last executing test programs: 6.231239475s ago: executing program 3 (id=7497): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_START_SYNC(r3, 0x80089418, &(0x7f0000000080)=0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f00000006c0)={{r4}, r5, 0xe, @unused=[0x1000, 0xc, 0x4, 0x8], @name="4329bd38e8d04b73a7aa3308aa5bcbd86ddb8e22bbfe0c6462d08662a0ba1da9c3f76c78b9c29389fc0908d365e6d70a3d6cba232e919f6fed37158b91d0eac1e32b38552a45a41b400790f1015f4c187c32bfafa09a873c3c6e9c74d28346ae43546c934bebcc268d62c368a0e690a52d7d403aed346eb291bde0f9b0c40299c14d8b2368b8f6761d9ea6afb7f59c8198155d0048ddd62cc29524f02c31d4ce18fe0a773256c90632ea09d2828b26bc296da853d7eea71613e72b9a50fc4a56518ee83276c839ccfefad3b16e58ae59fa0e31e3c80fd4b9558928a4f76e9dddad79ca0a24ce91e6dbfeaff71ba458b5cab851a22a2fc598d6a46dd2d947d89b0a2a982629092a51dd3b557782ffdeb4c400a7088cf275fa74c9ad43d5daed3273ebd0f7f29a56091bc5f2288cf3a736125e90f8c6dd8e3c5aee57bcc9725f08a9da041d6ee37fba66c9250561f27b0722f1508536c16589c1082135bf899663a75e7ec5101d673a00083eccfa5de0698541da2fff05f04c7eb067c40fb0d993855e45082a2a3188f7696c9e0b123a97d9071165cc2e2051b31d889ca0e1bdb708fc098ac7c2b61935bb95306d9ab03187e03b95e1aa7aa5c42b3fbfee612ce1d7394d325619812d4b23d17a05b8ec31f3acc0a287fa7045dabf96f0cb160207f743fec3e8de601a6950b6dd55691ffb8f2ad6a4a32c61f8677e7426e131c0218c1005db893f9ee54b5a79165f3dae708c62cba9842920f589f2715098e6e2004b2e9a8bf6b74a4f96f0be312a46cb86648a73520de70212fd6192877d5385edd59df335d58843f26e0f0dbb063d3d00350662b13aae29a59469aa354be1f9be31e029395581350c33f510cb918b62033e358139c31d82c90a866bdf861807a361f2b994f1928fec568683ccaae6ba17004082739ac99a1fbf0df4fe6ff5d31ec2115c3bab71496158430f89fcedfa3ae9c7abaa254efef388d13068b3b448f386f4748780aed108088894dfa57e07595e18733b67c4cb12eb2c1c823e0751ae7f7fd0285a7d708de4806f4ee567979b1c544346a0bf0b22af8d41e20f293838fa99a109fa6d3394e37050f7b108ede98e3463ddc93055b2cc77f4c912aa93fffe75954272bdf61ef05ca4dfa94740dc0f7d11629bca719fd8bf94b59fc82379002f9497219ecddd11ad58ae2cd50850a5263f1e649b201a96dce2e703ded8482acd2d8cba65ff07e1eae12d342a95bdbfd8e9b62bcb7ca9d5e139e6a67ebdd5ee0f2d74d41a269e8efcaef7d22d4e1a02f1eb807180cfe9dbad424d3f0aee64f1055df0561a8400e8e41356f0eafdf60f139793fc10fa0b6a7979ce139250a199688cbcc88c88fefbc69d2bc5941dcd356023748c70fa4fb86f4ca3907f128cb8a3209e65984cc37b58ca2794799e2bb590e59c567bce23ab6c1d0f30a31fa09726df0a0957d940dd45beaf7dbf5bc018352f83b37512f8c0222f3e58dee9c522dc67b9f64b5ea1d69ef1fa81ffdc87abbe171c3ce202d0de874d70f6ab4e371f0d40fa40fbe5daf08f9cea1fbfc3b2a3d7d338c48397345c86d33adfecf69460ab02c95e02806c7410f24225b14f65abf676b1b5db5a89fa523a7914172be1ec5a64df6d751b12999312632c7205225f62623a5bd72d24ff21842c4b581b24b7f526c108b4733ef9e969498a7c0a236b54b6979e80bf186a93195f37e9a92ed7394cec14311d2e017b450a5975958ed71aa24fd94a56938566a62443cc387fc0eff415061b5d50d63b3bf78a4b9712cc3a16bb68ffb70bd17056391d6897613d12cc910da0dc2767baf61afd2add096742d10459074a61110ead7264c5b3e1b48dbcaf31847d1b815402d5bd603748dd9617cf7dc25d4acdf2203002d3ad5c077be77199ad70e7514dd533d88e466b8c6354e1ba4b1d95683272ab1357f7bd4c45e0cea5f7187ba5ac7d8542cdd685c9c388ccfab4b54de369d905edb9b04eda4038e96facfa4ae69e32e3c054f33a5ffdbc00aade15f3d12e49b22c50eb0651f4fa83d928b53ed157d0b00154a8c04bf7148a5c29ce091adcd16c2863c535f199e070fc9e87a0034bc14e8acca76907c0ef77b790dbf30f3a62ec88174a849e058e766a00e8e590345e785292e63a70ab6f6696d60539fe19897a0179af89182a2b6dd5ec00a0f0e5c647241a5ea775d4a5c8a208ac46a1e0880aac4dcc7672f4fe9991e2064528af3973068193e842d80149202cd4368acdf89255cfecf0ebfe347c67ca86d9a2981ab4a9a0ff63edec173dec68d01b546f5d05d6f72ede926b6e5d38938bfbda26e2ef6b6f1810f27bc99443b8f0d89dd5ebd6632c93f962317d7f1758558bebd5635b05ca405b0df25c74cb727dd8d1330e288f0f8c12489ff8fcfb90b906836e186972ef038fdd252cbe07715d11c5a592b09df8e9096c4dc1728ddd9643190d1ef61d77c8702b674a964c572782f33dc4d665b5ae93c36ca05dedd3a37487229e8f5e8e39aae6003fe94d9724e7061460a9d16db79e2f966c781a0914fe23686213f70c9c1addcec2caed94056a330a44fd30ce4935e0c1c0b9fabf36adc2e7eae28042dca3911444d8e3e7758cabced47d3f3e0153d837ed07657e7daa72c5c583ddede2b92a02b99d7c1fd65749f8d2381d41023c75b97d25dec98f38d54a895a30b40096206370c76582f49d09889946b51e50cd9daf2bfa19c0d3712da0aaa8369b75708f7900fa4174a2237e0c05652fb22648d7f464f5223b59ce25a766e6b7d67a18769d80b24719252238f61a2cc16aac50d4bef3d2b61fec03bd422ad57d737eb3cdf519bb26432a79acf3130cafcec6a3b06450ba4246a10d202521852a59f00d917f6c4b3b03c775a3d0d5cadf4a948a9ee084191203d6f63fd6c562fe7a2e02964421c8a1e9122edaf4d48b76bc418eb3be3fbf68753508b6f459cfcad83750f6d039784ad5b246e724d373f9cbc67aa91f8baed9cccc05c00947260f267871ff479d84de6ab77cc4fb40c6fc8c76fae4566f8f897cbfc63d103ff6527be878101a82202d8b1031185e5536a7fc2b738a1ffc01a96cc81d4d43fc9fc8490793a59ef84c27edf65e3f25320078238b606fc4f668c4c74e45bb99c1af062e151434ef32505ef257ad3e82ad3ddee5b40c84e4fbb946d31400491be6859bd97a9fcb9d52368ba6f78ad8a9198e01106ce0e54a7431137ccf164f104e18d6f02ad3950cd81c2cbf1e73402f4eb194b76b39ac897c68dbf50a4ae3bb3947b9e2d971b0cb9f8b8a70149b9bd187625be8839b5057b6aea6372c2c3cf9ebf2033f2d6df5fe548b1690f728467bcabe84786cfbbd962e274bee4a396986b332013275ad7be809d945fdb4d31a21b31894c7c5a8086bc0b88df268dbe4270e38d299a754c8a6205d248fe7f3d1820e70c59bb1c939d1d47cdf6438d2180340d57884a0bc87cef8e0e81ef874eb21c03bdec99cdfca93a65ecaa598682404a810ed5addb663286172889a1