TCF_EM_IPT={0x60, 0x1, 0x0, 0x0, {{0x9e6, 0x9, 0x5}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}, @TCA_EM_IPT_MATCH_DATA={0x3a, 0x5, "e5203953017cb26c3b2289629e0ac6de9b1a0f1b502ec6b632625271fa590ca11b26e4945c6aedeb246c3fdc6f66e6e1c2061f4eb694"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x40}, {0x43, 0x8, 0x0, "6e3d5fa5b87bab54"}}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x9, 0x4, 0xff7f}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x50, 0x9, 0x1}, {0x200, 0x0, 0x2}}}, @TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_LVALUE={0x1f, 0x2, [@TCF_META_TYPE_VAR="14bbfe5f7d2bac1d40", @TCF_META_TYPE_VAR="709035c7a1bbe4", @TCF_META_TYPE_VAR="d97100", @TCF_META_TYPE_VAR="87581c144d329b7e"]}, @TCA_EM_META_LVALUE={0xb, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="1f", @TCF_META_TYPE_VAR="10ee", @TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x17, 0x2, [@TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="3638e970", @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="bd35be144d87c8"]}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x877, 0x2, 0x6}, {0x6, 0xa, 0x1, "f1046359181c627cc43e"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffa}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6b6d}}]}, @TCA_CGROUP_EMATCHES={0x194, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x4c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x30, 0x2, 0x0, 0x0, {{0x4}, "b658dc44547c3aab73bcc82f3d62bec5dca03262a3ab0b53b618f9c455f23a6832bf8a"}}, @TCF_EM_CMP={0x18, 0x6, 0x0, 0x0, {{0x0, 0x1, 0x4f}, {0x5, 0x0, 0x6, 0x0, 0xb, 0x1, 0x2}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8000}}, @TCA_EMATCH_TREE_LIST={0x12c, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x34, 0x1, 0x0, 0x0, {{0xb, 0x0, 0x8}, "0416836099c923e29cff09b4241d9fef2c71b706a20016061dc0789db03db4d43b819c1ea6f8cf"}}, @TCF_EM_CONTAINER={0xc4, 0x2, 0x0, 0x0, {{0x677, 0x0, 0x2}, "2ac66bc3f3246286c0166117f88cb94a1005743e00f7d82f2cf26c8902b83758f13e2b5bd9304b0f071bfcec6921d18e911c32a0904fa5e0e3b5eef1973732a4e1ba5eef9968f2c2cd548fbc1f9cfc24b4afc565472c10b291dcdf64ef681d6b8cca72ea1bc5013ec8eb2060b4337cec2325f076fccd7dbd76b88c33bace8a920d391e5b11f160dcbac999d39d35a4a6dc061c720abe0ffa5b50bc33b9d1633f6406b112d72b4f791fc1f7de855ed9f5ec2a988a22a22c"}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0xffff}, {0x8, 0x9, 0x2, "60a090b2cf75a8afb9"}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0xc, 0x2, 0xf}, {0xa2, 0x2, 0x2, "63d9"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_CGROUP_EMATCHES={0x174, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xe0, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x94, 0x1, 0x0, 0x0, {{0x8001, 0x9, 0x9}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x9}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x61, 0x5, "0a181f05429f449b1a738b9e6701f16252f183fbaa7a10a05f7dcccb27e20c6b17faaf9fbc2ce1747ad4e08555809527b3372338f99a12232da10cdf8b826f635f868b516b83556548bd65b8a5eaa553b5e0f3010eac8f8810bfffbc74"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x7}]}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xffff}, {0xc04, 0x40, 0xd, 0x7}}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x74, 0x2, 0x5}, {0x6e0, 0x3, 0x2, "185737"}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x3, 0x2, 0x5}, {0x1, 0x8, 0x0, "1bc63668546029e8"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x81}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcc93}}, @TCA_EMATCH_TREE_LIST={0x70, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xffff, 0x2, 0x3b}, {0x101, 0x0, 0x2}}}, @TCF_EM_META={0x48, 0x3, 0x0, 0x0, {{0x3, 0x4, 0x9}, [@TCA_EM_META_LVALUE={0x28, 0x2, [@TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_VAR="a2b6f946031b54", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="6504a16001a468146c", @TCF_META_TYPE_VAR="9a907014fe17457897", @TCF_META_TYPE_VAR='CS6']}, @TCA_EM_META_LVALUE={0x11, 0x2, [@TCF_META_TYPE_VAR="c7ce0b15656aa424", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="e5", @TCF_META_TYPE_VAR]}]}}, @TCF_EM_NBYTE={0x14, 0x2, 0x0, 0x0, {{0x9, 0x2, 0xff}, {0x6, 0x2, 0x2, "c162"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x18a}}]}, @TCA_CGROUP_POLICE={0x1c, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xb47}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x1}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcf7}]}, @TCA_CGROUP_ACT={0xec, 0x1, [@m_tunnel_key={0xe8, 0x18, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @broadcast}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}]}, {0x8d, 0x6, "5597709f6c2776f40cf280c489fdcfac46fb053b1eb4b774c51252d4c00b554c519a2cef373268661ab71b2e3ed16dd2a1835644702f5aa4051a2a314a0831098bac47100d77fb5407d099945594297b16c594943ef9afbb1f9f6e3f6781d8e3d1ac4dc888f27c9b19398f6bcab261891879e747a3d1d54460068a745d0ba721065327da3067c62bb3"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0xfa}}, @TCA_CHAIN={0x8, 0xb, 0x649}, @TCA_RATE={0x6, 0x5, {0xff, 0x50}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @TCA_RATE={0x6, 0x5, {0x77, 0x5}}, @filter_kind_options=@f_route={{0xa}, {0x1f4, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8, 0x9}}, @TCA_ROUTE4_ACT={0x1e8, 0x6, [@m_ctinfo={0x74, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x80000000, 0x0, 0xa16, 0xfff}}]}, {0x28, 0x6, "1458cb024da681628daa46fdcebc4d28b7754b60396dc8e3cbc1b9dae01bcbac90408774"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_vlan={0xa8, 0x1e, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x63, 0x6, "92a5aaeabd5914e75060c36ce72465adde2e0355a098f20129ae34ca054ce9fac13240a7fa349c87d6cf83baf9fcdb957daa83cc707bd2473e3d8829d8183a25e24de6f1f9d672a02e9ce6a19c3d2b0eea40fe06e1eaca28716f08955ca016"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_sample={0xc8, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x1}]}, {0x92, 0x6, "550d6ed0fa9e689424bcb16914f0e28df61e967ae536681c47bc2fbfa7813622a833311a16d2e3570034aff7f30968e0601eb3fb3c59a356d9cf1b03ffd729d7ac30fbe327033f9db803d3dd194f60e062ca93bdf7afbbf38f7ac1f65b0db173058d79bf29dfbf932c5e8fabea33acd0462940bd9e4dccf01180ef17b827ee20939eead7d5b15d952773190f02cb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xad4}}, 0x0) (async, rerun: 64) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="08010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000d00008800c000780080006000000000024"], 0x108}}, 0x0) (rerun: 64) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'pim6reg0\x00', 0x800}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0xc040}, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000180), r5) sendmsg$NET_DM_CMD_STOP(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, r6, 0x100, 0xfffffffe, 0x0, {0x8}}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x200, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x20008000) (rerun: 64) 375.873437ms ago: executing program 35 (id=5006): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x17, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x700f, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0x4}, {}, {0xfff1, 0xffe0}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000400)={0x0, @loopback, @private}, &(0x7f0000000440)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000480)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000840)={0x0, @initdev, @private}, &(0x7f0000000880)=0xc) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r10, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r10], 0x3c}}, 0x8000) r12 = socket$packet(0x11, 0x3, 0x300) r13 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r13, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r13, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r14, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES32=r12], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r12, &(0x7f0000000600)="05d936277c6f54222002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r14, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r15 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000080)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r15, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}, 0x78, r16}) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000c80)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c40)={&(0x7f00000008c0)={0x348, 0x0, 0xf08, 0x70bd29, 0x25dfdbfc, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r6}, {0x264, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r16}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x348}, 0x1, 0x0, 0x0, 0x8000}, 0x4040000) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r0, @ANYBLOB="0223f3f8594c7a1891ab759405ec44e8fa30faff20337c35d2a7050ef09ad0c645633e01434ad6"], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="61124b00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774", @ANYRES32=r1, @ANYBLOB="bf269f81e432bc0504056cec6c572312f9df9e95ea112f276cb1c1800850c00a8d443f3714b4cf2c3a252f33cd556c7527733b1c423888620228a8623960a9c115aaaf6a3a173c8e097b0bcbdc05ba66066520e1f5791ac97520593c26fb1b3143d794dcc3b2fde1d54978910f2c20b3984ce70970d47f60c80be8040b6f242a784cbe3dfd65050b064cbf6f31fc82e4e06836fb376c1bedac210a5d7e68bc1a4d83914ca66b1717aa5af76a0d41af118f55729281694e327fc9f29497b3309bafdb12f5cc8a42254f427014a24ce20f433530415e6c57c2a6ea2814ee941a775e", @ANYRESHEX=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x5}, 0x94) 0s ago: executing program 36 (id=5007): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x70, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x30000}]}, 0x70}}, 0x0) (fail_nth: 1) kernel console output (not intermixed with test programs): [ 467.498494][T16672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3683'. [ 467.503313][T16672] team0: Unable to change to the same mode the team is in [ 467.527069][T16672] tipc: Enabling of bearer rejected, already enabled [ 467.558774][T16673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3682'. [ 467.616157][T16673] syzkaller0: left promiscuous mode [ 467.616181][T16673] syzkaller0: left allmulticast mode [ 467.648962][T16673] tipc: Enabling of bearer rejected, already enabled [ 467.993001][T16691] FAULT_INJECTION: forcing a failure. [ 467.993001][T16691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.993037][T16691] CPU: 0 UID: 0 PID: 16691 Comm: syz.0.3689 Not tainted syzkaller #0 PREEMPT(full) [ 467.993059][T16691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 467.993078][T16691] Call Trace: [ 467.993086][T16691] [ 467.993094][T16691] dump_stack_lvl+0xe8/0x150 [ 467.993127][T16691] should_fail_ex+0x410/0x560 [ 467.993155][T16691] _copy_from_user+0x2d/0xb0 [ 467.993179][T16691] ___sys_sendmsg+0x1c6/0x360 [ 467.993205][T16691] ? __lock_acquire+0x747/0x2de0 [ 467.993230][T16691] ? __pfx____sys_sendmsg+0x10/0x10 [ 467.993288][T16691] ? __fget_files+0x2a/0x420 [ 467.993314][T16691] ? __fget_files+0x3a2/0x420 [ 467.993352][T16691] __x64_sys_sendmsg+0x1b1/0x290 [ 467.993380][T16691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 467.993427][T16691] do_syscall_64+0x166/0x520 [ 467.993447][T16691] ? trace_irq_disable+0x3b/0x140 [ 467.993466][T16691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.993485][T16691] ? clear_bhb_loop+0x70/0xc0 [ 467.993510][T16691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.993530][T16691] RIP: 0033:0x7f5ebed9e159 [ 467.993548][T16691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.993566][T16691] RSP: 002b:00007f5ebfbc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 467.993588][T16691] RAX: ffffffffffffffda RBX: 00007f5ebf025fa0 RCX: 00007f5ebed9e159 [ 467.993603][T16691] RDX: 0000000000000014 RSI: 0000200000001080 RDI: 0000000000000003 [ 467.993615][T16691] RBP: 00007f5ebfbc6090 R08: 0000000000000000 R09: 0000000000000000 [ 467.993628][T16691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.993640][T16691] R13: 00007f5ebf026038 R14: 00007f5ebf025fa0 R15: 00007ffe7956f828 [ 467.993671][T16691] [ 468.249897][T16700] FAULT_INJECTION: forcing a failure. [ 468.249897][T16700] name failslab, interval 1, probability 0, space 0, times 0 [ 468.249953][T16700] CPU: 1 UID: 0 PID: 16700 Comm: syz.1.3692 Not tainted syzkaller #0 PREEMPT(full) [ 468.249971][T16700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 468.249981][T16700] Call Trace: [ 468.249987][T16700] [ 468.249994][T16700] dump_stack_lvl+0xe8/0x150 [ 468.250028][T16700] should_fail_ex+0x410/0x560 [ 468.250049][T16700] should_failslab+0xa8/0x100 [ 468.250070][T16700] __kmalloc_cache_noprof+0xa3/0x600 [ 468.250086][T16700] ? __kmalloc_cache_noprof+0x14d/0x600 [ 468.250099][T16700] ? sctp_add_bind_addr+0x8c/0x370 [ 468.250119][T16700] ? sctp_add_bind_addr+0x8c/0x370 [ 468.250144][T16700] sctp_add_bind_addr+0x8c/0x370 [ 468.250168][T16700] sctp_copy_local_addr_list+0x31a/0x4e0 [ 468.250191][T16700] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 468.250212][T16700] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 468.250234][T16700] ? sctp_v6_is_any+0x64/0x80 [ 468.250257][T16700] ? sctp_copy_one_addr+0x93/0x360 [ 468.250280][T16700] sctp_bind_addr_copy+0xb3/0x3c0 [ 468.250301][T16700] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 468.250322][T16700] sctp_connect_new_asoc+0x2ff/0x6b0 [ 468.250341][T16700] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 468.250359][T16700] ? __ipv6_addr_type+0x23d/0x2f0 [ 468.250379][T16700] ? sctp_inet6_send_verify+0x6e/0x300 [ 468.250398][T16700] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 468.250417][T16700] __sctp_connect+0x5cb/0xdc0 [ 468.250442][T16700] ? __pfx___sctp_connect+0x10/0x10 [ 468.250456][T16700] ? sctp_setsockopt+0x21c/0x12c0 [ 468.250469][T16700] ? security_sctp_bind_connect+0x7e/0x2c0 [ 468.250488][T16700] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 468.250511][T16700] sctp_setsockopt+0x70b/0x12c0 [ 468.250526][T16700] ? sock_common_setsockopt+0x36/0xc0 [ 468.250541][T16700] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 468.250558][T16700] do_sock_setsockopt+0x17c/0x1b0 [ 468.250580][T16700] __x64_sys_setsockopt+0x13d/0x1b0 [ 468.250603][T16700] do_syscall_64+0x166/0x520 [ 468.250619][T16700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.250635][T16700] ? clear_bhb_loop+0x70/0xc0 [ 468.250653][T16700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.250668][T16700] RIP: 0033:0x7f888099e159 [ 468.250684][T16700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.250697][T16700] RSP: 002b:00007f887ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 468.250715][T16700] RAX: ffffffffffffffda RBX: 00007f8880c25fa0 RCX: 00007f888099e159 [ 468.250727][T16700] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 468.250736][T16700] RBP: 00007f887ebf6090 R08: 0000000000000038 R09: 0000000000000000 [ 468.250746][T16700] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000002 [ 468.250755][T16700] R13: 00007f8880c26038 R14: 00007f8880c25fa0 R15: 00007ffcf4dbfbb8 [ 468.250782][T16700] [ 468.327105][T16699] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3693'. [ 468.472196][T16704] syzkaller0: entered promiscuous mode [ 468.472219][T16704] syzkaller0: entered allmulticast mode [ 468.778006][T16712] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3697'. [ 468.799859][T16712] team0: No ports can be present during mode change [ 468.803989][T16712] tipc: Enabling of bearer rejected, already enabled [ 468.938695][T16694] syzkaller1: entered promiscuous mode [ 468.938719][T16694] syzkaller1: entered allmulticast mode [ 469.038075][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3698'. [ 469.163760][T16728] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3701'. [ 469.215099][T16728] macsec1: entered promiscuous mode [ 469.215160][T16728] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 469.220998][T16728] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 469.813881][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3711'. [ 469.824184][T16754] team0: No ports can be present during mode change [ 469.824628][T16752] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 469.828243][T16754] tipc: Enabling of bearer rejected, already enabled [ 470.678161][T16761] syzkaller1: entered promiscuous mode [ 470.678185][T16761] syzkaller1: entered allmulticast mode [ 470.876633][T16788] team0: Unable to change to the same mode the team is in [ 470.896213][T16788] tipc: Enabling of bearer rejected, already enabled [ 471.103261][T16791] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 471.359715][T16800] FAULT_INJECTION: forcing a failure. [ 471.359715][T16800] name failslab, interval 1, probability 0, space 0, times 0 [ 471.359749][T16800] CPU: 0 UID: 0 PID: 16800 Comm: syz.4.3729 Not tainted syzkaller #0 PREEMPT(full) [ 471.359772][T16800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.359783][T16800] Call Trace: [ 