last executing test programs: 4m25.276629315s ago: executing program 3 (id=7517): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 4m25.209289557s ago: executing program 3 (id=7518): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x3, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000005c0)={'syzkaller1\x00', 0x1}) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newtfilter={0x2548, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0x251c, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x6, 0x4}}, @TCA_FW_POLICE={0xca4, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6ff9, 0xeb, 0xffffffff, 0xb2f3, 0x7, 0x9, 0x2, 0x4, 0x0, 0x7, 0xffffffff, 0x80000000, 0x3, 0x1000, 0xa, 0x0, 0x5, 0x4, 0x2, 0x8, 0x1ff, 0x6, 0x7, 0x4000, 0x6, 0x9, 0xfffffff4, 0x6, 0x8, 0x3ff, 0x7, 0x2df3, 0x2, 0x8, 0x5, 0x10000, 0x0, 0x6, 0x0, 0x6, 0x3, 0x101, 0x8001, 0x36d135a4, 0x800, 0x6, 0xf, 0x6, 0x1704c909, 0x7, 0x6, 0xffff19ff, 0x7, 0x9, 0x8, 0x7ff, 0xa32, 0x5, 0x8, 0x2, 0x4800, 0x7fff, 0x40, 0xfffffffd, 0x0, 0x3, 0x0, 0x5c6, 0x0, 0x3, 0x9, 0x8, 0x9, 0xffffff01, 0x4, 0x9, 0x8, 0xed, 0x6, 0xc81, 0x1, 0x3, 0x101, 0x81, 0xf6f1, 0x9, 0x2, 0x0, 0x35c6, 0x0, 0x7f, 0xffffffff, 0x7, 0x2, 0x4, 0x800, 0x2, 0x400, 0xffffffff, 0x83, 0x400, 0x6, 0x5, 0x0, 0x9, 0x6, 0xc, 0x4, 0x6, 0x3, 0x3, 0x4, 0xffffffff, 0x7fffffff, 0x3, 0x0, 0x6, 0x2, 0x1, 0x4, 0xdb92, 0x81f, 0xe85628c, 0x1, 0x100, 0x6, 0x5, 0x4, 0xe, 0x6ed, 0x40, 0xfffffffe, 0xffff, 0x2, 0x2, 0xe, 0x9, 0x3, 0x3, 0x7, 0x82, 0xfffffff9, 0x8, 0x5, 0x2, 0x6, 0xae6, 0x7, 0x2, 0x5, 0x0, 0x9, 0x3, 0x2, 0xa, 0x2b2, 0x2, 0x5a8, 0x32a, 0x3, 0x5, 0x4, 0x2000000, 0x8, 0x4623b325, 0x52b333e2, 0x9, 0x400, 0x3, 0x4, 0x4, 0xcd, 0xe, 0x4, 0x3, 0x7, 0x2b, 0x81, 0x101, 0xffffff80, 0x1200, 0x3, 0x3, 0x5, 0x1, 0x3, 0x620, 0x2, 0xff, 0x101, 0x4, 0x6, 0x8, 0xfffffff8, 0xf, 0x1, 0x77eb, 0x3, 0x8, 0x85, 0x942, 0xc, 0x1, 0x80000001, 0xbb5, 0x8, 0x195, 0x4c02ec92, 0x100, 0x6, 0x8, 0x5e4a365d, 0x1, 0x8000, 0x3, 0xa, 0x4, 0x0, 0x1000, 0xc0, 0x2, 0x3ff, 0xb, 0xb, 0x3, 0xe0000000, 0x80000000, 0x6, 0x4, 0x8, 0x0, 0x9, 0x8, 0xffff8000, 0x1, 0xccc, 0x401, 0x4479, 0xffffffff, 0xa, 0x4, 0xd, 0x6, 0x3d, 0x5, 0x100, 0x100, 0x1ff, 0xd, 0x5, 0x80000001, 0x1, 0xfe, 0xfff, 0x8, 0x6]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0xffffffffffffffff, 0x2, 0x2, 0xffff, {0x8d, 0x2, 0x7, 0x2, 0x6, 0x4}, {0x3, 0x1, 0x0, 0x1ff, 0x5, 0x9507}, 0x3d61, 0xce, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x2, 0x7f, 0x6, 0x4, {0xe, 0x1, 0x2, 0x3ff, 0x5, 0x5}, {0x2, 0x1, 0x0, 0x17c, 0x5, 0x9}, 0x10001, 0x2, 0x4a02}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0x80000001, 0x4f6, 0x800, 0x2, 0x400, 0x0, 0xfffffff8, 0x9, 0x9, 0xffffffff, 0x0, 0xffff7fff, 0x3, 0x1ff, 0x7, 0x170f27e3, 0x3, 0x200, 0x8, 0x1, 0xc5a4, 0x7c1, 0x2, 0x9, 0x6, 0x0, 0x5, 0x3ff, 0xd6, 0x0, 0x354, 0x1, 0xff, 0x40, 0x0, 0xf6, 0x9a23, 0x69, 0x3ff, 0xf3b, 0x7ff, 0x9, 0x1909, 0x40, 0x4, 0xa, 0x7fffffff, 0x7b8, 0xe, 0x2, 0x6, 0x8, 0x5, 0x80000000, 0x2, 0x9, 0x9, 0x0, 0x6, 0x9, 0xf730, 0x1ff, 0xad6d, 0x8, 0x3, 0xc5, 0x9, 0x8, 0x10000, 0xfffffffa, 0x3, 0x4d5d, 0x0, 0xbc, 0x3, 0x13db6813, 0x2, 0xffffffff, 0x8, 0x3, 0x1, 0x8001, 0x7, 0x7, 0x8001, 0x10001, 0x8, 0x0, 0x2, 0x4, 0x0, 0x81, 0x332, 0x4, 0x5, 0x4, 0x5, 0xf, 0x1667, 0x3, 0x7, 0x8, 0x3, 0x4, 0x59e, 0x47b, 0x8, 0x6, 0x3, 0x1, 0x3, 0x7fa, 0x6, 0x2d7, 0x81, 0x401, 0x1, 0x80000001, 0xeac2, 0x8, 0x4, 0x13c0000, 0xc112, 0x4, 0x4, 0xfffffff9, 0x10000, 0x800, 0x8, 0x9, 0x400, 0x4b13, 0x1, 0xfffffffe, 0x5, 0x4, 0x9, 0x9, 0x6, 0x9, 0xfffffffa, 0x6, 0x2, 0xffffff81, 0x31, 0x0, 0x9, 0x5, 0x8, 0x8, 0x7, 0x3, 0x9, 0xcb, 0x4, 0x100, 0x70d, 0x4, 0x4, 0x8, 0x100, 0x7, 0x1, 0x31, 0x200000, 0x6, 0x800000, 0x1, 0x0, 0x5, 0x101, 0x2, 0xc849, 0x2ee, 0x2, 0x5, 0x35e6, 0xa, 0x10001, 0x0, 0x8, 0xf9000000, 0x800, 0xa559, 0xffffffd5, 0x6, 0x548e4cf1, 0x5, 0x5, 0x1d45, 0xc, 0x0, 0x80, 0xb1b, 0x6, 0xffffffff, 0x1000, 0x8000, 0x8, 0x800, 0x7, 0x9, 0x6, 0x8, 0x4, 0x9, 0xa, 0x7fffffff, 0x800, 0xe, 0x9, 0x5, 0x4450, 0xb1, 0x9, 0x400, 0x10, 0x1, 0x10, 0x6, 0x5, 0x4, 0x7, 0x2, 0x7, 0x7, 0x7, 0x9, 0x5, 0x8001, 0x40, 0x2, 0x40, 0x1000, 0x8001, 0x5, 0x5, 0x2, 0x3, 0xfffffff8, 0x4, 0xa, 0x81, 0x1, 0xffffffff, 0x3140000, 0x7fff, 0x6, 0x8, 0x8, 0x0, 0x2, 0x6, 0x2d]}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x7, 0x2, 0x101, 0x7fffffff, 0x9, 0x3e, 0x32, 0x4, 0x7, 0x6, 0x6, 0x1, 0x8, 0x0, 0x6, 0xde9a, 0x81, 0x1, 0x7, 0xa, 0xc00, 0x40, 0x4, 0x7, 0x2, 0x7ff, 0x9, 0x1ff, 0x401, 0x1, 0x3, 0x71b, 0xa089, 0x7, 0x5, 0xe, 0xffff, 0xfb, 0x3, 0x0, 0x3, 0x8000, 0x401, 0x5, 0xfd9, 0xf, 0x10, 0xeb20, 0x2, 0x200, 0x8001, 0x10001, 0x75, 0x1, 0x10000, 0x4, 0xe25, 0x7f, 0x4, 0x5, 0x7f, 0xfffff76f, 0xce, 0xa62, 0x6bbf, 0xf99, 0xffffffff, 0x1, 0xffffffeb, 0x0, 0x5, 0xb8bd, 0x5, 0x7, 0x9, 0x7ab2, 0x8c1, 0x4, 0xff, 0x5, 0x3, 0x0, 0x2c6, 0x36, 0x43b, 0x523, 0x42, 0x1, 0x3, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x8, 0x8, 0x6, 0xfffffffe, 0x3, 0xffffffff, 0x2, 0x3, 0x8000, 0xfffffffb, 0x5, 0x5, 0x8, 0x40, 0x4, 0x2, 0x3, 0x2, 0xe60e, 0x6, 0x100, 0xb1c0, 0x6, 0x7, 0x4d51, 0x0, 0x2, 0x7, 0xb98, 0xb2f3, 0xffff, 0xb42, 0x8, 0x49a1, 0x80, 0x0, 0x6c, 0x200, 0x9, 0x1, 0x6, 0x4, 0x5, 0x6, 0xdc8, 0x0, 0x8c9, 0xc0, 0x9, 0x7, 0x10, 0x7b17, 0xd3f, 0x5, 0x2, 0x5, 0x1, 0x139b, 0x8, 0x9, 0x9, 0x5, 0x2, 0x500, 0x3, 0x7, 0x9, 0xd, 0x1000, 0x10, 0x5, 0x401, 0x1eb, 0x2, 0x1, 0x40, 0x5, 0x6, 0x8, 0x10001, 0x6, 0xfffffffb, 0x1, 0x10, 0x86, 0x3, 0x1, 0x5, 0x4, 0x81, 0x800, 0x2, 0x7f, 0x80000001, 0x9, 0xb8, 0xf1, 0x10, 0x8, 0xfffffffc, 0x0, 0x3, 0x9418, 0x7, 0x0, 0x1, 0x0, 0xfffffff9, 0xdddb, 0x5, 0x2, 0xc, 0x1, 0x5, 0x7, 0x4bb, 0x2, 0x81, 0x2, 0x4, 0x5, 0xa, 0x8bd, 0x4, 0x18, 0xd88, 0x1ff, 0x5, 0x5, 0x53, 0x6, 0x7fff, 0x5, 0x7, 0x8, 0x8, 0x2, 0xffffa744, 0x6, 0x2, 0x8, 0x5, 0xa, 0x0, 0x70fe, 0x1000, 0x0, 0x8, 0x7f, 0x7, 0xfffffff1, 0x4, 0x3ff, 0x9e, 0x6, 0xb5, 0x1fe, 0x1, 0x1, 0xfffffff7, 0x2]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1000}, @TCA_POLICE_RATE64={0xc, 0x8, 0xb9}]}, @TCA_FW_POLICE={0x5c, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x81}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xfffffff8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RESULT={0x8, 0x5, 0x3d94}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3ff}]}, @TCA_FW_POLICE={0x143c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x7, 0x6, 0x1, 0xa, 0xfffffe00, 0x5, 0x31, 0x0, 0x1000, 0xfffffffe, 0xed1, 0x2, 0x6, 0x0, 0xe4, 0x7, 0x10001, 0x3, 0xe61, 0x1, 0x24a, 0xee, 0x4, 0x5d5f, 0x80, 0xb8, 0x7, 0x9, 0x2f3, 0x2, 0x101, 0x690, 0x101, 0x5, 0x1ff, 0x8, 0x5, 0xc, 0xfffffffc, 0x5, 0x4, 0x4, 0x3, 0x1a, 0x81, 0x2, 0xfffffffa, 0x4, 0x1000, 0x80000000, 0x7, 0x1, 0xff, 0x97b0, 0x3, 0xb4, 0x3, 0x8e, 0x100, 0x55db, 0xff, 0x6, 0x5, 0x5, 0x2, 0x401, 0x0, 0xdfd8, 0xfff, 0x31a, 0x1, 0x9, 0x9, 0xfff, 0xdb3a, 0x8, 0x1, 0x7, 0x5, 0x1, 0x8, 0x2, 0x4, 0x40, 0x9, 0x9, 0x8001, 0xa, 0x1, 0x40, 0xfffffeff, 0x67df2e86, 0xbea5, 0xfaa1, 0xa602, 0x1ff, 0x101, 0x0, 0xfffffffc, 0xfffffff2, 0xfffffffd, 0xab, 0x9, 0x4, 0x0, 0x7, 0x200, 0x10001, 0x2, 0xc5, 0xfffff9e9, 0x1, 0x3, 0x0, 0x8, 0xfffffffb, 0xfffffffe, 0x3, 0x10, 0x6, 0x81, 0x4, 0x0, 0x80000001, 0x2, 0x6, 0x8, 0x4, 0x7e3, 0x0, 0x5, 0x2, 0xfffffffd, 0xfd4, 0x4, 0x4, 0x9, 0xfff, 0x80000001, 0x8, 0x3, 0x0, 0x8, 0x9, 0x72, 0xe, 0x1, 0xa8, 0x8, 0x80000001, 0xffffff81, 0x9, 0x5, 0x0, 0x0, 0xd, 0x1, 0x2, 0xfffffffd, 0xffe000, 0x307a, 0x1, 0x6, 0x48, 0xffff81f2, 0x0, 0x6, 0x8000, 0x10001, 0x7a2, 0x6, 0x9, 0xc, 0x466de9b0, 0xfff, 0xd2d, 0x80000000, 0x27b, 0x4e, 0x9, 0xff, 0x20002, 0x4, 0x6, 0x8, 0x6, 0xff, 0xffff, 0x1, 0x9, 0x5, 0x6, 0xfffffff7, 0x3, 0x1000, 0x7, 0xe, 0x9, 0x8, 0x4, 0x100, 0x5, 0x900000, 0x7, 0x1, 0x7, 0xd3b4, 0x3cac, 0xfb8, 0x98, 0xfffffffc, 0x5de6e09, 0x100, 0x3db6, 0xfffffffe, 0x910d, 0x4, 0xe, 0x9, 0x2, 0x8000, 0xffff8000, 0x6, 0x76f, 0x9, 0xa4c0, 0x5, 0x7, 0xa4, 0x7, 0x5, 0x2, 0x9, 0x1, 0x7, 0x0, 0x2, 0x7, 0x80000000, 0x6, 0x5, 0x4, 0x2, 0x7, 0x5443, 0x9, 0x2, 0x1, 0x5, 0x1, 0x4, 0x6, 0xe12, 0x6, 0x6]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x45, 0x2, 0x1, 0x52d, 0x80000001, 0x81, 0x7, 0x6, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1000, 0x0, 0x8, 0xc, 0x6cc, 0x4, 0x5, 0xfffffffd, 0x1, 0x8, 0x3, 0x4e1, 0x6, 0xa, 0x3, 0x5b, 0x9, 0x3, 0x100, 0xff, 0x80000001, 0x7, 0x80, 0xec8c, 0x6, 0xfff, 0xf, 0x1, 0x818, 0x0, 0x7ff, 0x7, 0x6, 0x1, 0x10, 0x2, 0x10001, 0x4, 0x6, 0x4, 0x6, 0x4, 0x4, 0x6a, 0x7fff, 0x6, 0x0, 0xffffffff, 0x3, 0xfffeffff, 0x40, 0x8, 0xe09, 0x3, 0x80000000, 0x3, 0xfffffffc, 0x6, 0x53, 0x2, 0x3, 0x7, 0x0, 0x2, 0x0, 0x8, 0x80000001, 0x9, 0x9, 0x4, 0x3, 0x6, 0x5, 0x7, 0x0, 0x5, 0xfff, 0xfffffffb, 0x101, 0x2, 0x6753, 0x1ff, 0x7, 0x2, 0x4, 0x7dd, 0x2a6, 0xffffffff, 0x5, 0xfffffffc, 0x0, 0xe, 0x6, 0x9, 0x4, 0x4, 0x6, 0x4, 0xa9, 0x7ff, 0x6, 0x9fac, 0x1, 0x800, 0x9, 0x8d5, 0xf7a, 0x117, 0x0, 0x0, 0xec1, 0x100, 0x5, 0x8, 0x8, 0x2, 0xff, 0x7fff, 0x2, 0x0, 0x10, 0x3, 0x8, 0x5, 0x9, 0x5, 0x9, 0x4, 0x0, 0x9, 0x9, 0x1, 0x81, 0x10000, 0x6, 0x1, 0xfffffff8, 0x606, 0x80, 0xe2, 0x83, 0x4, 0x0, 0x5, 0x8, 0x80000001, 0x800, 0x4, 0x7fffffff, 0x80, 0xa70, 0x800, 0x1000, 0x3ff, 0x8000, 0xfffffffe, 0x4, 0x3, 0x1, 0x1, 0x101, 0xff, 0x6, 0x3, 0x101, 0xa, 0x9, 0x5, 0x0, 0x1ff, 0x7, 0x401, 0x1, 0x80000001, 0x5, 0x8, 0xfffffffa, 0x0, 0xfffffff9, 0x0, 0xfff, 0x6, 0x8000, 0x4, 0x4, 0x3, 0x10001, 0x101, 0x9, 0x0, 0x28000000, 0x1, 0x9, 0x100, 0x1, 0x101, 0x0, 0x3, 0x3, 0xa, 0x0, 0x7ff, 0x400, 0x1, 0xffffffa3, 0x2, 0x2, 0x8001, 0xc4b, 0xf, 0x1ff, 0xa6, 0x8, 0x3, 0x80, 0x5, 0x1, 0xbf6, 0x3, 0x4bd4, 0x1, 0x14, 0xffff2d0f, 0xb, 0x4, 0x7, 0x5, 0x19, 0x9, 0x0, 0x79a, 0x14fc509d, 0x0, 0x10000, 0x0, 0x101, 0xc3b, 0xb, 0x485980, 0x7, 0x5, 0xd]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb51b}, @TCA_POLICE_RESULT={0x8, 0x5, 0xe66d}, @TCA_POLICE_RATE={0x404, 0x2, [0x80000000, 0x3, 0x3, 0x0, 0x5, 0x401, 0x4, 0x1000000, 0x8, 0x5, 0x1, 0x3, 0xfffff71c, 0x75, 0x7, 0x400, 0x2, 0xffffff45, 0x1, 0x5, 0x3, 0x0, 0xa, 0x8001, 0x101, 0xffff, 0xdb, 0x9, 0x7ff, 0x10000, 0x8000, 0x9, 0x7, 0x200, 0xe1, 0x1, 0x6, 0x3, 0x8, 0x4, 0x1, 0x9, 0x7, 0x0, 0xffffffff, 0x9, 0x3, 0x3, 0x2, 0x1, 0x3, 0x6, 0x4, 0xc1, 0x100, 0x2, 0x3, 0x896, 0x5, 0xf, 0x9, 0x7fff, 0x81, 0x159, 0x10, 0x3b2e, 0x7f, 0xffffff7f, 0xb17, 0x800, 0x8, 0x100, 0x5, 0x80, 0xcb7, 0x90, 0x0, 0x637, 0x0, 0x0, 0xf5b, 0x101, 0x35, 0x9, 0x81, 0x7, 0x7, 0x9, 0xcf1, 0xd, 0x9b, 0xb14, 0x5, 0xfffffbff, 0x2, 0xfffffff7, 0x2, 0x5, 0x39, 0x3, 0xae, 0x1, 0x7, 0x1c5, 0x559, 0x2, 0x1, 0xffffff90, 0x1, 0x6b8d, 0x6, 0x3, 0x0, 0x7, 0x1, 0x5, 0x6, 0xcb, 0x9, 0x1, 0x8, 0x1, 0x9, 0x8001, 0x7, 0xb, 0x0, 0xd, 0x7f, 0x10000, 0x0, 0x401, 0xe5, 0x7, 0x9b, 0x1, 0xffffffff, 0xffffffff, 0x1, 0x800, 0x4, 0x0, 0x2, 0xfffffffc, 0x6, 0x0, 0x586, 0x81, 0xc, 0xd7, 0xffffffff, 0x8, 0xd0000000, 0x8, 0x5, 0xdec, 0x1, 0xdd7, 0x7, 0xf18b, 0x9, 0x0, 0x501a, 0x3ff, 0x2, 0x9, 0x80000000, 0xe4, 0x7, 0x7fff, 0x48, 0x100, 0xffff, 0x0, 0x5, 0x6, 0xff, 0x4, 0x3, 0x0, 0x8, 0x7, 0x6, 0x73a, 0x575, 0x6, 0x1b, 0x93, 0x200, 0x6, 0x4, 0x6, 0x8, 0x1, 0x1, 0x9, 0xfffffff7, 0xb, 0x4, 0x4, 0x5a, 0x7, 0x200, 0x7a, 0x9, 0x6, 0xd526223, 0x3, 0x80, 0x3, 0x1c00, 0x401, 0x8, 0x10, 0x40, 0x1, 0x669e, 0x6, 0x4bb6, 0x1, 0x8, 0x29c8, 0xe0, 0x7, 0x10000, 0x6, 0x5fc976f7, 0x3, 0x74c0, 0x3ff, 0x7, 0x5, 0x7, 0x680a, 0x0, 0xa, 0x9, 0x2, 0x5, 0x9, 0x8, 0x5, 0x5, 0x8, 0xf31, 0x5, 0xf, 0x9, 0x0, 0x9, 0x3, 0x1, 0x7, 0xfffffffd, 0x1ff, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xbcfb, 0x3, 0x9, 0x80000000, 0x8, 0x6, 0x6, 0x7, 0x4, 0x8001, 0x549, 0xe, 0x6, 0x8, 0x3ff, 0x1000, 0x3, 0x1, 0x0, 0x1, 0x58e, 0x9, 0x1e, 0x1359b336, 0x1, 0x4, 0xffff8000, 0x1, 0x2, 0x1000, 0x10000, 0x5, 0x200, 0x6, 0x0, 0x2, 0x9, 0x6, 0x911b, 0x7, 0x3, 0x7, 0x7f, 0xf1d, 0x5, 0x26f, 0x1, 0x7fffffff, 0x3, 0xf, 0x7fff, 0x0, 0x3, 0xffffff5e, 0x5d84, 0x6, 0x7, 0xad, 0x8b0, 0xb, 0x76, 0x80000000, 0x2, 0x155, 0x4, 0x8001, 0x1, 0x3, 0xdc2, 0xfffff656, 0x2, 0x8, 0x3, 0xfffffffe, 0xff000000, 0x5651, 0xb, 0x5, 0x80, 0x200, 0x7ff, 0x0, 0x7, 0x52, 0x8, 0x2, 0xffff7fff, 0x6b73, 0x269, 0xd254, 0x5, 0x1, 0x0, 0xd8, 0x88, 0x0, 0x29f, 0x3, 0x8, 0xffffffff, 0x10001, 0xff1, 0xf, 0xffffffff, 0x9, 0x80000001, 0x9, 0x200, 0x5, 0x2, 0x8, 0xe4e, 0x200, 0x1, 0x7ff, 0x2, 0x5, 0x7ff, 0x1, 0x0, 0xf85, 0xffff7fff, 0x1000, 0x6, 0x7, 0x9, 0x7, 0x7, 0x100, 0x1, 0x80000000, 0x16, 0x10001, 0x2, 0x200000, 0x4, 0x1, 0x5, 0x100, 0x6e9, 0x6, 0xfffffffe, 0x8, 0xfffff344, 0x40, 0x0, 0x1, 0x7, 0xaaf, 0x0, 0xd10f, 0x5, 0x7, 0x200, 0x8000, 0xd3, 0x38000, 0x27, 0x7, 0xf, 0xb73d, 0x4, 0x7, 0xc2, 0x9, 0x10001, 0x6, 0x0, 0x2, 0x9, 0x1, 0xe0, 0x5, 0x5, 0x300, 0x80000001, 0x401, 0x7, 0x3, 0x7d6, 0xa, 0x3, 0x9, 0x4, 0x9, 0x6, 0x8, 0x1, 0xfffffffd, 0x3, 0x6, 0x0, 0x400, 0x7, 0x4, 0x9, 0x7, 0x5962, 0x7fff, 0x5, 0x0, 0x2, 0x6, 0xea6, 0x0, 0x7fff, 0x1, 0x1, 0xfffffffb, 0x8, 0xfdb, 0x2, 0xfff, 0x80000001, 0x8, 0x6, 0x28, 0x8, 0xc8, 0x7, 0x4, 0xff2, 0xfffff020, 0x4, 0xd4, 0x9, 0x0, 0x80000001, 0x8, 0xffffff1b, 0x4, 0x81, 0xd, 0x3, 0x7, 0x400, 0x3, 0x1c000000, 0x4, 0x40, 0x1, 0x40, 0x72101f09, 0x0, 0x7, 0x0, 0x7, 0xee17, 0x5, 0x6, 0x69f2, 0xfffffffa, 0x7, 0x7fff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xfffffffa, 0x5, 0x0, 0x2, 0x9, 0x2, 0x1, 0x4, 0x9, 0x3fa, 0xfff, 0x1, 0xfffff800, 0x6, 0xda9, 0x8000, 0x6, 0x10000, 0xbab, 0x5, 0xfffffff8, 0x9, 0x5e, 0x5, 0x400, 0x274b, 0x8, 0xade, 0x2, 0xff, 0x4, 0x4, 0xc226, 0x4, 0x2, 0xffff, 0xc8e4, 0x0, 0x80000, 0x101, 0x20b2, 0xfffffff8, 0x2, 0x9, 0x6, 0x4, 0xfffffe00, 0x6, 0x5, 0x2, 0xed0, 0x3a, 0xfff, 0x5, 0x7ca9, 0x7, 0x7, 0x3, 0x18, 0x2, 0x9ad6, 0x3, 0x1000, 0x0, 0x4fc, 0x2, 0xa0, 0x4, 0x153607f8, 0x6, 0x0, 0x1, 0x5, 0x4, 0x2, 0x2, 0x3, 0xc, 0xe, 0x8, 0x9, 0x3, 0x0, 0x3, 0xa463, 0x3, 0xe, 0x9, 0x76, 0x8, 0x2, 0x2, 0xea, 0x6, 0x6, 0x7, 0x2, 0x4, 0x5e2, 0x6, 0x6, 0x3, 0x481, 0x903f, 0xc, 0x1ab, 0xfffffffd, 0x3, 0x5bfe, 0x8, 0x800, 0x19a680, 0xfffffffc, 0xfff, 0x555c2427, 0x7, 0x7, 0x4, 0x0, 0x9, 0x1, 0x4, 0x40, 0x5, 0x9, 0x4, 0x6, 0x7, 0x5, 0x1, 0x400, 0xf, 0x1, 0x81, 0x1, 0x5, 0x88e, 0x2, 0x4, 0x80, 0x8, 0xb28c, 0xf, 0x4d, 0xd1, 0x5, 0x3, 0x8, 0x1, 0x0, 0x2, 0x4, 0x6, 0xb8, 0x2f6e, 0x4, 0x9, 0x5, 0x4, 0x90000000, 0x7, 0x9, 0xfffffff9, 0x8, 0xfffffffd, 0x2, 0x400, 0xffff8001, 0x401, 0x5, 0x2, 0x93, 0x0, 0x100, 0x80000000, 0xa, 0x8, 0x0, 0x5, 0x40, 0xffffff00, 0x7f8e, 0x2, 0x20, 0x7b, 0x7, 0x0, 0x8, 0x3, 0xfffffffa, 0x10001, 0x1, 0x80000001, 0x81, 0x2, 0x9, 0x40, 0x7, 0x18, 0x7ff, 0x8, 0x3, 0x6, 0x1, 0x6, 0x5, 0x40, 0x3, 0x7, 0xda, 0x6, 0x5, 0x9, 0x101, 0xe, 0x718, 0x4, 0x9, 0x6, 0x6, 0x4, 0x415, 0x81, 0x2, 0x6, 0x101, 0x0, 0x92d9, 0xe, 0x2642617, 0x4, 0x3, 0xf4, 0x3157, 0x7fff, 0x4, 0x5, 0xbe4, 0x2, 0x9, 0x9, 0xa, 0x8, 0x8, 0x5, 0xb, 0x5, 0x3, 0x8001, 0x3ff, 0x81, 0x80000001, 0x7, 0x7fffffff, 0x2, 0x1]}]}, @TCA_FW_ACT={0x3d4, 0x4, [@m_nat={0x234, 0x1d, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x3, 0x10000000, 0x5, 0x2}, @rand_addr=0x64010100, @broadcast, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x3, 0x7, 0xffff2ec7, 0x81}, @remote, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xd55, 0x6, 0x9}, @private=0xa010102, @local, 0xc4f754ba8416383d}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x53bb3642, 0x8, 0x3ff, 0x298}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x7f, 0x0, 0x3, 0x4}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1ff, 0x0, 0x2, 0x3}, @loopback, @multicast1, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2fe2, 0xf, 0x7, 0x48b1e431, 0x4}, @rand_addr=0x64010102, @remote, 0xffffff00, 0x1}}]}, {0xf1, 0x6, "738ae9bbd0cce67620bbaddb279a3ce9f1dabcab83cdba178913d5ddd54d732f470b9b0a552f3a2136ad221f0a376a7d420580ca19a96025f68acd65d669cedcec1c2dd629de3b1332d6511ebb6259d4fa1d95c44fbe1cc59a96736749462d69a24739c58a8c4cae6f4dfc017fece10a87c09705aa6537576239962939e1aec4f3b3104638335bb31bbbc7be6cfc9da50a4a90161d5dbe7c98ca01a04a27dd4db323c092cba8471b4ca813313b2099e7f6688d92943dc782da7e52521cbd6758df441a1e92c43e2d0ea83415e91962caf48e7f1a36a9a20b9674d19a3c1adaa7055ffdc80de795149826f182ea"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xd8, 0x9, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x2}, @TCA_MPLS_TC={0x5, 0x6, 0x4}, @TCA_MPLS_TTL={0x5, 0x7, 0x80}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x88f5}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xcc, 0x3aa, 0x3, 0xcc19, 0x2}, 0x1}}]}, {0x67, 0x6, "dd1064ec19b976ff1172b6e5abe1ee05c50cde1a1b7e09d4aa3b3a1deaf26f580f5843c0724c5cf46d08c7e0bb95f2276f81cfdc00ef33647378827500aaacf78cc31e0857d900317a1292cdee187e0a9f4d8813bf16baa62ddc1951d60bed6724f107"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_mirred={0xc4, 0xa, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x1, 0x10000000, 0x7, 0x5}, 0x3, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0xa25, 0x20000000, 0x6, 0x1}, 0x4, r4}}]}, {0x58, 0x6, "7d4d8634d5f65afbcda9ec7f3041469886f81604e520c3c34af75f49ebed0392d0bb0b27d4e000c001a8b78093aaaa9201720979e2a43c0844695dda7d967adf6c8adfd78c4e7abeda22f2e207f957923babfb5a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x2548}}, 0x0) write(r2, &(0x7f0000000940)="00008847", 0xff44) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0xb, 0x4, 0xfe, 0x2, 0x3, 0xfd, 0xe5, 0x0, 0x6, 0x4, 0x6, 0x0, 0xf, 0x8}, 0xe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) shutdown(r0, 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x6, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x7391, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', 0x0}) r11 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) r12 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) close(r12) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', @multicast}) 4m24.652393616s ago: executing program 3 (id=7529): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="d60a0000000000006111a000000000001800000001000000000000000000000095000000000000009f2df8e87abb1a540c40170189e113c536ba0c55d0857051fbe39a70744b2b3b311f307df2b46fc25991e3c9ac33fc1ec4bb491bb7fd3c51347a394dc9eca4c41667c625d2b60bae0f2ef881fe0b9f7882b69875260f5b0d09085a3e9ec34e9d231e5d5b7c8803fe9ebe853ac1a2e67cd189353b57ab26eb6d6a2cc4b2b6c40451164b786e86a464a2027e27adb316d8232e047e9ba9ca7fb9312c17a7f3b1a016f40894e575136a56337b38ca97a2f056a2"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040), 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x2, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x8000003, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r1, {}, {0xfff8, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2, 0x0, 0x0, 0xf}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000007c0)={0x0, 0xffffb585, 0x8}, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001040)=ANY=[@ANYBLOB="0200000004f669182226000000010000009f0056a319a0107ac66f984dcae9000000000000878fcbd02830bbd5837e7dea11f45ef170df71fabb25e021743012a4bbc31504019b89883479f712c03b2a8915d88d807e89"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xf, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa8}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{}, &(0x7f00000009c0), &(0x7f0000000a00)='%-5lx \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x213, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c00)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x80000000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) syz_emit_ethernet(0x76, &(0x7f0000000fc0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x67}, @dstopts={0x62}]}}}}}}}, 0x0) 4m24.436753354s ago: executing program 3 (id=7531): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000200)={0x0, 0xff0f, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 4m24.216115866s ago: executing program 3 (id=7535): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4m24.146933153s ago: executing program 3 (id=7537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01000000000000020001170000000c0006"], 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 4m8.963106768s ago: executing program 32 (id=7537): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xfb}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x44040) sendmsg$nl_generic(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="01000000000000020001170000000c0006"], 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)={0x14, 0x27, 0x1, 0x70bd29, 0x0, {0x6, 0x1}}, 0x14}}, 0xc000) 2m44.820761171s ago: executing program 4 (id=8592): bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0xc, 0x7, &(0x7f00000019c0)=ANY=[@ANYBLOB="7911a800000000005501020000000000b700000000000000950000000000000085000000c40000007b0000000000000095"], &(0x7f0000001a00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000b80)=0x100, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000bc0)={'veth1\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000c00)={&(0x7f0000000c40)=""/74, 0x33e000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000cc0)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000000d00)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000d40)=0x1, 0x4) bind$xdp(r2, &(0x7f0000000d80)={0x2c, 0x0, r1}, 0x10) bind$xdp(0xffffffffffffffff, &(0x7f0000000dc0)={0x2c, 0x1, r1, 0x0, r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000e00)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="3c00000010000500"/20, @ANYRES32=0x0, @ANYBLOB="01000000010000001400030073797a6b616c6c65723000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001000)={'ip_vti0\x00', &(0x7f0000000f80)={'gre0\x00', 0x0, 0x1, 0x7800, 0xfffffff0, 0x0, {{0x13, 0x4, 0x3, 0x2, 0x4c, 0x68, 0x0, 0x1, 0x29, 0x0, @broadcast, @local, {[@end, @cipso={0x86, 0x1e, 0x2, [{0x5, 0x2}, {0x0, 0x2}, {0x0, 0x7, "5e8bfbaa9d"}, {0x2, 0xd, "95a754498e3b5b8f7636ae"}]}, @end, @noop, @generic={0x1d2, 0x3, ')'}, @noop, @timestamp_prespec={0x44, 0xc, 0x5d, 0x3, 0x2, [{@rand_addr=0x64010100, 0x2}]}, @generic={0x89, 0x7, "8b618353af"}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000010c0)={'erspan0\x00', &(0x7f0000001040)={'gretap0\x00', 0x0, 0x40, 0x0, 0x401, 0x6, {{0x11, 0x4, 0x0, 0x5, 0x44, 0x68, 0x0, 0x4, 0x4, 0x0, @remote, @empty, {[@lsrr={0x83, 0x2b, 0x7b, [@rand_addr=0x64010101, @rand_addr=0x64010100, @multicast2, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x19}, @loopback, @rand_addr=0x64010102, @private=0xa010102, @private=0xa010100, @broadcast]}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001180)={'ip6_vti0\x00', &(0x7f0000001100)={'ip6_vti0\x00', 0x0, 0x4, 0xed, 0x9e, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x20, 0x8, 0x1c00000, 0x800}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001240)={'syztnl2\x00', &(0x7f00000011c0)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x8, 0x70, @mcast2, @private0, 0x7, 0x80, 0x8, 0x6}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001280)={@private0, 0x0}, &(0x7f00000012c0)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'macvlan1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000001340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001380)=0x14) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000013c0)={'ipvlan0\x00', 0x0}) r17 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r17, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001480)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r16, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r17, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000015c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r16, {0x0, 0x8}, {0xffe0, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002580)={&(0x7f0000001a40)={0xb1c, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [{{0x8}, {0x120, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10}}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x50}}}]}}, {{0x8}, {0x224, 0x2, 0x0, 0x1, [{0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffa8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x170, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r6}, {0xc8, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r7}, {0xc8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}, {{0x8, 0x1, r10}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x74a}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r13}, {0x188, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8}}}, {0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0xfffa, 0x1, 0xaa, 0x4}, {0x9, 0x7f, 0x0, 0x80000001}, {0x7ff, 0x20, 0x2, 0x8}, {0x1, 0xff, 0x0, 0x101}, {0x8001, 0x80, 0x3, 0xc}, {0xfff, 0xa, 0x2, 0x4}, {0x8001, 0x4, 0x4, 0x8}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r16}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x0, 0xff, 0x0, 0x6}, {0x3, 0xfe, 0xb6, 0x101}, {0x2, 0x7f, 0x3, 0x2}, {0x1, 0x8, 0x3, 0xfffffff5}, {0x5, 0x2, 0x8, 0x7}]}}}]}}]}, 0xb1c}}, 0x8000) 2m44.697077347s ago: executing program 4 (id=8593): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f00000001c0)=0xa40, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000240), &(0x7f0000000280)=0x4) write$tun(r1, &(0x7f00000002c0)={@val={0xa, 0x806}, @void, @llc={@llc={0xfc, 0x4e, "05", "8e606be34db6afa6076c6ec8abd16b3876e12abaef77812b6445eeae40f7f17b2697727750304b4002c18576ecbcae8a31e12bb5ce44118ace929f360d6d2c3c2d3955fb628a75568626c623d51a8ffbbe53cc"}}}, 0x5a) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x6, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) 2m44.466455949s ago: executing program 4 (id=8601): syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaacaaaaaa0000000086dd6000010000000000000000000800000000000000000000000000000400aa00a4c3043100"/58, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002f00098027bd7000fbdbdf25040000000c00170001"], 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x80000) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 2m42.799053538s ago: executing program 4 (id=8615): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000002b80)={0xffffffffffffffff, &(0x7f0000002a80)='bridge0\x00', 0x2000, &(0x7f0000002ac0)={@_ha_fsid={[0x7, 0x6]}, {0x4, 0x9, 0x97c, 0x2}}, 0x7a15, &(0x7f0000002b00), &(0x7f0000002b40)=0x3}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x90) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/4102, 0x1006}, {&(0x7f0000001680)=""/4111, 0x100f}, {&(0x7f00000026c0)=""/100, 0x64}], 0x3}, 0x19}], 0x2, 0x0, 0x0) 2m42.556618515s ago: executing program 4 (id=8621): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x8, &(0x7f0000000240)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004002000080020"], 0x4c}}, 0x0) 2m42.088399098s ago: executing program 4 (id=8629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0x4, 0x0, 0x0, r4}, 0xc) (async) sendmsg$netlink(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) (async) sendmsg$netlink(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000040)={0x108, 0x3d, 0x2, 0x70bd27, 0x25dfdbfe, "", [@generic="daf74c70f0dcff280d2f4c32b66e1624986b11a0101f13180f8a371db08dd3e2389b5159cd30b3911ec8cc2b46cb86d1a87404d738066b459fbc7c24e31a9002528a937b708f0fff86e320377484a07524a57114525d9b4a5a6040aa024e4c6961a07beb1ba887a27c4016664d7f58c12f9311cd38295fc68cfa170c6515253cd5caa9d2f3a83f09b9f143a57767b3b093c69790e35fb7795ee0d8298252e3f0505c5e4b8ffef362bf2d2298f3fc541c1f62d8a183996d33d8fee92496051a69ff91e7dcdae93710c8433430c9ed4f2acf3e2d939297e2e55886effd9c36025de4de7807c76cd3ad377f76969be3", @typed={0x8, 0x11, 0x0, 0x0, @fd=r2}]}, 0x108}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000100000001000008", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000010000000000000000100000001000000"], 0x40, 0x4}, 0x20008000) 2m26.973269228s ago: executing program 33 (id=8629): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x27, 0x301, 0x22f0bd24, 0x25dfdbff, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket(0xa, 0x3, 0x3a) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000400)={0x4, 0x0, 0x0, r4}, 0xc) (async) sendmsg$netlink(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)={0x24, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="2cc2ecdb28f85230a9"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, 0x3b, 0x1, 0x70bd27, 0x25dfdbfd, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @u32=0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x20040010) (async) sendmsg$netlink(r1, &(0x7f00000002c0)={&(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfc, 0x10}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000040)={0x108, 0x3d, 0x2, 0x70bd27, 0x25dfdbfe, "", [@generic="daf74c70f0dcff280d2f4c32b66e1624986b11a0101f13180f8a371db08dd3e2389b5159cd30b3911ec8cc2b46cb86d1a87404d738066b459fbc7c24e31a9002528a937b708f0fff86e320377484a07524a57114525d9b4a5a6040aa024e4c6961a07beb1ba887a27c4016664d7f58c12f9311cd38295fc68cfa170c6515253cd5caa9d2f3a83f09b9f143a57767b3b093c69790e35fb7795ee0d8298252e3f0505c5e4b8ffef362bf2d2298f3fc541c1f62d8a183996d33d8fee92496051a69ff91e7dcdae93710c8433430c9ed4f2acf3e2d939297e2e55886effd9c36025de4de7807c76cd3ad377f76969be3", @typed={0x8, 0x11, 0x0, 0x0, @fd=r2}]}, 0x108}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000100000001000008", @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r1, @ANYBLOB="0000000010000000000000000100000001000000"], 0x40, 0x4}, 0x20008000) 26.184757218s ago: executing program 6 (id=9921): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3}]}, &(0x7f0000000040)='GPL\x00', 0x11, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 26.104790134s ago: executing program 6 (id=9923): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x38, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x6, 0x81, 0x9, 0x2, 0x11, 0x3, 0x9]}}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x6c, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x6, 0x27}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 26.003007768s ago: executing program 6 (id=9925): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}}, @NFT_MSG_DELRULE={0x160, 0x8, 0xa, 0x401, 0x0, 0x0, {0xe, 0x0, 0x6}, [@NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0xe9, 0x7, 0x1, 0x0, "cede82c9f12e6025dc2b60a52f57154fde8730076d86d72ba5a061a858e1773f8893a08804e1cde34333c078caad6a56376239a5d7c7b691c6f967840c9629259527ae9d41564f1c5a977cda9678cfa6874fc2faea38a9d830c0b75b9169d637a8fb50c89e8965415ef7c65e86b6f58406fb9c2f9a219cb72fff12b5188ee6e90be23f8ca21e5466285afe9049c25c459d14aed8e9a80fff894681979ddde7845a7d5e804081684490af43f9bca8ee49147a68e6bf194843de6b218f5fefdaf4792ab706bde6bb1321e889e9e3318285b0cf7f7e09cd5e21aa35a94b9a3d380e8264eed41a"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0x44, 0x7, 0x1, 0x0, "0d7ab8e5cc7bfbe06cd1e856ff50024dfd8b90d96fca27492f3998ac149a909601e8123f4f96c641897460c7797ebb2af97cb544435d1b5d4be8e4b33c557076"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x19c}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 25.935139716s ago: executing program 6 (id=9927): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000020000100f1f80000000000000a000000000000000000000008000d00000000000500160008000000772e6d021bc7a166be266e9b35cc45547cb489c4806b3c6767e0c46471c9163aab26f631cfe42b8b90ddf7bfb5fff7818756f055eec388e316ce"], 0x2c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, &(0x7f0000000780)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) sendmsg(r1, &(0x7f0000001f00)={&(0x7f00000008c0)=@pptp={0x18, 0x2, {0x7, @private=0xa010100}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000940)="2a7f09edd98cc10aeec4ad3b07cfa87720c111c850df898b538dd2fb3c0f8740472cc498575ab88f20dfaec98fceb0393a0efa128a94b0854c3db80dcd236fb2e39e1bb51c3a699d7596c00a371a47c59450bfd9de9933e9bd877059d23dc1b5edc0efd7de59b3142ee8d437f99be1be4d8d0faaf326fb404ea1759c6ce0d2f98f43d07a545b155a", 0x88}, {&(0x7f0000000a00)="60730df0360f0f5ebd9ceed61cff467d1f0f8b389666a9", 0x17}, {&(0x7f0000000a40)="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", 0x1000}], 0x3, &(0x7f0000001a80)=[{0x38, 0x119, 0x5, "545feb169c403f31f5ccb0453481b66278c24fda692ed4412afa065c3040f7c658011805e47d5b11"}, {0x90, 0x3a, 0x10000, "7ce259741af9a984ba9118d993eb6065798fca5ab383ab76b32176cf9a972ea614bf45839f5e4addcb4557424918c58a0b4376676ed091b5dcb7ad345dd45ffcd7b93645e898ee1861cbfaa896b139e1bf0af816ea264600a3ec8a2e2bf44cf2a223b6ddfb55d68ffe0b94a8f466ef1ebe7376569c873a38079e7e"}, {0xb0, 0x104, 0x24b2, "407f708c97e73413613a3edd17c24be25069199674ed820ed5c0cea3fdae2da6859d14741947c37e3e28d8564a25f1901936e8dce527371cf056ec798ea4532bd4a6316abf432b41e9fbcfe9b82174b09cd51fdc1dc8c368c7315ca6533e9d53988893fafe1d491f0e39cf3e2770f4d624a38625869db5a819bac57e0473de427b20cbb21d8278b62312bcdbcb704b832a0328357b3ea9886ce2006986"}, {0xb8, 0x0, 0x1, "3cd0f7ebd4e1523e200ef8df8b0465c4cd8bcb3df1927219cee92a7d4d08fc3f3c80e4af2e8484d4305d404a0d8bee1f71a5c715fb06d97c62a469c8df9104d96303b9d783767d7ce8d8b131dd3858c586473df7f020ed7716442fe4e3e716f195ed05c2da085a5d5cf8ebbe8fc88b3115f0b46bd68620b8d529d96c2e9213dffdfc3fa44a2e4c629c8f83f44fa31e3bbc0f138faeeab7b05fa48e4478f3d7d5fa09"}, {0xd8, 0x304, 0x4, "335f53dee89621bab558ed75aa0e64ae9e46ca2e6e0db4f7d8e427c2eceaaddd37a737331411a2ebd1a7de52e1c24b893c50c8fd24e54241d82c78cc348d445aa4dd0ddfb0909d5357872092dbe9c89dd8cd1accaac76666bb3ba4a259d0111121e5da3e837f18d551e1a4094a41289c9aa7fa6eca1a84e60debce84782195f5ffa8d7093f664937d3366df168af3bff7a98a77d8c9dd874045f0e381898a9875936cd5449c1401bfb4aa3c36308fcaeacc782d5ca2ec3788cb943e4edaacc32ed5ac820"}, {0x18, 0x107, 0x1000, "9e911d87c4a4"}, {0xf0, 0x3a, 0x8, "3afa21bd4a6e3037775b3ec1ddae3366b016e823be4ede4ccee398e72b554c347ed1af25b949466fdfefa20723b3c9b0a14b219fc139003a502a456f847fcf33529cf5f8d5f3abc86bf12cea412a12863381cd28c32e478bc8b7ce166fd2183802cbf41c29f88c73ac9870a30d1d8814435dff828f4d65bc30744fe3faa31b24432b0bb820424ffa60b959eec2670ae0504956cf15a7239ffad77f59b263fbed1b9f1ad9b0463a50992b6e463b9b3452d0ca19238c6a69726c4e751779d4913c69010eed2d90e051c9cc4fb074e88f945c3a890c7558b920a6"}, {0x50, 0x113, 0x1, "9ba4b45941c695b583206e8f7b6072de9c511968a2ad0d5fe71bf1032202a56a99e9680e2837966553e8babc8c5cb1779da6221f6215b0b30347"}], 0x460}, 0x4008803) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000800)="06c3", 0xffd8}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711071000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000020000100f1f80000000000000a000000000000000000000008000d00000000000500160008000000772e6d021bc7a166be266e9b35cc45547cb489c4806b3c6767e0c46471c9163aab26f631cfe42b8b90ddf7bfb5fff7818756f055eec388e316ce"], 0x2c}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000200)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) (async) socket$inet6(0xa, 0x3, 0x3c) (async) connect$inet6(r2, &(0x7f0000000780)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async) sendmsg(r1, &(0x7f0000001f00)={&(0x7f00000008c0)=@pptp={0x18, 0x2, {0x7, @private=0xa010100}}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000940)="2a7f09edd98cc10aeec4ad3b07cfa87720c111c850df898b538dd2fb3c0f8740472cc498575ab88f20dfaec98fceb0393a0efa128a94b0854c3db80dcd236fb2e39e1bb51c3a699d7596c00a371a47c59450bfd9de9933e9bd877059d23dc1b5edc0efd7de59b3142ee8d437f99be1be4d8d0faaf326fb404ea1759c6ce0d2f98f43d07a545b155a", 0x88}, {&(0x7f0000000a00)="60730df0360f0f5ebd9ceed61cff467d1f0f8b389666a9", 0x17}, {&(0x7f0000000a40)="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", 0x1000}], 0x3, &(0x7f0000001a80)=[{0x38, 0x119, 0x5, "545feb169c403f31f5ccb0453481b66278c24fda692ed4412afa065c3040f7c658011805e47d5b11"}, {0x90, 0x3a, 0x10000, "7ce259741af9a984ba9118d993eb6065798fca5ab383ab76b32176cf9a972ea614bf45839f5e4addcb4557424918c58a0b4376676ed091b5dcb7ad345dd45ffcd7b93645e898ee1861cbfaa896b139e1bf0af816ea264600a3ec8a2e2bf44cf2a223b6ddfb55d68ffe0b94a8f466ef1ebe7376569c873a38079e7e"}, {0xb0, 0x104, 0x24b2, "407f708c97e73413613a3edd17c24be25069199674ed820ed5c0cea3fdae2da6859d14741947c37e3e28d8564a25f1901936e8dce527371cf056ec798ea4532bd4a6316abf432b41e9fbcfe9b82174b09cd51fdc1dc8c368c7315ca6533e9d53988893fafe1d491f0e39cf3e2770f4d624a38625869db5a819bac57e0473de427b20cbb21d8278b62312bcdbcb704b832a0328357b3ea9886ce2006986"}, {0xb8, 0x0, 0x1, "3cd0f7ebd4e1523e200ef8df8b0465c4cd8bcb3df1927219cee92a7d4d08fc3f3c80e4af2e8484d4305d404a0d8bee1f71a5c715fb06d97c62a469c8df9104d96303b9d783767d7ce8d8b131dd3858c586473df7f020ed7716442fe4e3e716f195ed05c2da085a5d5cf8ebbe8fc88b3115f0b46bd68620b8d529d96c2e9213dffdfc3fa44a2e4c629c8f83f44fa31e3bbc0f138faeeab7b05fa48e4478f3d7d5fa09"}, {0xd8, 0x304, 0x4, "335f53dee89621bab558ed75aa0e64ae9e46ca2e6e0db4f7d8e427c2eceaaddd37a737331411a2ebd1a7de52e1c24b893c50c8fd24e54241d82c78cc348d445aa4dd0ddfb0909d5357872092dbe9c89dd8cd1accaac76666bb3ba4a259d0111121e5da3e837f18d551e1a4094a41289c9aa7fa6eca1a84e60debce84782195f5ffa8d7093f664937d3366df168af3bff7a98a77d8c9dd874045f0e381898a9875936cd5449c1401bfb4aa3c36308fcaeacc782d5ca2ec3788cb943e4edaacc32ed5ac820"}, {0x18, 0x107, 0x1000, "9e911d87c4a4"}, {0xf0, 0x3a, 0x8, "3afa21bd4a6e3037775b3ec1ddae3366b016e823be4ede4ccee398e72b554c347ed1af25b949466fdfefa20723b3c9b0a14b219fc139003a502a456f847fcf33529cf5f8d5f3abc86bf12cea412a12863381cd28c32e478bc8b7ce166fd2183802cbf41c29f88c73ac9870a30d1d8814435dff828f4d65bc30744fe3faa31b24432b0bb820424ffa60b959eec2670ae0504956cf15a7239ffad77f59b263fbed1b9f1ad9b0463a50992b6e463b9b3452d0ca19238c6a69726c4e751779d4913c69010eed2d90e051c9cc4fb074e88f945c3a890c7558b920a6"}, {0x50, 0x113, 0x1, "9ba4b45941c695b583206e8f7b6072de9c511968a2ad0d5fe71bf1032202a56a99e9680e2837966553e8babc8c5cb1779da6221f6215b0b30347"}], 0x460}, 0x4008803) (async) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000800)="06c3", 0xffd8}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711071000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) 25.781145189s ago: executing program 6 (id=9929): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000700}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 25.765860027s ago: executing program 6 (id=9931): r0 = socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000040)="2c00000027000100010000000000000004010000180001800800010004000300080002000200000004000300", 0x2c) (async) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="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", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) (async, rerun: 32) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async, rerun: 32) r2 = socket(0x840000000002, 0x8e51315b4d95e0eb, 0x100) (rerun: 32) setsockopt$inet_msfilter(r2, 0x0, 0x30, 0x0, 0x2000000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x2c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000d000000000000001a0000000bb420000000000085100000fbffffff8510000003009d0018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000408500000006000000182300002534d59c0b390f1b987b95ad69709980bb9d12a78cc917762e20c7a3480b0f8f0e415954d3515ef39499888f8d305fd0b98356b70e4f0c5028adb61aa7e376cc6ad13452a14759e27a8c986b282c5f49fba02aa9096277dfc7af24387a772691cc7829f8f1e72394f0ef6473e882420b5afbd50c08991302ea0a6e4ea88ac2f8f464", @ANYRES32=0x1, @ANYBLOB="00000000ec0a00009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0xfffffffe, 0x3d, &(0x7f0000000180)=""/61, 0x1e00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x5}, {0x4, 0x2, 0xf, 0x9}, {0x2, 0x5, 0x6, 0x4}, {0x5, 0x5, 0xc, 0x6}, {0x1, 0x1, 0xc, 0x1}, {0x4, 0x2, 0xe, 0x7}, {0x4, 0x4, 0x4, 0x9}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x9f, 0xc9, &(0x7f0000000540)="f9c7fb44b5268318b9dac39747d2eebab3089806d4235d23ccff2bd4ec49263d6a0c0de24e81c1e1dba79a491474c7fc7e2f2c7aab144e96b223c12aba1d4a9a84586c636ccfa1ce738b2e9233f27620a26bed0c18212b6550ceff3159dc0a1596e23d71e06f14088ad86730bdb0da6297832d1c31adc0d35fa89842840749cb0c149720c3400666bac60b8b6bbd7135b656f97ce458404ec1aa5862e4f31d", &(0x7f0000000680)=""/201, 0xffffffff, 0x0, 0xc7, 0x52, &(0x7f0000000780)="f9b0c47434a31d495875eb2c14af0e761cb437b390c58eaf3375d667d3f3faeae90a2df7f65885eab23d2b9c2f2badaac06d4c28642fa35cbeb719bd7467cfbacba3455ded4b15a0ed3058ee753b51faecf510e99762b0dc0d275cbf123bf438d6aa5ed72c9f9b8a8cf2e9e978efe8e241459b390643625d14d5aa9e3ea481641b21ad86b02d1d08bd02a16bb5cd6a4254d1ddcb92b621c93ab3041c7b0ab91f4e2dc223efc94359f0eb7252601fdee4791b4da788721f8051acb30990cdcf3aa7f2ed3871c78d", &(0x7f0000000880)="be4dc3f937d6b97994898bfa62675243e4921df64e2047b960583dc2a6dc4dcd3c0f810150236258c8b4962ddde1b8e4e5d31f7d7d296db245b55c6f631e5b4d1c662ce3332d4fd22db3be9fb1a91a89f289", 0x1, 0x0, 0x3}, 0x50) 10.369431027s ago: executing program 34 (id=9931): r0 = socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000040)="2c00000027000100010000000000000004010000180001800800010004000300080002000200000004000300", 0x2c) (async) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0xfffd, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], 0x20}, 0x4008804) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000002140)=@l2tp={0x2, 0x0, @remote, 0xfffffffe}, 0x80, &(0x7f0000002240)=[{&(0x7f0000000c40)="3282db78e0ea55c52d87bc2a166b9e46818f5faca0b3a411e056b7928ccacd30019d925e47ecd2f92675d1d80000000000000004007d002ae35902b5d768e71db355cf220bb96b7a64e1d2629c3e21c5decd0e2e6f107e35a8081587d3dc42a0bc0d0c5e85c355c9cbadd6e8f8014acb52d24b961a3989d5102d540829ad660fdca299e7e74a71ed264d75a3e1dfb8331f1b441972bc5941fa418cfee6139c15eda91b1ecf8887e108b15c4c7505c31efe205c875a7c854aa65bcc2e04ea6739f968547df4ae455ecd6b0566ef52705630df27d81e2a544ecc09f8c73cec559d206644acdc56c717e19f04613456b8d7a386c0a700c032d0165c3b3f5716aa7f24e6fca522f91350793d13ba7f887e7b48cd3e6e41139d0d04000000ac59bf750ce0000000000000000000000000f18d233cdc36efdead60d008963851bc819e1b4551b3f13bbf6c18ea0165c66f5261c9ec61f0914c6ffb8506596b61392aa5d906994608b36096a2f5c0f3fef95bf6ddb78c8d07eee5e815c9a2a3d21a054e6fd032be118e9a3f4d016db35b5048e20f1859680e5571822934769e6f9361babb4766dc073d1dabfb220daa1cf4e7206b2b8aa7b55d1396273690ec7a8d36ffbfe2a68a9547758d3ece744be07d320147c0e92e0b63f9bc6ec163917bee3f5602f840a1759670ea43b7f596b347d8b9116506356d0279d21f6a0cab3056c27dec074e8dac12c1d99afcd84f82a47a0cb5093c7a221f7fb624e2f6e9eeca4e5050fc3be50bbdc62d41333b4243336a5590e49658a10b5c8624eb2410d68e64f230fdcf4689495ca41e818d4808b18592610bf62403c2eaad20d1d8fb185ebefac64aa0eb1d36ccacf61ec28b4ec24dba53b21ed5c5f727cccb0d614884908957138d2c30560e88f128af21ccc9fd64d229f35b2f76d0ee9e25f9e4390a55a8600449774ca116e3ba523c9c5d39abcf09a76127c17fc6194711f20307ead0d5bbbe2aa3f677156b8856411a8045159df771ac3e3d5828e359c24a59d65e92f4112fb697ab825536751f82e9d55e89853a03c693d418c4d2cccb61c6f60ad304a68d15fc20edaec9af4725f47c8e1724cfd5099a59147bcc872fafe7565f98c3c3edb83c96b0aff30779783467d4348d5e28d9afd5e77ce5dabc1c4d5d790339490703d9050ef8d919d5d5f71a26bd9b72ea53933eecb6cd8a09bc67f5a6b0450fbfcce6837ab696975ba8387815bfa1c497f37ed8b9151bb1105d5efbf3b5034e5bdde5fdb60f996c1fcf75201c52d47ab3b31a4112d6cb61c3beaeb97d03744cfb01409dd1b1258e0d5856df535c241017509a193043296e202834cc4eb50417c56f93093ca61a9c1373904faa2564ad469d8329dd1256f9648af69d6007d8bca7b566cee8a263c07021e9f71b82c07ca8fbe3", 0x3f3}, {&(0x7f0000002b40)="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", 0x1c0}, {&(0x7f0000000200)="f2", 0x1}], 0x3}, 0x8400) (async, rerun: 32) ioctl$XFS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) (async, rerun: 32) r2 = socket(0x840000000002, 0x8e51315b4d95e0eb, 0x100) (rerun: 32) setsockopt$inet_msfilter(r2, 0x0, 0x30, 0x0, 0x2000000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)={0x2c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000640)="a1", 0x1}], 0x1}, 0x0) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000d000000000000001a0000000bb420000000000085100000fbffffff8510000003009d0018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000408500000006000000182300002534d59c0b390f1b987b95ad69709980bb9d12a78cc917762e20c7a3480b0f8f0e415954d3515ef39499888f8d305fd0b98356b70e4f0c5028adb61aa7e376cc6ad13452a14759e27a8c986b282c5f49fba02aa9096277dfc7af24387a772691cc7829f8f1e72394f0ef6473e882420b5afbd50c08991302ea0a6e4ea88ac2f8f464", @ANYRES32=0x1, @ANYBLOB="00000000ec0a00009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0xfffffffe, 0x3d, &(0x7f0000000180)=""/61, 0x1e00, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000240)=[r2, 0x1, 0x1, 0xffffffffffffffff, 0x1, r1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x0, 0x3, 0x0, 0x5}, {0x4, 0x2, 0xf, 0x9}, {0x2, 0x5, 0x6, 0x4}, {0x5, 0x5, 0xc, 0x6}, {0x1, 0x1, 0xc, 0x1}, {0x4, 0x2, 0xe, 0x7}, {0x4, 0x4, 0x4, 0x9}], 0x10, 0xfff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x0, 0x9f, 0xc9, &(0x7f0000000540)="f9c7fb44b5268318b9dac39747d2eebab3089806d4235d23ccff2bd4ec49263d6a0c0de24e81c1e1dba79a491474c7fc7e2f2c7aab144e96b223c12aba1d4a9a84586c636ccfa1ce738b2e9233f27620a26bed0c18212b6550ceff3159dc0a1596e23d71e06f14088ad86730bdb0da6297832d1c31adc0d35fa89842840749cb0c149720c3400666bac60b8b6bbd7135b656f97ce458404ec1aa5862e4f31d", &(0x7f0000000680)=""/201, 0xffffffff, 0x0, 0xc7, 0x52, &(0x7f0000000780)="f9b0c47434a31d495875eb2c14af0e761cb437b390c58eaf3375d667d3f3faeae90a2df7f65885eab23d2b9c2f2badaac06d4c28642fa35cbeb719bd7467cfbacba3455ded4b15a0ed3058ee753b51faecf510e99762b0dc0d275cbf123bf438d6aa5ed72c9f9b8a8cf2e9e978efe8e241459b390643625d14d5aa9e3ea481641b21ad86b02d1d08bd02a16bb5cd6a4254d1ddcb92b621c93ab3041c7b0ab91f4e2dc223efc94359f0eb7252601fdee4791b4da788721f8051acb30990cdcf3aa7f2ed3871c78d", &(0x7f0000000880)="be4dc3f937d6b97994898bfa62675243e4921df64e2047b960583dc2a6dc4dcd3c0f810150236258c8b4962ddde1b8e4e5d31f7d7d296db245b55c6f631e5b4d1c662ce3332d4fd22db3be9fb1a91a89f289", 0x1, 0x0, 0x3}, 0x50) 2.696475981s ago: executing program 2 (id=10173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)={0x90, r1, 0x5, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0xfffffffffffffffd, @random=0xc9e, 0x3, @void, @void, @val={0x3, 0x1, 0x68}, @void, @void, @val={0x5, 0x3, {0x2, 0x8e, 0xa2}}, @void, @void, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x7, 0x48}}, @val={0x76, 0x6, {0x0, 0x6, 0x41, 0x101}}}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x90}, 0x1, 0x0, 0x100000000000000}, 0x39db77225c63fa4c) 2.551532244s ago: executing program 5 (id=10176): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a03, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x6, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000140), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x64, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000002010500c3f0"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) r7 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) 2.457617978s ago: executing program 2 (id=10177): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/33, 0x21}], 0x2, &(0x7f00000003c0)=""/151, 0x97}, 0x9}, {{&(0x7f0000000480)=@sco, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/13, 0xd}, 0x1}], 0x3, 0x20, 0x0) 2.396056649s ago: executing program 5 (id=10178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000008000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) 2.268632911s ago: executing program 5 (id=10179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000002b80)={0xffffffffffffffff, &(0x7f0000002a80)='bridge0\x00', 0x2000, &(0x7f0000002ac0)={@_ha_fsid={[0x7, 0x6]}, {0x4, 0x9, 0x97c, 0x2}}, 0x7a15, &(0x7f0000002b00), &(0x7f0000002b40)=0x3}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x90) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x1fd}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe94}, 0x6}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/4102, 0x1006}, {&(0x7f0000001680)=""/4111, 0x100f}, {&(0x7f00000026c0)=""/100, 0x64}], 0x3}, 0x19}], 0x3, 0x0, 0x0) 2.152170098s ago: executing program 5 (id=10182): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x360, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x3}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0xa8, 0x1, [@m_skbmod={0xa4, 0x1, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xed412640, 0x1, 0x8, 0x3, 0x4}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x21, 0x6, "892d4852d50d3aa15587c1726cbd6e9d421963df5f753e047c78542645"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x278, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x17c, 0x2, [@m_connmark={0x178, 0xa, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x4, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}]}, {0x9f, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}, @TCA_MATCHALL_ACT={0xe0, 0x2, [@m_vlan={0xdc, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0xad, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.056537526s ago: executing program 5 (id=10184): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x1, @loopback, 0x1}, 0x1c) poll(&(0x7f00000001c0)=[{r0, 0x3000}], 0x1, 0xb) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000500), &(0x7f0000000540)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x10, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r2, 0x2f08, 0x10, 0x10, &(0x7f00000007c0)="0000000000000005", &(0x7f0000000800)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r3 = socket$can_bcm(0x1d, 0x2, 0x2) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000080)=0xc) r4 = socket(0x11, 0x2, 0x0) close(r4) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4885}, 0x48081) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000140)={0xe1a, 0x6, 0x4, 0xd, 0x9}, 0x14) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000200)={0x40000000, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000002c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r6, &(0x7f0000000300)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1, 0x0, 0x0, 0x3}, {0x7}, 0x0, 0x0, 0x1, 0x0, 0x873f24456926a1a5}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000, 0x3}}, 0xe8) sendmmsg(r6, &(0x7f0000000440), 0x800001d, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r7, 0x84, 0x2, &(0x7f0000000040)={0x100, 0x6, 0x80, 0x200}, 0x8) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x40002}, 0x1c) 1.642898876s ago: executing program 1 (id=10186): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000080), 0x0) close(r0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x14, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xb4}, @call={0x85, 0x0, 0x0, 0x80}, @kfunc, @btf_id={0x18, 0xa, 0x3, 0x0, 0x2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0xc}, 0x94) 1.640157076s ago: executing program 0 (id=10187): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x12, &(0x7f0000008300)=0xffffffff, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000ffff26bd7000fedbdf1cad939a47672a5c6e38b66d94d0541befc21350e25bbe87ef364e040ecb65a2a24f7dbf5e4581de4b0e77764681334561c57dfe1c21d26daa7c57ce96f03b3f4d3979f93536ffad2c8f7f8080ecb5c7d708a5f411fa66525c2ac1c4cb428545d40c525ea09d7884c31fb0c6d87059d173dfc1ea0606cf2c482dd7aae868d80d0a6366e9d5eb2e319147087a41", @ANYRES32=0x0, @ANYBLOB="24400000380a04001c00128009000100766c616e000000000c0002800600010040800000"], 