f983e8ed1def0096a8acdb2141119ed2b2cf8c8ddddf1df7bd56ff4ac613c3b711e88e2619ba3eca6184ff7986bf75e17242a835250297681fc5ae544b5a6b69f4e2254757dcbfc3801c7f902fb58858e441ba71605870ecfe2d62d3cc48100174340fde7fab16632ae2fa39d55aa7673d2dec6a704d6d99b50906a12ddf2d0b1d9204f059ac1c9e2ded146b897d1b89e184e6700f5177485fd7b29e26a2a1263ed0a3e50927d96bd138eff021bdc1cf4f4aadf83b292c2c95bec293461a1a02143cfb9b285f413275b13086588d259979de82b51d848fceca79a73491f5292ab20f6eb7739a03ffe49dc127cd1acb524b97e3248d062573a9b27671784c882215c6464caa49d6455c10cd2b8ebee48615ca87d852459d8817aa54fd2429c2a1f448a4dfe84d91d5206f56cf555cd0458be61858229e5ab804cb74843c059eebd564a5c84ca73b5d7f0c0504e097df4fb5be7e4047cace1106df0f94a60edaf33cdc6c8e4f4ea3c1b53c6d1e782979600605e268283d42c06fe4c82da28fba2004c7bf754a81542ba809a049b255ac1e700e96f67db8beb9c78ebaa63e557f02cde489c1894ac83ae3287f792bd5f355d47a844850a7556076ddf2d8b8c8cf0b78fc63142de9a165d1ab2a3d8da99cecd5d3dbaabb5c422811d5968937c19ca82dd18b3ead551b4f7a93ec89a950d9ccb14a6a91e786c15ed7932e5ecc2cf61883eda314adc9727004307e81fa477315d0583739c9c3e44b81e682c30dc7bd63b33deb6ee4ac00aa2bb4c79ccb2a7d4fc3747cb23770879d9d9d4ed4cde74c67843e021c060f2828b4adf5ea60e65f256e15af36d7125516c3a1922c3d6a49c8d39eab9c2f486166cde20040a644e19dc2c95a3a5d6d366118b48723223be08b48942bfc226707a4455f6e4eed18712c72ad0cd477e1f963f1466dfba41dcfa0f0a555fed32d8c3ec6472eda5bb6be63447865ea1a0a37c668460c3bb13be76789e44903e3671a80537117c82360300c295556d3618b83667ed84c481caab4aa7edac42556d7fa700526312ff6535b7e3d04519a8024ad7b272d32032c5a87189d652f73c9b0f2a297b793401c8dec355331d5ee4dd9f6182ed6d3b49c14498752dbf36f891b0659fcc26ceb503361273235e2f8f3746adb23c2e95981e4452f5f222bf05c3b707c3b6ec51bff9939880f67529f223b82d1eb3b2f7e36f90864fba4525980ad67b12790dd10eb21e05f935b76fde1ccd0891112ef247a68e6d5d677a93287ef3266d06f73dc8002816c7160ec4e9a7d2f0c6fc9e3aa448bf446912875498bb34f786ff65b5e83736d855f7ee59dc9914e931dc5dbd4e936a9eb3fb0f6a538cdcbfcf2c56474653a9bed7d6c4c714126377a751baeba57ed8044d3e8caa164b5b73b701f220eadb8c924a915c131ee1581b20ebfcc6f8575561962b6d5eae5585f809396a65dd91fa05b8321ad801b2f2169708a804c18db996531b645f3c7ff4fd7b34904515e29011f5b2e76bebbdb43282f934b94acfceb8f08cd74805e0ec3e57f005c92ba6ba10669b9c413871d9a481f59cd9148e5a1cd75a28c005894bb870259bd19c5aa0ed8cd22de2c2d64e8f997ba63dad89885a39d7eca6b99f276fc3dd8afaa5ee7b8ba5a5329d0b31f8cdff41f3431c3cc7a059a738cf25dc295d3ba65a44480a3a1625c405f4c6be0ca032a022288b8dd4c31240b1b14d62af80c851e168229dac47ca489fb44127f3ed4a179f896b045c5e481a9687ee858da7cd9e36a8bd2c91a02f1d0cd42835e19a871de1ad61c6d59b9ca0f04946f7a4447f93d9a282633d8aa81c8a0ffe52d1ec7d6afd26799c0872a3fdc2580e725bf74ea9852b3ac48e7c2ba9889a78f5b55bebfff91210c02d37ffa1f53dd86b65b584e60c341e7f86b18936a67f4a50b89eb12a10378ed31743e6b993d9dc479b031ffa2a9da1f352af4ff4b80d9ea5ebcda5dd60e593e1f3161a4c082674723bee5bbf495b40e49cfc7e97077cdd004cd9acf2732318ea41707dc8643761c239bb83ec93b33db0d54797cfd02af3dd0a4711ed9d3eb3d89089d16be99dfe9d391f193f7131daaa93cdf9caaf8fcd1b6a4191f644290fb00b09ae44dcc833344d60f44255688a931b247457df7f2fc07554a46bd8dbf07d71fab2b672a4905d2d689aedd2cae4989f2b938b"}) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x68, 0x10, 0xffffff1f, 0x4d0f9, 0x0, {0x0, 0x0, 0x0, 0x0, 0x68520, 0x10044}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xfffffe7a, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x40008000}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_ENCAP_SPORT={0x0, 0x11, 0x4e21}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @loopback}]}}}, @IFLA_MASTER={0x8}]}, 0x68}}, 0x4040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 4.896403223s ago: executing program 0 (id=7516): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) (fail_nth: 29) 3.947117702s ago: executing program 0 (id=7531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000308000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 3.88199395s ago: executing program 0 (id=7532): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000500)={{0xffffffffffffffff, &(0x7f00000000c0)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1a3500, &(0x7f0000000100)={@align=0xfffffffffffffffe, {0x2, 0x81, 0xfffffff8, 0x6}}, 0x0, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000300)=0x2}, 0x2, &(0x7f00000004c0)=[{0x1, 0x101, &(0x7f0000000340)=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', &(0x7f0000000380)="89c2496c5ff26ce5ffc7ff5f7079d13fcebc", 0x12}, {0x3, 0x9, &(0x7f00000003c0)='.\x00', &(0x7f0000000400)="b3d5cf1a168a2b62a0dde7a5fb830efdcd41b1b9f418f92bb697d82f8cadb62adc2f2182566401f97f3690b90b0831ba51a1c8cbe4493d4262de08281d34b1547b7e6c951e32aa6db03a214b1a10c59c6a4e4fd41f7306ba5b9be070aab688e5cc0bfff5f55cc6d9b57d872bda0efe37ddf55a199f0b5e20cdc731841738c951046af5bb341f30e31a38d386daccc07f950d5d5f32", 0x95, 0x2}]}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x6, 0x2, 0x0, 0x9, 