471.359791][T16800] [ 471.359799][T16800] dump_stack_lvl+0xe8/0x150 [ 471.359835][T16800] should_fail_ex+0x410/0x560 [ 471.359862][T16800] ? __alloc_skb+0x1db/0x7a0 [ 471.359885][T16800] should_failslab+0xa8/0x100 [ 471.359914][T16800] ? __alloc_skb+0x1db/0x7a0 [ 471.359933][T16800] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 471.359961][T16800] ? __alloc_skb+0x18d/0x7a0 [ 471.359980][T16800] ? __alloc_skb+0x1db/0x7a0 [ 471.360005][T16800] __alloc_skb+0x1db/0x7a0 [ 471.360031][T16800] netlink_sendmsg+0x5d4/0xb40 [ 471.360071][T16800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.360107][T16800] ? apparmor_socket_sendmsg+0x98/0x360 [ 471.360131][T16800] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.360158][T16800] sock_sendmsg_nosec+0x13a/0x180 [ 471.360192][T16800] ____sys_sendmsg+0x54e/0x850 [ 471.360223][T16800] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.360263][T16800] ? import_iovec+0x73/0xa0 [ 471.360290][T16800] ___sys_sendmsg+0x2a5/0x360 [ 471.360314][T16800] ? __lock_acquire+0x747/0x2de0 [ 471.360340][T16800] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.360401][T16800] ? __fget_files+0x2a/0x420 [ 471.360428][T16800] ? __fget_files+0x3a2/0x420 [ 471.360465][T16800] __x64_sys_sendmsg+0x1b1/0x290 [ 471.360494][T16800] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.360541][T16800] do_syscall_64+0x166/0x520 [ 471.360562][T16800] ? trace_irq_disable+0x3b/0x140 [ 471.360582][T16800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.360602][T16800] ? clear_bhb_loop+0x70/0xc0 [ 471.360626][T16800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.360646][T16800] RIP: 0033:0x7f6daed9e159 [ 471.360664][T16800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.360680][T16800] RSP: 002b:00007f6dafd01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.360701][T16800] RAX: ffffffffffffffda RBX: 00007f6daf025fa0 RCX: 00007f6daed9e159 [ 471.360714][T16800] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 471.360725][T16800] RBP: 00007f6dafd01090 R08: 0000000000000000 R09: 0000000000000000 [ 471.360737][T16800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.360748][T16800] R13: 00007f6daf026038 R14: 00007f6daf025fa0 R15: 00007ffcbb5a9158 [ 471.360780][T16800] [ 471.571040][T16803] x_tables: duplicate underflow at hook 2 [ 472.110785][T16825] __nla_validate_parse: 5 callbacks suppressed [ 472.110806][T16825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3736'. [ 472.127130][T16825] team0: Unable to change to the same mode the team is in [ 472.157419][T16825] tipc: Enabling of bearer rejected, already enabled [ 472.438168][T16840] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3740'. [ 472.488116][T16840] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 472.703715][T16847] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3744'. [ 473.001342][T16863] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3749'. [ 473.013103][T16863] team0: No ports can be present during mode change [ 473.025148][T16863] tipc: Enabling of bearer rejected, already enabled [ 473.338516][T16870] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.3751'. [ 473.338688][T16870] netlink: 4552 bytes leftover after parsing attributes in process `syz.4.3751'. [ 473.553074][T16879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.646521][T16881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.721221][T16885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.753507][T16888] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 473.766573][T16886] syzkaller0: entered promiscuous mode [ 473.766595][T16886] syzkaller0: entered allmulticast mode [ 473.853839][T16889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.946322][T16895] syzkaller0: entered promiscuous mode [ 473.946376][T16895] syzkaller0: entered allmulticast mode [ 473.951601][T16892] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3761'. [ 473.974159][T16892] team0: No ports can be present during mode change [ 473.987868][T16892] team0: Device vlan0 is of different type [ 474.004499][T16892] tipc: Enabling of bearer rejected, already enabled [ 474.756269][T16923] batman_adv: batadv0: Adding interface: syzkaller0 [ 474.756442][T16923] batman_adv: batadv0: Interface activated: syzkaller0 [ 474.817786][T16923] syzkaller0: left promiscuous mode [ 474.817846][T16923] syzkaller0: left allmulticast mode [ 474.973577][T16931] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3772'. [ 475.454447][T16941] team0: No ports can be present during mode change [ 475.487812][T16941] tipc: Enabling of bearer rejected, already enabled [ 475.668763][T16953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.690082][T16953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.762746][T16955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.857706][T16962] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 476.154015][T16979] syzkaller0: entered promiscuous mode [ 476.154041][T16979] syzkaller0: entered allmulticast mode [ 476.740751][T16996] C: renamed from lo [ 476.743499][T16996] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 476.947522][T16998] team0: Unable to change to the same mode the team is in [ 476.949936][T16998] tipc: Enabling of bearer rejected, already enabled [ 476.986884][T17000] FAULT_INJECTION: forcing a failure. [ 476.986884][T17000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.986918][T17000] CPU: 0 UID: 0 PID: 17000 Comm: syz.3.3795 Not tainted syzkaller #0 PREEMPT(full) [ 476.986940][T17000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 476.986952][T17000] Call Trace: [ 476.986960][T17000] [ 476.986968][T17000] dump_stack_lvl+0xe8/0x150 [ 476.987003][T17000] should_fail_ex+0x410/0x560 [ 476.987030][T17000] _copy_from_user+0x2d/0xb0 [ 476.987056][T17000] ___sys_sendmsg+0x1c6/0x360 [ 476.987083][T17000] ? __lock_acquire+0x747/0x2de0 [ 476.987108][T17000] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.987169][T17000] ? __fget_files+0x2a/0x420 [ 476.987195][T17000] ? __fget_files+0x3a2/0x420 [ 476.987230][T17000] __x64_sys_sendmsg+0x1b1/0x290 [ 476.987259][T17000] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.987307][T17000] do_syscall_64+0x166/0x520 [ 476.987328][T17000] ? trace_irq_disable+0x3b/0x140 [ 476.987348][T17000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.987369][T17000] ? clear_bhb_loop+0x70/0xc0 [ 476.987393][T17000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.987413][T17000] RIP: 0033:0x7fe62459e159 [ 476.987431][T17000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.987451][T17000] RSP: 002b:00007fe625417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.987473][T17000] RAX: ffffffffffffffda RBX: 00007fe624825fa0 RCX: 00007fe62459e159 [ 476.987487][T17000] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 476.987499][T17000] RBP: 00007fe625417090 R08: 0000000000000000 R09: 0000000000000000 [ 476.987510][T17000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.987520][T17000] R13: 00007fe624826038 R14: 00007fe624825fa0 R15: 00007ffd3b22e3b8 [ 476.987551][T17000] [ 477.260483][T17002] __nla_validate_parse: 5 callbacks suppressed [ 477.260505][T17002] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3796'. [ 477.527079][T17014] FAULT_INJECTION: forcing a failure. [ 477.527079][T17014] name failslab, interval 1, probability 0, space 0, times 0 [ 477.527113][T17014] CPU: 0 UID: 0 PID: 17014 Comm: syz.1.3800 Not tainted syzkaller #0 PREEMPT(full) [ 477.527135][T17014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 477.527146][T17014] Call Trace: [ 477.527154][T17014] [ 477.527163][T17014] dump_stack_lvl+0xe8/0x150 [ 477.527198][T17014] should_fail_ex+0x410/0x560 [ 477.527222][T17014] ? __alloc_skb+0x1db/0x7a0 [ 477.527244][T17014] should_failslab+0xa8/0x100 [ 477.527268][T17014] ? __alloc_skb+0x1db/0x7a0 [ 477.527287][T17014] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 477.527316][T17014] ? __alloc_skb+0x18d/0x7a0 [ 477.527336][T17014] ? __alloc_skb+0x1db/0x7a0 [ 477.527362][T17014] __alloc_skb+0x1db/0x7a0 [ 477.527388][T17014] netlink_ack+0x136/0xb30 [ 477.527424][T17014] ? __kmalloc_cache_noprof+0x14d/0x600 [ 477.527442][T17014] ? nfnetlink_rcv+0x1021/0x28c0 [ 477.527578][T17014] nfnetlink_rcv+0x260c/0x28c0 [ 477.527638][T17014] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 477.527681][T17014] ? ref_tracker_free+0x689/0x830 [ 477.527729][T17014] ? skb_clone+0x246/0x3a0 [ 477.527758][T17014] ? __netlink_deliver_tap+0x811/0x860 [ 477.527793][T17014] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.527821][T17014] ? netlink_deliver_tap+0x2e/0x1b0 [ 477.527854][T17014] netlink_unicast+0x7bd/0x940 [ 477.527891][T17014] netlink_sendmsg+0x813/0xb40 [ 477.527929][T17014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.527966][T17014] ? apparmor_socket_sendmsg+0x98/0x360 [ 477.527991][T17014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.528018][T17014] sock_sendmsg_nosec+0x13a/0x180 [ 477.528058][T17014] ____sys_sendmsg+0x54e/0x850 [ 477.528089][T17014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.528125][T17014] ? import_iovec+0x73/0xa0 [ 477.528152][T17014] ___sys_sendmsg+0x2a5/0x360 [ 477.528177][T17014] ? __lock_acquire+0x747/0x2de0 [ 477.528202][T17014] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.528266][T17014] ? __fget_files+0x2a/0x420 [ 477.528292][T17014] ? __fget_files+0x3a2/0x420 [ 477.528328][T17014] __x64_sys_sendmsg+0x1b1/0x290 [ 477.528357][T17014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 477.528406][T17014] do_syscall_64+0x166/0x520 [ 477.528427][T17014] ? trace_irq_disable+0x3b/0x140 [ 477.528446][T17014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.528466][T17014] ? clear_bhb_loop+0x70/0xc0 [ 477.528490][T17014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.528508][T17014] RIP: 0033:0x7f888099e159 [ 477.528527][T17014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.528545][T17014] RSP: 002b:00007f887ebf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 477.528566][T17014] RAX: ffffffffffffffda RBX: 00007f8880c25fa0 RCX: 00007f888099e159 [ 477.528581][T17014] RDX: 0000000000000014 RSI: 0000200000001080 RDI: 0000000000000003 [ 477.528592][T17014] RBP: 00007f887ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 477.528602][T17014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 477.528614][T17014] R13: 00007f8880c26038 R14: 00007f8880c25fa0 R15: 00007ffcf4dbfbb8 [ 477.528646][T17014] [ 477.569542][T17016] tipc: Enabling of bearer rejected, already enabled [ 477.992954][T17028] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3805'. [ 478.069710][T17023] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3804'. [ 478.292015][T17037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.306833][T17037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.379251][T17044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.471611][T17048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.489729][T17043] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3807'. [ 478.494316][T17049] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3811'. [ 478.642470][T17052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3813'. [ 479.010495][T17067] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 479.362129][T17079] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3823'. [ 479.463481][T17079] 8021q: adding VLAN 0 to HW filter on device bond14 [ 479.470409][T17079] bond0: (slave bond14): Enslaving as an active interface with an up link [ 479.492760][T17085] FAULT_INJECTION: forcing a failure. [ 479.492760][T17085] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.492813][T17085] CPU: 1 UID: 0 PID: 17085 Comm: syz.0.3824 Not tainted syzkaller #0 PREEMPT(full) [ 479.492835][T17085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 479.492846][T17085] Call Trace: [ 479.492854][T17085] [ 479.492863][T17085] dump_stack_lvl+0xe8/0x150 [ 479.492896][T17085] should_fail_ex+0x410/0x560 [ 479.492923][T17085] _copy_from_iter+0x1d3/0x1660 [ 479.492944][T17085] ? __alloc_skb+0x27a/0x7a0 [ 479.492968][T17085] ? __alloc_skb+0x27a/0x7a0 [ 479.492990][T17085] ? __alloc_skb+0x27a/0x7a0 [ 479.493010][T17085] ? __pfx__copy_from_iter+0x10/0x10 [ 479.493030][T17085] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 479.493055][T17085] ? __alloc_skb+0x27a/0x7a0 [ 479.493072][T17085] ? __alloc_skb+0x27a/0x7a0 [ 479.493096][T17085] ? netlink_sendmsg+0x650/0xb40 [ 479.493123][T17085] ? skb_put+0x112/0x210 [ 479.493146][T17085] netlink_sendmsg+0x6c0/0xb40 [ 479.493181][T17085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.493215][T17085] ? apparmor_socket_sendmsg+0x98/0x360 [ 479.493239][T17085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.493266][T17085] sock_sendmsg_nosec+0x13a/0x180 [ 479.493297][T17085] ____sys_sendmsg+0x54e/0x850 [ 479.493326][T17085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.493371][T17085] ? import_iovec+0x73/0xa0 [ 479.493397][T17085] ___sys_sendmsg+0x2a5/0x360 [ 479.493419][T17085] ? __lock_acquire+0x747/0x2de0 [ 479.493443][T17085] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.493502][T17085] ? __fget_files+0x2a/0x420 [ 479.493527][T17085] ? __fget_files+0x3a2/0x420 [ 479.493563][T17085] __x64_sys_sendmsg+0x1b1/0x290 [ 479.493590][T17085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.493635][T17085] do_syscall_64+0x166/0x520 [ 479.493656][T17085] ? trace_irq_disable+0x3b/0x140 [ 479.493674][T17085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.493693][T17085] ? clear_bhb_loop+0x70/0xc0 [ 479.493716][T17085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.493735][T17085] RIP: 0033:0x7f5ebed9e159 [ 479.493752][T17085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.493770][T17085] RSP: 002b:00007f5ebfbc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.493792][T17085] RAX: ffffffffffffffda RBX: 00007f5ebf025fa0 RCX: 00007f5ebed9e159 [ 479.493806][T17085] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003 [ 479.493818][T17085] RBP: 00007f5ebfbc6090 R08: 0000000000000000 R09: 0000000000000000 [ 479.493829][T17085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.493838][T17085] R13: 00007f5ebf026038 R14: 00007f5ebf025fa0 R15: 00007ffe7956f828 [ 479.493866][T17085] [ 480.239599][T17099] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3827'. [ 480.448660][T17105] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 480.771971][T17118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.818725][T17118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.884317][T17125] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.950728][T17127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 481.129580][T17134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3842'. [ 481.496141][T17144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3845'. [ 481.527559][T17146] openvswitch: netlink: EtherType 2 is less than min 600 [ 481.537489][T17145] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 482.463334][T17179] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 482.501906][T17178] syzkaller1: entered promiscuous mode [ 482.501946][T17178] syzkaller1: entered allmulticast mode [ 482.868980][T17197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.888841][T17199] netlink: 'syz.0.3868': attribute type 14 has an invalid length. [ 482.888863][T17199] __nla_validate_parse: 3 callbacks suppressed [ 482.888874][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 482.892708][T17197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 482.919940][T17199] netlink: 'syz.0.3868': attribute type 14 has an invalid length. [ 482.919964][T17199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 482.926670][ T6175] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.935123][ T39] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.935169][ T39] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.935202][ T39] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 482.965599][T17200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.040747][T17203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.213721][T17206] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3872'. [ 483.215271][T17210] tap0: tun_chr_ioctl cmd 1074025676 [ 483.215290][T17210] tap0: owner set to 0 [ 483.250929][T17206] team0: No ports can be present during mode change [ 483.254330][T17206] tipc: Enabling of bearer rejected, already enabled [ 483.687243][T17227] syzkaller1: entered promiscuous mode [ 483.687266][T17227] syzkaller1: entered allmulticast mode [ 484.035370][T17242] openvswitch: netlink: Duplicate or invalid key (type 0). [ 484.325761][T17248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3887'. [ 484.348049][T17248] team0: No ports can be present during mode change [ 484.368600][T17248] tipc: Enabling of bearer rejected, already