0x3c}}, 0x8000002) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x3}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x20000804) recvmmsg(r2, &(0x7f0000000140), 0x4000267, 0xfc0, 0x0) socket$netlink(0x10, 0x3, 0x14) 1.454342619s ago: executing program 1 (id=10188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000009000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) 1.363320275s ago: executing program 2 (id=10189): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x28, 0x2, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TUPLE_REPLY={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @CTA_FILTER={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x50) socket(0x2b, 0x80801, 0x1) (async) r3 = socket(0x2b, 0x80801, 0x1) connect$inet6(r3, &(0x7f0000000540)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) sendmsg$nl_route(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={0x0}, 0x1, 0x0, 0x0, 0x48810}, 0x2404c000) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="297389c8f7f7867cc0c3e6e0f51a6fa3a91540dcbc4ef2ec17f94947e8694753f966a24b0681f6ed499e61155d986a3f4eb51a5b60c2d6e96103cabf0400b963f320d5d4effe5025c6dc5382d68eea3ea9f549addb55413ded302341bf76f0ec10eee78ac1e075063e98bc7cc7d7ccb40a01d15ddb25beef0f3424d6208f7c29f7cff72a44162851c04817d583a38a643c4e0a58566704b3f68ebf0e05735b84664d1d16dc83a96be375a43e130221f0a616d1361545503a2bab7f025419f46441d6d0409dbaaffe1dbd4705caec98", @ANYRES16=r1, @ANYBLOB="10002abd7000ffdbdf25380000000c00580019000000000000000c0058005d000000000000000c00580051000000000000000c00580021000000000000000c0058007b00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0xb00cd0a4d0b7254a}, 0x4044) (async) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="297389c8f7f7867cc0c3e6e0f51a6fa3a91540dcbc4ef2ec17f94947e8694753f966a24b0681f6ed499e61155d986a3f4eb51a5b60c2d6e96103cabf0400b963f320d5d4effe5025c6dc5382d68eea3ea9f549addb55413ded302341bf76f0ec10eee78ac1e075063e98bc7cc7d7ccb40a01d15ddb25beef0f3424d6208f7c29f7cff72a44162851c04817d583a38a643c4e0a58566704b3f68ebf0e05735b84664d1d16dc83a96be375a43e130221f0a616d1361545503a2bab7f025419f46441d6d0409dbaaffe1dbd4705caec98", @ANYRES16=r1, @ANYBLOB="10002abd7000ffdbdf25380000000c00580019000000000000000c0058005d000000000000000c00580051000000000000000c00580021000000000000000c0058007b00000000000000"], 0x50}, 0x1, 0x0, 0x0, 0xb00cd0a4d0b7254a}, 0x4044) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r5, 0x114, 0x3, &(0x7f0000000040), 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a78000000060a00e200000000000000000a00200514000580080001400000002e0800014000008a19440004802c0001800900010068617368000000001c000280080002400000000c080007400000000108000440fffffffe140001800e000100636f6e6e6c696d69740000000900020073797a3200000000140000001100010000000000000000000100000a"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) 1.323313388s ago: executing program 0 (id=10190): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000, 0xa00}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) 1.228553169s ago: executing program 1 (id=10191): bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000000)={@map, 0x24, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x48, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x10, r4}, 0x18) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000240)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x100, 0x0, 0x2, 0x11, 0x0, @broadcast, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x0, "6e2bf0518cac42dd42fa2e99cf63d19d9b0d31351d7055f17143d60daeff5bcb", "bfe548c37a88b665572a987024aba234", {"1691219b1678b3cec94e5c0aa517ed7c", "86bf4abd9a1cf98ba1f231d7e2c62410"}}}}}}}, 0x0) 1.053839141s ago: executing program 0 (id=10192): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000040)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) close(r0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x3, 0x4, 0x9) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140a, 0x300, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000011006bec9e3be35c6e17aa31076b876c0d000000ba090000160af3653c001ac00400020208000300030001002c000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953e004b57e442458431da4ee754f64d2b936d11aa5244be71d3ff00400937051ae2f857035dc787197888b3a0c0b54ce0eadc3a8527a804dd97564c402240976fce6ca6c4d60f4d204f5d6a6990723b69da5ac2211adb2f9d7cb6d9197", 0xb8}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4a046) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f00000003c0)={0x2, 0x4e22, @multicast2}, 0x10) 944.846969ms ago: executing program 2 (id=10193): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x360, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x3}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0xa8, 0x1, [@m_skbmod={0xa4, 0x1, 0x0, 0x0, {{0xb}, {0x58, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xed412640, 0x1, 0x8, 0x3, 0x4}, 0xa}}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x21, 0x6, "892d4852d50d3aa15587c1726cbd6e9d421963df5f753e047c78542645"}, {0xc}, {0xc, 0x8, {0x4, 0x3}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x278, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_ACT={0x17c, 0x2, [@m_connmark={0x178, 0xa, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffb, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x4, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}]}, {0x9f, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f0b3be3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdf"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x8}}, @TCA_MATCHALL_ACT={0xe0, 0x2, [@m_vlan={0xdc, 0x15, 0x0, 0x0, {{0x9}, {0x4}, {0xad, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x360}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 733.990925ms ago: executing program 1 (id=10194): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000380)={'wlan1\x00', @random="01000000ffff"}) 732.531132ms ago: executing program 2 (id=10195): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x44, r1, 0x1, 0x0, 0x1000000, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}]}, 0x44}}, 0x0) syz_genetlink_get_family_id$ieee802154(0x0, r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, 0x0, 0x0) 732.257661ms ago: executing program 1 (id=10196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000006c40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x9c000000}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 568.570536ms ago: executing program 0 (id=10197): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000680)={0x10, 0x0, 0x25dfdbfd, 0x1}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xfff7, 0xb, 0x8, 0x1}, {0x2, 0x9, 0xb4, 0x1}, {0x8, 0x0, 0x7f, 0x4c5}]}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)={0x68, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) 556.191658ms ago: executing program 1 (id=10198): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8}, {{&(0x7f0000000240)=@l2tp={0x2, 0x0, @broadcast}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/33, 0x21}], 0x2, &(0x7f00000003c0)=""/151, 0x97}, 0x9}, {{&(0x7f0000000480)=@sco, 0x80, &(0x7f0000000500), 0x0, &(0x7f0000000540)=""/13, 0xd}, 0x1}], 0x3, 0x20, 0x0) 519.302398ms ago: executing program 2 (id=10199): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r2, 0x0, 0x0}, 0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000600)=0x474c, 0x4) bind$inet(r4, &(0x7f0000000640)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10a1, 0x0) connect$inet(r4, &(0x7f0000000680)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r4, &(0x7f00000006c0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000740)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0x6, &(0x7f0000000780)=0x4, 0x4) recvmmsg(r4, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}, 0xfffffffd}], 0x1, 0x45833af92e4b38ff, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0x6, 0x2, 0x6, 0xffffffff, r8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000040)=ANY=[@ANYBLOB="575c000000101000b46e0c0c297a99ccecf06f141400000000000000000000000095db6e8c1eefc2d144247f9205843866a7244ebd39b96a5e331460c24cb494de4615360e291dba5b2bd0d1c8479fd62e2a363a355cf5c47a4e4b2fa7e91b599e003f01a053ad25b148c2a6f801177b37b3010fe6f60b5a655c5ee9df34", @ANYRES32=0x0, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001", @ANYRES32=r0], 0x5c}}, 0x8080) 260.62737ms ago: executing program 0 (id=10200): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000020000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0) 98.50554ms ago: executing program 0 (id=10201): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000480)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000640)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000680)=ANY=[@ANYBLOB="034886dd010000002000140000006000000000280600fe88a43de1a400000000000000027d01ff020000000000000000000000000001000088bed2868a1610e8f515ab"], 0xfdef) 0s ago: executing program 5 (id=10202): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5010}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFALIASn={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0xd18e346b7972dbca}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r4 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$sock(r4, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="fb", 0x1}], 0x1}}], 0x1, 0x20000000) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), r6) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000001a80)=0x0, &(0x7f0000001ac0)=0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = getpid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000002380)=r10) getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000001e40)={{{@in=@loopback, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast1}}}, &(0x7f0000001f40)=0xe8) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002500)={0x0, 0x0, 0x0}, &(0x7f0000002540)=0xc) r13 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000002580)={{{@in6=@private1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in6=@loopback}}, &(0x7f0000002680)=0xe8) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000026c0)={0x0, 0x0, 0x0}, &(0x7f0000002700)=0xc) sendmsg$netlink(r9, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001f80)={0x1a8, 0x1b, 0x800, 0x70bd25, 0x25dfdbfc, "", [@nested={0xaa, 0x83, 0x0, 0x1, [@typed={0x8, 0x14a, 0x0, 0x0, @uid}, @generic="ede6f59e3f9b03bd494b34824966961362618564f0494c511c10b71e5190d7a5a02c23fae1d57597832cb89594b971e1c2feef4a49c041b04f4bba7bb06e9e81315fb9075561111f98eae0df3ca4fd3a4db267cdc0b71887253af33f721d7e357f38686d70b13f6b2f6daf9099672762978331569d0343daeccc765d2301e53dc69482f922a0a5e123036dde5eb25b804ca3", @nested={0x4, 0x164}, @nested={0x4, 0x37}, @nested={0x4, 0xf9}]}, @generic="03cac531234b6381956bc8d6f8b7c7e3eac2a8c8772a7a048247d067979186fb3c77fbbd2baeae12c2071b7b41f0fe4a30dd25fba80c628c7fa5676c", @generic="87e5962d1698ed9907cf57c0b0be5c52204b01ee06d6691cb842d58cd8671bc679c6178dd4dd06021423e02b20708fc3da6035584ef864edc4fbb220fa7e396977e7b2554028e42e64c79799029fb837122b8111f6b808dd5a694cb693d645e35e91ab8fb9696746a740f2412f916756e47ecf9cf6306041c5eaf113936dc593a4e52dd4d3912e42cc4735618aae0afea9fed9a5e6216cb3caa2e39a005ff3e3daa1a6ea6e089195aded0e36fefca837"]}, 0x1a8}], 0x1, &(0x7f0000002740)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32, @ANYRES32=r6, @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r5, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB='\x00\x00\x00\x00t\x00'/20, @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x4}, 0x40000) r16 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000001b00)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001bc0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001c80)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r17, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000001e00)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d00)={0x84, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x44, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x39}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x12}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0) splice(r4, 0x0, r6, 0x0, 0x10000008ebc, 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x7f, 0xecae, 0xfffffffe, 0x1ff, 0x4, 0x3ff}}]}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001a40)={&(0x7f0000000000), 0xc, &(0x7f0000001a00)={&(0x7f0000000480)=@deltfilter={0x1574, 0x2d, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r18, {0xfff3, 0xc}, {0xb, 0x3}, {0xffe3, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xc}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x2}}, @TCA_RATE={0x6, 0x5, {0x27, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_CHAIN={0x8, 0xb, 0x3}, @filter_kind_options=@f_fw={{0x7}, {0x14f4, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'team0\x00'}, @TCA_FW_MASK={0x8, 0x5, 0x395}, @TCA_FW_POLICE={0x424, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xf2a, 0x3, 0x6, 0x7, 0x48000000, 0x5, 0xff, 0xfff, 0x7, 0x9, 0x9, 0x0, 0x6, 0x6536, 0x80, 0x896, 0x9, 0xfffffe31, 0x7, 0x6, 0x3, 0x0, 0x10001, 0x8, 0xe646, 0x400, 0x92, 0x7f, 0x6, 0x0, 0x0, 0x6, 0x7, 0x8, 0xfff, 0x7, 0x10000, 0x59, 0x8, 0x5, 0x10000, 0x7fffffff, 0x3, 0xa, 0x8, 0x400, 0x5, 0x3, 0x7, 0x7, 0x5, 0x4, 0x34, 0xfffffff9, 0x5, 0x80000001, 0x9, 0x2, 0x7f, 0x9, 0x4, 0x7, 0x4, 0xa9a, 0x9, 0x2, 0x101, 0x9b83ae85, 0xffff8001, 0x2, 0x9, 0x7, 0xa, 0x6, 0x2, 0x7, 0x401, 0x380000, 0x1, 0x0, 0x3, 0x23, 0x92, 0x0, 0x1000, 0x8, 0x517, 0x5, 0x6, 0x2, 0xa287, 0x6, 0x6, 0x0, 0x0, 0x6, 0x400, 0xffffffff, 0x80, 0x7, 0x200, 0x5, 0x6, 0x9e, 0xc504, 0xed, 0xbc71, 0x4, 0xc, 0x86, 0x5, 0x5, 0x46ac, 0x5, 0x1, 0x0, 0x15c, 0x0, 0x80000000, 0xd2a9, 0x57e2, 0xd39c, 0x5, 0x3, 0x3, 0x1, 0x0, 0x2, 0x2, 0x8a, 0x8, 0x9, 0x1, 0xb, 0x7fff, 0x3, 0x0, 0x5, 0x3, 0x1, 0x101, 0x6, 0x3, 0x6, 0xb6b, 0x9, 0x1ff, 0x7, 0x6, 0x6, 0xdefc, 0x1, 0xfff, 0x2, 0x3, 0x5, 0x10, 0x4, 0x1, 0xfffffff1, 0x2cb00, 0xb4, 0x0, 0x2, 0xefd, 0x5, 0x4, 0x7, 0x8, 0xff, 0xff, 0x6, 0x4df00000, 0x200, 0x9, 0x9, 0x5e3, 0xfa, 0x5, 0x0, 0xf6c1, 0x84aa, 0x9, 0x8, 0x8, 0xffffffff, 0x5, 0x6, 0x196bd16b, 0xf, 0x3, 0x101, 0x8, 0x7, 0x7f, 0x1a94, 0x200, 0x7, 0x80000001, 0x6, 0x80000001, 0x99c, 0x4, 0x7, 0x2, 0x7ff, 0x5, 0x5, 0x8, 0x15ab, 0x6, 0x3e13, 0x8, 0x80, 0xfff, 0xa, 0x8, 0x6, 0xd0, 0x1, 0x2, 0x2, 0x100, 0x180, 0xfffff001, 0x9, 0xf, 0x967, 0x8000, 0x0, 0x4, 0x705, 0x5, 0x6, 0x9, 0x3, 0x80, 0x2, 0x5, 0x9, 0x8, 0x2, 0x1000, 0x4, 0x4, 0x7555, 0x80000, 0x3, 0x0, 0x2, 0xc, 0x1, 0xfffffe01, 0xe7, 0xfffffffa, 0x800]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x401}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x6}}, @TCA_FW_POLICE={0x824, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x3ff, 0x3, 0x800, 0x2, 0x1, 0x7fff, 0xa, 0x7fffffff, 0x1, 0x4, 0xc7, 0x8, 0x40, 0x9, 0x7, 0x4, 0x7, 0x0, 0x4, 0x8847, 0x3, 0x4, 0x2, 0x7, 0xffff, 0x4, 0xe, 0x9, 0x400, 0x6, 0x800, 0x8, 0x9, 0x6, 0x7f, 0x7, 0x11, 0x2, 0xfffffff7, 0x7fff, 0x856, 0x2, 0x1, 0x0, 0xfffffffd, 0x1, 0x7f, 0x9, 0x3, 0xfff000, 0x7, 0x2, 0x3, 0x6, 0x7d, 0x8, 0x6, 0x100, 0x8, 0x2, 0x5, 0xfffffffc, 0x1512, 0x1, 0x88b, 0x5, 0xffffff01, 0x6a, 0x3, 0x0, 0x0, 0x9, 0x4, 0x3345, 0xfffffffa, 0x100, 0xf, 0x3, 0x2, 0x82, 0x8, 0x7, 0x2, 0xff, 0x4, 0x7ff, 0x1ff, 0x3, 0xffffffff, 0x0, 0x401, 0x8001, 0x1d800, 0xed, 0x7fffffff, 0x10, 0x9, 0x7, 0x3, 0xc0, 0x2, 0x8, 0x1, 0x400, 0xa, 0xfffffffd, 0x1, 0x8, 0xffff, 0x10001, 0x5, 0x2, 0x5, 0x8, 0x8, 0x0, 0x2, 0x4, 0x7, 0x8, 0x11, 0x8, 0x4, 0xfffffff4, 0x100, 0xffffabca, 0x7, 0x800, 0x401, 0x7fffffff, 0x3, 0x5, 0x6, 0xa804, 0x42f, 0x5, 0x8, 0x400, 0x1, 0x1, 0x1, 0x9, 0x6, 0x7, 0x57, 0x8, 0xac, 0x8, 0x7, 0x3, 0xffffffff, 0x10, 0x0, 0xffffff80, 0x80000001, 0x3ec5, 0x5, 0x1, 0x101, 0x7, 0xc7, 0x2, 0x7, 0x2, 0x2, 0x2, 0x11, 0x7fffffff, 0x7f, 0xfffffa85, 0x1, 0x7, 0x5, 0x1, 0x7, 0x5, 0x4f0, 0x0, 0x200, 0x3, 0x0, 0x0, 0x1, 0xfffffff8, 0x80000001, 0xfffffff8, 0x8, 0x5, 0x14f, 0x46, 0x8, 0x3, 0xfff, 0x100, 0xfcc, 0x8, 0x400, 0x0, 0x5, 0x5, 0xc, 0x8, 0x2, 0x7fff, 0x3ff, 0x8, 0x7f, 0x2, 0x3ff, 0xd, 0xf, 0x7, 0xe40, 0x70a, 0x8, 0x81, 0x8000, 0x1, 0x605f, 0x3, 0x6, 0xffffff80, 0x8f, 0x1, 0x8, 0x10, 0x8, 0x10, 0x4, 0x5, 0x5, 0xffffffff, 0x60, 0x6, 0x7, 0x6, 0x1, 0x800, 0x40, 0x1, 0xbc8, 0x2, 0x10, 0x2, 0x9, 0x907, 0x80000001, 0x6, 0x1, 0x32e5, 0x6, 0x7, 0x4, 0x5, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x6, 0x7, 0x80, 0x76f, 0x0, 0x5b, 0x7, 0x3, 0x10, 0x7f, 0x3, 0x4, 0x7, 0x2, 0x80000001, 0xfffffffc, 0x0, 0x1, 0xfffffbff, 0x6, 0x9b, 0x5, 0x3, 0xfffffffa, 0x9, 0x9, 0xfff80000, 0x3, 0x2, 0xa, 0x5, 0x4b, 0x8, 0x6, 0xa, 0x4, 0xda3e, 0x3, 0x4, 0x80000001, 0x6, 0xeb1, 0x5, 0x5, 0x1, 0xc, 0xb, 0x400, 0x5, 0x5, 0x2, 0x9, 0xfffffff7, 0x0, 0xffffffc0, 0x3, 0x0, 0x0, 0xf, 0x1, 0x5, 0x5, 0x5, 0x8, 0x3, 0x5, 0x0, 0xfffffff9, 0x3, 0x7, 0x1ba88be3, 0x6, 0x0, 0x0, 0xa10, 0xc, 0xa, 0x32dc, 0x2e4, 0xfffff6b8, 0xda, 0x5, 0x2, 0x6, 0x10000, 0x2, 0x69, 0x8001, 0x3ff, 0x10000, 0x1, 0x0, 0x0, 0x4, 0xe, 0x9, 0x9, 0x2, 0x304b, 0x1, 0x0, 0x80000000, 0x200, 0x5, 0x1, 0x40, 0x4, 0x7fff, 0x9, 0xb2, 0xfffffffa, 0x5, 0x7, 0x8, 0x7, 0xfffffff6, 0x6, 0x7, 0x5, 0x6, 0x80000001, 0x2, 0x2, 0x5, 0x8, 0xac3b, 0x5, 0x3, 0x1, 0x3, 0xa10, 0x1b40, 0xc, 0x4, 0x101, 0xe286, 0xfff, 0x5, 0x2, 0x7, 0x0, 0x1, 0x5, 0x1, 0x108, 0x8, 0x5, 0x3b41, 0x1, 0x1, 0x6, 0x4, 0xb16, 0x80, 0x2, 0x3, 0xc4, 0x2, 0x5, 0x1, 0x6, 0x2, 0x1, 0x6, 0x9, 0x0, 0x100, 0x80, 0x7, 0x8000, 0x10000, 0x0, 0x44, 0x11, 0x0, 0x9f, 0x1, 0x4, 0x7ff, 0x8000, 0x5, 0x2, 0x5, 0xfffffbff, 0xf03, 0x0, 0x0, 0x7, 0xfffffffd, 0x2, 0xc, 0x48f, 0x3, 0xfffffffd, 0x7, 0x401, 0x7, 0x2, 0x4, 0x0, 0x1940, 0x4, 0xae8c, 0x2, 0x991b, 0x3ff, 0xfffffffb, 0x3, 0x7, 0x43, 0x2, 0xa, 0x9, 0x0, 0xffff8000, 0x4, 0x2000000, 0x4, 0x5, 0xffffff2e, 0x7, 0x6, 0x6b, 0x8, 0xfffffff9, 0x1, 0xda9d, 0xfffeffff, 0x3, 0x1, 0x1ff, 0x3, 0x6, 0xaa, 0x5, 0x1, 0x4, 0x8, 0x10000, 0x2, 0xfab, 0x42, 0x80000000, 0xee, 0x2, 0x2, 0x7, 0xee3, 0x2, 0xffffffff, 0x2, 0x9000, 0xc, 0x9, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2d4}]}, @TCA_FW_POLICE={0x444, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x6, {0x7, 0x2, 0xe7ff, 0xfe00, 0x4, 0x2}, {0x4, 0x1, 0x0, 0x6, 0x2}, 0x200, 0x3, 0xf}}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x9, 0x4, 0x7fffffff, 0x30, 0x80000001, 0x4, 0x4, 0x9, 0x7, 0x9, 0x5, 0x2, 0x57c97f2b, 0x17d, 0x6, 0x8, 0xa955, 0x0, 0x10000, 0x8001, 0x26ca, 0x3, 0x5, 0x635c, 0x2, 0x1, 0x2, 0x8, 0x7, 0x7, 0x6, 0x1, 0x7, 0x400, 0x8, 0x8, 0x1, 0x5, 0x2, 0x5, 0x4, 0x6, 0x1, 0xfffffff2, 0xedd, 0x1, 0x3, 0xb54, 0xfffffffb, 0xb19, 0x7fffffff, 0x8, 0x8, 0x200, 0x5, 0x100, 0xb, 0xfffff096, 0x8, 0x18000000, 0x0, 0xfffffffd, 0x101, 0x3, 0x2, 0xb, 0x9, 0x2, 0x5, 0x5, 0x1, 0xb, 0x7, 0x4, 0x5, 0x80000000, 0x871f, 0x8, 0xc, 0x101, 0x8000, 0x1, 0x8, 0x4, 0x7f, 0x8, 0x9c, 0xc, 0x2, 0x7fff, 0x5, 0xe7e4, 0x5, 0x7, 0x9, 0x9, 0x0, 0x400, 0x6, 0x2, 0x4, 0x65b, 0x8, 0xb1, 0x81, 0x9, 0x1, 0x5, 0xc6f, 0x3, 0x2, 0x2, 0xfdf, 0xf, 0xcc71, 0x5702a7da, 0x2, 0x3ff, 0x8, 0x8, 0x0, 0x2, 0x1, 0x9, 0x4d44, 0x10001, 0x3, 0x5, 0xffffff3f, 0x80000000, 0x6, 0x6, 0x7, 0x8, 0xd, 0xfffffff8, 0x37, 0x8001, 0xfffffff8, 0x8e, 0x401, 0x6e54, 0x7, 0x0, 0x1da, 0x0, 0x10, 0xffffffff, 0x5, 0x7b5, 0x6, 0x769, 0x982, 0x1, 0x59d, 0x7, 0xcd, 0x1, 0xfffffffe, 0x8000, 0x0, 0x380000, 0x9, 0x7, 0x389, 0x5, 0x8, 0xffff, 0x800, 0x18ed, 0x80000001, 0x4, 0x3, 0x80000001, 0x3, 0x8, 0x8, 0x800, 0x3, 0x0, 0x7fffffff, 0x4, 0xa, 0x8483, 0x7, 0x1, 0xffffffff, 0x4, 0x8780, 0x7, 0x1, 0x2, 0xcb27, 0x40, 0x4, 0x3, 0x1, 0xea, 0x2, 0x8, 0x800, 0x95c, 0x4, 0x7, 0xffff, 0x4, 0x80000000, 0xffffffee, 0x1, 0x3, 0x40, 0x3, 0xf, 0x4, 0x0, 0xe350, 0x48, 0x0, 0x3, 0x7fff, 0x82, 0xe, 0x5, 0x7, 0xe, 0x912, 0xcee, 0x1008, 0xfffffffa, 0x7, 0x5, 0x7, 0x4, 0x5088af5, 0xbe4, 0x600, 0x9e25, 0xa, 0x2fad, 0x81, 0x0, 0x8, 0x0, 0x100, 0x64, 0x7, 0x0, 0xfffffffb, 0x1, 0x7, 0x3, 0xfffffff8, 0x400, 0x1, 0x3]}]}, @TCA_FW_POLICE={0x410, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0xfffffffd}, @TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0xffff, 0x1, 0x22a216e0, 0x9, 0x400, 0x100, 0xae, 0x7, 0x6, 0x6, 0x8, 0x6, 0x606a42d4, 0x3ff, 0x2, 0x1ff, 0x7, 0x7, 0x9, 0x167, 0x91, 0x7f, 0xfff, 0x5, 0x81, 0x8, 0x60, 0x6, 0x5, 0x1, 0x9, 0xffff2fd3, 0xaac, 0xffff, 0xffff, 0x1, 0x1, 0x8, 0x4d, 0x7, 0x0, 0x8000, 0x3, 0x8, 0x240000, 0x7, 0x101, 0x6, 0xd, 0x0, 0x5, 0xfb, 0xc7, 0x6, 0x2, 0x7, 0x10001, 0x5, 0x9, 0x7fff, 0x7fffffff, 0xffb, 0x2, 0x800, 0x6, 0x6, 0x251f800, 0x6, 0x1, 0x10001, 0x9, 0x69, 0x2, 0x81, 0xfffffeff, 0x2, 0x6, 0xa, 0x2, 0x4, 0x40, 0x3, 0x5, 0xf973, 0x401, 0x3, 0x100, 0xac, 0x200, 0x2, 0x556, 0x2, 0x0, 0xfc3, 0x5, 0xff, 0x10000, 0x631, 0x3, 0x6026, 0x3, 0x8, 0x4, 0xc5, 0x8af, 0xbd, 0xbd, 0x2, 0xc118, 0x7, 0x6, 0x5, 0x1000, 0xc, 0x1, 0x8, 0x7fff, 0xa4ab, 0x1, 0xe, 0x1, 0x7fff, 0x8, 0xffff, 0x99e0, 0x4, 0x8, 0x4, 0x7, 0x9, 0x67b3, 0x80000001, 0x13, 0x2, 0x6, 0x9, 0xffff, 0x1, 0x15e, 0x0, 0x9, 0x3ff, 0xfffffc01, 0x8001, 0x1ff, 0x80000000, 0x10, 0x4, 0x7, 0x9, 0x40, 0x2, 0x6, 0x8, 0x4914, 0x8, 0x8000, 0x1, 0xfffffffd, 0x2, 0x81, 0x80, 0x764, 0x8, 0x0, 0x7, 0x0, 0x9, 0x8d, 0xfffffffc, 0x4, 0x3, 0x3de, 0x5, 0x0, 0x6, 0x2, 0x3ff, 0x2, 0x3, 0xfffffffa, 0x2, 0x4, 0x5, 0x6, 0x3, 0xd, 0x8, 0xb2, 0x5, 0x1, 0x8b526d36, 0xb, 0x1000, 0xffff3b43, 0x5, 0xf, 0x3, 0x7e6c6d5b, 0xf, 0x0, 0x8, 0x8000, 0x6, 0x10000, 0x7b800000, 0x9, 0x6, 0x1000, 0x1, 0x4, 0x1, 0x400, 0x5, 0x8, 0xb, 0x101, 0x8, 0x1000, 0x3, 0xcd3, 0x1, 0x1, 0xfa01, 0x8, 0x3, 0x1, 0x5, 0x0, 0x101, 0x5, 0x6, 0xc838, 0x8, 0x1ff, 0x8000, 0x0, 0x401, 0x90, 0xfffffff9, 0x0, 0x800, 0x5, 0xb458, 0x0, 0x8, 0xf, 0x94, 0x5, 0x7, 0x8, 0x8, 0x300000, 0x0, 0x10]}]}, @TCA_FW_INDEV={0x14, 0x3, 'ip6gre0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0x9}}, @TCA_FW_INDEV={0x14, 0x3, 'dvmrp0\x00'}]}}, @TCA_CHAIN={0x8, 0xb, 0x1}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x1574}, 0x1, 0x0, 0x0, 0x40000}, 0x4040014) kernel console output (not intermixed with test programs): romiscuous mode [ 789.278843][T31563] veth12: left promiscuous mode [ 789.279022][T31563] veth13: left promiscuous mode [ 789.279155][T31563] bond10: left promiscuous mode [ 789.292417][T31563] bond11: left promiscuous mode [ 789.292637][T31563] gretap0: left promiscuous mode [ 789.292759][T31563] bond12: left promiscuous mode [ 789.293096][T31563] bond13: left promiscuous mode [ 789.293216][T31563] bridge4: left promiscuous mode [ 789.311000][T31563] ip6gretap2: left promiscuous mode [ 789.311161][T31563] gretap1: left promiscuous mode [ 789.311275][T31563] bond14: left promiscuous mode [ 789.311418][T31563] bond15: left promiscuous mode [ 789.311539][T31563] veth14: left promiscuous mode [ 789.311676][T31563] veth15: left promiscuous mode [ 789.311810][T31563] bond16: left promiscuous mode [ 789.322595][T31563] macvtap1: left promiscuous mode [ 789.322750][T31563] macvtap2: left promiscuous mode [ 789.322879][T31563] bridge5: left promiscuous mode [ 789.323017][T31563] bond17: left promiscuous mode [ 789.323136][T31563] veth16: left promiscuous mode [ 789.323271][T31563] veth17: left promiscuous mode [ 789.325229][T31563] bridge6: left promiscuous mode [ 789.325356][T31563] bridge7: left promiscuous mode [ 789.325469][T31563] bridge8: left promiscuous mode [ 789.325583][T31563] bond18: left promiscuous mode [ 789.336695][T31563] veth18: left promiscuous mode [ 789.336905][T31563] veth19: left promiscuous mode [ 789.337043][T31563] gre3: left promiscuous mode [ 789.337151][T31563] erspan1: left promiscuous mode [ 789.337253][T31563] bridge9: left promiscuous mode [ 789.337383][T31563] ip6tnl3: left promiscuous mode [ 789.337489][T31563] vti0: left promiscuous mode [ 789.337625][T31563] bridge10: left promiscuous mode [ 789.337738][T31563] bridge11: left promiscuous mode [ 789.386357][T31563] vlan4: left promiscuous mode [ 789.386378][T31563] bond19: left promiscuous mode [ 789.386805][T31563] geneve3: left promiscuous mode [ 789.387039][T31563] veth20: left promiscuous mode [ 789.387197][T31563] veth21: left promiscuous mode [ 789.387723][T31563] bareudp0: left promiscuous mode [ 789.387901][T31563] bridge12: left promiscuous mode [ 789.400242][T31563] bridge13: left promiscuous mode [ 789.400375][T31563] bridge14: left promiscuous mode [ 789.400494][T31563] mac80211_hwsim hwsim17 wlan2: left promiscuous mode [ 789.400631][T31563] bond20: left promiscuous mode [ 789.400896][T31563] veth22: left promiscuous mode [ 789.401042][T31563] veth23: left promiscuous mode [ 789.407311][T31563] bridge15: left promiscuous mode [ 789.407458][T31563] bridge16: left promiscuous mode [ 789.407578][T31563] mac80211_hwsim hwsim18 wlan3: left promiscuous mode [ 789.414101][T31563] syztnl1: left promiscuous mode [ 789.414327][T31563] vlan5: left promiscuous mode [ 789.414343][T31563] bond21: left promiscuous mode [ 789.414703][T31563] macvlan2: left promiscuous mode [ 789.414864][T31563] ipip1: left promiscuous mode [ 789.420652][T31563] gretap2: left promiscuous mode [ 789.420798][T31563] gretap3: left promiscuous mode [ 789.428499][T31563] ip6tnl4: left promiscuous mode [ 789.428647][T31563] bond23: left promiscuous mode [ 789.428889][T31563] bridge17: left promiscuous mode [ 789.429052][T31563] ip6tnl5: left promiscuous mode [ 789.429158][T31563] xfrm1: left promiscuous mode [ 789.429308][T31563] ;: left promiscuous mode [ 789.439039][T31563] rose0: left promiscuous mode [ 789.439229][T31563] bond24: left promiscuous mode [ 789.439347][T31563] syztnl0: left promiscuous mode [ 789.448644][T31563] bridge18: left promiscuous mode [ 789.448827][T31563] bridge19: left promiscuous mode [ 789.448962][T31563] veth24: left promiscuous mode [ 789.449122][T31563] veth25: left promiscuous mode [ 789.459159][T31563] vlan6: left promiscuous mode [ 789.459417][T31563] mac80211_hwsim hwsim23 wlan4: left promiscuous mode [ 789.475719][T31563] geneve4: left promiscuous mode [ 789.666851][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.266299][T31569] syzkaller0: entered promiscuous mode [ 790.266323][T31569] syzkaller0: entered allmulticast mode [ 790.532525][T31581] siw: device registration error -23 [ 790.703721][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 790.778503][T31591] __nla_validate_parse: 6 callbacks suppressed [ 790.778526][T31591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8942'. [ 791.221335][T31606] FAULT_INJECTION: forcing a failure. [ 791.221335][T31606] name failslab, interval 1, probability 0, space 0, times 0 [ 791.221368][T31606] CPU: 1 UID: 0 PID: 31606 Comm: syz.5.8946 Not tainted syzkaller #0 PREEMPT(full) [ 791.221389][T31606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 791.221401][T31606] Call Trace: [ 791.221409][T31606] [ 791.221418][T31606] dump_stack_lvl+0xe8/0x150 [ 791.221450][T31606] should_fail_ex+0x410/0x560 [ 791.221479][T31606] ? __alloc_skb+0x1db/0x7a0 [ 791.221507][T31606] should_failslab+0xa8/0x100 [ 791.221535][T31606] ? __alloc_skb+0x1db/0x7a0 [ 791.221560][T31606] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 791.221582][T31606] ? __alloc_skb+0x18d/0x7a0 [ 791.221609][T31606] ? __alloc_skb+0x1db/0x7a0 [ 791.221643][T31606] __alloc_skb+0x1db/0x7a0 [ 791.221678][T31606] netlink_dump+0x1e7/0xee0 [ 791.221712][T31606] ? __pfx_netlink_dump+0x10/0x10 [ 791.221757][T31606] ? genl_start+0x497/0x6d0 [ 791.221791][T31606] __netlink_dump_start+0x589/0x7b0 [ 791.221820][T31606] genl_family_rcv_msg_dumpit+0x213/0x310 [ 791.221851][T31606] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 791.221877][T31606] ? genl_get_cmd+0x6cc/0x960 [ 791.221906][T31606] ? __pfx___mutex_lock+0x10/0x10 [ 791.221929][T31606] ? __pfx_genl_start+0x10/0x10 [ 791.221954][T31606] ? __pfx_genl_dumpit+0x10/0x10 [ 791.221978][T31606] ? __pfx_genl_done+0x10/0x10 [ 791.222007][T31606] ? __lock_acquire+0x747/0x2de0 [ 791.222060][T31606] genl_rcv_msg+0x5e1/0x7a0 [ 791.222092][T31606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 791.222116][T31606] ? __pfx_vdpa_nl_cmd_dev_get_dumpit+0x10/0x10 [ 791.222271][T31606] netlink_rcv_skb+0x226/0x4a0 [ 791.222296][T31606] ? __pfx_genl_rcv_msg+0x10/0x10 [ 791.222325][T31606] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 791.222363][T31606] ? down_read+0x2be/0x330 [ 791.222391][T31606] genl_rcv+0x28/0x40 [ 791.222415][T31606] netlink_unicast+0x8ef/0xa80 [ 791.222452][T31606] netlink_sendmsg+0x813/0xb40 [ 791.222486][T31606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.222515][T31606] ? apparmor_socket_sendmsg+0x98/0x360 [ 791.222543][T31606] ? __pfx_netlink_sendmsg+0x10/0x10 [ 791.222565][T31606] sock_sendmsg_nosec+0x13a/0x180 [ 791.222593][T31606] ____sys_sendmsg+0x54e/0x850 [ 791.222619][T31606] ? __pfx_____sys_sendmsg+0x10/0x10 [ 791.222648][T31606] ? import_iovec+0x73/0xa0 [ 791.222679][T31606] ___sys_sendmsg+0x2a5/0x360 [ 791.222698][T31606] ? __lock_acquire+0x747/0x2de0 [ 791.222723][T31606] ? __pfx____sys_sendmsg+0x10/0x10 [ 791.222815][T31606] ? __fget_files+0x2a/0x420 [ 791.222833][T31606] ? __fget_files+0x3a2/0x420 [ 791.222862][T31606] __x64_sys_sendmsg+0x1b1/0x290 [ 791.222885][T31606] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 791.222927][T31606] do_syscall_64+0x166/0x520 [ 791.222947][T31606] ? trace_irq_disable+0x3b/0x140 [ 791.222967][T31606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.222987][T31606] ? clear_bhb_loop+0x70/0xc0 [ 791.223010][T31606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 791.223029][T31606] RIP: 0033:0x7f693159e2d9 [ 791.223049][T31606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 791.223065][T31606] RSP: 002b:00007f6932399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 791.223086][T31606] RAX: ffffffffffffffda RBX: 00007f6931825fa0 RCX: 00007f693159e2d9 [ 791.223100][T31606] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000004 [ 791.223112][T31606] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 791.223125][T31606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 791.223136][T31606] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 791.223169][T31606] [ 791.619242][T31611] validate_nla: 25 callbacks suppressed [ 791.619264][T31611] netlink: 'syz.5.8948': attribute type 21 has an invalid length. [ 791.619277][T31611] netlink: 128 bytes leftover after parsing attributes in process `syz.5.8948'. [ 791.619351][T31611] netlink: 3 bytes leftover after parsing attributes in process `syz.5.8948'. [ 791.749459][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 792.202162][T31635] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 792.230812][T31639] FAULT_INJECTION: forcing a failure. [ 792.230812][T31639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 792.230844][T31639] CPU: 1 UID: 0 PID: 31639 Comm: syz.5.8958 Not tainted syzkaller #0 PREEMPT(full) [ 792.230865][T31639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 792.230876][T31639] Call Trace: [ 792.230884][T31639] [ 792.230893][T31639] dump_stack_lvl+0xe8/0x150 [ 792.230925][T31639] should_fail_ex+0x410/0x560 [ 792.230956][T31639] _copy_from_user+0x2d/0xb0 [ 792.230985][T31639] kstrtouint_from_user+0xd6/0x180 [ 792.231012][T31639] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 792.231045][T31639] ? lock_acquire+0x115/0x350 [ 792.231071][T31639] proc_fail_nth_write+0x8e/0x210 [ 792.231093][T31639] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 792.231124][T31639] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 792.231144][T31639] vfs_write+0x296/0xba0 [ 792.231169][T31639] ? __pfx_vfs_write+0x10/0x10 [ 792.231191][T31639] ? __fget_files+0x2a/0x420 [ 792.231214][T31639] ? __fget_files+0x3a2/0x420 [ 792.231230][T31639] ? __fget_files+0x2a/0x420 [ 792.231257][T31639] ksys_write+0x150/0x270 [ 792.231280][T31639] ? __pfx_ksys_write+0x10/0x10 [ 792.231313][T31639] do_syscall_64+0x166/0x520 [ 792.231334][T31639] ? trace_irq_disable+0x3b/0x140 [ 792.231354][T31639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.231373][T31639] ? clear_bhb_loop+0x70/0xc0 [ 792.231397][T31639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.231416][T31639] RIP: 0033:0x7f693155eb0e [ 792.231434][T31639] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 792.231448][T31639] RSP: 002b:00007f6932398fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 792.231468][T31639] RAX: ffffffffffffffda RBX: 00007f69323996c0 RCX: 00007f693155eb0e [ 792.231481][T31639] RDX: 0000000000000001 RSI: 00007f69323990a0 RDI: 0000000000000003 [ 792.231493][T31639] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 792.231503][T31639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 792.231513][T31639] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 792.231541][T31639] [ 792.793681][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 792.959168][T31662] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8965'. [ 793.160783][T31666] syzkaller0: entered promiscuous mode [ 793.160806][T31666] syzkaller0: entered allmulticast mode [ 793.171823][T31666] netlink: 20 bytes leftover after parsing attributes in process `syz.6.8967'. [ 793.177070][T31666] netlink: 60 bytes leftover after parsing attributes in process `syz.6.8967'. [ 793.631497][T31688] openvswitch: netlink: Missing valid actions attribute. [ 793.631530][T31688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.824686][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 793.860283][T31703] xt_policy: output policy not valid in PREROUTING and INPUT [ 794.077919][T31717] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8979'. [ 794.370376][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8985'. [ 794.370401][T31731] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8985'. [ 794.370426][T31731] netlink: 'syz.6.8985': attribute type 15 has an invalid length. [ 794.440730][T31731] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8985'. [ 794.440766][T31731] netlink: 'syz.6.8985': attribute type 15 has an invalid length. [ 794.455278][T12744] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 794.455333][T12744] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 794.455364][T12744] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 794.455394][T12744] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 794.638319][T31738] IPVS: Error connecting to the multicast addr [ 795.225871][T31759] bond0: option miimon: invalid value (18446744071829782528) [ 795.225898][T31759] bond0: option miimon: allowed values 0 - 2147483647 [ 795.413216][T31769] syzkaller1: entered promiscuous mode [ 795.413239][T31769] syzkaller1: entered allmulticast mode [ 797.121199][T31720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 797.351356][T31775] __nla_validate_parse: 5 callbacks suppressed [ 797.351378][T31775] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8997'. [ 797.351405][T31775] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8997'. [ 797.437717][T31775] geneve2: entered promiscuous mode [ 797.437740][T31775] geneve2: entered allmulticast mode [ 797.497348][T31775] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8997'. [ 797.557023][T31777] syzkaller0: entered promiscuous mode [ 797.557046][T31777] syzkaller0: entered allmulticast mode [ 797.852635][T31795] netlink: 148 bytes leftover after parsing attributes in process `syz.1.9003'. [ 798.048811][T31802] netlink: 236 bytes leftover after parsing attributes in process `syz.5.9004'. [ 798.048838][T31802] netlink: 236 bytes leftover after parsing attributes in process `syz.5.9004'. [ 798.223012][T31809] tc_dump_action: action bad kind [ 798.236981][T31810] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9008'. [ 798.242032][T31811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9008'. [ 798.563266][T31825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9011'. [ 798.779594][T31831] nbd: socks must be embedded in a SOCK_ITEM attr [ 799.128243][T31859] ip6gretap0: entered allmulticast mode [ 799.359706][T31867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9026'. [ 799.772873][T31888] tipc: Started in network mode [ 799.772913][T31888] tipc: Node identity ba26a7833622, cluster identity 4711 [ 799.773097][T31888] tipc: Enabled bearer , priority 0 [ 799.799408][T31888] syzkaller0: entered promiscuous mode [ 799.799429][T31888] syzkaller0: entered allmulticast mode [ 799.822151][T31889] tipc: Resetting bearer [ 799.831842][T31887] tipc: Resetting bearer [ 799.884679][T31887] tipc: Disabling bearer [ 800.089415][T31900] netlink: 'syz.6.9036': attribute type 23 has an invalid length. [ 800.240134][T31900] bond0: (slave bond_slave_1): Releasing backup interface [ 800.297941][T31900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.577007][T31918] ieee802154 phy3 wpan0: encryption failed: -22 [ 800.999680][T31935] nbd2: detected capacity change from 0 to 274877906944 [ 801.106263][ T5623] block nbd2: Receive control failed (result -104) [ 801.265340][T31959] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.265465][T31959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 801.265999][T31959] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.266154][T31959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.370297][T31962] netlink: 'syz.6.9059': attribute type 1 has an invalid length. [ 801.402578][T31965] netlink: 'syz.6.9059': attribute type 1 has an invalid length. [ 801.699822][T31977] netlink: 'syz.0.9064': attribute type 1 has an invalid length. [ 801.956578][T31977] veth17: entered allmulticast mode [ 801.998838][T31977] bond27: (slave veth17): Enslaving as an active interface with a down link [ 802.069344][T31988] macvlan3: entered promiscuous mode [ 802.069370][T31988] macvlan3: entered allmulticast mode [ 802.070575][T31988] bond27: entered promiscuous mode [ 802.092337][T31988] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 802.097362][T31988] bond27: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 802.103135][T31988] bond27: left promiscuous mode [ 802.666050][T32020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.666074][T32020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.666197][T32020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 802.666210][T32020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.715471][T32020] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 802.715562][T32020] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.053040][T32040] IPVS: rr: UDP [::1]:8080 - no destination available [ 803.137732][T32042] __nla_validate_parse: 15 callbacks suppressed [ 803.137754][T32042] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9084'. [ 803.143306][T32042] netlink: 'syz.0.9084': attribute type 10 has an invalid length. [ 803.143338][T32042] wg2: left promiscuous mode [ 803.189102][T32042] wg2: entered promiscuous mode [ 803.189249][T32042] team0: Device wg2 is of different type [ 803.257080][T32048] netlink: 'syz.2.9085': attribute type 1 has an invalid length. [ 803.379240][T32048] veth27: entered allmulticast mode [ 803.452996][T32048] bond25: (slave veth27): Enslaving as an active interface with a down link [ 803.509246][T32048] macvlan3: entered promiscuous mode [ 803.509270][T32048] macvlan3: entered allmulticast mode [ 803.512272][T32048] bond25: entered promiscuous mode [ 803.518075][T32048] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 803.525964][T32048] bond25: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 803.540723][T32048] bond25: left promiscuous mode [ 804.017993][T32080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9095'. [ 804.018033][T32080] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9095'. [ 804.237623][T32091] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 804.569547][T32105] netlink: 'syz.2.9106': attribute type 1 has an invalid length. [ 804.656313][T32113] xt_LOG: prefix is not null-terminated [ 804.847053][T32111] veth29: entered allmulticast mode [ 804.887461][T32111] bond26: (slave veth29): Enslaving as an active interface with a down link [ 804.924603][T32118] macvlan3: entered promiscuous mode [ 804.924627][T32118] macvlan3: entered allmulticast mode [ 804.927067][T32118] bond26: entered promiscuous mode [ 804.929144][T32118] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 804.932127][T32118] bond26: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 804.932733][T32118] bond26: left promiscuous mode [ 805.146536][T32139] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9116'. [ 805.286981][T32127] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9112'. [ 805.651828][T32167] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9121'. [ 805.666586][T32152] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode [ 805.666633][T32152] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode [ 805.696259][T32171] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9123'. [ 805.696375][T32171] bridge_slave_1: left allmulticast mode [ 805.696396][T32171] bridge_slave_1: left promiscuous mode [ 805.696631][T32171] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.702140][T32169] FAULT_INJECTION: forcing a failure. [ 805.702140][T32169] name failslab, interval 1, probability 0, space 0, times 0 [ 805.702173][T32169] CPU: 1 UID: 0 PID: 32169 Comm: syz.5.9122 Not tainted syzkaller #0 PREEMPT(full) [ 805.702196][T32169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 805.702207][T32169] Call Trace: [ 805.702216][T32169] [ 805.702223][T32169] dump_stack_lvl+0xe8/0x150 [ 805.702254][T32169] should_fail_ex+0x410/0x560 [ 805.702282][T32169] ? __alloc_skb+0x1db/0x7a0 [ 805.702307][T32169] should_failslab+0xa8/0x100 [ 805.702332][T32169] ? __alloc_skb+0x1db/0x7a0 [ 805.702353][T32169] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 805.702373][T32169] ? __alloc_skb+0x18d/0x7a0 [ 805.702409][T32169] ? __alloc_skb+0x1db/0x7a0 [ 805.702439][T32169] __alloc_skb+0x1db/0x7a0 [ 805.702470][T32169] netlink_sendmsg+0x5d4/0xb40 [ 805.702503][T32169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.702530][T32169] ? apparmor_socket_sendmsg+0x18b/0x360 [ 805.702554][T32169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 805.702574][T32169] sock_sendmsg_nosec+0x13a/0x180 [ 805.702600][T32169] ____sys_sendmsg+0x54e/0x850 [ 805.702624][T32169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 805.702652][T32169] ? import_iovec+0x73/0xa0 [ 805.702680][T32169] ___sys_sendmsg+0x2a5/0x360 [ 805.702698][T32169] ? __lock_acquire+0x747/0x2de0 [ 805.702722][T32169] ? __pfx____sys_sendmsg+0x10/0x10 [ 805.702770][T32169] ? __fget_files+0x2a/0x420 [ 805.702786][T32169] ? __fget_files+0x3a2/0x420 [ 805.702810][T32169] __x64_sys_sendmsg+0x1b1/0x290 [ 805.702831][T32169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 805.702866][T32169] do_syscall_64+0x166/0x520 [ 805.702886][T32169] ? trace_irq_disable+0x3b/0x140 [ 805.702906][T32169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.702924][T32169] ? clear_bhb_loop+0x70/0xc0 [ 805.702946][T32169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.702964][T32169] RIP: 0033:0x7f693159e2d9 [ 805.702981][T32169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 805.702996][T32169] RSP: 002b:00007f6932399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 805.703017][T32169] RAX: ffffffffffffffda RBX: 00007f6931825fa0 RCX: 00007f693159e2d9 [ 805.703030][T32169] RDX: 0000000024048044 RSI: 0000200000000680 RDI: 0000000000000003 [ 805.703042][T32169] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 805.703052][T32169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 805.703063][T32169] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 805.703092][T32169] [ 805.788351][T32171] bridge_slave_0: left allmulticast mode [ 805.788384][T32171] bridge_slave_0: left promiscuous mode [ 805.788664][T32171] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.301485][T32178] netlink: 64 bytes leftover after parsing attributes in process `syz.2.9124'. [ 806.348474][T32178] syzkaller1: entered promiscuous mode [ 806.348497][T32178] syzkaller1: entered allmulticast mode [ 806.376126][T32190] netlink: NAT attribute has 8 unknown bytes [ 806.376160][T32190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.377198][T32190] netlink: NAT attribute has 1 unknown bytes [ 806.377228][T32190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.465823][T32197] netlink: 'syz.6.9129': attribute type 1 has an invalid length. [ 806.478694][T32194] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9128'. [ 806.512744][T32194] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 806.552033][T32178] syzkaller0: entered promiscuous mode [ 806.552059][T32178] syzkaller0: entered allmulticast mode [ 806.738570][T32200] veth3: entered allmulticast mode [ 806.753127][T32200] bond1: (slave veth3): Enslaving as an active interface with a down link [ 806.839448][T32207] macvlan2: entered promiscuous mode [ 806.839475][T32207] macvlan2: entered allmulticast mode [ 806.840225][T32207] bond1: entered promiscuous mode [ 806.847733][T32207] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 806.852801][T32211] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9132'. [ 806.854538][T32207] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 806.899734][T32207] bond1: left promiscuous mode [ 806.995772][T32215] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 807.027216][T32215] xt_hashlimit: size too large, truncated to 1048576 [ 807.108220][T32221] netlink: 'syz.0.9134': attribute type 2 has an invalid length. [ 808.565030][ T1310] ieee802154 phy3 wpan0: encryption failed: -22 [ 812.711923][T32261] __nla_validate_parse: 4 callbacks suppressed [ 812.711947][T32261] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9146'. [ 812.785794][T32263] netlink: 'syz.2.9147': attribute type 1 has an invalid length. [ 812.954662][T32271] FAULT_INJECTION: forcing a failure. [ 812.954662][T32271] name failslab, interval 1, probability 0, space 0, times 0 [ 812.954695][T32271] CPU: 0 UID: 0 PID: 32271 Comm: syz.0.9151 Not tainted syzkaller #0 PREEMPT(full) [ 812.954716][T32271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 812.954728][T32271] Call Trace: [ 812.954738][T32271] [ 812.954747][T32271] dump_stack_lvl+0xe8/0x150 [ 812.954780][T32271] should_fail_ex+0x410/0x560 [ 812.954812][T32271] should_failslab+0xa8/0x100 [ 812.954837][T32271] __kmalloc_cache_noprof+0xa3/0x600 [ 812.954862][T32271] ? genl_start+0x1c9/0x6d0 [ 812.954884][T32271] ? genl_start+0x1c9/0x6d0 [ 812.954901][T32271] genl_start+0x1c9/0x6d0 [ 812.954920][T32271] __netlink_dump_start+0x442/0x7b0 [ 812.954936][T32271] genl_family_rcv_msg_dumpit+0x213/0x310 [ 812.954952][T32271] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 812.954971][T32271] ? __pfx_genl_start+0x10/0x10 [ 812.954985][T32271] ? __pfx_genl_dumpit+0x10/0x10 [ 812.955007][T32271] ? __pfx_genl_done+0x10/0x10 [ 812.955031][T32271] ? bpf_lsm_capable+0x9/0x20 [ 812.955048][T32271] ? security_capable+0x7e/0x2c0 [ 812.955078][T32271] genl_rcv_msg+0x5e1/0x7a0 [ 812.955108][T32271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.955131][T32271] ? __pfx_ieee802154_llsec_dump_seclevels+0x10/0x10 [ 812.955247][T32271] netlink_rcv_skb+0x226/0x4a0 [ 812.955269][T32271] ? __pfx_genl_rcv_msg+0x10/0x10 [ 812.955295][T32271] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 812.955333][T32271] ? down_read+0x2be/0x330 [ 812.955359][T32271] genl_rcv+0x28/0x40 [ 812.955381][T32271] netlink_unicast+0x8ef/0xa80 [ 812.955416][T32271] netlink_sendmsg+0x813/0xb40 [ 812.955446][T32271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.955478][T32271] ? apparmor_socket_sendmsg+0x98/0x360 [ 812.955503][T32271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 812.955516][T32271] sock_sendmsg_nosec+0x13a/0x180 [ 812.955531][T32271] ____sys_sendmsg+0x54e/0x850 [ 812.955545][T32271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 812.955561][T32271] ? import_iovec+0x73/0xa0 [ 812.955586][T32271] ___sys_sendmsg+0x2a5/0x360 [ 812.955596][T32271] ? __lock_acquire+0x747/0x2de0 [ 812.955611][T32271] ? __pfx____sys_sendmsg+0x10/0x10 [ 812.955645][T32271] ? __fget_files+0x2a/0x420 [ 812.955660][T32271] ? __fget_files+0x3a2/0x420 [ 812.955686][T32271] __x64_sys_sendmsg+0x1b1/0x290 [ 812.955709][T32271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 812.955745][T32271] do_syscall_64+0x166/0x520 [ 812.955765][T32271] ? trace_irq_disable+0x3b/0x140 [ 812.955785][T32271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.955804][T32271] ? clear_bhb_loop+0x70/0xc0 [ 812.955821][T32271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.955832][T32271] RIP: 0033:0x7f6744f9e2d9 [ 812.955844][T32271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.955853][T32271] RSP: 002b:00007f6745ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 812.955865][T32271] RAX: ffffffffffffffda RBX: 00007f6745225fa0 RCX: 00007f6744f9e2d9 [ 812.955872][T32271] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 812.955879][T32271] RBP: 00007f6745ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 812.955885][T32271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 812.955891][T32271] R13: 00007f6745226038 R14: 00007f6745225fa0 R15: 00007ffed44d9f18 [ 812.955909][T32271] [ 813.118272][T32264] veth31: entered allmulticast mode [ 813.267919][T32264] bond27: (slave veth31): Enslaving as an active interface with a down link [ 813.427884][T32274] macvlan3: entered promiscuous mode [ 813.427907][T32274] macvlan3: entered allmulticast mode [ 813.428484][T32274] bond27: entered promiscuous mode [ 813.429113][T32274] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 813.429799][T32274] bond27: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 813.514869][T32274] bond27: left promiscuous mode [ 813.924628][T32300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9157'. [ 813.924688][T32300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9157'. [ 813.930843][T32305] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9158'. [ 815.100456][T32362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9177'. [ 815.114455][T32363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 815.464158][T32378] syzkaller0: entered promiscuous mode [ 815.464182][T32378] syzkaller0: entered allmulticast mode [ 816.204036][T32406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9189'. [ 816.204066][T32406] nbd: couldn't find a device at index 0 [ 816.319884][T32412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9192'. [ 816.341829][T32416] FAULT_INJECTION: forcing a failure. [ 816.341829][T32416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.341851][T32416] CPU: 0 UID: 0 PID: 32416 Comm: syz.2.9195 Not tainted syzkaller #0 