0xf91}, &(0x7f0000000780)=0x98) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f00000001c0)={'macvlan1\x00'}) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000200)) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r2) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000900)=ANY=[@ANYBLOB="90000000", @ANYRESHEX=r1, @ANYBLOB="000225bd7000fcdbdf250700000005000500030000001c000180080003007f000001060005004e240000080006000a00000008000400610b0000080004000100000008000200060000003800068008000700", @ANYRES32=r4, @ANYBLOB="05000200f100000008000700", @ANYRES32=r4, @ANYBLOB="140004002001000000000000000000000000000208000700", @ANYRES32=r4, @ANYBLOB="080003000300000ea02cb5e540138f1cef57016d34203e2833dc2db32d09c3417b914f59cef079b67afa503fc78757f9ca7ebbde21228cf3c9dcd049dfee3bc2c41b13ab2aaab7968857e08eb291200d11ee151d5222996f1f40c965e30bea42eb1221a7abb7741a5372af609b6061d0da268e03c705f9f26379a7e64358dc960c730431e7907ee172938bb414f66c38097c547d52f4b1db72d9c56175a1777d3adb9faea88bfff0b84946d1859717ec30a6d2dd4fd93e"], 0x90}, 0x1, 0x0, 0x0, 0x2000815}, 0x20008000) 2.944142992s ago: executing program 0 (id=7547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newpolicy={0x13c, 0x13, 0x1, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0xf1}, @in=@broadcast, 0x0, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x9}, {0x0, 0x1}, 0xfffffffe}, [@tmpl={0x84, 0x5, [{{@in6=@mcast2, 0x4d5, 0x2b}, 0x2, @in=@broadcast, 0x3505, 0x4, 0x0, 0x4, 0x4, 0x7ff, 0x9}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4d2, 0x3c}, 0x2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x40, 0x200, 0x2, 0x3}]}]}, 0x13c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x29, 0x81, 0xf5, 0x47bd5f9e, 0x1, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x40, 0x2, 0x2}}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x6c, 0x12, 0x10, 0x70bd2d, 0x25dfdbfd, {0x3, 0x3, 0x4c, 0xc, {0x4e20, 0x4e22, [0xd0f, 0x2, 0x8001, 0x1], [0x7, 0x7, 0x4], r3, [0x0, 0x507]}, 0x8, 0x2}, [@INET_DIAG_REQ_BYTECODE={0x12, 0x1, "733e200c0a2716f84991aa3ed068"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "06b5d56ab0"}]}, 0x6c}, 0x1, 0x0, 0x0, 0x844}, 0x4000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0xfffffdbf, r5, 0x200, 0x1, 0x2, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x1c}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in=@multicast2, 0x4e22, 0x0, 0x4e20, 0x3, 0x1, 0x20, 0x10, 0x3a}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x7, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500002, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x8003507, 0xa, 0x0, 0x5, 0x10}, 0xfffffffd, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48004) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r8, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000c0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 2.860748069s ago: executing program 4 (id=7548): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000000000000000006000000181100ff", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000003000000dbaaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff670000000800000018290000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005ea500000000000056080000010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.759200161s ago: executing program 3 (id=7549): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="050003"], 0x28}}, 0x80) r4 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000d, 0x3b071, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) sendmmsg(r4, &(0x7f0000001400)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r4], 0x108}}, {{&(0x7f0000000140)=@ax25={{0x3, @null, 0x2}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x80, &(0x7f0000001240)=[{&(0x7f0000000200)="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", 0x1000}, {&(0x7f0000001200)="87854c76bfe9", 0x6}], 0x2, &(0x7f0000001280)=ANY=[@ANYBLOB="a000000000000000140100000700000070a15f5af3d22a22f8414a00c0e10bed91163b833783ccdf21b178301dc82d21af4d53c137895749c3f3d0300dae7344cedb608505fc2db604d529fb77934656572c362efd169b1eb9d1bc65d9544e99e204e49fb0a5fc7e0d746cbacf3bc769aa4fd37711b7479db3f2a99269b3955783ba8c7b93578149014b06654a45e6c3e6a6bcc972dc8f30dc21000000000000e0000000000000001801000008000000feb7cde40e526ae4d8985acc513431cbb43681da43eb74316dbaee57c53b73f679c099749fd64db9e2e0238409ea8e5955e3a4dd7490ae345a3621394e3a72afb8430787669680033d3adf287b0e613a5b8dfafd917f7f958e0514c464d1571bfdf2c961ac2228422a937e80287891d2c7228d11a247ffea5072871106113415f3d9f5dde1b61ad48c8be0849e0b7c76d1b10998adb1342957dc429ea1ef845063f15ec7f8621c5523137622704e54723315bb40af8528d41b4b1c1aeb8cadc6114b6e1407a9c8e722ad000000000000"], 0x180}}], 0x2, 0xc040) 2.758866236s ago: executing program 4 (id=7550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100f8ed28"], 0x50) socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000800000000a20000000000a01020000000000000000010000000900010073797a300000000040000000020a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000064000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xec}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) (rerun: 64) 2.1519701s ago: executing program 4 (id=7555): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000023ed0ec2f7f401ac091300000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYRES64=r1], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000002a00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r3, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$unix(r0, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="e687", 0x2}], 0x1, 0x0, 0x0, 0x44190}, 0x2004c001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0xff, 