enabled [ 484.371634][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 484.404575][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 484.419777][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 484.437707][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 484.438020][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 484.438442][T17251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3888'. [ 484.909299][T17276] syzkaller1: entered promiscuous mode [ 484.909324][T17276] syzkaller1: entered allmulticast mode [ 485.322048][T17289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.335390][T17289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.395199][T17290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.461905][T17295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 485.645549][T17298] team0: No ports can be present during mode change [ 485.671136][T17298] team0: Device vlan0 is of different type [ 485.700866][T17298] tipc: Enabling of bearer rejected, already enabled [ 485.739383][T17303] netlink: 'syz.1.3904': attribute type 1 has an invalid length. [ 485.810649][T17303] gretap0: entered promiscuous mode [ 485.896746][T17306] syzkaller0: entered promiscuous mode [ 485.896781][T17306] syzkaller0: entered allmulticast mode [ 486.061761][T17312] tipc: Enabling of bearer rejected, already enabled [ 486.233220][T17314] syzkaller1: entered promiscuous mode [ 486.233277][T17314] syzkaller1: entered allmulticast mode [ 486.256366][T17316] syzkaller0: left promiscuous mode [ 486.256392][T17316] syzkaller0: left allmulticast mode [ 486.621170][T17327] team0: Unable to change to the same mode the team is in [ 486.668492][T17327] tipc: Enabling of bearer rejected, already enabled [ 487.055674][T17340] tipc: Enabling of bearer rejected, already enabled [ 487.469855][T17355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.510599][T17355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.590339][T17364] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.671301][T17370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.697704][T17367] team0: No ports can be present during mode change [ 487.699984][T17367] tipc: Enabling of bearer rejected, already enabled [ 488.088802][T17379] __nla_validate_parse: 9 callbacks suppressed [ 488.088825][T17379] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3935'. [ 488.168320][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 488.168344][T17381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 488.450100][T17390] ip_tables: iptables: counters copy to user failed while replacing table [ 512.497578][T17410] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3944'. [ 512.512005][T17410] team0: No ports can be present during mode change [ 512.532735][T17410] team0: Device vlan0 is of different type [ 512.554274][T17410] tipc: Enabling of bearer rejected, already enabled [ 513.079265][T17431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3949'. [ 513.131921][T17428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3946'. [ 513.131961][T17428] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3946'. [ 513.351347][T17435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.466600][T17444] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.542588][T17447] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.680613][T17456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 513.933983][T17464] FAULT_INJECTION: forcing a failure. [ 513.933983][T17464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 513.934047][T17464] CPU: 1 UID: 0 PID: 17464 Comm: syz.1.3959 Not tainted syzkaller #0 PREEMPT(full) [ 513.934069][T17464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 513.934081][T17464] Call Trace: [ 513.934088][T17464] [ 513.934096][T17464] dump_stack_lvl+0xe8/0x150 [ 513.934129][T17464] should_fail_ex+0x410/0x560 [ 513.934155][T17464] _copy_from_iter+0x1d3/0x1660 [ 513.934175][T17464] ? __alloc_skb+0x27a/0x7a0 [ 513.934196][T17464] ? __alloc_skb+0x27a/0x7a0 [ 513.934216][T17464] ? __alloc_skb+0x27a/0x7a0 [ 513.934236][T17464] ? __pfx__copy_from_iter+0x10/0x10 [ 513.934255][T17464] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 513.934281][T17464] ? __alloc_skb+0x27a/0x7a0 [ 513.934300][T17464] ? __alloc_skb+0x27a/0x7a0 [ 513.934324][T17464] ? netlink_sendmsg+0x650/0xb40 [ 513.934348][T17464] ? skb_put+0x112/0x210 [ 513.934369][T17464] netlink_sendmsg+0x6c0/0xb40 [ 513.934411][T17464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.934445][T17464] ? apparmor_socket_sendmsg+0x98/0x360 [ 513.934469][T17464] ? __pfx_netlink_sendmsg+0x10/0x10 [ 513.934495][T17464] sock_sendmsg_nosec+0x13a/0x180 [ 513.934527][T17464] ____sys_sendmsg+0x54e/0x850 [ 513.934557][T17464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 513.934589][T17464] ? import_iovec+0x73/0xa0 [ 513.934616][T17464] ___sys_sendmsg+0x2a5/0x360 [ 513.934639][T17464] ? __lock_acquire+0x747/0x2de0 [ 513.934663][T17464] ? __pfx____sys_sendmsg+0x10/0x10 [ 513.934692][T17464] ? irqentry_exit+0x218/0x910 [ 513.934710][T17464] ? trace_irq_disable+0x3b/0x140 [ 513.934752][T17464] ? __fget_files+0x2a/0x420 [ 513.934777][T17464] ? __fget_files+0x3a2/0x420 [ 513.934814][T17464] __x64_sys_sendmsg+0x1b1/0x290 [ 513.934842][T17464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 513.934887][T17464] do_syscall_64+0x166/0x520 [ 513.934908][T17464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.934928][T17464] ? clear_bhb_loop+0x70/0xc0 [ 513.934952][T17464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.934972][T17464] RIP: 0033:0x7f888099e159 [ 513.934991][T17464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 513.935009][T17464] RSP: 002b:00007f887ebf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 513.935031][T17464] RAX: ffffffffffffffda RBX: 00007f8880c25fa0 RCX: 00007f888099e159 [ 513.935045][T17464] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000009 [ 513.935057][T17464] RBP: 00007f887ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 513.935068][T17464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.935079][T17464] R13: 00007f8880c26038 R14: 00007f8880c25fa0 R15: 00007ffcf4dbfbb8 [ 513.935110][T17464] [ 515.031876][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3969'. [ 515.107962][T17517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3970'. [ 515.160360][T17517] tipc: Resetting bearer [ 515.209091][T15667] wg0 speed is unknown, defaulting to 1000 [ 515.306278][T17517] team0: Unable to change to the same mode the team is in [ 515.312343][T17517] tipc: Enabling of bearer rejected, already enabled [ 515.553863][T17500] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 516.358664][T17577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.374128][T17573] ip6tnl1: entered promiscuous mode [ 516.374182][T17573] ip6tnl1: entered allmulticast mode [ 516.670475][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3982'. [ 516.670535][T17584] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3982'. [ 516.697408][T17584] syzkaller1: entered promiscuous mode [ 516.697432][T17584] syzkaller1: entered allmulticast mode [ 517.115763][T17575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 517.521786][T17617] netlink: 'syz.1.3991': attribute type 2 has an invalid length. [ 517.629107][T17627] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3993'. [ 517.631074][T17626] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 517.677532][T17627] bond15: option xmit_hash_policy: invalid value (64) [ 517.693704][T17627] bond15 (unregistering): Released all slaves [ 518.061633][ T52] block nbd6: Receive control failed (result -32) [ 518.065109][ T5624] block nbd5: Receive control failed (result -32) [ 518.194241][T17621] syzkaller1: entered promiscuous mode [ 518.194282][T17621] syzkaller1: entered allmulticast mode [ 518.361974][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 518.362001][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 518.362027][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 518.504794][T17653] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.4001'. [ 518.526730][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 518.526754][T17651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4000'. [ 518.526781][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 518.662336][T17658] syzkaller0: entered promiscuous mode [ 518.662360][T17658] syzkaller0: entered allmulticast mode [ 518.776113][T17661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.865463][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4006'. [ 518.917568][T17668] bond10: option xmit_hash_policy: invalid value (64) [ 518.950323][T17668] bond10 (unregistering): Released all slaves [ 519.082062][T17677] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 519.486588][T17683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.492035][T17683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4011'. [ 519.563531][T17660] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.931453][T17692] syzkaller1: entered promiscuous mode [ 519.931476][T17692] syzkaller1: entered allmulticast mode [ 520.561709][T17717] bond8: option xmit_hash_policy: invalid value (64) [ 520.570717][T17717] bond8 (unregistering): Released all slaves [ 521.182063][T17742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.539162][T17754] netlink: 'syz.1.4035': attribute type 10 has an invalid length. [ 521.539408][T17754] dummy0: entered allmulticast mode [ 521.569398][T17754] bridge0: port 1(dummy0) entered blocking state [ 521.569715][T17754] bridge0: port 1(dummy0) entered disabled state [ 521.585825][T17754] bridge0: port 1(dummy0) entered blocking state [ 521.585935][T17754] bridge0: port 1(dummy0) entered forwarding state [ 521.722934][T17747] syzkaller1: entered promiscuous mode [ 521.722961][T17747] syzkaller1: entered allmulticast mode [ 521.773745][T17758] x_tables: duplicate underflow at hook 3 [ 521.873383][T17760] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 522.001028][T17740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.106436][T17766] bond8: option xmit_hash_policy: invalid value (64) [ 522.108390][T17766] bond8 (unregistering): Released all slaves [ 522.714176][T17785] netlink: 'syz.1.4050': attribute type 4 has an invalid length. [ 522.770240][T17786] netlink: 'syz.1.4050': attribute type 4 has an invalid length. [ 522.883044][T17792] xt_hashlimit: size too large, truncated to 1048576 [ 522.948106][T17795] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 523.164328][T17799] __nla_validate_parse: 11 callbacks suppressed [ 523.164349][T17799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4052'. [ 523.324463][T17799] bond12: option xmit_hash_policy: invalid value (64) [ 523.342848][T17799] bond12 (unregistering): Released all slaves [ 523.758350][T17783] syzkaller1: entered promiscuous mode [ 523.758374][T17783] syzkaller1: entered allmulticast mode [ 523.834709][T17819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.944386][T17817] tipc: Enabling of bearer rejected, failed to enable media [ 523.949523][T17821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.979670][T17821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.072209][T17824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.116589][T17826] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4058'. [ 524.141140][T17825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4059'. [ 524.286441][T17834] netlink: 'syz.4.4063': attribute type 1 has an invalid length. [ 524.451619][T17840] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4064'. [ 524.589841][T17844] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4064'. [ 524.590035][T17845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4064'. [ 524.675890][T17834] 8021q: adding VLAN 0 to HW filter on device bond10 [ 525.071693][T17863] netlink: 'syz.3.4066': attribute type 11 has an invalid length. [ 525.806137][T17885] tc_dump_action: action bad kind [ 525.815718][T17889] netlink: 'syz.0.4077': attribute type 1 has an invalid length. [ 525.846724][T17883] FAULT_INJECTION: forcing a failure. [ 525.846724][T17883] name failslab, interval 1, probability 0, space 0, times 0 [ 525.846756][T17883] CPU: 0 UID: 0 PID: 17883 Comm: syz.1.4074 Not tainted syzkaller #0 PREEMPT(full) [ 525.846778][T17883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 525.846790][T17883] Call Trace: [ 525.846798][T17883] [ 525.846806][T17883] dump_stack_lvl+0xe8/0x150 [ 525.846841][T17883] should_fail_ex+0x410/0x560 [ 525.846870][T17883] should_failslab+0xa8/0x100 [ 525.846895][T17883] ? skb_clone+0x212/0x3a0 [ 525.846922][T17883] kmem_cache_alloc_noprof+0xa1/0x600 [ 525.846951][T17883] ? lock_acquire+0x115/0x350 [ 525.846977][T17883] ? skb_clone+0x212/0x3a0 [ 525.847010][T17883] skb_clone+0x212/0x3a0 [ 525.847034][T17883] ? dev_queue_xmit_nit+0x25c/0xac0 [ 525.847061][T17883] dev_queue_xmit_nit+0x28d/0xac0 [ 525.847085][T17883] ? dev_queue_xmit_nit+0x2d/0xac0 [ 525.847118][T17883] dev_hard_start_xmit+0x1c1/0x830 [ 525.847166][T17883] __dev_queue_xmit+0x14c0/0x3820 [ 525.847193][T17883] ? ____sys_sendmsg+0x54e/0x850 [ 525.847216][T17883] ? ___sys_sendmsg+0x2a5/0x360 [ 525.847254][T17883] ? __dev_queue_xmit+0x29b/0x3820 [ 525.847300][T17883] ? __pfx___dev_queue_xmit+0x10/0x10 [ 525.847338][T17883] ? __copy_skb_header+0xa3/0x4a0 [ 525.847387][T17883] ? skb_clone+0x246/0x3a0 [ 525.847418][T17883] __netlink_deliver_tap+0x5b4/0x860 [ 525.847461][T17883] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.847492][T17883] netlink_deliver_tap+0x19c/0x1b0 [ 525.847522][T17883] __netlink_sendskb+0x47/0x90 [ 525.847548][T17883] netlink_dump+0xa8c/0xee0 [ 525.847574][T17883] ? __netlink_lookup+0xc6/0x8b0 [ 525.847614][T17883] ? __pfx_netlink_dump+0x10/0x10 [ 525.847654][T17883] ? netlink_lookup+0x30/0x200 [ 525.847681][T17883] ? netlink_lookup+0x30/0x200 [ 525.847708][T17883] ? ctnetlink_start+0x1dd/0x230 [ 525.847855][T17883] __netlink_dump_start+0x589/0x7b0 [ 525.847891][T17883] ctnetlink_get_conntrack+0x212/0x7b0 [ 525.847925][T17883] ? __pfx_ctnetlink_get_conntrack+0x10/0x10 [ 525.847954][T17883] ? __pfx___mutex_lock+0x10/0x10 [ 525.847981][T17883] ? __pfx_ctnetlink_start+0x10/0x10 [ 525.848004][T17883] ? __pfx_ctnetlink_dump_table+0x10/0x10 [ 525.848027][T17883] ? __pfx_ctnetlink_done+0x10/0x10 [ 525.848069][T17883] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 525.848094][T17883] ? unwind_get_return_address+0x4d/0x90 [ 525.848118][T17883] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 525.848163][T17883] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 525.848241][T17883] netlink_rcv_skb+0x226/0x4a0 [ 525.848269][T17883] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 525.848303][T17883] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 525.848342][T17883] ? bpf_lsm_capable+0x9/0x20 [ 525.848360][T17883] ? security_capable+0x7e/0x2c0 [ 525.848391][T17883] nfnetlink_rcv+0x2b9/0x28c0 [ 525.848420][T17883] ? __dev_queue_xmit+0x29b/0x3820 [ 525.848450][T17883] ? __local_bh_enable_ip+0xd6/0x140 [ 525.848476][T17883] ? lockdep_hardirqs_on+0x7b/0x110 [ 525.848496][T17883] ? __dev_queue_xmit+0x29b/0x3820 [ 525.848520][T17883] ? __local_bh_enable_ip+0xd6/0x140 [ 525.848542][T17883] ? __dev_queue_xmit+0x29b/0x3820 [ 525.848566][T17883] ? __dev_queue_xmit+0x1edc/0x3820 [ 525.848590][T17883] ? do_syscall_64+0x166/0x520 [ 525.848608][T17883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.848639][T17883] ? __dev_queue_xmit+0x29b/0x3820 [ 525.848666][T17883] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 525.848696][T17883] ? __pfx___dev_queue_xmit+0x10/0x10 [ 525.848729][T17883] ? ref_tracker_free+0x689/0x830 [ 525.848756][T17883] ? __pfx_ref_tracker_free+0x10/0x10 [ 525.848785][T17883] ? __skb_clone+0x449/0x6c0 [ 525.848818][T17883] ? skb_clone+0x246/0x3a0 [ 525.848848][T17883] ? __netlink_deliver_tap+0x811/0x860 [ 525.848876][T17883] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.848911][T17883] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.848938][T17883] ? netlink_deliver_tap+0x2e/0x1b0 [ 525.848971][T17883] netlink_unicast+0x7bd/0x940 [ 525.849008][T17883] netlink_sendmsg+0x813/0xb40 [ 525.849046][T17883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.849083][T17883] ? apparmor_socket_sendmsg+0x98/0x360 [ 525.849107][T17883] ? __pfx_netlink_sendmsg+0x10/0x10 [ 525.849134][T17883] sock_sendmsg_nosec+0x13a/0x180 [ 525.849168][T17883] ____sys_sendmsg+0x54e/0x850 [ 525.849200][T17883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 525.849237][T17883] ? import_iovec+0x73/0xa0 [ 525.849266][T17883] ___sys_sendmsg+0x2a5/0x360 [ 525.849298][T17883] ? __lock_acquire+0x747/0x2de0 [ 525.849325][T17883] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.849393][T17883] ? __fget_files+0x2a/0x420 [ 525.849420][T17883] ? __fget_files+0x3a2/0x420 [ 525.849460][T17883] __x64_sys_sendmsg+0x1b1/0x290 [ 525.849489][T17883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 525.849542][T17883] do_syscall_64+0x166/0x520 [ 525.849563][T17883] ? trace_irq_disable+0x3b/0x140 [ 525.849582][T17883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.849603][T17883] ? clear_bhb_loop+0x70/0xc0 [ 525.849629][T17883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.849649][T17883] RIP: 0033:0x7f888099e159 [ 525.849669][T17883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.849685][T17883] RSP: 002b:00007f887ebf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.849707][T17883] RAX: ffffffffffffffda RBX: 00007f8880c25fa0 RCX: 00007f888099e159 [ 525.849722][T17883] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 0000000000000009 [ 525.849735][T17883] RBP: 00007f887ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 525.849748][T17883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.849759][T17883] R13: 00007f8880c26038 R14: 00007f8880c25fa0 R15: 00007ffcf4dbfbb8 [ 525.849793][T17883] [ 526.282548][T17889] 8021q: adding VLAN 0 to HW filter on device bond11 [ 526.528607][T17904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4081'. [ 526.767220][T17904] bond8: option xmit_hash_policy: invalid value (64) [ 526.774093][T17904] bond8 (unregistering): Released all slaves [ 526.899285][T17915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.010053][T17918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.023296][T17918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.025290][T17916] syzkaller0: left promiscuous mode [ 527.025325][T17916] syzkaller0: left allmulticast mode [ 527.083498][T17919] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.448642][T17935] bond0: (slave veth0_vlan): Error: Device is in use and cannot be enslaved [ 527.700029][T17945] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4096'. [ 527.701788][T17941] bridge10: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 527.746014][T17945] netlink: 120 bytes leftover after parsing attributes in process `syz.2.4096'. [ 527.787600][T17952] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4096'. [ 527.863191][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.863428][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.863638][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.864309][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.864511][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.905127][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.905383][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.905588][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.905833][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 527.906037][T17955] netlink: 'syz.4.4097': attribute type 8 has an invalid length. [ 528.066200][T17960] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 528.131829][T17962] SET target dimension over the limit! [ 528.139005][T17963] SET target dimension over the limit! [ 528.257967][T17962] bond11: entered promiscuous mode [ 528.258692][T17962] 8021q: adding VLAN 0 to HW filter on device bond11 [ 528.263566][T17963] __nla_validate_parse: 36 callbacks suppressed [ 528.263601][T17963] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4099'. [ 528.820151][T17976] 8021q: adding VLAN 0 to HW filter on device bond15 [ 528.850921][T17985] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4106'. [ 529.079512][T17993] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.161640][T17996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4114'. [ 529.187252][T17997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.232750][T17997] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.304977][T18004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 529.355904][T18003] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4115'. [ 530.493266][T18045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4124'. [ 530.511611][T18045] hsr_slave_0: left promiscuous mode [ 530.533504][T18045] hsr_slave_1: left promiscuous mode [ 530.623552][T18050] syzkaller0: left promiscuous mode [ 530.623575][T18050] syzkaller0: left allmulticast mode [ 530.987428][T18060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4131'. [ 531.450473][T18079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.458961][T18078] xt_LOG: level 8 >= 8 [ 531.461946][T18078] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4139'. [ 531.599388][T18082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.644672][T18082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.707909][T18091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.923093][T18098] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4147'. [ 532.441016][T18121] nbd: couldn't find device at index 15663104 [ 532.741702][T18131] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4158'. [ 532.810554][T18132] FAULT_INJECTION: forcing a failure. [ 532.810554][T18132] name failslab, interval 1, probability 0, space 0, times 0 [ 532.810588][T18132] CPU: 0 UID: 0 PID: 18132 Comm: syz.3.4158 Not tainted syzkaller #0 PREEMPT(full) [ 532.810610][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 532.810621][T18132] Call Trace: [ 532.810632][T18132] [ 532.810640][T18132] dump_stack_lvl+0xe8/0x150 [ 532.810673][T18132] should_fail_ex+0x410/0x560 [ 532.810699][T18132] ? __alloc_skb+0x1db/0x7a0 [ 532.810723][T18132] should_failslab+0xa8/0x100 [ 532.810748][T18132] ? __alloc_skb+0x1db/0x7a0 [ 532.810768][T18132] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 532.810797][T18132] ? __alloc_skb+0x18d/0x7a0 [ 532.810820][T18132] ? __alloc_skb+0x1db/0x7a0 [ 532.810848][T18132] __alloc_skb+0x1db/0x7a0 [ 532.810874][T18132] netlink_sendmsg+0x5d4/0xb40 [ 532.810902][T18132] ? lockdep_hardirqs_on+0x7b/0x110 [ 532.810933][T18132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.810969][T18132] ? apparmor_socket_sendmsg+0x98/0x360 [ 532.810995][T18132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 532.811022][T18132] sock_sendmsg_nosec+0x13a/0x180 [ 532.811055][T18132] ____sys_sendmsg+0x54e/0x850 [ 532.811087][T18132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 532.811122][T18132] ? import_iovec+0x73/0xa0 [ 532.811156][T18132] ___sys_sendmsg+0x2a5/0x360 [ 532.811180][T18132] ? __lock_acquire+0x747/0x2de0 [ 532.811205][T18132] ? __pfx____sys_sendmsg+0x10/0x10 [ 532.811268][T18132] ? __fget_files+0x2a/0x420 [ 532.811294][T18132] ? __fget_files+0x3a2/0x420 [ 532.811331][T18132] __x64_sys_sendmsg+0x1b1/0x290 [ 532.811359][T18132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 532.811407][T18132] do_syscall_64+0x166/0x520 [ 532.811427][T18132] ? trace_irq_disable+0x3b/0x140 [ 532.811447][T18132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.811468][T18132] ? clear_bhb_loop+0x70/0xc0 [ 532.811492][T18132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.811512][T18132] RIP: 0033:0x7fe62459e159 [ 532.811531][T18132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.811548][T18132] RSP: 002b:00007fe6253f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 532.811570][T18132] RAX: ffffffffffffffda RBX: 00007fe624826090 RCX: 00007fe62459e159 [ 532.811584][T18132] RDX: 0000000000000000 RSI: 0000200000002200 RDI: 0000000000000003 [ 532.811597][T18132] RBP: 00007fe6253f6090 R08: 0000000000000000 R09: 0000000000000000 [ 532.811609][T18132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.811621][T18132] R13: 00007fe624826128 R14: 00007fe624826090 R15: 00007ffd3b22e3b8 [ 532.811653][T18132] [ 532.923014][T18135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4159'. [ 533.277552][T18138] validate_nla: 26 callbacks suppressed [ 533.277604][T18138] netlink: 'syz.4.4160': attribute type 39 has an invalid length. [ 533.424400][T18144] netlink: 'syz.2.4165': attribute type 23 has an invalid length. [ 534.149236][T18182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4171'. [ 534.408956][T18191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4175'. [ 534.413404][T18191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4175'. [ 534.441388][T18191] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4175'. [ 534.441415][T18191] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4175'. [ 534.441431][T18191] netlink: 'syz.0.4175': attribute type 6 has an invalid length. [ 534.441457][T18191] netlink: 'syz.0.4175': attribute type 5 has an invalid length. [ 534.441472][T18191] netlink: 43 bytes leftover after parsing attributes in process `syz.0.4175'. [ 535.518910][T18224] netlink: 'syz.2.4179': attribute type 1 has an invalid length. [ 535.613125][T18227] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4181'. [ 535.848265][T18234] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4183'. [ 535.869467][T18234] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4183'. [ 536.044140][T18240] netlink: 'syz.3.4184': attribute type 5 has an invalid length. [ 536.412511][T18250] netlink: 'syz.3.4184': attribute type 5 has an invalid length. [ 536.438877][T18262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4191'. [ 536.866075][T18275] vlan6: entered allmulticast mode [ 536.866099][T18275] bond0: entered allmulticast mode [ 536.866112][T18275] gretap1: entered allmulticast mode [ 537.150900][T18288] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 537.692144][T18305] tc_dump_action: action bad kind [ 537.929204][T18314] sch_fq: defrate 0 ignored. [ 538.134409][T18318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 538.244277][T18325] FAULT_INJECTION: forcing a failure. [ 538.244277][T18325] name failslab, interval 1, probability 0, space 0, times 0 [ 538.244310][T18325] CPU: 0 UID: 0 PID: 18325 Comm: syz.4.4211 Not tainted syzkaller #0 PREEMPT(full) [ 538.244333][T18325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 538.244344][T18325] Call Trace: [ 538.244352][T18325] [ 538.244361][T18325] dump_stack_lvl+0xe8/0x150 [ 538.244396][T18325] should_fail_ex+0x410/0x560 [ 538.244424][T18325] should_failslab+0xa8/0x100 [ 538.244451][T18325] ? skb_clone+0x212/0x3a0 [ 538.244490][T18325] kmem_cache_alloc_noprof+0xa1/0x600 [ 538.244523][T18325] ? skb_clone+0x212/0x3a0 [ 538.244556][T18325] skb_clone+0x212/0x3a0 [ 538.244588][T18325] __netlink_deliver_tap+0x413/0x860 [ 538.244630][T18325] ? netlink_deliver_tap+0x2e/0x1b0 [ 538.244662][T18325] netlink_deliver_tap+0x19c/0x1b0 [ 538.244692][T18325] netlink_unicast+0x781/0x940 [ 538.244727][T18325] netlink_sendmsg+0x813/0xb40 [ 538.244764][T18325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.244801][T18325] ? apparmor_socket_sendmsg+0x98/0x360 [ 538.244826][T18325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 538.244853][T18325] sock_sendmsg_nosec+0x13a/0x180 [ 538.244886][T18325] ____sys_sendmsg+0x54e/0x850 [ 538.244917][T18325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 538.244953][T18325] ? import_iovec+0x73/0xa0 [ 538.244982][T18325] ___sys_sendmsg+0x2a5/0x360 [ 538.245007][T18325] ? __lock_acquire+0x747/0x2de0 [ 538.245033][T18325] ? __pfx____sys_sendmsg+0x10/0x10 [ 538.245098][T18325] ? __fget_files+0x2a/0x420 [ 538.245125][T18325] ? __fget_files+0x3a2/0x420 [ 538.245164][T18325] __x64_sys_sendmsg+0x1b1/0x290 [ 538.245193][T18325] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 538.245243][T18325] do_syscall_64+0x166/0x520 [ 538.245271][T18325] ? trace_irq_disable+0x3b/0x140 [ 538.245292][T18325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.245312][T18325] ? clear_bhb_loop+0x70/0xc0 [ 538.245337][T18325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.245356][T18325] RIP: 0033:0x7f6daed9e159 [ 538.245376][T18325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.245392][T18325] RSP: 002b:00007f6dafce0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.245414][T18325] RAX: ffffffffffffffda RBX: 00007f6daf026090 RCX: 00007f6daed9e159 [ 538.245428][T18325] RDX: 0000000000000000 RSI: 0000200000002200 RDI: 0000000000000003 [ 538.245441][T18325] RBP: 00007f6dafce0090 R08: 0000000000000000 R09: 0000000000000000 [ 538.245454][T18325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.245467][T18325] R13: 00007f6daf026128 R14: 00007f6daf026090 R15: 00007ffcbb5a9158 [ 538.245508][T18325] [ 538.661160][T18330] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 539.620741][T18370] tipc: Enabled bearer , priority 10 [ 539.787767][T18374] __nla_validate_parse: 8 callbacks suppressed [ 539.787817][T18374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4227'. [ 539.908444][T18386] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4231'. [ 539.916152][T18374] bond16: option xmit_hash_policy: invalid value (64) [ 539.933711][T18374] bond16 (unregistering): Released all slaves [ 539.954621][T18390] FAULT_INJECTION: forcing a failure. [ 539.954621][T18390] name failslab, interval 1, probability 0, space 0, times 0 [ 539.954687][T18390] CPU: 1 UID: 0 PID: 18390 Comm: syz.4.4231 Not tainted syzkaller #0 PREEMPT(full) [ 539.954711][T18390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 539.954722][T18390] Call Trace: [ 539.954729][T18390] [ 539.954737][T18390] dump_stack_lvl+0xe8/0x150 [ 539.954771][T18390] should_fail_ex+0x410/0x560 [ 539.954798][T18390] should_failslab+0xa8/0x100 [ 539.954823][T18390] __kmalloc_noprof+0xfe/0x720 [ 539.954843][T18390] ? nla_strdup+0x9d/0x140 [ 539.954863][T18390] ? nla_strdup+0x9d/0x140 [ 539.954892][T18390] nla_strdup+0x9d/0x140 [ 539.954918][T18390] nf_tables_dump_obj_start+0x69/0x200 [ 539.955048][T18390] __netlink_dump_start+0x442/0x7b0 [ 539.955078][T18390] ? nft_netlink_dump_start_rcu+0xb6/0x1a0 [ 539.955134][T18390] nft_netlink_dump_start_rcu+0xdb/0x1a0 [ 539.955165][T18390] nf_tables_getobj+0x1fe/0xae0 [ 539.955195][T18390] ? irqentry_exit+0x218/0x910 [ 539.955217][T18390] ? lockdep_hardirqs_on+0x7b/0x110 [ 539.955237][T18390] ? irqentry_exit+0x218/0x910 [ 539.955256][T18390] ? trace_irq_disable+0x3b/0x140 [ 539.955279][T18390] ? __pfx_nf_tables_getobj+0x10/0x10 [ 539.955302][T18390] ? __pfx_nf_tables_dump_obj_start+0x10/0x10 [ 539.955320][T18390] ? __pfx_nf_tables_dump_obj+0x10/0x10 [ 539.955336][T18390] ? __pfx_nf_tables_dump_obj_done+0x10/0x10 [ 539.955363][T18390] ? __nla_parse+0x40/0x60 [ 539.955387][T18390] ? __pfx_nf_tables_getobj+0x10/0x10 [ 539.955422][T18390] nfnetlink_rcv_msg+0x8a9/0x12b0 [ 539.955446][T18390] ? unwind_get_return_address+0x4d/0x90 [ 539.955470][T18390] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 539.955516][T18390] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 539.955592][T18390] netlink_rcv_skb+0x226/0x4a0 [ 539.955620][T18390] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 539.955647][T18390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 539.955686][T18390] ? bpf_lsm_capable+0x9/0x20 [ 539.955704][T18390] ? security_capable+0x7e/0x2c0 [ 539.955733][T18390] nfnetlink_rcv+0x2b9/0x28c0 [ 539.955761][T18390] ? __dev_queue_xmit+0x29b/0x3820 [ 539.955791][T18390] ? __local_bh_enable_ip+0xd6/0x140 [ 539.955817][T18390] ? lockdep_hardirqs_on+0x7b/0x110 [ 539.955836][T18390] ? __dev_queue_xmit+0x29b/0x3820 [ 539.955860][T18390] ? __local_bh_enable_ip+0xd6/0x140 [ 539.955883][T18390] ? __dev_queue_xmit+0x29b/0x3820 [ 539.955908][T18390] ? __dev_queue_xmit+0x1edc/0x3820 [ 539.955932][T18390] ? do_syscall_64+0x166/0x520 [ 539.955951][T18390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.955983][T18390] ? __dev_queue_xmit+0x29b/0x3820 [ 539.956010][T18390] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 539.956041][T18390] ? __pfx___dev_queue_xmit+0x10/0x10 [ 539.956076][T18390] ? ref_tracker_free+0x689/0x830 [ 539.956101][T18390] ? __pfx_ref_tracker_free+0x10/0x10 [ 539.956132][T18390] ? __skb_clone+0x449/0x6c0 [ 539.956165][T18390] ? skb_clone+0x246/0x3a0 [ 539.956194][T18390] ? __netlink_deliver_tap+0x811/0x860 [ 539.956236][T18390] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.956271][T18390] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.956296][T18390] ? netlink_deliver_tap+0x2e/0x1b0 [ 539.956326][T18390] netlink_unicast+0x7bd/0x940 [ 539.956362][T18390] netlink_sendmsg+0x813/0xb40 [ 539.956427][T18390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.956464][T18390] ? apparmor_socket_sendmsg+0x98/0x360 [ 539.956489][T18390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 539.956515][T18390] sock_sendmsg_nosec+0x13a/0x180 [ 539.956548][T18390] ____sys_sendmsg+0x54e/0x850 [ 539.956578][T18390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 539.956613][T18390] ? import_iovec+0x73/0xa0 [ 539.956642][T18390] ___sys_sendmsg+0x2a5/0x360 [ 539.956665][T18390] ? __lock_acquire+0x747/0x2de0 [ 539.956690][T18390] ? __pfx____sys_sendmsg+0x10/0x10 [ 539.956753][T18390] ? __fget_files+0x2a/0x420 [ 539.956778][T18390] ? __fget_files+0x3a2/0x420 [ 