PREEMPT(full) [ 816.341864][T32416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.341871][T32416] Call Trace: [ 816.341876][T32416] [ 816.341881][T32416] dump_stack_lvl+0xe8/0x150 [ 816.341904][T32416] should_fail_ex+0x410/0x560 [ 816.341922][T32416] _copy_to_user+0x31/0xb0 [ 816.341939][T32416] simple_read_from_buffer+0xe1/0x170 [ 816.341958][T32416] proc_fail_nth_read+0x1bb/0x230 [ 816.341970][T32416] ? common_file_perm+0x20e/0x2b0 [ 816.341985][T32416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.341998][T32416] ? rw_verify_area+0x24a/0x4c0 [ 816.342010][T32416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 816.342021][T32416] vfs_read+0x213/0xa80 [ 816.342035][T32416] ? __pfx___mutex_lock+0x10/0x10 [ 816.342048][T32416] ? __pfx_vfs_read+0x10/0x10 [ 816.342060][T32416] ? __fget_files+0x2a/0x420 [ 816.342072][T32416] ? __fget_files+0x3a2/0x420 [ 816.342081][T32416] ? __fget_files+0x2a/0x420 [ 816.342112][T32416] ksys_read+0x150/0x270 [ 816.342123][T32416] ? __pfx_ksys_read+0x10/0x10 [ 816.342140][T32416] do_syscall_64+0x166/0x520 [ 816.342151][T32416] ? trace_irq_disable+0x3b/0x140 [ 816.342163][T32416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.342173][T32416] ? clear_bhb_loop+0x70/0xc0 [ 816.342186][T32416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.342196][T32416] RIP: 0033:0x7f9f6e95eb0e [ 816.342207][T32416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.342215][T32416] RSP: 002b:00007f9f6f809fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 816.342227][T32416] RAX: ffffffffffffffda RBX: 00007f9f6f80a6c0 RCX: 00007f9f6e95eb0e [ 816.342234][T32416] RDX: 000000000000000f RSI: 00007f9f6f80a0a0 RDI: 0000000000000003 [ 816.342241][T32416] RBP: 00007f9f6f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 816.342247][T32416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.342253][T32416] R13: 00007f9f6ec26038 R14: 00007f9f6ec25fa0 R15: 00007ffc189a4868 [ 816.342269][T32416] [ 816.464120][T32418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9193'. [ 816.740438][T32423] FAULT_INJECTION: forcing a failure. [ 816.740438][T32423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 816.740469][T32423] CPU: 1 UID: 0 PID: 32423 Comm: syz.2.9197 Not tainted syzkaller #0 PREEMPT(full) [ 816.740490][T32423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 816.740502][T32423] Call Trace: [ 816.740510][T32423] [ 816.740519][T32423] dump_stack_lvl+0xe8/0x150 [ 816.740552][T32423] should_fail_ex+0x410/0x560 [ 816.740583][T32423] _copy_from_user+0x2d/0xb0 [ 816.740612][T32423] kstrtouint_from_user+0xd6/0x180 [ 816.740642][T32423] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 816.740675][T32423] ? lock_acquire+0x115/0x350 [ 816.740703][T32423] proc_fail_nth_write+0x8e/0x210 [ 816.740726][T32423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 816.740756][T32423] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 816.740777][T32423] vfs_write+0x296/0xba0 [ 816.740807][T32423] ? __pfx_vfs_write+0x10/0x10 [ 816.740829][T32423] ? __fget_files+0x2a/0x420 [ 816.740851][T32423] ? __fget_files+0x3a2/0x420 [ 816.740867][T32423] ? __fget_files+0x2a/0x420 [ 816.740895][T32423] ksys_write+0x150/0x270 [ 816.740918][T32423] ? __pfx_ksys_write+0x10/0x10 [ 816.740950][T32423] do_syscall_64+0x166/0x520 [ 816.740971][T32423] ? trace_irq_disable+0x3b/0x140 [ 816.740992][T32423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.741011][T32423] ? clear_bhb_loop+0x70/0xc0 [ 816.741035][T32423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.741054][T32423] RIP: 0033:0x7f9f6e95eb0e [ 816.741089][T32423] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 816.741104][T32423] RSP: 002b:00007f9f6f809fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 816.741124][T32423] RAX: ffffffffffffffda RBX: 00007f9f6f80a6c0 RCX: 00007f9f6e95eb0e [ 816.741138][T32423] RDX: 0000000000000001 RSI: 00007f9f6f80a0a0 RDI: 0000000000000005 [ 816.741150][T32423] RBP: 00007f9f6f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 816.741162][T32423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.741173][T32423] R13: 00007f9f6ec26038 R14: 00007f9f6ec25fa0 R15: 00007ffc189a4868 [ 816.741202][T32423] [ 817.079280][T32427] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9199'. [ 817.131150][T32431] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9200'. [ 817.820126][T32448] netlink: 148 bytes leftover after parsing attributes in process `syz.2.9206'. [ 818.264322][T32464] bridge: RTM_NEWNEIGH with unconfigured vlan 1 on bridge0 [ 818.532449][T32477] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9214'. [ 818.977678][T32495] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode [ 818.977706][T32495] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode [ 819.463710][T32507] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 819.606638][T32510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 819.862119][T32527] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9230'. [ 821.045465][T32577] netlink: 'syz.5.9244': attribute type 1 has an invalid length. [ 821.045489][T32577] netlink: 224 bytes leftover after parsing attributes in process `syz.5.9244'. [ 821.045520][T32577] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9244'. [ 821.140658][T32580] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9245'. [ 821.530832][T32595] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9250'. [ 821.784538][T32608] syzkaller0: entered promiscuous mode [ 821.784563][T32608] syzkaller0: entered allmulticast mode [ 822.356199][T32610] syzkaller0: entered promiscuous mode [ 822.356225][T32610] syzkaller0: entered allmulticast mode [ 822.587290][T32644] netlink: 52 bytes leftover after parsing attributes in process `syz.0.9262'. [ 822.838884][T32653] netlink: 'syz.1.9266': attribute type 1 has an invalid length. [ 823.314697][T32663] FAULT_INJECTION: forcing a failure. [ 823.314697][T32663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.314729][T32663] CPU: 0 UID: 0 PID: 32663 Comm: syz.2.9267 Not tainted syzkaller #0 PREEMPT(full) [ 823.314748][T32663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.314860][T32663] Call Trace: [ 823.314873][T32663] [ 823.314882][T32663] dump_stack_lvl+0xe8/0x150 [ 823.314913][T32663] should_fail_ex+0x410/0x560 [ 823.314941][T32663] _copy_from_user+0x2d/0xb0 [ 823.314968][T32663] ___sys_recvmsg+0x173/0x5a0 [ 823.314987][T32663] ? lock_acquire+0x115/0x350 [ 823.315008][T32663] ? __pfx____sys_recvmsg+0x10/0x10 [ 823.315032][T32663] ? lock_acquire+0x115/0x350 [ 823.315064][T32663] ? __fget_files+0x3a2/0x420 [ 823.315090][T32663] do_recvmmsg+0x31a/0x7f0 [ 823.315117][T32663] ? __pfx_do_recvmmsg+0x10/0x10 [ 823.315147][T32663] ? get_timespec64+0x119/0x1b0 [ 823.315168][T32663] ? __pfx_get_timespec64+0x10/0x10 [ 823.315198][T32663] __x64_sys_recvmmsg+0x1b7/0x250 [ 823.315267][T32663] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 823.315297][T32663] do_syscall_64+0x166/0x520 [ 823.315315][T32663] ? trace_irq_disable+0x3b/0x140 [ 823.315333][T32663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.315351][T32663] ? clear_bhb_loop+0x70/0xc0 [ 823.315372][T32663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.315389][T32663] RIP: 0033:0x7f9f6e99e2d9 [ 823.315406][T32663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.315514][T32663] RSP: 002b:00007f9f6f7e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 823.315535][T32663] RAX: ffffffffffffffda RBX: 00007f9f6ec26090 RCX: 00007f9f6e99e2d9 [ 823.315547][T32663] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 823.315558][T32663] RBP: 00007f9f6f7e9090 R08: 0000200000003700 R09: 0000000000000000 [ 823.315569][T32663] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 823.315580][T32663] R13: 00007f9f6ec26128 R14: 00007f9f6ec26090 R15: 00007ffc189a4868 [ 823.315616][T32663] [ 827.456906][T32653] workqueue: Failed to create a rescuer kthread for wq "bond16": -EINTR [ 827.808355][T32673] syzkaller0: entered promiscuous mode [ 827.808380][T32673] syzkaller0: entered allmulticast mode [ 827.935438][T32685] netlink: 'syz.6.9275': attribute type 1 has an invalid length. [ 827.935462][T32685] netlink: 224 bytes leftover after parsing attributes in process `syz.6.9275'. [ 827.959623][T32680] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9275'. [ 827.981941][T32681] veth3: entered allmulticast mode [ 828.058704][T32682] veth5: entered allmulticast mode [ 828.117160][T32685] syzkaller1: entered promiscuous mode [ 828.117184][T32685] syzkaller1: entered allmulticast mode [ 828.355599][ T5623] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 828.388937][ T5623] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 828.760761][T32727] syzkaller0: entered promiscuous mode [ 828.760785][T32727] syzkaller0: entered allmulticast mode [ 829.070328][T32736] netlink: 'syz.0.9291': attribute type 1 has an invalid length. [ 829.150946][T32741] netlink: 'syz.2.9292': attribute type 35 has an invalid length. [ 829.150968][T32741] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9292'. [ 829.165326][T32736] bond28: entered promiscuous mode [ 829.165749][T32736] 8021q: adding VLAN 0 to HW filter on device bond28 [ 829.187068][T32740] bond28: (slave bridge23): making interface the new active one [ 829.187091][T32740] bridge23: entered promiscuous mode [ 829.188091][T32740] bond28: (slave bridge23): Enslaving as an active interface with an up link [ 829.238082][T32736] wg0: left promiscuous mode [ 829.334375][T32752] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 830.212805][ T302] syzkaller0: left promiscuous mode [ 830.212827][ T302] syzkaller0: left allmulticast mode [ 830.402584][ T312] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9301'. [ 830.435362][ T311] syzkaller0: entered promiscuous mode [ 830.435385][ T311] syzkaller0: entered allmulticast mode [ 830.441402][ T316] netlink: 80 bytes leftover after parsing attributes in process `syz.2.9301'. [ 830.677152][ T321] tipc: Started in network mode [ 830.677183][ T321] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 830.677404][ T321] tipc: Enabled bearer , priority 0 [ 830.712952][ T322] tipc: Enabling of bearer rejected, already enabled [ 831.029960][ T337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 831.034683][ T337] netlink: 80 bytes leftover after parsing attributes in process `syz.5.9310'. [ 831.079667][ T341] netlink: 292 bytes leftover after parsing attributes in process `syz.0.9313'. [ 831.228567][ T348] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9317'. [ 831.382089][ T352] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9319'. [ 831.411700][ T359] syzkaller0: entered promiscuous mode [ 831.411723][ T359] syzkaller0: entered allmulticast mode [ 831.436684][ T361] netdevsim netdevsim0: Direct firmware load for ÿ failed with error -2 [ 831.436710][ T361] netdevsim netdevsim0: Falling back to sysfs fallback for: ÿ [ 831.486609][ T362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9320'. [ 831.591740][ T2030] block nbd2: Possible stuck request ffff8880287d5080: control (read@0,4096B). Runtime 30 seconds [ 831.622144][ T362] ip6gre2: entered promiscuous mode [ 831.622167][ T362] ip6gre2: entered allmulticast mode [ 831.730856][ T368] xt_bpf: check failed: parse error [ 831.796091][ T8646] tipc: Node number set to 43690 [ 832.353046][ T392] syzkaller0: entered promiscuous mode [ 832.353070][ T392] syzkaller0: entered allmulticast mode [ 832.636930][ T408] xt_esp: unknown flags DD [ 832.642877][ T408] netlink: 'syz.5.9338': attribute type 2 has an invalid length. [ 833.112568][ T414] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 833.120927][ T414] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 833.489067][ T399] infiniband syz0: set down [ 833.489089][ T399] infiniband syz0: added bond_slave_1 [ 833.603635][ T440] ip_tables: iptables: counters copy to user failed while replacing table [ 833.605435][ T440] __nla_validate_parse: 7 callbacks suppressed [ 833.605452][ T440] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9350'. [ 833.707150][ T399] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 833.707187][ T399] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 833.707223][ T399] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 833.804882][ T447] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9351'. [ 833.867163][ T444] syzkaller0: entered promiscuous mode [ 833.867187][ T444] syzkaller0: entered allmulticast mode [ 833.906436][ T399] RDS/IB: syz0: added [ 833.922995][ T399] smc: adding ib device syz0 with port count 1 [ 833.923316][ T399] smc: ib device syz0 port 1 has no pnetid [ 834.324925][ T461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9356'. [ 834.705516][ T475] netlink: 'syz.5.9362': attribute type 3 has an invalid length. [ 834.705543][ T475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9362'. [ 834.817596][ T477] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9363'. [ 834.820370][ T483] syzkaller0: entered promiscuous mode [ 834.820392][ T483] syzkaller0: entered allmulticast mode [ 835.038822][ T490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9367'. [ 835.181440][ T494] Bluetooth: MGMT ver 1.23 [ 835.334393][ T498] openvswitch: netlink: EtherType 101 is less than min 600 [ 835.358306][ T498] netlink: 56 bytes leftover after parsing attributes in process `syz.2.9370'. [ 835.789417][ T508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9374'. [ 835.927364][ T513] netlink: 'syz.2.9374': attribute type 1 has an invalid length. [ 835.927387][ T513] netlink: 228 bytes leftover after parsing attributes in process `syz.2.9374'. [ 836.525234][ T526] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9380'. [ 836.555357][ T524] syzkaller0: entered promiscuous mode [ 836.555381][ T524] syzkaller0: entered allmulticast mode [ 837.596905][ T561] syzkaller0: entered promiscuous mode [ 837.596940][ T561] syzkaller0: entered allmulticast mode [ 838.680694][ T583] bond3: entered promiscuous mode [ 838.680719][ T583] bond3: entered allmulticast mode [ 838.929583][ T601] syzkaller0: entered promiscuous mode [ 838.929608][ T601] syzkaller0: entered allmulticast mode [ 839.313593][ T617] __nla_validate_parse: 4 callbacks suppressed [ 839.313613][ T617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9413'. [ 840.011869][ T653] vlan7: entered promiscuous mode [ 840.011892][ T653] bridge0: entered promiscuous mode [ 840.012124][ T653] vlan7: entered allmulticast mode [ 840.012139][ T653] bridge0: entered allmulticast mode [ 840.077298][ T662] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 840.118266][ T665] syzkaller0: entered promiscuous mode [ 840.118290][ T665] syzkaller0: entered allmulticast mode [ 840.524836][ T676] netlink: 'syz.6.9430': attribute type 1 has an invalid length. [ 840.714615][ T690] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9430'. [ 840.838400][ T674] bond3: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 840.866240][ T674] bond3 (unregistering): Released all slaves [ 840.909108][ T676] bridge1: entered promiscuous mode [ 840.926266][ T692] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9435'. [ 840.926291][ T692] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9435'. [ 840.926305][ T692] netlink: 52 bytes leftover after parsing attributes in process `syz.2.9435'. [ 840.926619][ T676] bond2: (slave bridge1): making interface the new active one [ 840.927479][ T676] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 841.325773][ T729] syzkaller0: entered promiscuous mode [ 841.325796][ T729] syzkaller0: entered allmulticast mode [ 841.409001][ T730] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 841.459858][ T735] netlink: 112 bytes leftover after parsing attributes in process `syz.0.9448'. [ 842.006093][ T764] netlink: 'syz.5.9460': attribute type 1 has an invalid length. [ 842.006116][ T764] netlink: 'syz.5.9460': attribute type 4 has an invalid length. [ 842.006129][ T764] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.9460'. [ 842.214271][ T768] syzkaller0: entered promiscuous mode [ 842.214295][ T768] syzkaller0: entered allmulticast mode [ 842.422660][ T785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 842.844681][ T804] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9477'. [ 843.148818][ T808] syzkaller0: entered promiscuous mode [ 843.148843][ T808] syzkaller0: entered allmulticast mode [ 843.282734][ T827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.792258][ T837] FAULT_INJECTION: forcing a failure. [ 843.792258][ T837] name failslab, interval 1, probability 0, space 0, times 0 [ 843.792290][ T837] CPU: 0 UID: 0 PID: 837 Comm: syz.6.9487 Not tainted syzkaller #0 PREEMPT(full) [ 843.792309][ T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 843.792318][ T837] Call Trace: [ 843.792326][ T837] [ 843.792334][ T837] dump_stack_lvl+0xe8/0x150 [ 843.792363][ T837] should_fail_ex+0x410/0x560 [ 843.792393][ T837] ? __alloc_skb+0x1db/0x7a0 [ 843.792415][ T837] should_failslab+0xa8/0x100 [ 843.792440][ T837] ? __alloc_skb+0x1db/0x7a0 [ 843.792460][ T837] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 843.792479][ T837] ? __alloc_skb+0x18d/0x7a0 [ 843.792501][ T837] ? __alloc_skb+0x1db/0x7a0 [ 843.792529][ T837] __alloc_skb+0x1db/0x7a0 [ 843.792555][ T837] netlink_sendmsg+0x5d4/0xb40 [ 843.792584][ T837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.792610][ T837] ? apparmor_socket_sendmsg+0x98/0x360 [ 843.792633][ T837] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.792651][ T837] sock_sendmsg_nosec+0x13a/0x180 [ 843.792675][ T837] ____sys_sendmsg+0x54e/0x850 [ 843.792697][ T837] ? __pfx_____sys_sendmsg+0x10/0x10 [ 843.792721][ T837] ? import_iovec+0x73/0xa0 [ 843.792757][ T837] ___sys_sendmsg+0x2a5/0x360 [ 843.792772][ T837] ? __lock_acquire+0x747/0x2de0 [ 843.792794][ T837] ? __pfx____sys_sendmsg+0x10/0x10 [ 843.792841][ T837] ? __fget_files+0x2a/0x420 [ 843.792856][ T837] ? __fget_files+0x3a2/0x420 [ 843.792879][ T837] __x64_sys_sendmsg+0x1b1/0x290 [ 843.792899][ T837] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 843.792934][ T837] do_syscall_64+0x166/0x520 [ 843.792952][ T837] ? trace_irq_disable+0x3b/0x140 [ 843.792969][ T837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.792985][ T837] ? clear_bhb_loop+0x70/0xc0 [ 843.793004][ T837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.793020][ T837] RIP: 0033:0x7f3b7a19e2d9 [ 843.793036][ T837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.793049][ T837] RSP: 002b:00007f3b7b03e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 843.793067][ T837] RAX: ffffffffffffffda RBX: 00007f3b7a426090 RCX: 00007f3b7a19e2d9 [ 843.793079][ T837] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 843.793090][ T837] RBP: 00007f3b7b03e090 R08: 0000000000000000 R09: 0000000000000000 [ 843.793100][ T837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.793109][ T837] R13: 00007f3b7a426128 R14: 00007f3b7a426090 R15: 00007ffe96bd2f18 [ 843.793136][ T837] [ 847.921681][ T843] ieee802154 phy3 wpan0: encryption failed: -126 [ 847.971853][ T853] netlink: 'syz.1.9493': attribute type 1 has an invalid length. [ 848.059374][ T859] netlink: 'syz.0.9496': attribute type 3 has an invalid length. [ 848.059398][ T859] netlink: 96 bytes leftover after parsing attributes in process `syz.0.9496'. [ 848.106818][ T856] bridge0: entered allmulticast mode [ 848.231880][ T865] netlink: 116 bytes leftover after parsing attributes in process `syz.6.9498'. [ 848.779116][ T883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9507'. [ 848.830102][ T886] ip_tables: iptables: counters copy to user failed while replacing table [ 848.878591][ T898] digital: digital_start_poll: Unknown protocol [ 849.247446][ T5623] Bluetooth: hci6: connection err: -111 [ 849.452701][ T907] syzkaller0: entered promiscuous mode [ 849.452726][ T907] syzkaller0: entered allmulticast mode [ 849.689297][ T5623] Bluetooth: hci4: ISO packet for unknown connection handle 2723 [ 852.451948][ T927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 854.022463][ T994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9529'. [ 854.022496][ T994] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9529'. [ 854.033047][ T994] gretap4: entered promiscuous mode [ 854.033069][ T994] gretap4: entered allmulticast mode [ 854.053984][ T991] netlink: ct family unspecified [ 854.281381][ T1004] nbd: couldn't find a device at index 0 [ 854.319723][ T1004] nbd: couldn't find a device at index 0 [ 854.864499][ T1047] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9544'. [ 854.864546][ T1047] netlink: 14 bytes leftover after parsing attributes in process `syz.6.9544'. [ 855.039741][ T1063] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 856.541848][ T1129] netlink: 'syz.6.9571': attribute type 178 has an invalid length. [ 856.669651][ T1137] lo: entered allmulticast mode [ 856.882857][ T1150] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9578'. [ 857.006490][ T1155] netlink: 136 bytes leftover after parsing attributes in process `syz.5.9581'. [ 857.029538][ T1155] openvswitch: netlink: Flow key attr not present in new flow. [ 857.160592][ T1159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9583'. [ 857.192684][ T1159] netlink: 256 bytes leftover after parsing attributes in process `syz.5.9583'. [ 857.466144][ T1136] lo: left allmulticast mode [ 857.646201][ T1184] FAULT_INJECTION: forcing a failure. [ 857.646201][ T1184] name failslab, interval 1, probability 0, space 0, times 0 [ 857.646233][ T1184] CPU: 0 UID: 0 PID: 1184 Comm: syz.6.9591 Not tainted syzkaller #0 PREEMPT(full) [ 857.646254][ T1184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.646266][ T1184] Call Trace: [ 857.646275][ T1184] [ 857.646283][ T1184] dump_stack_lvl+0xe8/0x150 [ 857.646315][ T1184] should_fail_ex+0x410/0x560 [ 857.646343][ T1184] ? __alloc_skb+0x1db/0x7a0 [ 857.646368][ T1184] should_failslab+0xa8/0x100 [ 857.646396][ T1184] ? __alloc_skb+0x1db/0x7a0 [ 857.646421][ T1184] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 857.646442][ T1184] ? __alloc_skb+0x18d/0x7a0 [ 857.646468][ T1184] ? __alloc_skb+0x1db/0x7a0 [ 857.646500][ T1184] __alloc_skb+0x1db/0x7a0 [ 857.646531][ T1184] alloc_skb_with_frags+0xc6/0x760 [ 857.646550][ T1184] ? __lock_acquire+0x747/0x2de0 [ 857.646580][ T1184] sock_alloc_send_pskb+0x878/0x990 [ 857.646608][ T1184] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 857.646642][ T1184] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 857.646668][ T1184] ? dev_get_by_index+0x22/0x2d0 [ 857.646766][ T1184] ? dev_get_by_index+0x22/0x2d0 [ 857.646793][ T1184] packet_sendmsg+0x338b/0x51a0 [ 857.646892][ T1184] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 857.646924][ T1184] ? _down_write_nest_lock+0xf0/0x210 [ 857.646962][ T1184] ? __lock_acquire+0x747/0x2de0 [ 857.646987][ T1184] ? kstrtouint+0x6e/0xe0 [ 857.647014][ T1184] ? __pfx_packet_sendmsg+0x10/0x10 [ 857.647039][ T1184] ? aa_sk_perm+0x713/0x900 [ 857.647071][ T1184] ? down_read_nested+0xf0/0x330 [ 857.647094][ T1184] ? __pfx_aa_sk_perm+0x10/0x10 [ 857.647121][ T1184] ? aa_sock_msg_perm+0x144/0x210 [ 857.647150][ T1184] ? apparmor_socket_sendmsg+0x98/0x360 [ 857.647174][ T1184] ? __pfx_packet_sendmsg+0x10/0x10 [ 857.647197][ T1184] sock_sendmsg_nosec+0x13a/0x180 [ 857.647224][ T1184] __sys_sendto+0x408/0x5a0 [ 857.647284][ T1184] ? ksys_write+0x1e6/0x270 [ 857.647307][ T1184] ? __pfx___sys_sendto+0x10/0x10 [ 857.647332][ T1184] ? __mutex_unlock_slowpath+0x731/0x900 [ 857.647374][ T1184] ? __pfx_ksys_write+0x10/0x10 [ 857.647398][ T1184] __x64_sys_sendto+0xde/0x100 [ 857.647425][ T1184] do_syscall_64+0x166/0x520 [ 857.647445][ T1184] ? trace_irq_disable+0x3b/0x140 [ 857.647464][ T1184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.647484][ T1184] ? clear_bhb_loop+0x70/0xc0 [ 857.647507][ T1184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.647526][ T1184] RIP: 0033:0x7f3b7a19e2d9 [ 857.647544][ T1184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.647560][ T1184] RSP: 002b:00007f3b7b05f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 857.647580][ T1184] RAX: ffffffffffffffda RBX: 00007f3b7a425fa0 RCX: 00007f3b7a19e2d9 [ 857.647595][ T1184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 857.647606][ T1184] RBP: 00007f3b7b05f090 R08: 0000200000000580 R09: 0000000000000014 [ 857.647619][ T1184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 857.647631][ T1184] R13: 00007f3b7a426038 R14: 00007f3b7a425fa0 R15: 00007ffe96bd2f18 [ 857.647661][ T1184] [ 858.146907][ T1257] bond0: entered promiscuous mode [ 858.146932][ T1257] bond_slave_0: entered promiscuous mode [ 858.147205][ T1257] bond_slave_1: entered promiscuous mode [ 858.630849][ T1298] bond0: Caught tx_queue_len zero misconfig [ 858.755001][ T1307] FAULT_INJECTION: forcing a failure. [ 858.755001][ T1307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.755023][ T1307] CPU: 0 UID: 0 PID: 1307 Comm: syz.1.9607 Not tainted syzkaller #0 PREEMPT(full) [ 858.755035][ T1307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 858.755042][ T1307] Call Trace: [ 858.755047][ T1307] [ 858.755052][ T1307] dump_stack_lvl+0xe8/0x150 [ 858.755072][ T1307] should_fail_ex+0x410/0x560 [ 858.755090][ T1307] _copy_from_user+0x2d/0xb0 [ 858.755106][ T1307] kstrtouint_from_user+0xd6/0x180 [ 858.755121][ T1307] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 858.755139][ T1307] ? lock_acquire+0x115/0x350 [ 858.755153][ T1307] proc_fail_nth_write+0x8e/0x210 [ 858.755166][ T1307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 858.755181][ T1307] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 858.755192][ T1307] vfs_write+0x296/0xba0 [ 858.755208][ T1307] ? __pfx_vfs_write+0x10/0x10 [ 858.755220][ T1307] ? __fget_files+0x2a/0x420 [ 858.755232][ T1307] ? __fget_files+0x3a2/0x420 [ 858.755241][ T1307] ? __fget_files+0x2a/0x420 [ 858.755255][ T1307] ksys_write+0x150/0x270 [ 858.755268][ T1307] ? __pfx_ksys_write+0x10/0x10 [ 858.755285][ T1307] do_syscall_64+0x166/0x520 [ 858.755297][ T1307] ? trace_irq_disable+0x3b/0x140 [ 858.755308][ T1307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.755318][ T1307] ? clear_bhb_loop+0x70/0xc0 [ 858.755331][ T1307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.755341][ T1307] RIP: 0033:0x7f764755eb0e [ 858.755354][ T1307] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 858.755364][ T1307] RSP: 002b:00007f7648540fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 858.755375][ T1307] RAX: ffffffffffffffda RBX: 00007f76485416c0 RCX: 00007f764755eb0e [ 858.755383][ T1307] RDX: 0000000000000001 RSI: 00007f76485410a0 RDI: 0000000000000007 [ 858.755391][ T1307] RBP: 00007f7648541090 R08: 0000000000000000 R09: 0000000000000000 [ 858.755400][ T1307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 858.755411][ T1307] R13: 00007f7647826038 R14: 00007f7647825fa0 R15: 00007ffc03724e88 [ 858.755433][ T1307] [ 858.835423][ T1309] IPv4: Oversized IP packet from 127.202.26.0 [ 860.974804][ T1225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 861.213862][ T1319] netlink: 17 bytes leftover after parsing attributes in process `syz.5.9611'. [ 861.666644][ T2030] block nbd2: Possible stuck request ffff8880287d5080: control (read@0,4096B). Runtime 60 seconds [ 861.848462][ T1353] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9626'. [ 862.047510][ T1365] xt_CT: You must specify a L4 protocol and not use inversions on it [ 862.380974][ T1373] syzkaller0: entered promiscuous mode [ 862.380997][ T1373] syzkaller0: entered allmulticast mode [ 862.494937][ T1384] syzkaller1: entered promiscuous mode [ 862.494961][ T1384] syzkaller1: entered allmulticast mode [ 862.496986][ T1383] syzkaller0: entered promiscuous mode [ 862.497007][ T1383] syzkaller0: entered allmulticast mode [ 863.139861][ T8646] hid-generic 0005:0C45:0002.0002: unknown main item tag 0x0 [ 863.166533][ T8646] hid-generic 0005:0C45:0002.0002: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 863.296855][ T1423] netlink: 'syz.6.9649': attribute type 32 has an invalid length. [ 863.296874][ T1423] netlink: 8 bytes leftover after parsing attributes in process `syz.6.9649'. [ 863.448006][ T1423] bond3: option coupled_control: invalid value (10) [ 863.460769][ T1423] bond3 (unregistering): Released all slaves [ 863.791492][ T1428] syzkaller0: entered promiscuous mode [ 863.791519][ T1428] syzkaller0: entered allmulticast mode [ 863.810585][ T1453] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode [ 863.810616][ T1453] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode [ 864.088034][ T1470] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 864.718451][ T1477] netlink: 'syz.5.9663': attribute type 10 has an invalid length. [ 867.189505][ T4982] udevd[4982]: worker [31729] /devices/virtual/block/nbd2 is taking a long time [ 867.818846][ T1477] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 868.704388][ T1505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9673'. [ 869.032721][ T1519] openvswitch: netlink: Invalid VLAN frame [ 869.044285][ T1512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9676'. [ 869.072790][ T1522] netlink: 'syz.2.9679': attribute type 1 has an invalid length. [ 869.239153][ T1522] 8021q: adding VLAN 0 to HW filter on device bond28 [ 869.337499][ T1526] bond28: (slave veth33): Enslaving as an active interface with a down link [ 869.355601][ T1529] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 869.380123][ T1529] bond28: (slave wlan1): Enslaving as an active interface with a down link [ 869.436333][ T1539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 869.562104][ T1546] bond29: entered promiscuous mode [ 869.562126][ T1546] bond29: entered allmulticast mode [ 869.631024][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.631269][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.631449][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.631625][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.631806][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.631974][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.632160][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.632350][ T1543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9685'. [ 869.986282][ T1310] ieee802154 phy3 wpan0: encryption failed: -22 [ 870.326438][ T1587] netlink: 'syz.1.9696': attribute type 1 has an invalid length. [ 870.499618][ T1591] 8021q: adding VLAN 0 to HW filter on device bond17 [ 870.502207][ T1591] bond16: (slave bond17): making interface the new active one [ 870.502680][ T1591] bond16: (slave bond17): Enslaving as an active interface with an up link [ 870.555892][ T1591] SET target dimension over the limit! [ 870.595320][ T1587] bond16: (slave gretap2): Enslaving as a backup interface with an up link [ 870.602471][ T1591] 8021q: adding VLAN 0 to HW filter on device bond16 [ 870.726170][ T1611] FAULT_INJECTION: forcing a failure. [ 870.726170][ T1611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 870.726202][ T1611] CPU: 0 UID: 0 PID: 1611 Comm: syz.2.9702 Not tainted syzkaller #0 PREEMPT(full) [ 870.726223][ T1611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 870.726235][ T1611] Call Trace: [ 870.726243][ T1611] [ 870.726251][ T1611] dump_stack_lvl+0xe8/0x150 [ 870.726291][ T1611] should_fail_ex+0x410/0x560 [ 870.726323][ T1611] _copy_from_user+0x2d/0xb0 [ 870.726351][ T1611] ___sys_recvmsg+0x173/0x5a0 [ 870.726379][ T1611] ? __pfx____sys_recvmsg+0x10/0x10 [ 870.726405][ T1611] ? lock_acquire+0x115/0x350 [ 870.726455][ T1611] do_recvmmsg+0x31a/0x7f0 [ 870.726485][ T1611] ? __pfx_do_recvmmsg+0x10/0x10 [ 870.726517][ T1611] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 870.726541][ T1611] ? __fget_files+0x3a2/0x420 [ 870.726569][ T1611] __x64_sys_recvmmsg+0x198/0x250 [ 870.726593][ T1611] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 870.726625][ T1611] do_syscall_64+0x166/0x520 [ 870.726644][ T1611] ? trace_irq_disable+0x3b/0x140 [ 870.726665][ T1611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.726684][ T1611] ? clear_bhb_loop+0x70/0xc0 [ 870.726707][ T1611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.726727][ T1611] RIP: 0033:0x7f9f6e99e2d9 [ 870.726744][ T1611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.726760][ T1611] RSP: 002b:00007f9f6f80a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 870.726781][ T1611] RAX: ffffffffffffffda RBX: 00007f9f6ec25fa0 RCX: 00007f9f6e99e2d9 [ 870.726796][ T1611] RDX: 0000000000000007 RSI: 0000200000008d80 RDI: 0000000000000003 [ 870.726808][ T1611] RBP: 00007f9f6f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 870.726821][ T1611] R10: 0000000000010102 R11: 0000000000000246 R12: 0000000000000002 [ 870.726833][ T1611] R13: 00007f9f6ec26038 R14: 00007f9f6ec25fa0 R15: 00007ffc189a4868 [ 870.726864][ T1611] [ 871.164248][ T1620] xt_ecn: cannot match TCP bits for non-tcp packets [ 871.301862][ T1623] syzkaller0: entered promiscuous mode [ 871.301885][ T1623] syzkaller0: entered allmulticast mode [ 871.627585][ T1643] syzkaller0: entered promiscuous mode [ 871.627609][ T1643] syzkaller0: entered allmulticast mode [ 872.745466][ T1679] netlink: 'syz.1.9724': attribute type 1 has an invalid length. [ 876.689584][ T1696] netlink: 'syz.1.9730': attribute type 1 has an invalid length. [ 876.692991][ T1697] netlink: 'syz.1.9730': attribute type 1 has an invalid length. [ 877.130414][ T1720] netlink: zone id is out of range [ 877.130484][ T1720] netlink: del zone limit has 4 unknown bytes [ 877.275176][ T1726] 0ªî{X¹¦: left allmulticast mode [ 877.442877][ T1735] batman_adv: batadv0: Adding interface: veth0 [ 877.442896][ T1735] batman_adv: batadv0: The MTU of interface veth0 is too small (1280) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1312. [ 877.442924][ T1735] batman_adv: batadv0: Interface activated: veth0 [ 877.461663][ T1735] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 877.461691][ T1735] batman_adv: batadv0: Removing interface: syzkaller0 [ 877.501555][ T1735] batman_adv: batadv0: Interface deactivated: gretap3 [ 877.501579][ T1735] batman_adv: batadv0: Removing interface: gretap3 [ 877.522835][ T1735] batman_adv: batadv0: Interface deactivated: veth0 [ 877.522859][ T1735] batman_adv: batadv0: Removing interface: veth0 [ 877.952926][ T1758] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode [ 877.952994][ T1758] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode [ 878.400721][ T1773] IPVS: twos: UDP 127.0.0.1:20001 - no destination available [ 880.126311][ T1720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 880.534548][ T1787] bridge0: port 3(syz_tun) entered blocking state [ 880.535498][ T1787] bridge0: port 3(syz_tun) entered disabled state [ 880.535758][ T1787] syz_tun: entered allmulticast mode [ 880.538974][ T1787] syz_tun: entered promiscuous mode [ 880.539645][ T1787] bridge0: port 3(syz_tun) entered blocking state [ 880.539762][ T1787] bridge0: port 3(syz_tun) entered listening state [ 880.546376][ C0] bridge0: port 3(syz_tun) neighbor 0000.00:00:00:00:00:00 lost [ 880.546541][ C0] bridge0: topology change detected, propagating [ 880.876074][ T1799] __nla_validate_parse: 34 callbacks suppressed [ 880.876094][ T1799] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9763'. [ 880.901394][ T1798] FAULT_INJECTION: forcing a failure. [ 880.901394][ T1798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 880.901425][ T1798] CPU: 1 UID: 0 PID: 1798 Comm: syz.1.9764 Not tainted syzkaller #0 PREEMPT(full) [ 880.901446][ T1798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 880.901459][ T1798] Call Trace: [ 880.901466][ T1798] [ 880.901475][ T1798] dump_stack_lvl+0xe8/0x150 [ 880.901507][ T1798] should_fail_ex+0x410/0x560 [ 880.901537][ T1798] _copy_from_user+0x2d/0xb0 [ 880.901566][ T1798] ___sys_sendmsg+0x1c6/0x360 [ 880.901586][ T1798] ? __lock_acquire+0x747/0x2de0 [ 880.901616][ T1798] ? __pfx____sys_sendmsg+0x10/0x10 [ 880.901670][ T1798] ? __fget_files+0x2a/0x420 [ 880.901688][ T1798] ? __fget_files+0x3a2/0x420 [ 880.901716][ T1798] __x64_sys_sendmsg+0x1b1/0x290 [ 880.901739][ T1798] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 880.901780][ T1798] do_syscall_64+0x166/0x520 [ 880.901800][ T1798] ? trace_irq_disable+0x3b/0x140 [ 880.901818][ T1798] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.901837][ T1798] ? clear_bhb_loop+0x70/0xc0 [ 880.901856][ T1798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.901874][ T1798] RIP: 0033:0x7f764759e2d9 [ 880.901892][ T1798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.901908][ T1798] RSP: 002b:00007f7648541028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 880.901928][ T1798] RAX: ffffffffffffffda RBX: 00007f7647825fa0 RCX: 00007f764759e2d9 [ 880.901943][ T1798] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 880.901955][ T1798] RBP: 00007f7648541090 R08: 0000000000000000 R09: 0000000000000000 [ 880.901968][ T1798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.901979][ T1798] R13: 00007f7647826038 R14: 00007f7647825fa0 R15: 00007ffc03724e88 [ 880.902010][ T1798] [ 881.302748][ T1814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9768'. [ 881.305737][ T1802] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9766'. [ 881.305827][ T1802] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 881.305837][ T1802] IPv6: NLM_F_CREATE should be set when creating new route [ 881.305863][ T1802] IPv6: NLM_F_CREATE should be set when creating new route [ 881.959152][ T1849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9782'. [ 882.303686][ T1779] Bluetooth: hci5: command 0x0406 tx timeout [ 883.975641][ T1803] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 884.112228][ T1860] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9786'. [ 884.150664][ T1860] bond4: option arp_interval: invalid value (18446744073709290505) [ 884.150697][ T1860] bond4: option arp_interval: allowed values 0 - 2147483647 [ 884.193006][ T1860] bond4 (unregistering): Released all slaves [ 884.495023][ T1868] netlink: 3784 bytes leftover after parsing attributes in process `syz.1.9787'. [ 884.609264][ T1883] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9794'. [ 884.616917][ T1875] veth0: entered promiscuous mode [ 884.641456][ T1883] gretap0: entered promiscuous mode [ 884.655808][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9794'. [ 884.661778][ T1883] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9794'. [ 884.663178][ T1883] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9794'. [ 884.846009][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.879795][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.879937][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.880063][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.880195][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.880316][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.880500][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.880656][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.880784][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.881061][ T1892] netlink: 'syz.0.9798': attribute type 1 has an invalid length. [ 884.911530][ T1893] 8021q: adding VLAN 0 to HW filter on device bond30 [ 885.001583][ T1902] FAULT_INJECTION: forcing a failure. [ 885.001583][ T1902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.001615][ T1902] CPU: 0 UID: 0 PID: 1902 Comm: syz.1.9797 Not tainted syzkaller #0 PREEMPT(full) [ 885.001635][ T1902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 885.001647][ T1902] Call Trace: [ 885.001655][ T1902] [ 885.001664][ T1902] dump_stack_lvl+0xe8/0x150 [ 885.001695][ T1902] should_fail_ex+0x410/0x560 [ 885.001725][ T1902] _copy_from_iter+0x1d3/0x1660 [ 885.001752][ T1902] ? __alloc_skb+0x27a/0x7a0 [ 885.001778][ T1902] ? __alloc_skb+0x27a/0x7a0 [ 885.001804][ T1902] ? __alloc_skb+0x27a/0x7a0 [ 885.001830][ T1902] ? __pfx__copy_from_iter+0x10/0x10 [ 885.001854][ T1902] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 885.001875][ T1902] ? __alloc_skb+0x27a/0x7a0 [ 885.001899][ T1902] ? __alloc_skb+0x27a/0x7a0 [ 885.001931][ T1902] ? netlink_sendmsg+0x650/0xb40 [ 885.001954][ T1902] ? skb_put+0x112/0x210 [ 885.001974][ T1902] netlink_sendmsg+0x6c0/0xb40 [ 885.002004][ T1902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.002032][ T1902] ? apparmor_socket_sendmsg+0x98/0x360 [ 885.002059][ T1902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 885.002080][ T1902] sock_sendmsg_nosec+0x13a/0x180 [ 885.002111][ T1902] ____sys_sendmsg+0x54e/0x850 [ 885.002136][ T1902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.002165][ T1902] ? import_iovec+0x73/0xa0 [ 885.002195][ T1902] ___sys_sendmsg+0x2a5/0x360 [ 885.002214][ T1902] ? __lock_acquire+0x747/0x2de0 [ 885.002240][ T1902] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.002302][ T1902] ? __fget_files+0x2a/0x420 [ 885.002320][ T1902] ? __fget_files+0x3a2/0x420 [ 885.002347][ T1902] __x64_sys_sendmsg+0x1b1/0x290 [ 885.002370][ T1902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.002411][ T1902] do_syscall_64+0x166/0x520 [ 885.002433][ T1902] ? trace_irq_disable+0x3b/0x140 [ 885.002453][ T1902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.002473][ T1902] ? clear_bhb_loop+0x70/0xc0 [ 885.002496][ T1902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.002515][ T1902] RIP: 0033:0x7f764759e2d9 [ 885.002534][ T1902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.002549][ T1902] RSP: 002b:00007f7648541028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.002570][ T1902] RAX: ffffffffffffffda RBX: 00007f7647825fa0 RCX: 00007f764759e2d9 [ 885.002584][ T1902] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 885.002597][ T1902] RBP: 00007f7648541090 R08: 0000000000000000 R09: 0000000000000000 [ 885.002609][ T1902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 885.002620][ T1902] R13: 00007f7647826038 R14: 00007f7647825fa0 R15: 00007ffc03724e88 [ 885.002650][ T1902] [ 885.031082][ T5623] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 885.490944][ T1874] veth0: left promiscuous mode [ 886.119876][ T1932] ip_tables: iptables: counters copy to user failed while replacing table [ 886.144013][ T1932] mac80211_hwsim hwsim3 syzkaller1: entered promiscuous mode [ 886.144070][ T1932] mac80211_hwsim hwsim3 syzkaller1: entered allmulticast mode [ 886.145579][ T1932] __nla_validate_parse: 4 callbacks suppressed [ 886.145598][ T1932] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9810'. [ 886.308676][ T1937] netlink: 180 bytes leftover after parsing attributes in process `syz.6.9813'. [ 886.688264][ T1947] xt_ipvs: protocol family 7 not supported [ 886.943872][ T1969] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9823'. [ 887.116214][ T1950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 887.575372][ T1996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9828'. [ 887.776281][ T2012] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9837'. [ 890.581714][ T2001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 890.854240][ T2049] FAULT_INJECTION: forcing a failure. [ 890.854240][ T2049] name failslab, interval 1, probability 0, space 0, times 0 [ 890.854273][ T2049] CPU: 1 UID: 0 PID: 2049 Comm: syz.0.9849 Not tainted syzkaller #0 PREEMPT(full) [ 890.854326][ T2049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 890.854337][ T2049] Call Trace: [ 890.854346][ T2049] [ 890.854355][ T2049] dump_stack_lvl+0xe8/0x150 [ 890.854388][ T2049] should_fail_ex+0x410/0x560 [ 890.854419][ T2049] should_failslab+0xa8/0x100 [ 890.854448][ T2049] __kvmalloc_node_noprof+0x176/0x820 [ 890.854476][ T2049] ? __rhashtable_init_noprof+0x545/0xaf0 [ 890.854501][ T2049] ? __rhashtable_init_noprof+0x545/0xaf0 [ 890.854533][ T2049] __rhashtable_init_noprof+0x545/0xaf0 [ 890.854566][ T2049] nf_flow_table_init+0x186/0x2a0 [ 890.854672][ T2049] nf_tables_newflowtable+0x163b/0x25e0 [ 890.854723][ T2049] ? reacquire_held_locks+0x117/0x1a0 [ 890.854754][ T2049] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 890.854776][ T2049] ? lock_acquire+0x115/0x350 [ 890.854806][ T2049] ? __nla_parse+0x40/0x60 [ 890.854835][ T2049] nfnetlink_rcv+0x1288/0x28c0 [ 890.854883][ T2049] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 890.854948][ T2049] ? lock_acquire+0x115/0x350 [ 890.854978][ T2049] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.855002][ T2049] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.855030][ T2049] netlink_unicast+0x8ef/0xa80 [ 890.855068][ T2049] netlink_sendmsg+0x813/0xb40 [ 890.855100][ T2049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.855131][ T2049] ? apparmor_socket_sendmsg+0x98/0x360 [ 890.855160][ T2049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.855180][ T2049] sock_sendmsg_nosec+0x13a/0x180 [ 890.855205][ T2049] ____sys_sendmsg+0x54e/0x850 [ 890.855229][ T2049] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.855256][ T2049] ? import_iovec+0x73/0xa0 [ 890.855296][ T2049] ___sys_sendmsg+0x2a5/0x360 [ 890.855315][ T2049] ? __lock_acquire+0x747/0x2de0 [ 890.855338][ T2049] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.855390][ T2049] ? __fget_files+0x2a/0x420 [ 890.855406][ T2049] ? __fget_files+0x3a2/0x420 [ 890.855432][ T2049] __x64_sys_sendmsg+0x1b1/0x290 [ 890.855455][ T2049] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 890.855495][ T2049] do_syscall_64+0x166/0x520 [ 890.855514][ T2049] ? trace_irq_disable+0x3b/0x140 [ 890.855534][ T2049] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.855553][ T2049] ? clear_bhb_loop+0x70/0xc0 [ 890.855577][ T2049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.855596][ T2049] RIP: 0033:0x7f6744f9e2d9 [ 890.855615][ T2049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.855631][ T2049] RSP: 002b:00007f6745ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 890.855651][ T2049] RAX: ffffffffffffffda RBX: 00007f6745225fa0 RCX: 00007f6744f9e2d9 [ 890.855665][ T2049] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 890.855676][ T2049] RBP: 00007f6745ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 890.855688][ T2049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.855698][ T2049] R13: 00007f6745226038 R14: 00007f6745225fa0 R15: 00007ffed44d9f18 [ 890.855729][ T2049] [ 891.242360][ T2051] netlink: 9 bytes leftover after parsing attributes in process `syz.5.9847'. [ 891.245721][ T2051] netlink: 5 bytes leftover after parsing attributes in process `syz.5.9847'. [ 891.245900][ T2051] 0ªî{X¹¦: renamed from gretap0 [ 891.265472][ T2051] 0ªî{X¹¦: left promiscuous mode [ 891.265493][ T2051] 0ªî{X¹¦: entered allmulticast mode [ 891.274868][ T2051] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 891.322400][ T2051] validate_nla: 56 callbacks suppressed [ 891.322421][ T2051] netlink: 'syz.5.9847': attribute type 21 has an invalid length. [ 891.341470][ T2060] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 891.392126][ T2051] bond4: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 891.396663][ T2051] bond4 (unregistering): Released all slaves [ 891.669661][ T2076] ip_tables: iptables: counters copy to user failed while replacing table [ 891.711976][ T2074] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9856'. [ 891.766188][ T2030] block nbd2: Possible stuck request ffff8880287d5080: control (read@0,4096B). Runtime 90 seconds [ 891.906132][ T2094] sch_fq: defrate 0 ignored. [ 892.110863][ T2098] netlink: 'syz.6.9865': attribute type 1 has an invalid length. [ 892.142546][ T2098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 892.390220][ T2117] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9872'. [ 892.399772][ T2117] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9872'. [ 892.670503][ T2128] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9876'. [ 892.799618][ T2141] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9876'. [ 892.858035][ T2148] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9882'. [ 892.893659][ T1273] netdevsim netdevsim6 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 892.893703][ T1273] netdevsim netdevsim6 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 892.893735][ T1273] netdevsim netdevsim6 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 892.893798][ T1273] netdevsim netdevsim6 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 892.937737][ T2149] geneve0: Caught tx_queue_len zero misconfig [ 892.989697][ T2152] mac80211_hwsim hwsim3 syzkaller1: left promiscuous mode [ 892.990833][ T2152] mac80211_hwsim hwsim3 syzkaller1: left allmulticast mode [ 893.367598][ T2167] FAULT_INJECTION: forcing a failure. [ 893.367598][ T2167] name failslab, interval 1, probability 0, space 0, times 0 [ 893.367630][ T2167] CPU: 0 UID: 0 PID: 2167 Comm: syz.5.9887 Not tainted syzkaller #0 PREEMPT(full) [ 893.367653][ T2167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 893.367665][ T2167] Call Trace: [ 893.367672][ T2167] [ 893.367681][ T2167] dump_stack_lvl+0xe8/0x150 [ 893.367723][ T2167] should_fail_ex+0x410/0x560 [ 893.367752][ T2167] ? __alloc_skb+0x1db/0x7a0 [ 893.367782][ T2167] should_failslab+0xa8/0x100 [ 893.367808][ T2167] ? __alloc_skb+0x1db/0x7a0 [ 893.367832][ T2167] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 893.367852][ T2167] ? __alloc_skb+0x18d/0x7a0 [ 893.367878][ T2167] ? __alloc_skb+0x1db/0x7a0 [ 893.367910][ T2167] __alloc_skb+0x1db/0x7a0 [ 893.367938][ T2167] netlink_sendmsg+0x5d4/0xb40 [ 893.367970][ T2167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.368000][ T2167] ? apparmor_socket_sendmsg+0x98/0x360 [ 893.368026][ T2167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 893.368045][ T2167] sock_sendmsg_nosec+0x13a/0x180 [ 893.368071][ T2167] ____sys_sendmsg+0x54e/0x850 [ 893.368095][ T2167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 893.368122][ T2167] ? import_iovec+0x73/0xa0 [ 893.368153][ T2167] ___sys_sendmsg+0x2a5/0x360 [ 893.368170][ T2167] ? __lock_acquire+0x747/0x2de0 [ 893.368194][ T2167] ? __pfx____sys_sendmsg+0x10/0x10 [ 893.368348][ T2167] ? __fget_files+0x2a/0x420 [ 893.368372][ T2167] ? __fget_files+0x3a2/0x420 [ 893.368397][ T2167] __x64_sys_sendmsg+0x1b1/0x290 [ 893.368421][ T2167] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 893.368463][ T2167] do_syscall_64+0x166/0x520 [ 893.368484][ T2167] ? trace_irq_disable+0x3b/0x140 [ 893.368503][ T2167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.368520][ T2167] ? clear_bhb_loop+0x70/0xc0 [ 893.368542][ T2167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.368559][ T2167] RIP: 0033:0x7f693159e2d9 [ 893.368578][ T2167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.368592][ T2167] RSP: 002b:00007f6932399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 893.368612][ T2167] RAX: ffffffffffffffda RBX: 00007f6931825fa0 RCX: 00007f693159e2d9 [ 893.368626][ T2167] RDX: 000000000404c0d0 RSI: 0000200000000540 RDI: 0000000000000003 [ 893.368668][ T2167] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 893.368681][ T2167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.368693][ T2167] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 893.368722][ T2167] [ 894.179786][ T2191] vlan0: entered promiscuous mode [ 894.236094][ T2193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9898'. [ 894.391461][ T2197] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9900'. [ 895.004267][ T2229] netlink: 'syz.5.9910': attribute type 32 has an invalid length. [ 895.317809][ T2246] syzkaller0: entered promiscuous mode [ 895.317831][ T2246] syzkaller0: entered allmulticast mode [ 895.510263][ T2254] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 895.565009][ T2254] ip6gre1: entered allmulticast mode [ 895.569082][ T1229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 895.588416][ C0] bridge0: port 3(syz_tun) entered learning state [ 895.860131][ T2269] netlink: 'syz.1.9926': attribute type 4 has an invalid length. [ 895.877410][ T2272] netlink: 'syz.1.9926': attribute type 4 has an invalid length. [ 895.901170][ T2274] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 895.920997][ T2274] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 896.251285][ T2294] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 896.425215][ T2304] __nla_validate_parse: 5 callbacks suppressed [ 896.425237][ T2304] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9936'. [ 896.565742][ T2309] netlink: 'syz.5.9937': attribute type 5 has an invalid length. [ 896.775626][ T2323] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 896.898669][ T2327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9945'. [ 897.147759][ T2340] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9948'. [ 897.152390][ T2341] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9950'. [ 897.251255][ T2344] vlan0: entered promiscuous mode [ 897.251278][ T2344] v: entered promiscuous mode [ 897.409838][ T2350] netlink: 'syz.5.9952': attribute type 16 has an invalid length. [ 897.409859][ T2350] netlink: 'syz.5.9952': attribute type 17 has an invalid length. [ 897.444275][ T2350] 0ªî{X¹¦: left allmulticast mode [ 897.547550][ T2350] vlan0: left promiscuous mode [ 897.625694][ T2350] 8021q: adding VLAN 0 to HW filter on device bond2 [ 897.627662][ T2350] geneve2: left promiscuous mode [ 897.627683][ T2350] geneve2: left allmulticast mode [ 897.630680][ T2350] veth3: left allmulticast mode [ 897.632675][ T2350] veth5: left allmulticast mode [ 897.675834][ T2350] bond3: left promiscuous mode [ 897.675867][ T2350] bond3: left allmulticast mode [ 897.676255][ T2350] 8021q: adding VLAN 0 to HW filter on device bond3 [ 897.864763][ T2372] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9960'. [ 898.397789][ T2392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9963'. [ 898.479532][ T2394] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9963'. [ 898.613348][ T2385] ksmbd: Unknown IPC event: 1, ignore. [ 898.614507][ T2381] ksmbd: Unknown IPC event: 1, ignore. [ 898.825837][ T2408] xt_hashlimit: size too large, truncated to 1048576 [ 899.120199][ T2424] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9971'. [ 899.424132][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 899.486050][ T2443] FAULT_INJECTION: forcing a failure. [ 899.486050][ T2443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.486083][ T2443] CPU: 1 UID: 0 PID: 2443 Comm: syz.5.9974 Not tainted syzkaller #0 PREEMPT(full) [ 899.486103][ T2443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 899.486115][ T2443] Call Trace: [ 899.486123][ T2443] [ 899.486131][ T2443] dump_stack_lvl+0xe8/0x150 [ 899.486162][ T2443] should_fail_ex+0x410/0x560 [ 899.486193][ T2443] _copy_from_user+0x2d/0xb0 [ 899.486222][ T2443] ___sys_sendmsg+0x1c6/0x360 [ 899.486243][ T2443] ? __lock_acquire+0x747/0x2de0 [ 899.486268][ T2443] ? __pfx____sys_sendmsg+0x10/0x10 [ 899.486322][ T2443] ? __fget_files+0x2a/0x420 [ 899.486341][ T2443] ? __fget_files+0x3a2/0x420 [ 899.486368][ T2443] __x64_sys_sendmsg+0x1b1/0x290 [ 899.486390][ T2443] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 899.486428][ T2443] do_syscall_64+0x166/0x520 [ 899.486449][ T2443] ? trace_irq_disable+0x3b/0x140 [ 899.486470][ T2443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.486490][ T2443] ? clear_bhb_loop+0x70/0xc0 [ 899.486513][ T2443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.486533][ T2443] RIP: 0033:0x7f693159e2d9 [ 899.486551][ T2443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.486568][ T2443] RSP: 002b:00007f6932399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.486589][ T2443] RAX: ffffffffffffffda RBX: 00007f6931825fa0 RCX: 00007f693159e2d9 [ 899.486607][ T2443] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 899.486619][ T2443] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 899.486631][ T2443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.486651][ T2443] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 899.486681][ T2443] [ 899.838069][ T2447] vlan0: entered promiscuous mode [ 900.104136][ T2472] syzkaller0: left promiscuous mode [ 900.104159][ T2472] syzkaller0: left allmulticast mode [ 900.287375][ T2480] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9982'. [ 900.538179][ T2487] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9985'. [ 900.556125][ T2487] team0: Port device wlan0 removed [ 900.798343][ T2506] netlink: 'syz.2.9990': attribute type 32 has an invalid length. [ 901.171196][ T2523] netlink: 'syz.5.9994': attribute type 1 has an invalid length. [ 901.236151][T32511] udevd[32511]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 901.239181][ T2523] bond4: entered promiscuous mode [ 901.239609][ T2523] 8021q: adding VLAN 0 to HW filter on device bond4 [ 901.391927][ T2528] netlink: 'syz.5.9994': attribute type 83 has an invalid length. [ 901.436991][ T2537] __nla_validate_parse: 2 callbacks suppressed [ 901.437011][ T2537] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9996'. [ 901.558531][ T2528] bond4: (slave bridge2): making interface the new active one [ 901.558555][ T2528] bridge2: entered promiscuous mode [ 901.559708][ T2528] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 902.230691][ T2559] netlink: 'syz.2.10003': attribute type 5 has an invalid length. [ 902.499602][ T2579] ip_tables: iptables: counters copy to user failed while replacing table [ 902.577416][ T2583] FAULT_INJECTION: forcing a failure. [ 902.577416][ T2583] name failslab, interval 1, probability 0, space 0, times 0 [ 902.577446][ T2583] CPU: 1 UID: 0 PID: 2583 Comm: syz.2.10010 Not tainted syzkaller #0 PREEMPT(full) [ 902.577467][ T2583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.577478][ T2583] Call Trace: [ 902.577486][ T2583] [ 902.577495][ T2583] dump_stack_lvl+0xe8/0x150 [ 902.577527][ T2583] should_fail_ex+0x410/0x560 [ 902.577558][ T2583] should_failslab+0xa8/0x100 [ 902.577586][ T2583] __kmalloc_noprof+0xfe/0x720 [ 902.577612][ T2583] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 902.577643][ T2583] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 902.577679][ T2583] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 902.577715][ T2583] genl_family_rcv_msg_doit+0xda/0x340 [ 902.577750][ T2583] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 902.577788][ T2583] ? apparmor_capable+0x126/0x170 [ 902.577812][ T2583] ? bpf_lsm_capable+0x9/0x20 [ 902.577832][ T2583] ? security_capable+0x7e/0x2c0 [ 902.577871][ T2583] genl_rcv_msg+0x614/0x7a0 [ 902.577905][ T2583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 902.577930][ T2583] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 902.578048][ T2583] netlink_rcv_skb+0x226/0x4a0 [ 902.578072][ T2583] ? __pfx_genl_rcv_msg+0x10/0x10 [ 902.578102][ T2583] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 902.578139][ T2583] ? down_read+0x2be/0x330 [ 902.578166][ T2583] genl_rcv+0x28/0x40 [ 902.578189][ T2583] netlink_unicast+0x8ef/0xa80 [ 902.578225][ T2583] netlink_sendmsg+0x813/0xb40 [ 902.578256][ T2583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.578287][ T2583] ? apparmor_socket_sendmsg+0x98/0x360 [ 902.578315][ T2583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 902.578337][ T2583] sock_sendmsg_nosec+0x13a/0x180 [ 902.578365][ T2583] ____sys_sendmsg+0x54e/0x850 [ 902.578390][ T2583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 902.578419][ T2583] ? import_iovec+0x73/0xa0 [ 902.578451][ T2583] ___sys_sendmsg+0x2a5/0x360 [ 902.578470][ T2583] ? __lock_acquire+0x747/0x2de0 [ 902.578495][ T2583] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.578543][ T2583] ? __fget_files+0x2a/0x420 [ 902.578560][ T2583] ? __fget_files+0x3a2/0x420 [ 902.578585][ T2583] __x64_sys_sendmsg+0x1b1/0x290 [ 902.578606][ T2583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.578642][ T2583] do_syscall_64+0x166/0x520 [ 902.578662][ T2583] ? trace_irq_disable+0x3b/0x140 [ 902.578680][ T2583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.578699][ T2583] ? clear_bhb_loop+0x70/0xc0 [ 902.578723][ T2583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.578742][ T2583] RIP: 0033:0x7f9f6e99e2d9 [ 902.578760][ T2583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.578775][ T2583] RSP: 002b:00007f9f6f80a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.578795][ T2583] RAX: ffffffffffffffda RBX: 00007f9f6ec25fa0 RCX: 00007f9f6e99e2d9 [ 902.578809][ T2583] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 902.578820][ T2583] RBP: 00007f9f6f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 902.578831][ T2583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.578843][ T2583] R13: 00007f9f6ec26038 R14: 00007f9f6ec25fa0 R15: 00007ffc189a4868 [ 902.578883][ T2583] [ 902.930307][ T2585] FAULT_INJECTION: forcing a failure. [ 902.930307][ T2585] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 902.930342][ T2585] CPU: 0 UID: 0 PID: 2585 Comm: syz.0.10011 Not tainted syzkaller #0 PREEMPT(full) [ 902.930362][ T2585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 902.930374][ T2585] Call Trace: [ 902.930381][ T2585] [ 902.930389][ T2585] dump_stack_lvl+0xe8/0x150 [ 902.930423][ T2585] should_fail_ex+0x410/0x560 [ 902.930454][ T2585] _copy_from_user+0x2d/0xb0 [ 902.930482][ T2585] ___sys_sendmsg+0x1c6/0x360 [ 902.930503][ T2585] ? __lock_acquire+0x747/0x2de0 [ 902.930529][ T2585] ? __pfx____sys_sendmsg+0x10/0x10 [ 902.930579][ T2585] ? __fget_files+0x2a/0x420 [ 902.930596][ T2585] ? __fget_files+0x3a2/0x420 [ 902.930622][ T2585] __x64_sys_sendmsg+0x1b1/0x290 [ 902.930645][ T2585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 902.930683][ T2585] do_syscall_64+0x166/0x520 [ 902.930702][ T2585] ? trace_irq_disable+0x3b/0x140 [ 902.930723][ T2585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.930742][ T2585] ? clear_bhb_loop+0x70/0xc0 [ 902.930764][ T2585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 902.930782][ T2585] RIP: 0033:0x7f6744f9e2d9 [ 902.930799][ T2585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 902.930815][ T2585] RSP: 002b:00007f6745ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 902.930834][ T2585] RAX: ffffffffffffffda RBX: 00007f6745225fa0 RCX: 00007f6744f9e2d9 [ 902.930847][ T2585] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 902.930859][ T2585] RBP: 00007f6745ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 902.930870][ T2585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 902.930881][ T2585] R13: 00007f6745226038 R14: 00007f6745225fa0 R15: 00007ffed44d9f18 [ 902.930910][ T2585] [ 903.419785][ T2612] netlink: NAT attribute has 8 unknown bytes [ 903.419825][ T2612] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 903.423253][ T2612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10019'. [ 903.489923][ T2616] x_tables: duplicate underflow at hook 1 [ 903.609456][ T2620] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10022'. [ 903.627867][ T2625] FAULT_INJECTION: forcing a failure. [ 903.627867][ T2625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.627899][ T2625] CPU: 1 UID: 0 PID: 2625 Comm: syz.1.10024 Not tainted syzkaller #0 PREEMPT(full) [ 903.627918][ T2625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 903.627929][ T2625] Call Trace: [ 903.627937][ T2625] [ 903.627946][ T2625] dump_stack_lvl+0xe8/0x150 [ 903.627977][ T2625] should_fail_ex+0x410/0x560 [ 903.628007][ T2625] _copy_from_user+0x2d/0xb0 [ 903.628033][ T2625] __copy_msghdr+0x390/0x590 [ 903.628056][ T2625] ___sys_sendmsg+0x213/0x360 [ 903.628071][ T2625] ? __lock_acquire+0x747/0x2de0 [ 903.628094][ T2625] ? __pfx____sys_sendmsg+0x10/0x10 [ 903.628142][ T2625] ? __fget_files+0x2a/0x420 [ 903.628159][ T2625] ? __fget_files+0x3a2/0x420 [ 903.628184][ T2625] __x64_sys_sendmsg+0x1b1/0x290 [ 903.628208][ T2625] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 903.628248][ T2625] do_syscall_64+0x166/0x520 [ 903.628700][ T2625] ? trace_irq_disable+0x3b/0x140 [ 903.628724][ T2625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.628746][ T2625] ? clear_bhb_loop+0x70/0xc0 [ 903.628771][ T2625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.628791][ T2625] RIP: 0033:0x7f764759e2d9 [ 903.628810][ T2625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.628827][ T2625] RSP: 002b:00007f7648541028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 903.628849][ T2625] RAX: ffffffffffffffda RBX: 00007f7647825fa0 RCX: 00007f764759e2d9 [ 903.628864][ T2625] RDX: 0000000000000000 RSI: 0000200000000f80 RDI: 0000000000000003 [ 903.628877][ T2625] RBP: 00007f7648541090 R08: 0000000000000000 R09: 0000000000000000 [ 903.628889][ T2625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.628901][ T2625] R13: 00007f7647826038 R14: 00007f7647825fa0 R15: 00007ffc03724e88 [ 903.628933][ T2625] [ 903.639985][ T2620] netlink: 'syz.2.10022': attribute type 12 has an invalid length. [ 904.001680][ T2629] veth17: entered allmulticast mode [ 904.035309][ T2632] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.10027'. [ 904.353173][ T2649] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10034'. [ 904.602593][ T2663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10038'. [ 904.751115][ T2675] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10040'. [ 905.162377][ T2695] netlink: 4384 bytes leftover after parsing attributes in process `syz.0.10049'. [ 905.224760][ T2704] FAULT_INJECTION: forcing a failure. [ 905.224760][ T2704] name failslab, interval 1, probability 0, space 0, times 0 [ 905.224791][ T2704] CPU: 1 UID: 0 PID: 2704 Comm: syz.2.10050 Not tainted syzkaller #0 PREEMPT(full) [ 905.224810][ T2704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.224822][ T2704] Call Trace: [ 905.224830][ T2704] [ 905.224837][ T2704] dump_stack_lvl+0xe8/0x150 [ 905.224869][ T2704] should_fail_ex+0x410/0x560 [ 905.224900][ T2704] should_failslab+0xa8/0x100 [ 905.224925][ T2704] __kmalloc_noprof+0xfe/0x720 [ 905.224945][ T2704] ? ethnl_default_set_doit+0x169/0x1080 [ 905.224969][ T2704] ? ethnl_default_set_doit+0x169/0x1080 [ 905.224999][ T2704] ethnl_default_set_doit+0x169/0x1080 [ 905.225026][ T2704] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 905.225060][ T2704] genl_family_rcv_msg_doit+0x233/0x340 [ 905.225091][ T2704] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 905.225128][ T2704] ? bpf_lsm_capable+0x9/0x20 [ 905.225145][ T2704] ? security_capable+0x7e/0x2c0 [ 905.225174][ T2704] genl_rcv_msg+0x614/0x7a0 [ 905.225200][ T2704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 905.225220][ T2704] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 905.225251][ T2704] netlink_rcv_skb+0x226/0x4a0 [ 905.225269][ T2704] ? __pfx_genl_rcv_msg+0x10/0x10 [ 905.225291][ T2704] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 905.225320][ T2704] ? down_read+0x2be/0x330 [ 905.225341][ T2704] genl_rcv+0x28/0x40 [ 905.225360][ T2704] netlink_unicast+0x8ef/0xa80 [ 905.225389][ T2704] netlink_sendmsg+0x813/0xb40 [ 905.225414][ T2704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.225437][ T2704] ? apparmor_socket_sendmsg+0x98/0x360 [ 905.225459][ T2704] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.225476][ T2704] sock_sendmsg_nosec+0x13a/0x180 [ 905.225497][ T2704] ____sys_sendmsg+0x54e/0x850 [ 905.225517][ T2704] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.225541][ T2704] ? import_iovec+0x73/0xa0 [ 905.225565][ T2704] ___sys_sendmsg+0x2a5/0x360 [ 905.225579][ T2704] ? __lock_acquire+0x747/0x2de0 [ 905.225603][ T2704] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.225653][ T2704] ? __fget_files+0x2a/0x420 [ 905.225666][ T2704] ? __fget_files+0x3a2/0x420 [ 905.225688][ T2704] __x64_sys_sendmsg+0x1b1/0x290 [ 905.225705][ T2704] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.225737][ T2704] do_syscall_64+0x166/0x520 [ 905.225753][ T2704] ? trace_irq_disable+0x3b/0x140 [ 905.225769][ T2704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.225784][ T2704] ? clear_bhb_loop+0x70/0xc0 [ 905.225802][ T2704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.225816][ T2704] RIP: 0033:0x7f9f6e99e2d9 [ 905.225831][ T2704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.225843][ T2704] RSP: 002b:00007f9f6f80a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.225860][ T2704] RAX: ffffffffffffffda RBX: 00007f9f6ec25fa0 RCX: 00007f9f6e99e2d9 [ 905.225871][ T2704] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 905.225881][ T2704] RBP: 00007f9f6f80a090 R08: 0000000000000000 R09: 0000000000000000 [ 905.225890][ T2704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.225899][ T2704] R13: 00007f9f6ec26038 R14: 00007f9f6ec25fa0 R15: 00007ffc189a4868 [ 905.225922][ T2704] [ 905.653895][ T2709] FAULT_INJECTION: forcing a failure. [ 905.653895][ T2709] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.653928][ T2709] CPU: 1 UID: 0 PID: 2709 Comm: syz.5.10053 Not tainted syzkaller #0 PREEMPT(full) [ 905.653949][ T2709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 905.653960][ T2709] Call Trace: [ 905.653968][ T2709] [ 905.653976][ T2709] dump_stack_lvl+0xe8/0x150 [ 905.654009][ T2709] should_fail_ex+0x410/0x560 [ 905.654040][ T2709] _copy_from_user+0x2d/0xb0 [ 905.654078][ T2709] ___sys_sendmsg+0x1c6/0x360 [ 905.654098][ T2709] ? __lock_acquire+0x747/0x2de0 [ 905.654124][ T2709] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.654176][ T2709] ? __fget_files+0x2a/0x420 [ 905.654194][ T2709] ? __fget_files+0x3a2/0x420 [ 905.654221][ T2709] __x64_sys_sendmsg+0x1b1/0x290 [ 905.654245][ T2709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.654283][ T2709] do_syscall_64+0x166/0x520 [ 905.654303][ T2709] ? trace_irq_disable+0x3b/0x140 [ 905.654323][ T2709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.654342][ T2709] ? clear_bhb_loop+0x70/0xc0 [ 905.654365][ T2709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.654384][ T2709] RIP: 0033:0x7f693159e2d9 [ 905.654402][ T2709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.654418][ T2709] RSP: 002b:00007f6932399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.654439][ T2709] RAX: ffffffffffffffda RBX: 00007f6931825fa0 RCX: 00007f693159e2d9 [ 905.654452][ T2709] RDX: 0000000000040040 RSI: 0000200000000500 RDI: 0000000000000004 [ 905.654465][ T2709] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 905.654477][ T2709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.654489][ T2709] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 905.654554][ T2709] [ 905.698154][ T2710] xt_ecn: cannot match TCP bits for non-tcp packets [ 906.078455][ T2724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10059'. [ 906.081032][ T2724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10059'. [ 906.175936][ T2728] bridge0: port 3(syz_tun) entered disabled state [ 906.211888][ T2728] bridge_slave_1: left allmulticast mode [ 906.211920][ T2728] bridge_slave_1: left promiscuous mode [ 906.212172][ T2728] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.481437][ T2743] netlink: 'syz.5.10064': attribute type 2 has an invalid length. [ 906.596171][ T2743] netlink: Failed to add nicvf0 helper -22 [ 906.596225][ T2743] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 906.609804][ T2743] IPVS: set_ctl: invalid protocol: 44 0.0.0.0:20002 [ 906.752719][ T2756] __nla_validate_parse: 8 callbacks suppressed [ 906.752740][ T2756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10067'. [ 906.762586][ T2752] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 907.707279][ T2810] FAULT_INJECTION: forcing a failure. [ 907.707279][ T2810] name failslab, interval 1, probability 0, space 0, times 0 [ 907.707313][ T2810] CPU: 0 UID: 0 PID: 2810 Comm: syz.0.10086 Not tainted syzkaller #0 PREEMPT(full) [ 907.707333][ T2810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 907.707344][ T2810] Call Trace: [ 907.707352][ T2810] [ 907.707361][ T2810] dump_stack_lvl+0xe8/0x150 [ 907.707391][ T2810] should_fail_ex+0x410/0x560 [ 907.707417][ T2810] ? __alloc_skb+0x1db/0x7a0 [ 907.707441][ T2810] should_failslab+0xa8/0x100 [ 907.707466][ T2810] ? __alloc_skb+0x1db/0x7a0 [ 907.707488][ T2810] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 907.707507][ T2810] ? __alloc_skb+0x18d/0x7a0 [ 907.707530][ T2810] ? __alloc_skb+0x1db/0x7a0 [ 907.707560][ T2810] __alloc_skb+0x1db/0x7a0 [ 907.707590][ T2810] netlink_ack+0x136/0xb30 [ 907.707610][ T2810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 907.707652][ T2810] netlink_rcv_skb+0x2a4/0x4a0 [ 907.707674][ T2810] ? __pfx_genl_rcv_msg+0x10/0x10 [ 907.707699][ T2810] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 907.707737][ T2810] ? down_read+0x2be/0x330 [ 907.707765][ T2810] genl_rcv+0x28/0x40 [ 907.707789][ T2810] netlink_unicast+0x8ef/0xa80 [ 907.707827][ T2810] netlink_sendmsg+0x813/0xb40 [ 907.707859][ T2810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.707901][ T2810] ? apparmor_socket_sendmsg+0x98/0x360 [ 907.707929][ T2810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 907.707951][ T2810] sock_sendmsg_nosec+0x13a/0x180 [ 907.707978][ T2810] ____sys_sendmsg+0x54e/0x850 [ 907.708005][ T2810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.708043][ T2810] ? import_iovec+0x73/0xa0 [ 907.708074][ T2810] ___sys_sendmsg+0x2a5/0x360 [ 907.708092][ T2810] ? __lock_acquire+0x747/0x2de0 [ 907.708117][ T2810] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.708173][ T2810] ? __fget_files+0x2a/0x420 [ 907.708190][ T2810] ? __fget_files+0x3a2/0x420 [ 907.708219][ T2810] __x64_sys_sendmsg+0x1b1/0x290 [ 907.708242][ T2810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.708284][ T2810] do_syscall_64+0x166/0x520 [ 907.708305][ T2810] ? trace_irq_disable+0x3b/0x140 [ 907.708325][ T2810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.708345][ T2810] ? clear_bhb_loop+0x70/0xc0 [ 907.708368][ T2810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.708387][ T2810] RIP: 0033:0x7f6744f9e2d9 [ 907.708405][ T2810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.708420][ T2810] RSP: 002b:00007f6745ee4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.708441][ T2810] RAX: ffffffffffffffda RBX: 00007f6745225fa0 RCX: 00007f6744f9e2d9 [ 907.708455][ T2810] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 907.708468][ T2810] RBP: 00007f6745ee4090 R08: 0000000000000000 R09: 0000000000000000 [ 907.708480][ T2810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.708496][ T2810] R13: 00007f6745226038 R14: 00007f6745225fa0 R15: 00007ffed44d9f18 [ 907.708527][ T2810] [ 907.743631][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 908.288066][ T2839] ip_tables: iptables: counters copy to user failed while replacing table [ 908.487251][ T2845] x_tables: duplicate underflow at hook 2 [ 910.948688][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 910.948713][ C0] bridge0: topology change detected, propagating [ 911.257039][ T2839] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.073042][ T1779] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 912.095297][ T1779] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 912.097714][ T1779] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 912.102183][ T1779] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 912.115509][ T1779] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 912.755216][ T2902] FAULT_INJECTION: forcing a failure. [ 912.755216][ T2902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 912.755249][ T2902] CPU: 1 UID: 0 PID: 2902 Comm: syz.5.10105 Not tainted syzkaller #0 PREEMPT(full) [ 912.755269][ T2902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 912.755280][ T2902] Call Trace: [ 912.755288][ T2902] [ 912.755297][ T2902] dump_stack_lvl+0xe8/0x150 [ 912.755339][ T2902] should_fail_ex+0x410/0x560 [ 912.755370][ T2902] _copy_from_iter+0x1d3/0x1660 [ 912.755397][ T2902] ? __alloc_skb+0x27a/0x7a0 [ 912.755427][ T2902] ? __alloc_skb+0x27a/0x7a0 [ 912.755452][ T2902] ? __alloc_skb+0x27a/0x7a0 [ 912.755479][ T2902] ? __pfx__copy_from_iter+0x10/0x10 [ 912.755503][ T2902] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 912.755524][ T2902] ? __alloc_skb+0x27a/0x7a0 [ 912.755549][ T2902] ? __alloc_skb+0x27a/0x7a0 [ 912.755580][ T2902] ? netlink_sendmsg+0x650/0xb40 [ 912.755607][ T2902] ? skb_put+0x112/0x210 [ 912.755628][ T2902] netlink_sendmsg+0x6c0/0xb40 [ 912.755661][ T2902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.755692][ T2902] ? apparmor_socket_sendmsg+0x98/0x360 [ 912.755719][ T2902] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.755741][ T2902] sock_sendmsg_nosec+0x13a/0x180 [ 912.755769][ T2902] ____sys_sendmsg+0x54e/0x850 [ 912.755794][ T2902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.755822][ T2902] ? import_iovec+0x73/0xa0 [ 912.755853][ T2902] ___sys_sendmsg+0x2a5/0x360 [ 912.755871][ T2902] ? __lock_acquire+0x747/0x2de0 [ 912.755893][ T2902] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.755940][ T2902] ? __fget_files+0x2a/0x420 [ 912.755957][ T2902] ? __fget_files+0x3a2/0x420 [ 912.755982][ T2902] __x64_sys_sendmsg+0x1b1/0x290 [ 912.756005][ T2902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 912.756044][ T2902] do_syscall_64+0x166/0x520 [ 912.756065][ T2902] ? trace_irq_disable+0x3b/0x140 [ 912.756085][ T2902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.756106][ T2902] ? clear_bhb_loop+0x70/0xc0 [ 912.756129][ T2902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.756148][ T2902] RIP: 0033:0x7f693159e2d9 [ 912.756167][ T2902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.756183][ T2902] RSP: 002b:00007f6932399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.756205][ T2902] RAX: ffffffffffffffda RBX: 00007f6931825fa0 RCX: 00007f693159e2d9 [ 912.756219][ T2902] RDX: 0000000000040040 RSI: 0000200000000500 RDI: 0000000000000004 [ 912.756232][ T2902] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 912.756245][ T2902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.756256][ T2902] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 912.756288][ T2902] [ 913.180966][ T2907] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10107'. [ 913.207223][ T2910] FAULT_INJECTION: forcing a failure. [ 913.207223][ T2910] name failslab, interval 1, probability 0, space 0, times 0 [ 913.207256][ T2910] CPU: 1 UID: 0 PID: 2910 Comm: syz.1.10109 Not tainted syzkaller #0 PREEMPT(full) [ 913.207277][ T2910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 913.207288][ T2910] Call Trace: [ 913.207307][ T2910] [ 913.207317][ T2910] dump_stack_lvl+0xe8/0x150 [ 913.207350][ T2910] should_fail_ex+0x410/0x560 [ 913.207378][ T2910] should_failslab+0xa8/0x100 [ 913.207402][ T2910] ? skb_clone+0x212/0x3a0 [ 913.207421][ T2910] kmem_cache_alloc_noprof+0xa1/0x600 [ 913.207443][ T2910] ? skb_clone+0x212/0x3a0 [ 913.207468][ T2910] skb_clone+0x212/0x3a0 [ 913.207492][ T2910] __netlink_deliver_tap+0x413/0x860 [ 913.207527][ T2910] ? netlink_deliver_tap+0x2e/0x1b0 [ 913.207551][ T2910] netlink_deliver_tap+0x19c/0x1b0 [ 913.207575][ T2910] netlink_unicast+0x8c1/0xa80 [ 913.207616][ T2910] netlink_sendmsg+0x813/0xb40 [ 913.207666][ T2910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.207696][ T2910] ? apparmor_socket_sendmsg+0x98/0x360 [ 913.207724][ T2910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 913.207747][ T2910] sock_sendmsg_nosec+0x13a/0x180 [ 913.207773][ T2910] ____sys_sendmsg+0x54e/0x850 [ 913.207797][ T2910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 913.207911][ T2910] ? import_iovec+0x73/0xa0 [ 913.207944][ T2910] ___sys_sendmsg+0x2a5/0x360 [ 913.207964][ T2910] ? __lock_acquire+0x747/0x2de0 [ 913.207991][ T2910] ? __pfx____sys_sendmsg+0x10/0x10 [ 913.208047][ T2910] ? __fget_files+0x2a/0x420 [ 913.208067][ T2910] ? __fget_files+0x3a2/0x420 [ 913.208096][ T2910] __x64_sys_sendmsg+0x1b1/0x290 [ 913.208120][ T2910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 913.208163][ T2910] do_syscall_64+0x166/0x520 [ 913.208185][ T2910] ? trace_irq_disable+0x3b/0x140 [ 913.208206][ T2910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.208227][ T2910] ? clear_bhb_loop+0x70/0xc0 [ 913.208251][ T2910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.208271][ T2910] RIP: 0033:0x7f764759e2d9 [ 913.208313][ T2910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.208330][ T2910] RSP: 002b:00007f7648541028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 913.208352][ T2910] RAX: ffffffffffffffda RBX: 00007f7647825fa0 RCX: 00007f764759e2d9 [ 913.208366][ T2910] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 913.208379][ T2910] RBP: 00007f7648541090 R08: 0000000000000000 R09: 0000000000000000 [ 913.208392][ T2910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.208404][ T2910] R13: 00007f7647826038 R14: 00007f7647825fa0 R15: 00007ffc03724e88 [ 913.208437][ T2910] [ 913.369316][ T2911] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 913.735986][ T2917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10111'. [ 914.224209][ T5623] Bluetooth: hci7: command tx timeout [ 914.466313][ T2949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10120'. [ 914.522327][ T2953] FAULT_INJECTION: forcing a failure. [ 914.522327][ T2953] name failslab, interval 1, probability 0, space 0, times 0 [ 914.522361][ T2953] CPU: 0 UID: 0 PID: 2953 Comm: syz.5.10121 Not tainted syzkaller #0 PREEMPT(full) [ 914.522379][ T2953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 914.522388][ T2953] Call Trace: [ 914.522394][ T2953] [ 914.522401][ T2953] dump_stack_lvl+0xe8/0x150 [ 914.522428][ T2953] should_fail_ex+0x410/0x560 [ 914.522453][ T2953] should_failslab+0xa8/0x100 [ 914.522474][ T2953] ? skb_clone+0x212/0x3a0 [ 914.522491][ T2953] kmem_cache_alloc_noprof+0xa1/0x600 [ 914.522509][ T2953] ? skb_clone+0x212/0x3a0 [ 914.522546][ T2953] skb_clone+0x212/0x3a0 [ 914.522566][ T2953] __netlink_deliver_tap+0x413/0x860 [ 914.522595][ T2953] ? netlink_deliver_tap+0x2e/0x1b0 [ 914.522618][ T2953] netlink_deliver_tap+0x19c/0x1b0 [ 914.522637][ T2953] netlink_unicast+0x8c1/0xa80 [ 914.522668][ T2953] netlink_sendmsg+0x813/0xb40 [ 914.522699][ T2953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.522731][ T2953] ? apparmor_socket_sendmsg+0x98/0x360 [ 914.522758][ T2953] ? __pfx_netlink_sendmsg+0x10/0x10 [ 914.522780][ T2953] sock_sendmsg_nosec+0x13a/0x180 [ 914.522808][ T2953] ____sys_sendmsg+0x54e/0x850 [ 914.522833][ T2953] ? __pfx_____sys_sendmsg+0x10/0x10 [ 914.522863][ T2953] ? import_iovec+0x73/0xa0 [ 914.522894][ T2953] ___sys_sendmsg+0x2a5/0x360 [ 914.522913][ T2953] ? __lock_acquire+0x747/0x2de0 [ 914.522942][ T2953] ? __pfx____sys_sendmsg+0x10/0x10 [ 914.522998][ T2953] ? __fget_files+0x2a/0x420 [ 914.523015][ T2953] ? __fget_files+0x3a2/0x420 [ 914.523042][ T2953] __x64_sys_sendmsg+0x1b1/0x290 [ 914.523065][ T2953] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 914.523107][ T2953] do_syscall_64+0x166/0x520 [ 914.523128][ T2953] ? trace_irq_disable+0x3b/0x140 [ 914.523148][ T2953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.523168][ T2953] ? clear_bhb_loop+0x70/0xc0 [ 914.523191][ T2953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.523211][ T2953] RIP: 0033:0x7f693159e2d9 [ 914.523230][ T2953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 914.523246][ T2953] RSP: 002b:00007f6932399028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 914.523268][ T2953] RAX: ffffffffffffffda RBX: 00007f6931825fa0 RCX: 00007f693159e2d9 [ 914.523282][ T2953] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 914.523295][ T2953] RBP: 00007f6932399090 R08: 0000000000000000 R09: 0000000000000000 [ 914.523306][ T2953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.523317][ T2953] R13: 00007f6931826038 R14: 00007f6931825fa0 R15: 00007ffdbc26c748 [ 914.523348][ T2953] [ 914.737053][ T2954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10120'. [ 915.501280][ T2977] netlink: 'syz.5.10129': attribute type 6 has an invalid length. [ 915.501305][ T2977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10129'. [ 915.624650][ T2983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10130'. [ 916.303837][ T5623] Bluetooth: hci7: command tx timeout [ 916.422934][ T2891] bridge0: port 1(bridge_slave_0) entered blocking state [ 916.423108][ T2891] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.423299][ T2891] bridge_slave_0: entered allmulticast mode [ 916.459384][ T2891] bridge_slave_0: entered promiscuous mode [ 916.475024][ T2891] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.477651][ T2891] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.477883][ T2891] bridge_slave_1: entered allmulticast mode [ 916.480770][ T2891] bridge_slave_1: entered promiscuous mode [ 916.569051][ T2891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 916.572507][ T2891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.630750][ T2891] team0: Port device team_slave_0 added [ 916.640007][ T2891] team0: Port device team_slave_1 added [ 916.678756][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10140'. [ 916.682644][ T2891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.682660][ T2891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.682682][ T2891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.757407][ T2891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.757427][ T2891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.757452][ T2891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.758505][ T3011] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10140'. [ 916.850978][ T3015] netlink: 'syz.0.10142': attribute type 1 has an invalid length. [ 916.851003][ T3015] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10142'. [ 917.212386][ T2891] hsr_slave_0: entered promiscuous mode [ 917.222239][ T2891] hsr_slave_1: entered promiscuous mode [ 917.225579][ T2891] debugfs: 'hsr0' already exists in 'hsr' [ 917.225624][ T2891] Cannot create hsr debugfs directory [ 917.281494][ T3034] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10147'. [ 918.216213][ T3067] tipc: Trying to set illegal importance in message [ 918.269033][ T3068] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 918.316006][ T2891] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 918.342826][ T2891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 918.369844][ T2891] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 918.383704][ T5623] Bluetooth: hci7: command tx timeout [ 918.404322][ T2891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 918.412787][ T2891] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 918.468057][ T2891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 918.469920][ T2891] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 918.499236][ T2891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 918.727849][ T3090] __nla_validate_parse: 2 callbacks suppressed [ 918.727872][ T3090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10167'. [ 918.887087][ T3089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10166'. [ 918.952995][ T2891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 919.045349][ T2891] 8021q: adding VLAN 0 to HW filter on device team0 [ 919.088413][ T1232] bridge0: port 1(bridge_slave_0) entered blocking state [ 919.088516][ T1232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 919.119649][ T3102] Cannot find del_set index 2 as target [ 919.149549][ T1210] bridge0: port 2(bridge_slave_1) entered blocking state [ 919.149676][ T1210] bridge0: port 2(bridge_slave_1) entered forwarding state [ 919.234376][ T3100] netlink: 'syz.0.10171': attribute type 8 has an invalid length. [ 919.284990][ T3108] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10176'. [ 919.428853][ T3114] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10178'. [ 919.605092][ T3121] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 920.315216][ T3148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10187'. [ 920.330321][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10187'. [ 920.334543][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10187'. [ 920.334852][ T3148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10187'. [ 920.431058][ T3152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10188'. [ 920.464857][ T5623] Bluetooth: hci7: command tx timeout [ 920.981961][ T3178] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10192'. [ 921.168024][ T2891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 921.824369][ T2030] block nbd2: Possible stuck request ffff8880287d5080: control (read@0,4096B). Runtime 120 seconds [ 921.826465][ T32] INFO: task syz.4.8629:30525 blocked for more than 143 seconds. [ 921.826500][ ** replaying previous printk message ** [ 921.826500][ T32] Not tainted syzkaller #0 [ 921.826511][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 921.826520][ T32] task:syz.4.8629 state:D stack:25112 pid:30525 tgid:30523 ppid:5613 task_flags:0x400140 flags:0x00080002 [ 921.826569][ T32] Call Trace: [ 921.826576][ T32] [ 921.826589][ T32] __schedule+0x17db/0x58f0 [ 921.826640][ T32] ? __pfx___schedule+0x10/0x10 [ 921.826667][ T32] ? schedule+0x90/0x2b0 [ 921.826689][ T32] schedule+0x164/0x2b0 [ 921.826712][ T32] schedule_preempt_disabled+0x13/0x30 [ 921.826731][ T32] __mutex_lock+0x7c1/0x1550 [ 921.826758][ T32] ? __mutex_lock+0x5d4/0x1550 [ 921.826784][ T32] ? nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 921.826920][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 921.826951][ T32] ? net_generic+0x1e/0x240 [ 921.826975][ T32] ? net_generic+0x1e/0x240 [ 921.827005][ T32] nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 921.827045][ T32] ? rcu_is_watching+0x16/0xb0 [ 921.827070][ T32] ? trace_kmalloc+0x2a/0xf0 [ 921.827093][ T32] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 921.827120][ T32] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 921.827145][ T32] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 921.827168][ T32] ? netlink_dump+0x1e7/0xee0 [ 921.827241][ T32] ? netlink_dump+0x1e7/0xee0 [ 921.827295][ T32] genl_dumpit+0x10b/0x1b0 [ 921.827328][ T32] netlink_dump+0x711/0xee0 [ 921.827363][ T32] ? __pfx_netlink_dump+0x10/0x10 [ 921.827396][ T32] ? genl_start+0x497/0x6d0 [ 921.827431][ T32] __netlink_dump_start+0x589/0x7b0 [ 921.827461][ T32] genl_family_rcv_msg_dumpit+0x213/0x310 [ 921.827503][ T32] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 921.827541][ T32] ? __pfx_genl_start+0x10/0x10 [ 921.827567][ T32] ? __pfx_genl_dumpit+0x10/0x10 [ 921.827592][ T32] ? __pfx_genl_done+0x10/0x10 [ 921.827621][ T32] ? bpf_lsm_capable+0x9/0x20 [ 921.827640][ T32] ? security_capable+0x7e/0x2c0 [ 921.827674][ T32] genl_rcv_msg+0x5e1/0x7a0 [ 921.827709][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.827737][ T32] ? __pfx_nfsd_nl_expkey_get_reqs_dumpit+0x10/0x10 [ 921.827779][ T32] netlink_rcv_skb+0x226/0x4a0 [ 921.827804][ T32] ? __pfx_genl_rcv_msg+0x10/0x10 [ 921.829882][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 921.829934][ T32] ? down_read+0x2be/0x330 [ 921.829963][ T32] genl_rcv+0x28/0x40 [ 921.829989][ T32] netlink_unicast+0x8ef/0xa80 [ 921.830027][ T32] netlink_sendmsg+0x813/0xb40 [ 921.830061][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.830130][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 921.830159][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 921.830182][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 921.830210][ T32] ____sys_sendmsg+0x54e/0x850 [ 921.830235][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 921.830260][ T32] ? import_iovec+0x73/0xa0 [ 921.830290][ T32] ___sys_sendmsg+0x2a5/0x360 [ 921.830306][ T32] ? __lock_acquire+0x747/0x2de0 [ 921.830328][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 921.830349][ T32] ? futex_wait+0x2a2/0x390 [ 921.830397][ T32] ? __fget_files+0x2a/0x420 [ 921.830415][ T32] ? __fget_files+0x3a2/0x420 [ 921.830440][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 921.830463][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 921.830529][ T32] do_syscall_64+0x166/0x520 [ 921.830550][ T32] ? trace_irq_disable+0x3b/0x140 [ 921.830570][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.830589][ T32] ? clear_bhb_loop+0x70/0xc0 [ 921.830613][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.830632][ T32] RIP: 0033:0x7f2c3019e2d9 [ 921.830650][ T32] RSP: 002b:00007f2c310c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 921.830670][ T32] RAX: ffffffffffffffda RBX: 00007f2c30425fa0 RCX: 00007f2c3019e2d9 [ 921.830685][ T32] RDX: 0000000004044810 RSI: 0000200000000300 RDI: 0000000000000003 [ 921.830698][ T32] RBP: 00007f2c30235888 R08: 0000000000000000 R09: 0000000000000000 [ 921.830710][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 921.830722][ T32] R13: 00007f2c30426038 R14: 00007f2c30425fa0 R15: 00007ffca59643f8 [ 921.830753][ T32] [ 921.830853][ T32] [ 921.830853][ T32] Showing all locks held in the system: [ 921.830865][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 921.830880][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 921.830954][ T32] locks held by getty/5368: 2, on CPU#0: [ 921.830966][ T32] #0: ffff8880359530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 921.831081][ T32] #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 921.831186][ T32] locks held by syz.3.7537/27062: 2, on CPU#0: [ 921.831199][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 921.831245][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0 [ 921.831325][ T32] locks held by syz-executor/27559: 4, last CPU#1: [ 921.831336][ T32] #0: ffffffff8fe36530 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480 [ 921.832797][ T32] #1: ffff88802dcec080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0 [ 921.832968][ T32] #2: ffff88807b43b440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0 [ 921.833013][ T32] #3: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 921.833171][ T32] locks held by syz.4.8629/30525: 3, on CPU#1: [ 921.833185][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 921.833246][ T32] #1: ffff88807c22a6e8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0xf4/0x7b0 [ 921.833298][ T32] #2: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_expkey_get_reqs_dumpit+0xfb/0xd60 [ 921.838968][ T32] locks held by udevd/31729: 1, on CPU#0: [ 921.838990][ T32] #0: ffff888028710350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xde/0xd70 [ 921.839152][ T32] locks held by kworker/u8:45/1210: 2, on CPU#1: [ 921.839166][ T32] #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 921.839217][ T32] #1: ffffc90005ed7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 921.839268][ T32] locks held by kworker/u8:67/1241: 3, last CPU#0: [ 921.839281][ T32] #0: ffff88803468d940 ((wq_completion)krds_cp_wq#16/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 921.839329][ T32] #1: ffffc900070afc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 921.842316][ T32] #2: ffff888055798f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 921.842480][ T32] locks held by kworker/u8:91/1273: 3, last CPU#0: [ 921.842495][ T32] #0: ffff88803468b940 ((wq_completion)krds_cp_wq#16/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 921.842544][ T32] #1: ffffc9000dbd7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 921.842596][ T32] #2: ffff888055799b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 921.842648][ T32] locks held by syz.6.9931/2285: 2, on CPU#0: [ 921.842661][ T32] #0: ffffffff912c6648 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 921.842712][ T32] #1: ffffffff9009f740 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_set_doit+0xcd/0x7a0 [ 921.842768][ T32] locks held by syz.2.10199/3196: 2, last CPU#0: [ 921.842782][ T32] #0: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5a/0x450 [ 921.842872][ T32] #1: ffffffff8fd5c8a0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3de/0x10b0 [ 921.842954][ T32] locks held by modprobe/3204: 1, last CPU#1: [ 921.842967][ T32] #0: ffff8880511c4cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 921.843025][ T32] [ 921.843031][ T32] ============================================= [ 921.843031][ T32] [ 921.843047][ T32] NMI backtrace for cpu 0 [ 921.843061][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 921.843080][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.843091][ T32] Call Trace: [ 921.843102][ T32] [ 921.843112][ T32] dump_stack_lvl+0xe8/0x150 [ 921.843139][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 921.843166][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 921.843197][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 921.843231][ T32] sys_info+0x135/0x170 [ 921.843257][ T32] watchdog+0xfd7/0x1030 [ 921.843284][ T32] ? watchdog+0x1c7/0x1030 [ 921.843310][ T32] kthread+0x38b/0x480 [ 921.843329][ T32] ? __pfx_watchdog+0x10/0x10 [ 921.843345][ T32] ? __pfx_kthread+0x10/0x10 [ 921.843364][ T32] ret_from_fork+0x514/0xb70 [ 921.843387][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 921.843406][ T32] ? __switch_to+0xc89/0x1420 [ 921.843433][ T32] ? __pfx_kthread+0x10/0x10 [ 921.843453][ T32] ret_from_fork_asm+0x1a/0x30 [ 921.843485][ T32] [ 921.843723][ T32] Sending NMI from CPU 0 to CPUs 1: [ 921.843797][ C1] NMI backtrace for cpu 1 [ 921.843811][ C1] CPU: 1 UID: 0 PID: 16 Comm: pr/ttyS0 Not tainted syzkaller #0 PREEMPT(full) [ 921.843832][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 921.843844][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 921.843932][ C1] Code: e8 de 83 53 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ff 63 c4 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 ca 0e 77 06 cc 44 89 f9 80 e1 07 [ 921.843949][ C1] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 921.843966][ C1] RAX: 1ffffffff37a9700 RBX: 00000000000003fd RCX: 0000000000000000 [ 921.843979][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 921.843991][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 921.844003][ C1] R10: dffffc0000000000 R11: ffffffff85748b10 R12: dffffc0000000000 [ 921.844018][ C1] R13: 0000000000000000 R14: ffffffff9bd4be60 R15: 0000000000000000 [ 921.844031][ C1] FS: 0000000000000000(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 921.844047][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 921.844060][ C1] CR2: 00007f45db3d843c CR3: 00000000501fc000 CR4: 00000000003526f0 [ 921.844078][ C1] Call Trace: [ 921.844085][ C1] [ 921.844095][ C1] wait_for_lsr+0x184/0x2f0 [ 921.844123][ C1] __serial8250_console_fifo_write+0xcd/0x3e0 [ 921.844172][ C1] serial8250_console_write+0xa7e/0x1200 [ 921.844205][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 921.844231][ C1] ? rcu_is_watching+0x16/0xb0 [ 921.844263][ C1] nbcon_emit_next_record+0xef5/0x1a90 [ 921.844295][ C1] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 921.844321][ C1] ? nbcon_context_try_acquire+0x819/0xbd0 [ 921.844351][ C1] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 921.844414][ C1] nbcon_kthread_func+0x679/0x880 [ 921.844439][ C1] ? nbcon_kthread_func+0x163/0x880 [ 921.844460][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 921.844485][ C1] ? __kthread_parkme+0x71/0x1f0 [ 921.844521][ C1] ? __kthread_parkme+0x199/0x1f0 [ 921.844551][ C1] kthread+0x38b/0x480 [ 921.844569][ C1] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 921.844589][ C1] ? __pfx_kthread+0x10/0x10 [ 921.844608][ C1] ret_from_fork+0x514/0xb70 [ 921.844628][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 921.844647][ C1] ? __switch_to+0xc89/0x1420 [ 921.844675][ C1] ? __pfx_kthread+0x10/0x10 [ 921.844695][ C1] ret_from_fork_asm+0x1a/0x30 [ 921.844721][ C1] [ 921.858261][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 923.211252][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 923.220596][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 923.232196][ T32] Call Trace: [ 923.235756][ T32] [ 923.238687][ T32] vpanic+0x56d/0xa60 [ 923.243048][ T32] ? __pfx___schedule+0x10/0x10 [ 923.248433][ T32] ? __pfx_vpanic+0x10/0x10 [ 923.254900][ T32] panic+0xc5/0xd0 [ 923.259162][ T32] ? __pfx_panic+0x10/0x10 [ 923.263983][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 923.270261][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 923.277181][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 923.284579][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 923.291548][ T32] watchdog+0x1030/0x1030 [ 923.296560][ T32] ? watchdog+0x1c7/0x1030 [ 923.301096][ T32] kthread+0x38b/0x480 [ 923.306495][ T32] ? __pfx_watchdog+0x10/0x10 [ 923.311167][ T32] ? __pfx_kthread+0x10/0x10 [ 923.315757][ T32] ret_from_fork+0x514/0xb70 [ 923.322009][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 923.327642][ T32] ? __switch_to+0xc89/0x1420 [ 923.332326][ T32] ? __pfx_kthread+0x10/0x10 [ 923.337017][ T32] ret_from_fork_asm+0x1a/0x30 [ 923.341819][ T32] [ 923.345888][ T32] Kernel Offset: disabled [ 923.351822][ T32] Rebooting in 86400 seconds..