0x1}, 0x20) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001a80)=[{{&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, 0x0, 0x50}}], 0x1, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x42, 0x800000, 0x8, 0x7}) write$bt_hci(r7, &(0x7f0000000080)=ANY=[], 0x6) 2.086323021s ago: executing program 3 (id=7556): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000608000a4000000003280004800800024000000012080001"], 0xa4}}, 0x0) 2.002687138s ago: executing program 2 (id=7557): syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') r0 = socket(0x22, 0x2, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e8, 0xffffffff, 0xffffffff, 0x3e8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0xffff00, 0xff000000], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x88}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [0x0, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={0xffffffffffffffff}, 0x4) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000780)={r1, r2, 0x2f, 0x0, @void}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000140)={0x4e3}, 0x8) openat$cgroup(r5, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) sendmsg$inet6(r7, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000290000000b00000000000000290000003700"], 0x30}, 0x4008104) openat$cgroup(r6, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095000000d3031a006dd015836e4d27f5182b60bbb7c19e21eec859fe68f9428ac407630eac8eb682f5b2d86b4abf9e63ad263fec7db9338ca9eebf2218c8b9ca64bcdcdaa06fc4c7aa217fcecd9443c54143bde8ddcbc3b8ac619930206d8d0881af823d6d18c66f021c20b55013d7fb6ea7013c062d13176d71d7dad98eb976ed679fa639"], &(0x7f0000000000)='GPL\x00', 0x4, 0x40, &(0x7f0000000140)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0xff87}, 0x23) getpeername$llc(r0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f00000000c0)=0x10) 1.9773725s ago: executing program 1 (id=7558): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4402}, 0x0) (fail_nth: 6) 1.972145744s ago: executing program 4 (id=7559): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000100009308"], 0x0, 0x32, 0x0, 0xa, 0x2}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0000006700000008000000ad00000008680100", @ANYRES32=0x1, @ANYBLOB="8100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300000003000000040000000500"/24, @ANYRES32, @ANYBLOB="09307d6a0e148981ad707c8109465f716c65be6e8570487e585dcd7d60c83a6c4c8361062446f4f5bc5c58562c"], 0x50) (async) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.79366185s ago: executing program 3 (id=7560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYBLOB="3f00000006020400280012800b0001"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1100000004000000040000000200000000000400", @ANYRES32, @ANYBLOB="00000000000000025c00001164b9c78334f9c300028106e35cbac6f7419179cdfcda51f6e917686dd813ee6220d0123d23ec320143fccc6c4b586b56fc478999dcb1a2ec1bda24388f91307a3462fd0a", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$OCFS2_IOC_UNRESVSP64(r2, 0x4030582b, &(0x7f0000000180)={0x2, 0x0, 0x3, 0x2, 0xfa, 0x6}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) socket(0x200000000000011, 0x2, 0xd) socket$inet(0x2, 0xa, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r4 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x7, 0x3, 0x8001, 0x8, 0x6, 0x5, 0x8}, 0x0) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001900010900000000000000df02180000fee7fe01000c000008000100ac1414"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) 1.79222041s ago: executing program 4 (id=7561): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000016c0)=[{0x48, 0xc0, 0x38, 0x7}, {0x6, 0xfc, 0xa}]}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="ad56b6c58206007e4af65430442b25b36f0000000054c7be", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_SET_INFO(r2, 0x0, 0x20000001) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000a80)={{{@in6=@mcast1, @in=@remote}}, {{@in=@multicast1}, 0x0, @in=@remote}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000006f40)=[{{&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000a00)=[{&(0x7f00000004c0)="b3d8d19ca749da0178df38fc1d515ef75a628ae91fd558066c34fd458a6da80dc4b4bf2409a54e40ff31fd930c732a6406058037810cd0bcc18a8b00b496a67ecf4e18aa364c109b2f269736b043c2f7eee26eedbe10275fc88c6f414fe70788fb139cf3a313472ab658672f6c8df6c97ea62f21f6b8bc4d4155e2d6b5c8fba26e0c750e04af867f1a1fc0ef8c70bc869a11ae14637edb69175b4cabb9cf457b3e2094a0186a262bbde237af0a9368f2c400cbef84bde46151d098e376149244c0b7dcc20d00e9d3872ce91d5d6c637cb751e694888894", 0xd7}, {0x0}, {&(0x7f0000000680)="06d61f84e392e8b87cdb2017b52cdbf67e69f47feda6fc2b1c4c2e606b66505f4e1bf46799a695210aaa3147e4d52c71f6a75a0ccebdabb973f4c6f90ec16daaa1447b9a6820b50f9fc1c83c55322a2c4e069db9710886240033b950aa906792afe77748839cb02a7680e9a510fbfe9cc9e2935be287cf72c1119eb93a8eda2520e6bf56df7b9b39ed9f44f346d6884d3f24b3c01ef117b1e8d21647be7d5b0384cdd4b60b77e8e4999590c15ea069a5988df675d47da7544ea518c31fa20ac47e53eca32d98c27932837285737ec3425aa461ca1e9f", 0xd6}, {&(0x7f00000002c0)='6', 0x1}, {&(0x7f0000000780)}, {&(0x7f0000000880)}], 0x6, &(0x7f0000000dc0), 0x0, 