539.956814][T18390] __x64_sys_sendmsg+0x1b1/0x290 [ 539.956838][T18390] ? net_tx_action+0x5bb/0xc30 [ 539.956860][T18390] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 539.956893][T18390] ? handle_softirqs+0x720/0x860 [ 539.956930][T18390] do_syscall_64+0x166/0x520 [ 539.956950][T18390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.956970][T18390] ? clear_bhb_loop+0x70/0xc0 [ 539.956994][T18390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.957013][T18390] RIP: 0033:0x7f6daed9e159 [ 539.957032][T18390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.957049][T18390] RSP: 002b:00007f6dafce0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 539.957070][T18390] RAX: ffffffffffffffda RBX: 00007f6daf026090 RCX: 00007f6daed9e159 [ 539.957084][T18390] RDX: 0000000000000000 RSI: 0000200000002200 RDI: 0000000000000003 [ 539.957097][T18390] RBP: 00007f6dafce0090 R08: 0000000000000000 R09: 0000000000000000 [ 539.957110][T18390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.957122][T18390] R13: 00007f6daf026128 R14: 00007f6daf026090 R15: 00007ffcbb5a9158 [ 539.957156][T18390] [ 540.144349][T18389] geneve2: entered promiscuous mode [ 540.554544][T18398] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4233'. [ 540.669349][T18401] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4235'. [ 541.132188][ T5277] veth0_vlan: left promiscuous mode [ 541.162622][ T9] veth0_vlan: entered promiscuous mode [ 541.163900][T18419] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 541.182162][T18419] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 541.229877][T18421] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4241'. [ 541.573297][T18432] netlink: 244 bytes leftover after parsing attributes in process `syz.3.4246'. [ 541.776118][T18442] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4249'. [ 541.827201][T18434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4244'. [ 541.841487][T18447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4249'. [ 541.926637][T18450] FAULT_INJECTION: forcing a failure. [ 541.926637][T18450] name failslab, interval 1, probability 0, space 0, times 0 [ 541.926678][T18450] CPU: 0 UID: 0 PID: 18450 Comm: syz.4.4250 Not tainted syzkaller #0 PREEMPT(full) [ 541.926701][T18450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 541.926713][T18450] Call Trace: [ 541.926721][T18450] [ 541.926730][T18450] dump_stack_lvl+0xe8/0x150 [ 541.926765][T18450] should_fail_ex+0x410/0x560 [ 541.926793][T18450] should_failslab+0xa8/0x100 [ 541.926818][T18450] ? skb_clone+0x212/0x3a0 [ 541.926845][T18450] kmem_cache_alloc_noprof+0xa1/0x600 [ 541.926876][T18450] ? skb_clone+0x212/0x3a0 [ 541.926908][T18450] skb_clone+0x212/0x3a0 [ 541.926938][T18450] __netlink_deliver_tap+0x413/0x860 [ 541.926977][T18450] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.927006][T18450] netlink_deliver_tap+0x19c/0x1b0 [ 541.927034][T18450] netlink_sendskb+0x68/0x140 [ 541.927062][T18450] nfnetlink_rcv+0x260c/0x28c0 [ 541.927122][T18450] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 541.927172][T18450] ? ref_tracker_free+0x689/0x830 [ 541.927221][T18450] ? skb_clone+0x246/0x3a0 [ 541.927250][T18450] ? __netlink_deliver_tap+0x811/0x860 [ 541.927287][T18450] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.927314][T18450] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.927348][T18450] netlink_unicast+0x7bd/0x940 [ 541.927385][T18450] netlink_sendmsg+0x813/0xb40 [ 541.927423][T18450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.927459][T18450] ? apparmor_socket_sendmsg+0x98/0x360 [ 541.927484][T18450] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.927510][T18450] sock_sendmsg_nosec+0x13a/0x180 [ 541.927544][T18450] ____sys_sendmsg+0x54e/0x850 [ 541.927575][T18450] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.927610][T18450] ? import_iovec+0x73/0xa0 [ 541.927638][T18450] ___sys_sendmsg+0x2a5/0x360 [ 541.927661][T18450] ? __lock_acquire+0x747/0x2de0 [ 541.927687][T18450] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.927750][T18450] ? __fget_files+0x2a/0x420 [ 541.927775][T18450] ? __fget_files+0x3a2/0x420 [ 541.927812][T18450] __x64_sys_sendmsg+0x1b1/0x290 [ 541.927841][T18450] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 541.927890][T18450] do_syscall_64+0x166/0x520 [ 541.927911][T18450] ? trace_irq_disable+0x3b/0x140 [ 541.927931][T18450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.927950][T18450] ? clear_bhb_loop+0x70/0xc0 [ 541.927975][T18450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.927995][T18450] RIP: 0033:0x7f6daed9e159 [ 541.928014][T18450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.928031][T18450] RSP: 002b:00007f6dafd01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 541.928052][T18450] RAX: ffffffffffffffda RBX: 00007f6daf025fa0 RCX: 00007f6daed9e159 [ 541.928067][T18450] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 541.928079][T18450] RBP: 00007f6dafd01090 R08: 0000000000000000 R09: 0000000000000000 [ 541.928092][T18450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 541.928104][T18450] R13: 00007f6daf026038 R14: 00007f6daf025fa0 R15: 00007ffcbb5a9158 [ 541.928144][T18450] [ 542.033767][T18442] 8021q: adding VLAN 0 to HW filter on device bond12 [ 542.327224][T18454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4251'. [ 542.756576][T18471] dvmrp8: entered allmulticast mode [ 542.784667][T18475] tc_dump_action: action bad kind [ 543.410952][T18500] netlink: 'syz.2.4266': attribute type 39 has an invalid length. [ 543.538629][T18505] xt_hashlimit: size too large, truncated to 1048576 [ 544.257940][T18529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.355196][T18532] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.807470][T18534] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 544.880547][T18551] __nla_validate_parse: 1 callbacks suppressed [ 544.880566][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4277'. [ 544.880645][T18551] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 544.947900][T18557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4277'. [ 545.052939][T18527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 545.085688][T18559] FAULT_INJECTION: forcing a failure. [ 545.085688][T18559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 545.085723][T18559] CPU: 0 UID: 0 PID: 18559 Comm: syz.3.4278 Not tainted syzkaller #0 PREEMPT(full) [ 545.085745][T18559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.085767][T18559] Call Trace: [ 545.085775][T18559] [ 545.085783][T18559] dump_stack_lvl+0xe8/0x150 [ 545.085817][T18559] should_fail_ex+0x410/0x560 [ 545.085844][T18559] _copy_from_user+0x2d/0xb0 [ 545.085869][T18559] copy_from_sockptr_offset+0x66/0xa0 [ 545.086006][T18559] do_ipt_set_ctl+0x991/0xe20 [ 545.086035][T18559] ? rcu_is_watching+0x16/0xb0 [ 545.086061][T18559] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 545.086096][T18559] ? __mutex_unlock_slowpath+0x731/0x900 [ 545.086126][T18559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 545.086160][T18559] nf_setsockopt+0x26f/0x290 [ 545.086185][T18559] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 545.086208][T18559] do_sock_setsockopt+0x17c/0x1b0 [ 545.086235][T18559] __x64_sys_setsockopt+0x13d/0x1b0 [ 545.086263][T18559] do_syscall_64+0x166/0x520 [ 545.086283][T18559] ? trace_irq_disable+0x3b/0x140 [ 545.086303][T18559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.086322][T18559] ? clear_bhb_loop+0x70/0xc0 [ 545.086344][T18559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.086363][T18559] RIP: 0033:0x7fe62459e159 [ 545.086381][T18559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.086398][T18559] RSP: 002b:00007fe625417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 545.086420][T18559] RAX: ffffffffffffffda RBX: 00007fe624825fa0 RCX: 00007fe62459e159 [ 545.086434][T18559] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 545.086445][T18559] RBP: 00007fe625417090 R08: 0000000000000520 R09: 0000000000000000 [ 545.086458][T18559] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.086470][T18559] R13: 00007fe624826038 R14: 00007fe624825fa0 R15: 00007ffd3b22e3b8 [ 545.086502][T18559] [ 545.363301][T18567] netlink: 'syz.1.4280': attribute type 1 has an invalid length. [ 545.363323][T18567] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4280'. [ 545.363477][T18567] NCSI netlink: No device for ifindex 0 [ 545.459025][T18570] vxcan0: tx address claim with different name [ 545.480038][T18573] xt_hashlimit: size too large, truncated to 1048576 [ 545.551476][T18578] netlink: 'syz.2.4284': attribute type 1 has an invalid length. [ 545.641338][T18578] syzkaller1: entered promiscuous mode [ 545.641362][T18578] syzkaller1: entered allmulticast mode [ 546.015270][T18588] tc_dump_action: action bad kind [ 546.351772][T18600] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4292'. [ 547.023131][T18617] syzkaller0: entered promiscuous mode [ 547.023154][T18617] syzkaller0: entered allmulticast mode [ 547.261830][T18628] netlink: 'syz.0.4304': attribute type 1 has an invalid length. [ 547.501155][T18628] team0: Port device dummy0 removed [ 547.777086][T18653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4309'. [ 547.890447][T18653] bond13: option xmit_hash_policy: invalid value (64) [ 547.893805][T18653] bond13 (unregistering): Released all slaves [ 548.340099][T18679] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4313'. [ 548.725422][T18694] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 549.032353][T18698] syzkaller0: left promiscuous mode [ 549.032376][T18698] syzkaller0: left allmulticast mode [ 549.342563][T18718] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 549.421263][T18718] 8021q: adding VLAN 0 to HW filter on device bond16 [ 549.605424][T18728] Cannot find del_set index 3 as target [ 550.217000][T18756] netlink: 'syz.3.4343': attribute type 1 has an invalid length. [ 550.273506][T18756] 8021q: adding VLAN 0 to HW filter on device bond17 [ 550.378229][T18765] FAULT_INJECTION: forcing a failure. [ 550.378229][T18765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 550.378284][T18765] CPU: 1 UID: 0 PID: 18765 Comm: syz.4.4345 Not tainted syzkaller #0 PREEMPT(full) [ 550.378307][T18765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 550.378320][T18765] Call Trace: [ 550.378328][T18765] [ 550.378337][T18765] dump_stack_lvl+0xe8/0x150 [ 550.378371][T18765] should_fail_ex+0x410/0x560 [ 550.378405][T18765] _copy_from_iter+0x1d3/0x1660 [ 550.378440][T18765] ? __pfx__copy_from_iter+0x10/0x10 [ 550.378461][T18765] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 550.378482][T18765] ? netlink_sendmsg+0x5d4/0xb40 [ 550.378509][T18765] ? netlink_sendmsg+0x5d4/0xb40 [ 550.378541][T18765] ? netlink_sendmsg+0x650/0xb40 [ 550.378566][T18765] ? skb_put+0x112/0x210 [ 550.378589][T18765] netlink_sendmsg+0x6c0/0xb40 [ 550.378624][T18765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.378658][T18765] ? apparmor_socket_sendmsg+0x98/0x360 [ 550.378682][T18765] ? __pfx_netlink_sendmsg+0x10/0x10 [ 550.378707][T18765] sock_sendmsg_nosec+0x13a/0x180 [ 550.378737][T18765] ____sys_sendmsg+0x54e/0x850 [ 550.378765][T18765] ? __pfx_____sys_sendmsg+0x10/0x10 [ 550.378796][T18765] ? import_iovec+0x73/0xa0 [ 550.378823][T18765] ___sys_sendmsg+0x2a5/0x360 [ 550.378845][T18765] ? __lock_acquire+0x747/0x2de0 [ 550.378868][T18765] ? __pfx____sys_sendmsg+0x10/0x10 [ 550.378923][T18765] ? __fget_files+0x2a/0x420 [ 550.378948][T18765] ? __fget_files+0x3a2/0x420 [ 550.378981][T18765] __x64_sys_sendmsg+0x1b1/0x290 [ 550.379005][T18765] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 550.379050][T18765] do_syscall_64+0x166/0x520 [ 550.379072][T18765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.379091][T18765] ? clear_bhb_loop+0x70/0xc0 [ 550.379114][T18765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.379133][T18765] RIP: 0033:0x7f6daed9e159 [ 550.379151][T18765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.379168][T18765] RSP: 002b:00007f6dafd01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 550.379189][T18765] RAX: ffffffffffffffda RBX: 00007f6daf025fa0 RCX: 00007f6daed9e159 [ 550.379214][T18765] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 550.379227][T18765] RBP: 00007f6dafd01090 R08: 0000000000000000 R09: 0000000000000000 [ 550.379239][T18765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.379250][T18765] R13: 00007f6daf026038 R14: 00007f6daf025fa0 R15: 00007ffcbb5a9158 [ 550.379282][T18765] [ 550.601742][T18768] sctp: [Deprecated]: syz.2.4346 (pid 18768) Use of int in max_burst socket option. [ 550.601742][T18768] Use struct sctp_assoc_value instead [ 550.904056][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4351'. [ 550.916532][T18783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4351'. [ 550.916564][T18783] openvswitch: netlink: Missing key (keys=c0, expected=40280) [ 550.984664][T18785] netlink: 100 bytes leftover after parsing attributes in process `syz.2.4350'. [ 551.131436][T18783] gretap0: left promiscuous mode [ 551.201336][T18792] ip_tables: iptables: counters copy to user failed while replacing table [ 551.492552][T18783] bridge0: port 1(dummy0) entered disabled state [ 551.544248][T18783] tipc: Resetting bearer [ 552.253565][T18783] vlan0: left promiscuous mode [ 552.254066][T18783] v: left promiscuous mode [ 552.816659][T18783] bridge4: left promiscuous mode [ 552.824609][T18783] bridge5: left promiscuous mode [ 552.837156][T18783] bond6: left promiscuous mode [ 552.837178][T18783] erspan1: left promiscuous mode [ 552.837322][T18783] bond6: left allmulticast mode [ 552.847050][T18783] erspan1: left allmulticast mode [ 552.881114][T18783] bond8: left promiscuous mode [ 552.890091][T18783] geneve3: left allmulticast mode [ 552.982372][T18783] geneve4: left promiscuous mode [ 552.982400][T18783] geneve4: left allmulticast mode [ 553.004314][T18783] bond11: left promiscuous mode [ 553.028002][T18783] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 553.030159][T18783] syzkaller0: left promiscuous mode [ 553.030183][T18783] syzkaller0: left allmulticast mode [ 553.145098][ T9149] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.145142][ T9149] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 19999 - 0 [ 553.145427][ T8756] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.145454][ T8756] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 19999 - 0 [ 553.145490][ T8756] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.145515][ T8756] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 19999 - 0 [ 553.145550][ T8756] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.145575][ T8756] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 19999 - 0 [ 553.310164][T18814] syzkaller0: entered promiscuous mode [ 553.310191][T18814] syzkaller0: entered allmulticast mode [ 553.456135][T18829] bond13: option downdelay: invalid value (18446744073709551615) [ 553.456192][T18829] bond13: option downdelay: allowed values 0 - 2147483647 [ 553.492401][T18829] bond13 (unregistering): Released all slaves [ 553.592167][T18837] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 553.641732][T18842] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4364'. [ 553.817202][T18834] bond12: option fail_over_mac: invalid value (16) [ 553.847623][T18834] bond12 (unregistering): Released all slaves [ 554.505485][T18866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 554.582340][T18871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4368'. [ 554.638875][T18870] batman_adv: batadv0: Interface activated: syzkaller0 [ 554.682672][T18876] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4371'. [ 554.740506][T18866] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 554.802516][T18882] netlink: 'syz.4.4370': attribute type 1 has an invalid length. [ 554.872523][T18873] SET target dimension over the limit! [ 555.192165][T18893] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4373'. [ 555.209803][T18897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4375'. [ 555.952182][T18916] syzkaller0: left promiscuous mode [ 555.952205][T18916] syzkaller0: left allmulticast mode [ 556.039876][T18924] netlink: 'syz.0.4384': attribute type 9 has an invalid length. [ 556.039899][T18924] netlink: 23 bytes leftover after parsing attributes in process `syz.0.4384'. [ 556.618899][T18943] netlink: 'syz.1.4390': attribute type 3 has an invalid length. [ 556.693166][T18943] netlink: 'syz.1.4390': attribute type 178 has an invalid length. [ 556.711050][T18950] netlink: 'syz.3.4392': attribute type 1 has an invalid length. [ 556.916308][T18950] 8021q: adding VLAN 0 to HW filter on device bond18 [ 557.157835][T18965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4396'. [ 557.344349][T18975] syzkaller0: entered promiscuous mode [ 557.344374][T18975] syzkaller0: entered allmulticast mode [ 558.114990][T18992] netlink: 59 bytes leftover after parsing attributes in process `syz.4.4402'. [ 558.146867][T18990] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4401'. [ 558.149867][T18990] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4401'. [ 558.149891][T18990] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4401'. [ 558.432065][T18997] netlink: 'syz.2.4403': attribute type 21 has an invalid length. [ 558.432107][T18997] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4403'. [ 558.432300][T18997] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4403'. [ 558.684273][T18967] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4398'. [ 558.964074][T19013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4405'. [ 558.965540][T19013] tipc: Resetting bearer [ 559.112944][T19013] tipc: Disabling bearer [ 559.821839][T19055] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 560.244432][T19071] netlink: 'syz.4.4418': attribute type 2 has an invalid length. [ 560.244455][T19071] netlink: 'syz.4.4418': attribute type 1 has an invalid length. [ 560.338330][T19076] sctp: [Deprecated]: syz.1.4422 (pid 19076) Use of int in max_burst socket option. [ 560.338330][T19076] Use struct sctp_assoc_value instead [ 561.056863][T19110] __nla_validate_parse: 3 callbacks suppressed [ 561.056887][T19110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4432'. [ 561.255872][T19120] netlink: 'syz.3.4435': attribute type 1 has an invalid length. [ 561.456025][T19120] bond19: entered promiscuous mode [ 561.456461][T19120] 8021q: adding VLAN 0 to HW filter on device bond19 [ 561.494190][T19131] netlink: 'syz.0.4439': attribute type 1 has an invalid length. [ 561.583040][T19131] 8021q: adding VLAN 0 to HW filter on device bond12 [ 561.631296][T19133] 8021q: adding VLAN 0 to HW filter on device bond12 [ 561.642623][T19133] bond12: (slave xfrm1): The slave device specified does not support setting the MAC address [ 561.643140][T19133] bond12: (slave xfrm1): Error -95 calling set_mac_address [ 561.789418][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4442'. [ 561.890541][T19140] bond13: option xmit_hash_policy: invalid value (64) [ 561.893912][T19140] bond13 (unregistering): Released all slaves [ 561.967629][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4444'. [ 562.022892][T19150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4445'. [ 562.045673][T19150] tipc: Enabling of bearer rejected, already enabled [ 562.261948][T19160] netlink: 'syz.3.4449': attribute type 12 has an invalid length. [ 562.547942][T19171] netlink: 'syz.0.4453': attribute type 16 has an invalid length. [ 562.547966][T19171] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4453'. [ 562.547992][T19171] veth0_macvtap: entered allmulticast mode [ 562.761572][T19179] netlink: 'syz.4.4456': attribute type 1 has an invalid length. [ 562.815632][T19180] bond20: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 562.831209][T19180] bond20 (unregistering): Released all slaves [ 562.968044][T19179] 8021q: adding VLAN 0 to HW filter on device bond13 [ 563.050013][T19186] bond20: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 563.052143][T19186] bond20 (unregistering): Released all slaves [ 563.339456][T19200] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4461'. [ 563.339490][T19200] nbd: illegal input index -8454144 [ 563.547505][T19210] netlink: zone id is out of range [ 563.547540][T19210] netlink: zone id is out of range [ 563.547565][T19210] netlink: zone id is out of range [ 563.547573][T19210] netlink: zone id is out of range [ 563.547597][T19210] netlink: zone id is out of range [ 563.547605][T19210] netlink: zone id is out of range [ 563.547627][T19210] netlink: zone id is out of range [ 563.547635][T19210] netlink: zone id is out of range [ 563.547659][T19210] netlink: zone id is out of range [ 563.547668][T19210] netlink: zone id is out of range [ 564.091049][T19228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4469'. [ 564.099954][T19226] netlink: 'syz.2.4468': attribute type 83 has an invalid length. [ 564.109654][T19226] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 564.359691][T19236] netlink: 'syz.4.4470': attribute type 1 has an invalid length. [ 564.599083][T19236] 8021q: adding VLAN 0 to HW filter on device bond14 [ 564.692228][T19251] syzkaller0: entered promiscuous mode [ 564.692284][T19251] syzkaller0: entered allmulticast mode [ 564.821621][T19249] FAULT_INJECTION: forcing a failure. [ 564.821621][T19249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.821654][T19249] CPU: 0 UID: 0 PID: 19249 Comm: syz.1.4475 Not tainted syzkaller #0 PREEMPT(full) [ 564.821675][T19249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 564.821687][T19249] Call Trace: [ 564.821695][T19249] [ 564.821704][T19249] dump_stack_lvl+0xe8/0x150 [ 564.821740][T19249] should_fail_ex+0x410/0x560 [ 564.821770][T19249] _copy_from_user+0x2d/0xb0 [ 564.821806][T19249] kstrtouint_from_user+0xd6/0x180 [ 564.821831][T19249] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 564.821863][T19249] ? lock_acquire+0x115/0x350 [ 564.821891][T19249] proc_fail_nth_write+0x8e/0x210 [ 564.821913][T19249] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 564.821953][T19249] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 564.821984][T19249] vfs_write+0x296/0xba0 [ 564.822024][T19249] ? __pfx_vfs_write+0x10/0x10 [ 564.822056][T19249] ? __fget_files+0x2a/0x420 [ 564.822089][T19249] ? __fget_files+0x3a2/0x420 [ 564.822113][T19249] ? __fget_files+0x2a/0x420 [ 564.822148][T19249] ksys_write+0x150/0x270 [ 564.822180][T19249] ? __pfx_ksys_write+0x10/0x10 [ 564.822222][T19249] do_syscall_64+0x166/0x520 [ 564.822245][T19249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.822266][T19249] ? clear_bhb_loop+0x70/0xc0 [ 564.822291][T19249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.822314][T19249] RIP: 0033:0x7f888095e98e [ 564.822334][T19249] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 564.822352][T19249] RSP: 002b:00007f887ebf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 564.822375][T19249] RAX: ffffffffffffffda RBX: 00007f887ebf66c0 RCX: 00007f888095e98e [ 564.822391][T19249] RDX: 0000000000000001 RSI: 00007f887ebf60a0 RDI: 0000000000000008 [ 564.822404][T19249] RBP: 00007f887ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 564.822417][T19249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.822430][T19249] R13: 00007f8880c26038 R14: 00007f8880c25fa0 R15: 00007ffcf4dbfbb8 [ 564.822465][T19249] [ 565.144394][T19263] syzkaller0: left promiscuous mode [ 565.144436][T19263] syzkaller0: left allmulticast mode [ 565.235298][T19265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4479'. [ 565.289661][T19267] netlink: 'syz.1.4481': attribute type 1 has an invalid length. [ 565.296966][T19258] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4478'. [ 565.336001][T19267] 8021q: adding VLAN 0 to HW filter on device bond13 [ 565.339058][T19258] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4478'. [ 566.253963][T19294] netlink: 'syz.0.4489': attribute type 1 has an invalid length. [ 566.351523][T19294] 8021q: adding VLAN 0 to HW filter on device bond13 [ 566.450220][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4490'. [ 566.691269][T19311] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4492'. [ 566.781828][T19319] syzkaller0: left promiscuous mode [ 566.781868][T19319] syzkaller0: left allmulticast mode [ 566.812567][T19307] xt_CT: No such helper "snmp_trap" [ 567.686358][T19347] netlink: 'syz.1.4507': attribute type 2 has an invalid length. [ 567.788979][T19350] xt_l2tp: v2 sid > 0xffff: 1114112 [ 567.977540][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4510'. [ 568.063329][T19359] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4511'. [ 568.063354][T19359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4511'. [ 568.064476][T19359] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4511'. [ 568.418280][T19341] syzkaller1: entered promiscuous mode [ 568.418319][T19341] syzkaller1: entered allmulticast mode [ 568.782346][T19387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4520'. [ 569.303891][T19404] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 569.673387][T19422] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4534'. [ 569.690583][T19420] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4533'. [ 569.690623][T19420] net_ratelimit: 2 callbacks suppressed [ 569.690723][T19420] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 569.691705][T19422] team0: Unable to change to the same mode the team is in [ 569.733736][T19422] tipc: Enabling of bearer rejected, already enabled [ 569.898307][T19427] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4538'. [ 570.981849][T19468] vlan2: left promiscuous mode [ 570.981874][T19468] geneve0: left promiscuous mode [ 571.671058][T19498] openvswitch: netlink: Unknown key attributes 20 [ 571.735238][T19500] netlink: 'syz.2.4557': attribute type 1 has an invalid length. [ 571.791790][T19493] xt_CT: You must specify a L4 protocol and not use inversions on it [ 572.063103][T19508] __nla_validate_parse: 4 callbacks suppressed [ 572.063123][T19508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 572.063337][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 572.063490][T19510] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4562'. [ 572.102287][T19508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4562'. [ 572.102314][T19508] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4562'. [ 572.547593][T19521] netlink: 'syz.2.4567': attribute type 1 has an invalid length. [ 572.662555][T19527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'. [ 572.680765][T19521] bond8: entered promiscuous mode [ 572.687395][T19521] 8021q: adding VLAN 0 to HW filter on device bond8 [ 572.710273][T19530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'. [ 572.738215][T19526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4567'. [ 572.961914][T19535] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4569'. [ 573.183916][T19548] tipc: Can't bind to reserved service type 2 [ 573.202453][T19547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 573.989297][T19566] syzkaller0: left promiscuous mode [ 573.989322][T19566] syzkaller0: left allmulticast mode [ 574.970693][T19599] syzkaller0: left promiscuous mode [ 574.970717][T19599] syzkaller0: left allmulticast mode [ 575.082804][ T31] audit: type=1800 audit(1789437842.805:6): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.4596" name=680B20FA0D dev="tmpfs" ino=4829 res=0 errno=0 [ 575.197060][T19604] bond9: Unable to set up delay as MII monitoring is disabled [ 575.227334][T19604] bond9 (unregistering): Released all slaves [ 576.507374][T19662] syzkaller0: entered promiscuous mode [ 576.507397][T19662] syzkaller0: entered allmulticast mode [ 577.369386][T19689] syzkaller0: left promiscuous mode [ 577.369426][T19689] syzkaller0: left allmulticast mode [ 577.518974][T19684] bond20: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 577.523840][T19684] bond20 (unregistering): Released all slaves [ 577.746152][T19702] syzkaller0: entered promiscuous mode [ 577.746177][T19702] syzkaller0: entered allmulticast mode [ 578.181550][T19716] __nla_validate_parse: 4 callbacks suppressed [ 578.181598][T19716] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4635'. [ 578.203523][T19720] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4635'. [ 578.228781][T19719] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4636'. [ 578.566241][T19733] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4639'. [ 578.566277][T19734] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 578.566740][T19735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4639'. [ 578.567837][T19732] netlink: 'syz.0.4639': attribute type 32 has an invalid length. [ 578.567856][T19732] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4639'. [ 578.874227][T19739] syzkaller0: entered promiscuous mode [ 578.874252][T19739] syzkaller0: entered allmulticast mode [ 579.141547][T19756] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 579.469325][T19773] tipc: Enabling of bearer rejected, already enabled [ 579.591880][T19778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4653'. [ 579.791275][T19782] tipc: Enabling of bearer rejected, already enabled [ 579.937483][T19794] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 579.976554][T19791] syzkaller0: entered promiscuous mode [ 579.976594][T19791] syzkaller0: entered allmulticast mode [ 580.636969][T19810] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4666'. [ 580.695809][T19810] bond15: option xmit_hash_policy: invalid value (64) [ 580.697469][T19810] bond15 (unregistering): Released all slaves [ 580.733058][T19811] tipc: Enabling of bearer rejected, already enabled [ 580.915940][T19820] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 580.915991][T19820] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 581.043379][T19829] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4671'. [ 581.126193][T19831] tipc: Enabled bearer , priority 10 [ 581.250672][T19835] syzkaller0: left promiscuous mode [ 581.250695][T19835] syzkaller0: left allmulticast mode [ 581.453557][T19837] syzkaller0: entered promiscuous mode [ 581.453614][T19837] syzkaller0: entered allmulticast mode [ 581.485528][T19842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 581.940242][T19852] bond6: (slave veth0_to_bond): Releasing active interface [ 582.001195][T19852] team0: Port device xfrm0 removed [ 582.002496][T19852] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 582.032127][T19846] netlink: zone id is out of range [ 582.032234][T19846] netlink: set zone limit has 4 unknown bytes [ 582.033308][T19856] team0: Port device xfrm0 added [ 582.114041][T19852] tipc: Enabling of bearer rejected, already enabled [ 582.282478][T19863] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 582.485977][T19869] tipc: Enabling of bearer rejected, already enabled [ 582.816999][T19880] openvswitch: netlink: Flow actions attr not present in new flow. [ 583.347573][T19891] bond9: option xmit_hash_policy: invalid value (64) [ 583.357791][T19891] bond9 (unregistering): Released all slaves [ 583.477999][T19904] tipc: Enabling of bearer rejected, already enabled [ 583.939429][T19924] __nla_validate_parse: 6 callbacks suppressed [ 583.939453][T19924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4705'. [ 584.343220][T19954] tipc: Enabling of bearer rejected, already enabled [ 584.793580][T19972] tipc: Enabling of bearer rejected, already enabled [ 585.590796][T20003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4732'. [ 585.608405][T20003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4732'. [ 586.021308][T20021] syzkaller0: entered promiscuous mode [ 586.021334][T20021] syzkaller0: entered allmulticast mode [ 586.426543][T20041] netlink: 'syz.0.4748': attribute type 9 has an invalid length. [ 586.841276][T20059] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4753'. [ 587.415858][T20075] syzkaller0: entered promiscuous mode [ 587.415881][T20075] syzkaller0: entered allmulticast mode [ 587.786636][T20090] syzkaller0: entered promiscuous mode [ 587.786661][T20090] syzkaller0: entered allmulticast mode [ 588.134241][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4767'. [ 588.270131][T20106] tipc: Enabling of bearer rejected, already enabled [ 588.438830][T20113] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4774'. [ 588.439280][T20113] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4774'. [ 588.439299][T20113] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4774'. [ 588.643623][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4776'. [ 588.738399][T20123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4778'. [ 588.963655][T20130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.106746][T20136] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 589.683933][T20160] __nla_validate_parse: 1 callbacks suppressed [ 589.683955][T20160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4790'. [ 590.538663][T20190] xt_hashlimit: size too large, truncated to 1048576 [ 590.777661][T20198] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4803'. [ 590.836978][T20202] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4804'. [ 591.100615][T20205] tipc: Enabling of bearer rejected, already enabled [ 592.088660][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4812'. [ 592.116545][T20235] netlink: NAT attribute has 4 unknown bytes [ 592.116645][T20235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 592.302991][T20237] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 