0x80d0}}, {{&(0x7f0000000ec0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003440)=[{&(0x7f0000000f40)="ca614b332f53814d3b46e7f83f3bd4e4dbe8aae058c269be2aeb8fd0ca70d1c68f7fa074fd6b64877d219b439981b6005df5b33f59e68536fcfd11a79c909d4373a6cd6d530932d1e4d0ea0385ca3216a43dc7793cd1eabf5e921d641a3ca6b2c3c3ed10d0010ce9fb2a007ab247633f4ef42cc1509879bc177ff08c5e867be660a69b1b811ff806362caf4c19770072d463dcbf9d0948e6dcf969ce29cf074a57ad2e4d23ebee84cf94169c64942e6f56bf577c94b3915d9404405d389c844e94", 0xc1}, {&(0x7f0000001040)="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", 0x800}, {0x0}, {&(0x7f0000002240)="1e4962967ed0be0660650923434b2ea351f8ab71331c907b84030b657593ffcad1f43703ef203ef4e33e8ba516358fb8d80a525782bccd0b0d987e130f761321a5f570c73b15883bedcb85e8736dde4e2248fe01282be0b34d3ed1617721ac9cf4d468cfc7df7802c2cdda76158be0391f3c4d6b862586a415820f69b43eeb11e00730d0e254d63d1d7063a5bafe4a9399a0e694e1c817834e95b6bcea8caab5cc4d0d1ab66e422e0309ee156a68339ae0a73d44f3eed2b300e2ee8090b4172ab01568d6e2ea80e5260ff207b980dc7a478e745b19aa4a0cdb9c75b11d3ee2372729b4b673f0e6594f893b36547915236daef5dd0c2c9c791fdb994a482502ddab8514d0795005a81afd237d0272c6a466fc0fc2880838f264050d588dc7e4a089d57e98d10a2272efd0d7953fced952d569347f62450079250945f6206c50c7db67a0b06c97168f996a235881e12548f8e9790a5126cc6c9f824f5d36e755352a4b6c8fe33e83f9fa34356022a27d01a2763eec4fc6cd4cf1cc6dd4409919ab86b145d53eacd1e2d3a3572c1638d17e692c0613a7dec3b92859169a26d44f42fb6a4e21a5cd3e7c14b3015577bc5943c457651927d87fef2820c4bdc5484db2e792c7b03f5657ac8d320087cdcb21b6af0af4c39ea058b14e3fc1335c3d42491b44f1f33ca8158a45ead3dbe4e7cb6e4bee000b9238508c6e141d334cab64b81773809cf9a1a2355f1adb1f26717dfde292eee65dd66c5b26d23bf6160c3f4a8f82a49ad4a76efa386bf1aa337c8d1073b673a42c5d16037539ddd5399da62e4d03d725728de1799d37e8b5f22b3b626ed598514ba708769b94a0af59397a43925b80f8db0f2c2cd2a9a692a9648aa62ed5bda0ab73ba08fc059aaaf3226c4ff6d97a2e0d8dbab18b7c718309cf51f1b5d909c7910bb8df7a52b667a32a597773d9f441292f1ab184ae428a070423718afa6b774d86818bbbe614797723594e172c262df89fdb42bc0397d949a6826def34fd4ed6c6fb6c2e9d9cb5c5b8dc01bde0dbd71875de7521b1e47b31a7d1dbe901d9d3bc542b6320fca6bd678e9d97bc5809b77ad56654965c29879b7f45455f55b7738acc55a2184e9b6cd43e9c2e124b69d1d1ddbb926a19d9f477f38687d903debe441eb34997ad1d0fe815b4b53a276ce79413b7668db16f314e4ec113dd43e1e4520e070155378230daf409e7e883a612a2504f2273bf12a22220dde13fa11d080014029032df0133598d05137cac6e8faacee6a9d8d39bd979cd7442b92a58dc730d06e0bad17391f059972d595589755fa89b514a9eab3849c8735260ede44568f59cb933d30b78715c394dbdf7894fb5d07f7cbff046361bf424fbc4561976f3c6eccc0e29d7d7736252081f340a3cfba7a8cf1086c9b3ee9737452ec3f383b5db2f06ce384c0a4f81e9cd4538237fa1fad1401622511d7ac1d161ee21723090f9c58e755a1aefd0e9322dd72606f7cae279e3d518d56937f5f44c38070e07722a8f09d22b4c3631b93ca1cccbf61b6659a9f9336a8902f7b384ffa33a33ff1fe5a0257baae4bcdcb306d8875ddfdb85f443671c3056a8a257f2eb79d66a03e90eab76f5afb528ae616a6d63e43bf2b06e0f3afc248935afe69d79caef519bedc1d15ce3b6a8d5761ffcc246904fca695587a317a28665bd2bbc0603f1a7d51c681f36e5ea4e0571c30b05ade1e5bf5494226e62da65b4ddfb0367237a9835c270d97c815a9b3a5888441bd43e842603ae7777497fade1a7c55408e128fc9c48b3872322c7ed6ddd480eab1e22051db2cf8db3b411c2530f72f374c7b1af700522858d262b9bc841d310e98e154e6ad06b3b82920c34639653562261d575dcbec54fa88171ce9b2214f7b22c14de277d50a0b0bbb7a77ede029426a3a59eb36f91bdcaf6da28f090944b4058acf2add5853a3682a5327f3c22f8662e3fd16aa7db965cb5b89c2ae73f850437e2a73ce0a4a11690cfa32c1c35e8447041a2801064b7a6e81a33724a639cd7a136d6e5aea4285e0d53e7f7243833d9052774a2d87157dcdb99d3605ac613a489a90449256c8a93f5f78c70254fa54ba6cbeae6d45625544d630dbe41e20f7f14910a4304a919b2501d331408cdcbfd452d1af8340a8e3149bc119d3b3ef2ad5e6b9e5b45e304d1c1cdff3635509a6f9803686d124e88c187bf8934af48c0b06c51006541859e457d6d61b7bd66cfd43fa78b4230bc3749ab69e4a7c5e85b76576c11708466955f2e4b24bc335959257620979402ac566fe807c2f6ffc8d0da5fc7243fad41d1d4ec47f8a2b262f63a62cadd82a79a14af909c9403686f4fd08c35379b4c20be6c748b21d41fdb8cbe0c45ea1a6670ae7342dc05d5e558d7b40f675d08d9ba5deb11711c2b26cf633f12d435f6cb4fc9a309f20fc4ab2a11bb37e402fa961cd9730d314275b84cb28c7bf4aced58d1e27f42ab203bd290bc082fe2bd9a54e3912279d798bca5df5cd96e652df704d605fc68f9f2aa34048f118e95f8844ebcaea6d4cf22cec9f744f69f0540bbc3641aeabc0fd271fa405648517ec3bd0234bdeb9bed746630b3b0e42b0486c3d51a02209f19a7ba3f0181a413c4ce8ff0a83480c9594b8b6c1af13d9e530959230c89b7261cb80204420478487b3e49638f600a80ab5bd169f23c978b0f372a6233cef8ff87103976c24c844fb135adede21ca6bbc5ff2b56bf91b1a60111f5609bc83fdd432744e8168eb9d2eb6d676a06206a2be95be4d87a7f7a5aae1acc9a978454c53962adbf710fbbeb04820b7c05854b493c714be6a3903ffa084eaad62d788e2ca95b29b53d51e96f23308d92fae8724fe5d73c70bad42d4ad162cefe0c89793cac49e32042b7fd10454bdc9b2d34124f4ff016e268de94390237d0f6a5998940a72f7c95dc9bce9fa34f66274ef710e2497ff8c19f8cfd133b64971427890a4ea8acb6493f32c47635478b6cefcc523ed32daf880bffc6d12dbc039a7fd97d3ddbf786c95fc74fa83daf4e3d28de4b842652ed539fb19d7bb0e85098ec51e8ca09df0b1a2aa3a9e88c7479af01784c65613ecda045978b2cdbf36669252cc8109f6cc514b235e81db772965cf6fbf78a02ff5a9d413c04da697f6f13c0750972ede05baca854de427eeec70e6c6b719bbddc140fb5ac7286c88729a590b515e7dd40dabb36741d7432a49bca9599ed1a4e7d7b0541fb5d2f593d97fd416d2a4f54babd95486fe494a7da3c885cf89beb59d770b28481c9d2463b172b65d13e055f149b41f32316793bfdcdedcf19a6bb821de7c9476916c24c91a83709ce3abb028452887ea8bbdfd0d5b97aa54a02e2e7655295a519a02aa32c4c6171eb354b307d62b4171