592.328704][T20237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4814'. [ 592.498800][T20261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4818'. [ 592.498892][T20261] FAULT_INJECTION: forcing a failure. [ 592.498892][T20261] name failslab, interval 1, probability 0, space 0, times 0 [ 592.498934][T20261] CPU: 1 UID: 0 PID: 20261 Comm: syz.3.4818 Not tainted syzkaller #0 PREEMPT(full) [ 592.498959][T20261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.498970][T20261] Call Trace: [ 592.498978][T20261] [ 592.498986][T20261] dump_stack_lvl+0xe8/0x150 [ 592.499022][T20261] should_fail_ex+0x410/0x560 [ 592.499050][T20261] ? __alloc_skb+0x1db/0x7a0 [ 592.499072][T20261] should_failslab+0xa8/0x100 [ 592.499098][T20261] ? __alloc_skb+0x1db/0x7a0 [ 592.499117][T20261] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 592.499147][T20261] ? __alloc_skb+0x18d/0x7a0 [ 592.499169][T20261] ? __alloc_skb+0x1db/0x7a0 [ 592.499199][T20261] __alloc_skb+0x1db/0x7a0 [ 592.499226][T20261] netlink_ack+0x136/0xb30 [ 592.499253][T20261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.499276][T20261] ? ref_tracker_free+0x689/0x830 [ 592.499302][T20261] ? __pfx_ref_tracker_free+0x10/0x10 [ 592.499337][T20261] netlink_rcv_skb+0x2a4/0x4a0 [ 592.499365][T20261] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 592.499391][T20261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.499432][T20261] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.499460][T20261] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.499492][T20261] netlink_unicast+0x7bd/0x940 [ 592.499531][T20261] netlink_sendmsg+0x813/0xb40 [ 592.499578][T20261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.499616][T20261] ? apparmor_socket_sendmsg+0x98/0x360 [ 592.499641][T20261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.499668][T20261] sock_sendmsg_nosec+0x13a/0x180 [ 592.499703][T20261] ____sys_sendmsg+0x54e/0x850 [ 592.499735][T20261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.499771][T20261] ? import_iovec+0x73/0xa0 [ 592.499800][T20261] ___sys_sendmsg+0x2a5/0x360 [ 592.499824][T20261] ? __lock_acquire+0x747/0x2de0 [ 592.499851][T20261] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.499914][T20261] ? __fget_files+0x2a/0x420 [ 592.499942][T20261] ? __fget_files+0x3a2/0x420 [ 592.499979][T20261] __x64_sys_sendmsg+0x1b1/0x290 [ 592.500004][T20261] ? net_tx_action+0x5bb/0xc30 [ 592.500028][T20261] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.500062][T20261] ? handle_softirqs+0x720/0x860 [ 592.500099][T20261] do_syscall_64+0x166/0x520 [ 592.500123][T20261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.500145][T20261] ? clear_bhb_loop+0x70/0xc0 [ 592.500170][T20261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.500190][T20261] RIP: 0033:0x7fe62459e159 [ 592.500209][T20261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.500227][T20261] RSP: 002b:00007fe625417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.500249][T20261] RAX: ffffffffffffffda RBX: 00007fe624825fa0 RCX: 00007fe62459e159 [ 592.500265][T20261] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 592.500278][T20261] RBP: 00007fe625417090 R08: 0000000000000000 R09: 0000000000000000 [ 592.500291][T20261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.500304][T20261] R13: 00007fe624826038 R14: 00007fe624825fa0 R15: 00007ffd3b22e3b8 [ 592.500337][T20261] [ 592.902606][T20265] tipc: Enabling of bearer rejected, already enabled [ 592.943315][T20267] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4820'. [ 593.172685][T20270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4822'. [ 593.322333][T20276] xt_recent: Unsupported userspace flags (000000b1) [ 593.538481][T20278] xt_CT: No such helper "netbios-ns" [ 593.606855][T20288] nftables ruleset with unbound chain [ 593.700984][T20295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4830'. [ 593.837705][T20302] SET target dimension over the limit! [ 593.840904][T20303] netlink: 'syz.1.4836': attribute type 1 has an invalid length. [ 593.955863][T20308] netlink: 'syz.1.4836': attribute type 1 has an invalid length. [ 594.178476][T20323] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4838'. [ 594.670230][T20339] xt_hashlimit: size too large, truncated to 1048576 [ 595.203446][T20358] __nla_validate_parse: 1 callbacks suppressed [ 595.203470][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 595.230694][T20358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 595.325514][T20363] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4851'. [ 595.410011][T20366] xt_check_target_common: 1 callbacks suppressed [ 595.410130][T20366] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 595.578221][T20370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4850'. [ 595.745286][T20369] bond14: entered promiscuous mode [ 595.745424][T20369] bond14: entered allmulticast mode [ 595.746143][T20369] 8021q: adding VLAN 0 to HW filter on device bond14 [ 595.757544][T20379] netlink: 'syz.1.4853': attribute type 1 has an invalid length. [ 595.757581][T20379] netlink: 232 bytes leftover after parsing attributes in process `syz.1.4853'. [ 595.757613][T20379] netlink: 'syz.1.4853': attribute type 1 has an invalid length. [ 595.759046][T20379] netlink: 'syz.1.4853': attribute type 1 has an invalid length. [ 595.759252][T20379] netlink: 'syz.1.4853': attribute type 1 has an invalid length. [ 595.850688][T20380] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4854'. [ 595.911813][T20382] syzkaller0: left promiscuous mode [ 595.911853][T20382] syzkaller0: left allmulticast mode [ 596.210590][T20395] rdma_rxe: rxe_newlink: failed to add team0 [ 596.246816][T20398] FAULT_INJECTION: forcing a failure. [ 596.246816][T20398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.246881][T20398] CPU: 1 UID: 0 PID: 20398 Comm: syz.2.4859 Not tainted syzkaller #0 PREEMPT(full) [ 596.246906][T20398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 596.246919][T20398] Call Trace: [ 596.246927][T20398] [ 596.246937][T20398] dump_stack_lvl+0xe8/0x150 [ 596.246972][T20398] should_fail_ex+0x410/0x560 [ 596.247002][T20398] _copy_to_user+0x31/0xb0 [ 596.247031][T20398] simple_read_from_buffer+0xe1/0x170 [ 596.247066][T20398] proc_fail_nth_read+0x1bb/0x230 [ 596.247094][T20398] ? common_file_perm+0x20e/0x2b0 [ 596.247121][T20398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.247153][T20398] ? rw_verify_area+0x24a/0x4c0 [ 596.247180][T20398] ? tun_chr_write_iter+0x18a/0x200 [ 596.247320][T20398] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 596.247347][T20398] vfs_read+0x213/0xa80 [ 596.247383][T20398] ? __pfx___mutex_lock+0x10/0x10 [ 596.247406][T20398] ? __pfx_vfs_read+0x10/0x10 [ 596.247435][T20398] ? __fget_files+0x2a/0x420 [ 596.247466][T20398] ? __fget_files+0x3a2/0x420 [ 596.247492][T20398] ? __fget_files+0x2a/0x420 [ 596.247529][T20398] ksys_read+0x150/0x270 [ 596.247561][T20398] ? __pfx_ksys_read+0x10/0x10 [ 596.247602][T20398] do_syscall_64+0x166/0x520 [ 596.247624][T20398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.247645][T20398] ? clear_bhb_loop+0x70/0xc0 [ 596.247671][T20398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.247690][T20398] RIP: 0033:0x7f71a2b5e98e [ 596.247709][T20398] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 596.247727][T20398] RSP: 002b:00007f71a39bbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 596.247750][T20398] RAX: ffffffffffffffda RBX: 00007f71a39bc6c0 RCX: 00007f71a2b5e98e [ 596.247765][T20398] RDX: 000000000000000f RSI: 00007f71a39bc0a0 RDI: 0000000000000005 [ 596.247776][T20398] RBP: 00007f71a39bc090 R08: 0000000000000000 R09: 0000000000000000 [ 596.247786][T20398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.247797][T20398] R13: 00007f71a2e26038 R14: 00007f71a2e25fa0 R15: 00007ffe8fa96ad8 [ 596.247828][T20398] [ 596.587228][T20403] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4862'. [ 596.643735][T20404] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4862'. [ 596.711315][T20415] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4863'. [ 597.323353][T20432] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4868'. [ 597.566798][T20447] syzkaller0: left promiscuous mode [ 597.566822][T20447] syzkaller0: left allmulticast mode [ 597.772363][T20457] tipc: Enabling of bearer rejected, already enabled [ 598.847555][T20496] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 598.920301][T20504] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 598.924036][T20504] pim6reg0: entered allmulticast mode [ 599.006327][T20498] tipc: Enabling of bearer rejected, already enabled [ 600.271893][T20549] __nla_validate_parse: 10 callbacks suppressed [ 600.271917][T20549] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4912'. [ 600.316488][T20549] netlink: 184 bytes leftover after parsing attributes in process `syz.3.4912'. [ 600.336544][T20553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4914'. [ 600.371514][T20549] team0: Device vlan0 is of different type [ 600.436917][T20559] netlink: 'syz.0.4915': attribute type 1 has an invalid length. [ 600.462424][T20553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4914'. [ 600.480663][T20558] tipc: Enabling of bearer rejected, already enabled [ 600.587097][T20569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4915'. [ 600.649516][T20559] 8021q: adding VLAN 0 to HW filter on device bond15 [ 600.861900][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4919'. [ 600.861943][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4919'. [ 600.862429][T20579] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4919'. [ 600.862562][T20579] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4919'. [ 601.015727][T20583] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4920'. [ 601.336174][T20596] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 601.508692][T20602] FAULT_INJECTION: forcing a failure. [ 601.508692][T20602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.508765][T20602] CPU: 1 UID: 0 PID: 20602 Comm: syz.1.4928 Not tainted syzkaller #0 PREEMPT(full) [ 601.508791][T20602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.508804][T20602] Call Trace: [ 601.508813][T20602] [ 601.508823][T20602] dump_stack_lvl+0xe8/0x150 [ 601.508858][T20602] should_fail_ex+0x410/0x560 [ 601.508888][T20602] _copy_from_user+0x2d/0xb0 [ 601.508915][T20602] kstrtouint_from_user+0xd6/0x180 [ 601.508941][T20602] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 601.508973][T20602] ? lock_acquire+0x115/0x350 [ 601.509001][T20602] proc_fail_nth_write+0x8e/0x210 [ 601.509023][T20602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 601.509062][T20602] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 601.509092][T20602] vfs_write+0x296/0xba0 [ 601.509131][T20602] ? __pfx_vfs_write+0x10/0x10 [ 601.509163][T20602] ? __fget_files+0x2a/0x420 [ 601.509196][T20602] ? __fget_files+0x3a2/0x420 [ 601.509221][T20602] ? __fget_files+0x2a/0x420 [ 601.509259][T20602] ksys_write+0x150/0x270 [ 601.509292][T20602] ? __pfx_ksys_write+0x10/0x10 [ 601.509335][T20602] do_syscall_64+0x166/0x520 [ 601.509358][T20602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.509380][T20602] ? clear_bhb_loop+0x70/0xc0 [ 601.509405][T20602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.509426][T20602] RIP: 0033:0x7f888095e98e [ 601.509445][T20602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 601.509462][T20602] RSP: 002b:00007f887ebf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 601.509485][T20602] RAX: ffffffffffffffda RBX: 00007f887ebf66c0 RCX: 00007f888095e98e [ 601.509500][T20602] RDX: 0000000000000001 RSI: 00007f887ebf60a0 RDI: 0000000000000004 [ 601.509514][T20602] RBP: 00007f887ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 601.509527][T20602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.509540][T20602] R13: 00007f8880c26038 R14: 00007f8880c25fa0 R15: 00007ffcf4dbfbb8 [ 601.509577][T20602] [ 601.559849][T20604] tipc: Enabling of bearer rejected, already enabled [ 601.743772][T20608] netlink: 'syz.1.4930': attribute type 1 has an invalid length. [ 601.828198][T20608] 8021q: adding VLAN 0 to HW filter on device bond14 [ 602.147215][T20625] netlink: 'syz.1.4935': attribute type 8 has an invalid length. [ 602.193925][T20627] netlink: 'syz.0.4936': attribute type 32 has an invalid length. [ 602.271102][T20627] bond16: option coupled_control: invalid value (192) [ 602.294109][T20627] bond16 (unregistering): Released all slaves [ 602.811293][T20641] netlink: 'syz.0.4940': attribute type 1 has an invalid length. [ 603.274253][T20655] netlink: 'syz.4.4945': attribute type 1 has an invalid length. [ 603.351302][T20660] netlink: 'syz.1.4947': attribute type 1 has an invalid length. [ 603.400970][T20655] 8021q: adding VLAN 0 to HW filter on device bond15 [ 603.497843][T20665] 8021q: adding VLAN 0 to HW filter on device bond9 [ 603.554046][T20669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.570286][T20669] bond9: (slave bond0): Enslaving as an active interface with a down link [ 603.730990][T20676] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 604.539318][T20693] netlink: 'syz.4.4957': attribute type 1 has an invalid length. [ 604.584406][T20693] bond16: (slave geneve2): making interface the new active one [ 604.585378][T20693] bond16: (slave geneve2): Enslaving as an active interface with an up link [ 604.595393][ T39] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 604.596480][ T39] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 604.596519][ T39] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 604.596552][ T39] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 604.661062][T20699] netlink: 'syz.1.4960': attribute type 1 has an invalid length. [ 604.786883][T20699] 8021q: adding VLAN 0 to HW filter on device bond15 [ 605.451196][T20733] __nla_validate_parse: 19 callbacks suppressed [ 605.451218][T20733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4970'. [ 605.477536][T20737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4970'. [ 605.549666][T20741] FAULT_INJECTION: forcing a failure. [ 605.549666][T20741] name failslab, interval 1, probability 0, space 0, times 0 [ 605.549719][T20741] CPU: 0 UID: 0 PID: 20741 Comm: syz.3.4971 Not tainted syzkaller #0 PREEMPT(full) [ 605.549742][T20741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 605.549754][T20741] Call Trace: [ 605.549763][T20741] [ 605.549772][T20741] dump_stack_lvl+0xe8/0x150 [ 605.549807][T20741] should_fail_ex+0x410/0x560 [ 605.549835][T20741] ? __alloc_skb+0x1db/0x7a0 [ 605.549859][T20741] should_failslab+0xa8/0x100 [ 605.549912][T20741] ? __alloc_skb+0x1db/0x7a0 [ 605.549934][T20741] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 605.549964][T20741] ? __alloc_skb+0x18d/0x7a0 [ 605.549987][T20741] ? __alloc_skb+0x1db/0x7a0 [ 605.550016][T20741] __alloc_skb+0x1db/0x7a0 [ 605.550044][T20741] netlink_sendmsg+0x5d4/0xb40 [ 605.550084][T20741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.550121][T20741] ? apparmor_socket_sendmsg+0x98/0x360 [ 605.550148][T20741] ? __pfx_netlink_sendmsg+0x10/0x10 [ 605.550175][T20741] sock_sendmsg_nosec+0x13a/0x180 [ 605.550209][T20741] ____sys_sendmsg+0x54e/0x850 [ 605.550241][T20741] ? __pfx_____sys_sendmsg+0x10/0x10 [ 605.550276][T20741] ? import_iovec+0x73/0xa0 [ 605.550305][T20741] ___sys_sendmsg+0x2a5/0x360 [ 605.550330][T20741] ? __lock_acquire+0x747/0x2de0 [ 605.550355][T20741] ? __pfx____sys_sendmsg+0x10/0x10 [ 605.550416][T20741] ? __fget_files+0x2a/0x420 [ 605.550443][T20741] ? __fget_files+0x3a2/0x420 [ 605.550481][T20741] __x64_sys_sendmsg+0x1b1/0x290 [ 605.550510][T20741] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 605.550560][T20741] do_syscall_64+0x166/0x520 [ 605.550582][T20741] ? trace_irq_disable+0x3b/0x140 [ 605.550603][T20741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.550623][T20741] ? clear_bhb_loop+0x70/0xc0 [ 605.550648][T20741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.550669][T20741] RIP: 0033:0x7fe62459e159 [ 605.550687][T20741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.550705][T20741] RSP: 002b:00007fe625417028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 605.550727][T20741] RAX: ffffffffffffffda RBX: 00007fe624825fa0 RCX: 00007fe62459e159 [ 605.550743][T20741] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 605.550756][T20741] RBP: 00007fe625417090 R08: 0000000000000000 R09: 0000000000000000 [ 605.550769][T20741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.550786][T20741] R13: 00007fe624826038 R14: 00007fe624825fa0 R15: 00007ffd3b22e3b8 [ 605.550819][T20741] [ 605.756245][T20745] netlink: 'syz.4.4975': attribute type 1 has an invalid length. [ 605.900775][T20745] 8021q: adding VLAN 0 to HW filter on device bond17 [ 607.158050][T20798] netlink: 