c8d5bc9b20abf4925ae4c5faac17d0d556654e9f873b357129a5b57984d2da9e7021c3e6eea8556d7ecd53e6f10beca0ecfae6f4f4a93b22218650c1c7ecf21eaaa50fa6be40e9ea5f6215b2bd9df05efd43c261195a3e6ad22134205049ca2ba857f18b3e3ff73cbf5b5cdbe494ee93fe0ee79a851fadd646af8acf752d75b39fb23bb76740cc13771dae709979a4ce71a1f8627053793d577304192659293face499cc1a79d1eab9914ab39933814c2c993af7474d40db0bdd54d0697e2c2406dce5451b71cb0b01a7b76aafb3fd2331e1fc8e5d4fb665d454f17acd2251a31d839f3da23a21f7c1d1f933ff50c5dabf38d429ed3c5041f86af2ccb86944ca329e5757fc87a96843b843c4760ca93ac5690939aa8b058d265557cdc3f9e19dcf50aa44f1fc1ab67f4e3da4f59edb9a6fb3d80d682120f60269482f4b84ff08f8404f6fabc39600460eb93bca48acfe8bbd80cfe0563e81be3d119e2f439a7549811eb754ebd81313148663059a34e40363668694ccf515b95ff95d9d874f292286d63f258537329c9cc377a97986ee766d71622df993889481147ad1d49d03505d2921d83fb328b607a309b2fa7cf97d437c80cd56813271d86f406e53b8df30548827783e03f7e4c7bb162154c8e35c636557df647d2c598f8bb516531b4f0a850c363b06995537793cd92b21321786032778ad864104acc72da51d53d7c42409b677f272fbd9f0adf879c7e0a1616756f218caa2d4bd4899a99d78954eda925918e608877c9fe8ee87264a58707309e419b4c872990e523f7682dd8d7957586cc133a50285c12430dfad48a5d6991b92831435b2e25954f9169f571bba65c44858a17bd4e899668427bda60028f0da9810a5e28a5d01b8c89e1b35e028b515c75a452eea2a73d31d36ea597a383c14097bdad860a758c8fd6e8b64ab98218376042fb307d3f2eaba43c218d2239a5712ce327c069a8559ea27f3438d2625417eceaac0c493309dceb453e55ce7a6de17ef0d3726045aa77f87204397186895882acca89b87f43a0800152ecb219cf102f78c89b443e0c84b9253325460eefc1fdf41e28f610a95e77ab6d89ea0046d5f010dc5335df7b7458e51e7e404a83e4c9c1d8a95ade6550004594175b870cc9ee77625ceed50f4ea5954589bfb8e06a921cbfefa7a6ad05b6375e3935838902c96be6005548e3c16fd98069d70192772fa7fabdf1b2611a8bd9cabf0468fcedd72032c71621efebe41fba7879de84184dd12920d30dc5fe67d83aa017a9868edd4b2765fe02cdd2b4c826f4883208c6379279e7e70ed67723928c4019a13ef0445e475f18992200c586305a3476d1b75ca131e5419bd99e04d3d8d78612998a7f55367b5da5c90871c51eb24760a3db44714826e6890e76af720a9da759ec616fa48c63c241c854e82d1e9cbce71fa1a24cfcc3cdcf9e86b45455dbf4dee2278909c9873b1e2e30527e90a916de058e576793bd93b42bf626bafb6b0c7611b93a47b7207c20775d0c52abc5cc4c305c8c5128cbf1414da21b374859ab381913e11cf424fff17220e0070d9bb677c3246a489216bef453c3490c578a7fed760298bc512808c63cfcb363621eadae8e8e7b38a8aa9114afd85e49c44280aa7dc6b39a5853b0b930bd6794b012368d30", 0xdff}, {0x0}, {&(0x7f0000003340)="3296f513425336e85d562d9ba80dfc0c859ed4a5b2e0bed15c9e4bc1c9b83883ddabe98a62e846679a6219d3b836e443c6047d4f343cbb1b2b952709cff5bb066da9469aba5a11c62edc7a22115aea31a28c752a81cd4bede26735ec58ba9cb3839dd40bcee9456419b6297cf770c1cc3241554aec80f9fd81aa0e1941de19950f509611834da4ac74ea3cb69b3ed420adbcd3ac92c9626f402eba79bb8922d954aabb1f9c02cf73fa209e1782917c36ea16fc2e88f1d2634f66aef9917ce83d9e25d87f8606e2a85a92fb46b98a9b1356f3aa1b772e84e473ae0707db53fc388b358bb1a36b3906bd8d451fc4", 0xed}], 0x6, &(0x7f0000003740)=[@rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r2, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0xb0, 0x80}}, {{0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003840)}], 0x1, 0x0, 0x0, 0x4000840}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004400), 0x0, 0x20041040}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}}], 0x5, 0xc000) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) sendto$inet(r3, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000540)={r5, 0x7}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000100)={r5, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000040)={r5, 0x8000, 0x0, 0x9, 0x521}, &(0x7f0000000100)=0x18) write$ppp(r0, &(0x7f00000005c0)="3600f449666170", 0x7) 1.752552378s ago: executing program 1 (id=7562): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x6, @private=0xa410100, 0x4e21, 0x2, 'sed\x00', 0x2, 0x80000000, 0x68}, 0x2c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x60}, 0x1, 0x7}, 0x4000040) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) shutdown(r5, 0x1) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000240)={0x4, &(0x7f0000000140)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x50}, {0x6, 0xba, 0x2, 0xefff}]}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000042c0)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r9, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000001b40)={r12, r8, 0x0, 0x1000, &(0x7f0000000b40)="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", 0x5, 0x7, 0x9, 0xffff, 0x1000, 0x2, 0x4000000, 'syz0\x00'}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1.694105408s ago: executing program 2 (id=7563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="300000002c0007012bbd7000ffdbdf25067c0000080001800900000014000380100001"], 0x30}, 0x1, 0x0, 0x0, 0x10000004}, 0x2000c800) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) 1.462485733s ago: executing program 2 (id=7564): r0 = socket$netlink(0x10, 0x3, 0x13) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x10040) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x73, &(0x7f0000002080)=ANY=[], 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="0e0000000400000008000000070000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES8=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000c509f000000000000000d08f3f66193d435270f86d600c413d097532a4455182f470d58f0a95038759f62fe767a35f8d8eda15def0d103d5f84d8f62276789381705264c899966a25bfc41dd8808768b553032d0ceabd9ce1295c56520d6bbd6e2d8c7"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r3, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60000800}, 0x20000800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000400)={r4, &(0x7f00000005c0)='\xa7\x80\x11~Jq\x1d*\x82\x00\n,\xa1\x12 \xb0|9\x05\x90HG\xc3=9\x02\x00\x00\x00cE\f\xd9}{\xee\xce\xef;0\n{\x9a0xffffffffffffffff}, 0x0, &(0x7f0000000700)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYRES64=r7], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ec0)=ANY=[], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.339440263s ago: executing program 2 (id=7565): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x8, 0x200006, 0xd, 0x400, 0x0, 0x3, 0x5, 0x10000, 0x7, 0x4, 0x81, 0x0, 0x8, 0x0, 0x9, 0x5, 0xc0000, 0x8001, 0x1, 0x2000, 0x1, 0x8da5, 0x1, 0x4, 0x2, 0x6, 0x58, 0x7, 0x6f, 0x8, 0x3, 0x4, 0x9, 0x1000, 0x4, 0x9, 0x6, 0x80000001, 0x3, 0x1, 0xd4, 0x100, 0xa, 0xfff, 0x8, 0x9, 0x7, 0x7fffffff, 0xf4b3, 0x1, 0x0, 0x8, 0x8, 0x6, 0xd815, 0xfffffff9, 0x2, 0x401, 0x9, 0x36, 0xf, 0x74, 0xbbc, 0x9, 0x0, 0x6, 0x8, 0x5, 0x6, 0xb, 0x5, 0x5, 0x4e3, 0x200, 0x0, 0x9, 0x8001, 0x2, 0x1000, 0x7fffffff, 0x46a3, 0x6, 0x2, 0x1dd50645, 0x401, 0x5, 0x101, 0xbf, 0x0, 0x9, 0x3, 0x65, 0xffffff13, 0x2, 0x30, 0x1a3f, 0x2, 0x389c, 0x4, 0x3, 0x3ff, 0x4, 0x4, 0x6, 0xf3bb, 0x1ff, 0x8, 0xf, 0xb, 0x401, 0x4, 0x1000, 0x1, 0x8, 0x1, 0x7ff, 0x7fff, 0x8, 0xd, 0x3ff, 0x4, 0x1, 0xffff, 0x7fff, 0x2, 0x9, 0x1, 0xfff, 0x0, 0xfffffffe, 0x4, 0x0, 0x101, 0x78f0, 0xf, 0x7, 0x0, 0x3, 0xf1c7, 0x100, 0x3, 0x4, 0xfffffffe, 0xffffff7f, 0x3, 0x8, 0x6, 0xd, 0x3, 0xa, 0xd0, 0x200, 0x0, 0x400, 0x9, 0x6, 0x132f, 0xaba3, 0x1, 0x3, 0x1, 0x5, 0x6f788000, 0xc, 0x1ff, 0x40, 0x8, 0x3, 0x2, 0x1, 0x0, 0x71, 0xb13, 0x4, 0xbc5, 0x0, 0x7, 0xffff, 0x100, 0x7b58, 0x1, 0x807, 0x1ff, 0x3, 0x400, 0x80000000, 0x1040, 0x3, 0xfffffffa, 0x9a5, 0x8, 0x5, 0x1, 0x9, 0x3, 0x9, 0x7, 0x3, 0x1, 0x101, 0x2, 0x6, 0x598f, 0x5, 0x8e, 0x0, 0xa, 0x9, 0x1000, 0x8, 0xd00f, 0x2, 0x1, 0x6, 0x2a, 0x7, 0x100, 0x24e, 0xbd, 0x2, 0x2800000, 0x807, 0x0, 0x401, 0x6, 0x2, 0x9, 0x7039, 0x4, 0x1, 0x9, 0x1, 0xb18, 0x2, 0xfffffffe, 0x26e, 0x6, 0x5c, 0x8, 0x100, 0x3ff, 0x1, 0x0, 0xb, 0x10000, 0x8, 0x6, 0x2, 0x6, 0x7, 0x2, 0x7ff, 0x1, 0x4, 0x8001, 0x3]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000200)="2478546ca4fa3b0bfe4ddf30cc5a", 0xe, 0x4000050, &(0x7f00000001c0)={0x11, 0xf7, r7, 0x1, 0xd8, 0x6, @multicast}, 0x14) (async) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414, 0x0, 0x24}, 0x28) (async) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) (async) r12 = accept4(r8, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000440)=0x80, 0x0) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r13) sendmsg$TIPC_NL_LINK_GET(r13, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000500)={0x14, r14, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}}, 0x44000) sendmsg$TIPC_NL_SOCK_GET(r12, &(0x7f0000000a80)={&(0x7f0000000480), 0xc, &(0x7f0000000a40)={&(0x7f0000000700)={0x314, r14, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc0, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5cc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1004c}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff8001}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6e7a}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffeff}]}, @TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6ff1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_NODE={0xa0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e5058e5e6b19f1491c943fb0c8ba86b4afabed70"}}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "4ee888f3952f6527798296a540000303d7bc9b0a70"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd35}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7c6b}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x14}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}]}, 0x314}, 0x1, 0x0, 0x0, 0x803}, 0x4080) 1.167209156s ago: executing program 1 (id=7566): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001280)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x4f, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 1.105433871s ago: executing program 0 (id=7567): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x2001001000000000, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f00000003c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000600)={r2, 0x9}, 0x8) getsockopt$PNPIPE_INITSTATE(r3, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) 1.023124722s ago: executing program 1 (id=7568): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r2 = accept4(r0, &(0x7f0000000100)=@hci, &(0x7f0000000180)=0x80, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r2}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c841}, 0x40) write$rfkill(r1, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) 1.022816644s ago: executing program 2 (id=7569): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @empty}, &(0x7f0000000080)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff858500000073000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='d\x00j\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff00000000370000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000300020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000"], 