'syz.0.4989': attribute type 1 has an invalid length. [ 607.426895][T20798] 8021q: adding VLAN 0 to HW filter on device bond16 [ 607.584934][T20816] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4990'. [ 607.910740][T20829] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4995'. [ 608.160878][T20837] FAULT_INJECTION: forcing a failure. [ 608.160878][T20837] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 608.160914][T20837] CPU: 0 UID: 0 PID: 20837 Comm: syz.4.4998 Not tainted syzkaller #0 PREEMPT(full) [ 608.160937][T20837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 608.160950][T20837] Call Trace: [ 608.160958][T20837] [ 608.160968][T20837] dump_stack_lvl+0xe8/0x150 [ 608.161003][T20837] should_fail_ex+0x410/0x560 [ 608.161031][T20837] _copy_from_iter+0x1d3/0x1660 [ 608.161055][T20837] ? __alloc_skb+0x27a/0x7a0 [ 608.161080][T20837] ? __alloc_skb+0x27a/0x7a0 [ 608.161105][T20837] ? __alloc_skb+0x27a/0x7a0 [ 608.161127][T20837] ? __pfx__copy_from_iter+0x10/0x10 [ 608.161148][T20837] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 608.161187][T20837] ? __alloc_skb+0x27a/0x7a0 [ 608.161207][T20837] ? __alloc_skb+0x27a/0x7a0 [ 608.161236][T20837] ? netlink_sendmsg+0x650/0xb40 [ 608.161264][T20837] ? skb_put+0x112/0x210 [ 608.161291][T20837] netlink_sendmsg+0x6c0/0xb40 [ 608.161329][T20837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.161367][T20837] ? apparmor_socket_sendmsg+0x98/0x360 [ 608.161393][T20837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 608.161421][T20837] sock_sendmsg_nosec+0x13a/0x180 [ 608.161455][T20837] ____sys_sendmsg+0x54e/0x850 [ 608.161486][T20837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 608.161523][T20837] ? import_iovec+0x73/0xa0 [ 608.161551][T20837] ___sys_sendmsg+0x2a5/0x360 [ 608.161576][T20837] ? __lock_acquire+0x747/0x2de0 [ 608.161602][T20837] ? __pfx____sys_sendmsg+0x10/0x10 [ 608.161665][T20837] ? __fget_files+0x2a/0x420 [ 608.161692][T20837] ? __fget_files+0x3a2/0x420 [ 608.161729][T20837] __x64_sys_sendmsg+0x1b1/0x290 [ 608.161759][T20837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 608.161809][T20837] do_syscall_64+0x166/0x520 [ 608.161831][T20837] ? trace_irq_disable+0x3b/0x140 [ 608.161851][T20837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.161875][T20837] ? clear_bhb_loop+0x70/0xc0 [ 608.161900][T20837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.161920][T20837] RIP: 0033:0x7f6daed9e159 [ 608.161939][T20837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.161957][T20837] RSP: 002b:00007f6dafd01028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 608.161979][T20837] RAX: ffffffffffffffda RBX: 00007f6daf025fa0 RCX: 00007f6daed9e159 [ 608.161995][T20837] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 608.162008][T20837] RBP: 00007f6dafd01090 R08: 0000000000000000 R09: 0000000000000000 [ 608.162020][T20837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 608.162033][T20837] R13: 00007f6daf026038 R14: 00007f6daf025fa0 R15: 00007ffcbb5a9158 [ 608.162066][T20837] [ 608.163264][T20778] wg0 speed is unknown, defaulting to 1000 [ 608.465344][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5000'. [ 608.809522][T20849] tipc: Resetting bearer [ 608.893386][T20849] tipc: Disabling bearer [ 608.962389][T20849] team0 (unregistering): Port device team_slave_0 removed [ 609.011789][T20849] team0 (unregistering): Port device team_slave_1 removed [ 609.040977][T20849] team0 (unregistering): Port device vlan0 removed [ 609.158417][T20862] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5005'. [ 609.158882][T20862] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5005'. [ 609.159338][T20862] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5005'. [ 609.159822][T20862] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5005'. [ 609.160252][T20862] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5005'. [ 609.295521][T20866] netlink: 'syz.2.5006': attribute type 1 has an invalid length. [ 609.451805][T20866] 8021q: adding VLAN 0 to HW filter on device bond10 [ 609.500466][T20869] bond10: (slave syz_tun): Enslaving as a backup interface with an up link [ 621.678799][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 621.682959][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 621.684270][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 621.710164][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 621.711392][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 624.186805][T20882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 624.194344][T20882] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 624.213152][T20882] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 624.214400][T20882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 624.214959][T20882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 625.166502][T20887] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 625.170894][T20887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 625.172069][T20887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 625.173799][T20887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 625.200505][T20887] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 625.345682][T20893] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 625.366315][T20893] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 625.379312][T20893] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 625.381071][T20893] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 625.382412][T20893] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 625.384212][T20893] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 625.420029][T20893] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 625.420981][T20893] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 625.443892][T20893] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 625.444509][T20893] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 682.233878][T20896] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 682.248876][T20896] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 682.250547][T20896] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 682.252188][T20896] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 682.280477][T20896] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 684.255717][T20893] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 684.262249][T20893] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 684.264308][T20893] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 684.293175][T20893] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 684.294776][T20893] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 684.719963][T20907] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 684.737009][T20907] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 684.738935][T20907] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 684.761081][T20907] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 684.762491][T20907] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 686.083700][T20916] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 686.097179][T20916] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 686.113870][T20916] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 686.125416][T20916] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 686.126148][T20916] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 686.127554][T20916] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 686.130698][T20916] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 686.132006][T20916] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 686.133225][T20916] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 686.134592][T20916] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 714.514653][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 714.521301][ C0] rcu: 0-....: (1 GPs behind) idle=8354/1/0x4000000000000000 softirq=108843/108847 fqs=4972 [ 714.531469][ C0] rcu: hardirqs softirqs csw/system [ 714.537884][ C0] rcu: number: 5276 0 0 [ 714.544296][ C0] rcu: cputime: 126 52353 2 ==> 52480(ms) [ 714.552100][ C0] rcu: (t=10500 jiffies g=122377 q=2825 ncpus=2) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 714.558534][ C0] CPU: 0 UID: 0 PID: 5628 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 714.567991][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 714.578054][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x28/0x80 [ 714.584241][ C0] Code: 90 90 f3 0f 1e fa 48 8b 04 24 65 48 8b 0d 48 15 cd 11 65 48 8b 15 48 15 cd 11 f7 c2 00 01 00 ff 74 29 89 d6 81 e6 00 01 00 0f <81> fe 00 01 00 00 40 0f 95 c6 81 fa 00 00 00 10 0f 93 c2 40 08 f2 [ 714.603827][ C0] RSP: 0018:ffffc90000007748 EFLAGS: 00000206 [ 714.609984][ C0] RAX: ffffffff86b39d05 RBX: 0000000000000000 RCX: ffff888035eb5dc0 [ 714.617934][ C0] RDX: 0000000000000301 RSI: 0000000000000100 RDI: 0000000000000000 [ 714.625900][ C0] RBP: 0000000000000000 R08: 0000000000000100 R09: 0000000000000000 [ 714.633869][ C0] R10: ffffc90000007970 R11: ffffffff86b39c40 R12: 0000000000000000 [ 714.641819][ C0] R13: dffffc0000000000 R14: ffff8880363ac028 R15: 0000000000000000 [ 714.649769][ C0] FS: 000055558dc8b500(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 714.658674][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 714.665249][ C0] CR2: 00007f5ebeff14b8 CR3: 000000007007e000 CR4: 00000000003526f0 [ 714.673205][ C0] Call Trace: [ 714.676466][ C0] [ 714.679290][ C0] team_select_queue+0xc5/0x130 [ 714.684244][ C0] ? __pfx_team_select_queue+0x10/0x10 [ 714.689681][ C0] netdev_core_pick_tx+0x130/0x360 [ 714.694778][ C0] __dev_queue_xmit+0x5c8/0x3820 [ 714.699704][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 714.704792][ C0] ? tipc_net+0x45/0x270 [ 714.709109][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 714.714492][ C0] ? tipc_net+0x45/0x270 [ 714.718715][ C0] ? tipc_net+0x45/0x270 [ 714.722939][ C0] ? tipc_net+0x205/0x270 [ 714.727247][ C0] ? tipc_crypto_xmit+0x1e2/0x2220 [ 714.732344][ C0] ? eth_header+0x11b/0x200 [ 714.736914][ C0] ? __asan_memcpy+0x40/0x70 [ 714.741493][ C0] ? eth_header+0x11b/0x200 [ 714.745980][ C0] ? __pfx_eth_header+0x10/0x10 [ 714.750815][ C0] tipc_l2_send_msg+0x331/0x400 [ 714.755649][ C0] tipc_bearer_xmit_skb+0x2b3/0x400 [ 714.760832][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 714.766123][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 714.771818][ C0] ? tipc_disc_timeout+0x5d7/0x750 [ 714.776917][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 714.782187][ C0] tipc_disc_timeout+0x5f6/0x750 [ 714.787108][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 714.792571][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 714.797932][ C0] call_timer_fn+0x18d/0x5f0 [ 714.802630][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 714.808093][ C0] ? call_timer_fn+0xd5/0x5f0 [ 714.812760][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 714.817899][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 714.823091][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 714.828536][ C0] __run_timer_base+0x652/0x8b0 [ 714.833396][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 714.838750][ C0] ? ktime_get+0x1f5/0x220 [ 714.843145][ C0] ? lapic_next_event+0x11/0x20 [ 714.848008][ C0] run_timer_softirq+0xb7/0x170 [ 714.852839][ C0] handle_softirqs+0x226/0x860 [ 714.857590][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 714.862336][ C0] __irq_exit_rcu+0xcb/0x220 [ 714.866907][ C0] irq_exit_rcu+0x9/0x30 [ 714.871128][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 714.876740][ C0] [ 714.879650][ C0] [ 714.882566][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 714.888537][ C0] RIP: 0010:finish_task_switch+0x413/0xc60 [ 714.894384][ C0] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 37 9a 51 0a e8 12 12 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 10 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 714.913983][ C0] RSP: 0018:ffffc90004247160 EFLAGS: 00000202 [ 714.920034][ C0] RAX: 0000000000814201 RBX: ffff8880b863c8e0 RCX: 8000000000000001 [ 714.928023][ C0] RDX: 0000000000000006 RSI: ffffffff8e4760b8 RDI: ffffffff8c6d9c80 [ 714.935995][ C0] RBP: ffffc900042471b0 R08: ffffffff907a327f R09: 1ffffffff20f464f [ 714.943972][ C0] R10: dffffc0000000000 R11: fffffbfff20f4650 R12: ffff888035eb5dc0 [ 714.951957][ C0] R13: ffff8880b863c8b8 R14: dffffc0000000000 R15: 1ffff110170c791c [ 714.959962][ C0] __schedule+0x17e3/0x58f0 [ 714.964480][ C0] ? __update_page_owner_handle+0x512/0x580 [ 714.970366][ C0] ? __pfx___schedule+0x10/0x10 [ 714.975207][ C0] preempt_schedule_irq+0x4b/0x90 [ 714.980208][ C0] irqentry_exit+0x14f/0x910 [ 714.984773][ C0] ? trace_irq_disable+0x3b/0x140 [ 714.989804][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 714.995764][ C0] RIP: 0010:__rcu_read_unlock+0x3a/0xe0 [ 715.001290][ C0] Code: 00 00 00 00 fc ff df 65 48 8b 3d b9 ce e7 11 48 8d 9f c4 04 00 00 49 89 dc 49 c1 ec 03 43 0f b6 04 3c 84 c0 75 4f ff 0b 75 1d <4c> 8d b7 c8 04 00 00 4c 89 f0 48 c1 e8 03 42 0f b6 04 38 84 c0 75 [ 715.020871][ C0] RSP: 0018:ffffc900042474d0 EFLAGS: 00000246 [ 715.026917][ C0] RAX: 0000000000000000 RBX: ffff888035eb6284 RCX: 0000000000000046 [ 715.034891][ C0] RDX: ffffffff9108e400 RSI: ffffffff8e6feb8f RDI: ffff888035eb5dc0 [ 715.042857][ C0] RBP: 1ffffffff2211c01 R08: ffffc90004247f48 R09: 0000000000000000 [ 715.050821][ C0] R10: ffffc900042475f8 R11: ffffffff81b285f0 R12: 1ffff11006bd6c50 [ 715.058802][ C0] R13: ffffffff8177f1df R14: ffffc900042475a8 R15: dffffc0000000000 [ 715.066773][ C0] ? unwind_next_frame+0x8f/0x2550 [ 715.071870][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 715.078027][ C0] ? unwind_next_frame+0x8f/0x2550 [ 715.083120][ C0] unwind_next_frame+0x1baf/0x2550 [ 715.088214][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.094257][ C0] ? unwind_next_frame+0x8f/0x2550 [ 715.099350][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 715.105480][ C0] arch_stack_walk+0x11b/0x150 [ 715.110263][ C0] stack_trace_save+0xa9/0x100 [ 715.115010][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 715.120371][ C0] kasan_save_track+0x3e/0x80 [ 715.125030][ C0] ? kasan_save_track+0x3e/0x80 [ 715.129857][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 715.134621][ C0] ? __kmalloc_noprof+0x36b/0x720 [ 715.139621][ C0] ? do_replace_table+0x91/0x610 [ 715.144631][ C0] ? xt_replace_table+0x2c/0x140 [ 715.149542][ C0] ? __do_replace+0x161/0x990 [ 715.154197][ C0] ? do_ipt_set_ctl+0xb3c/0xe20 [ 715.159024][ C0] ? nf_setsockopt+0x26f/0x290 [ 715.163771][ C0] ? do_sock_setsockopt+0x17c/0x1b0 [ 715.168950][ C0] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 715.174334][ C0] ? do_syscall_64+0x166/0x520 [ 715.179077][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.185150][ C0] __kasan_kmalloc+0x93/0xb0 [ 715.189738][ C0] __kmalloc_noprof+0x36b/0x720 [ 715.194586][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 715.199618][ C0] ? do_replace_table+0x91/0x610 [ 715.204554][ C0] ? do_replace_table+0x91/0x610 [ 715.209475][ C0] do_replace_table+0x91/0x610 [ 715.214224][ C0] xt_replace_table+0x2c/0x140 [ 715.219014][ C0] __do_replace+0x161/0x990 [ 715.223530][ C0] ? __pfx___do_replace+0x10/0x10 [ 715.228555][ C0] ? _copy_from_user+0x94/0xb0 [ 715.233325][ C0] do_ipt_set_ctl+0xb3c/0xe20 [ 715.237985][ C0] ? rcu_is_watching+0x16/0xb0 [ 715.242732][ C0] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 715.247923][ C0] ? __mutex_unlock_slowpath+0x731/0x900 [ 715.253536][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 715.258798][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 715.263988][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 715.269952][ C0] nf_setsockopt+0x26f/0x290 [ 715.274526][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 715.280395][ C0] do_sock_setsockopt+0x17c/0x1b0 [ 715.285415][ C0] __x64_sys_setsockopt+0x13d/0x1b0 [ 715.290618][ C0] do_syscall_64+0x166/0x520 [ 715.295197][ C0] ? trace_irq_disable+0x3b/0x140 [ 715.300205][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.306256][ C0] ? clear_bhb_loop+0x70/0xc0 [ 715.310914][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.316785][ C0] RIP: 0033:0x7f5ebed9f99a [ 715.321180][ C0] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 715.340769][ C0] RSP: 002b:00007ffe7956f498 EFLAGS: 00000202 ORIG_RAX: 0000000000000036 [ 715.349170][ C0] RAX: ffffffffffffffda RBX: 00007ffe7956f520 RCX: 00007f5ebed9f99a [ 715.357139][ C0] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 715.365088][ C0] RBP: 0000000000000003 R08: 0000000000000240 R09: 0000000000000000 [ 715.373040][ C0] R10: 00007f5ebeff1460 R11: 0000000000000202 R12: 00007f5ebeff1400 [ 715.380990][ C0] R13: 00007ffe7956f4bc R14: 0000000000000000 R15: 00007f5ebeff2180 [ 715.388955][ C0] [ 716.392099][ C0] sched: DL replenish lagged too much