0x64}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x400d0}, 0x8) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf2530000000080006000000000018000180140002006272696467655f736c6176655f31"], 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x800) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x3c, 0x0, 0x7, 0x3, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400}, 0x8) 1.021894218s ago: executing program 3 (id=7570): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) read(r0, &(0x7f0000000340)=""/13, 0xd) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150005010000000000002000e000000200"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"], 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_vlan\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) accept(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r2, &(0x7f0000000440), &(0x7f0000000040)=@udp=r1}, 0x20) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x14}, 0x20) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000340)) preadv(r8, &(0x7f00000003c0), 0x364, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) 967.259691ms ago: executing program 0 (id=7571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) shutdown(r2, 0x1) getsockopt$bt_hci(r2, 0x84, 0x6c, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x5], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f72"], 0x58}}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000007c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0xd, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100070000003400078018000180140002011dd56c000000000000000000000000bb060004400e1f00000500070088000000060005404e2200"], 0x5c}, 0x1, 0x0, 0x0, 0x100000c2}, 0x90) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000840)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xfff3, 0x7}, {}, {0xfff3, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40, 0x2, [@TCA_CGROUP_EMATCHES={0x3c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000080}, 0x40010) 925.0001ms ago: executing program 1 (id=7572): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1, @ANYBLOB="fb67b3a1e6dc0abdeadeec9f4fb082952ba8c892525c67263d91005bf878061d26ba85d3748309dc4023a2f65e23a8665d09975a3cb4fe116b0fbcd8439f8efa3b6e8c0fb892b3e19f6f1fe88c2c2e9dd539e8bc8a0339c06328b370150d78d08e3d613105e9bcd94163d914b111452b325efb967b925f462e81fe89ca4627af70a05aeda8d8c6", @ANYBLOB="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"], 0x7c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$igmp(0x2, 0x3, 0x2) sendto$netrom(0xffffffffffffffff, &(0x7f0000000440)="f0af1f22b1385d6b0be742fdb5b9b4d44120f393437f3d9608caa951b5f632871017115c73e57d6f675cbc59cc647f13454556749b917a9a9caf1194421f1efe8d01e74cc48af53ed1b1d3f3e906cffee1de189f33257223c72e80776c42d52855931379697f531d3768b73152ad1a0c07ef73eacf83865a6e88b93e1311e5fb943cfaa06723d473a2c01780303833cc4d0a8ab9f2c638462dd4b74f4957217ca8f782064b2266500d9d9acbfefc5a193ffc0d9c71bf5a7147f25755e942d4e0107ed39127968fa9d3b46cc9aab9f0639443532cf9d19d5588dcd50895a9405a7dd0e0", 0xe3, 0x800, &(0x7f0000000640)={{0x3, @default, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) sendto$netrom(0xffffffffffffffff, 0x0, 0x6c20, 0x881, 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1c}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x4}]}}]}, 0x154}}, 0x20000004) r7 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000140), 0x4) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33) ioctl$sock_ax25_SIOCDELRT(r4, 0x890c, &(0x7f0000000180)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bind$bt_hci(r2, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="23000300010007", 0x7) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000240000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000f5"], 0x74}, 0x1, 0x0, 0x0, 0x20000841}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c00018006000600050a0000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="6a5b677e00ebffffffffffffff00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r9, r9}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x11, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x8d80}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, 0x0, 0x0) 775.025432ms ago: executing program 4 (id=7573): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2a202, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="240000005800410f9c00f4f90085b3a85c91fddf08", 0x15) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x8c, 0x30, 0xb, 0x5, 0x0, {}, [{0x78, 0x1, [@m_ct={0x74, 0x1, 0x0, 0x0, {{0x7}, {0x4c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_MARK={0x8, 0x5, 0x6}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x1, 0x0}}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) openat$cgroup_int(r1, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f00000000c0)={0x170002013}) socket$inet6(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x38, r6, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x212, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffc, 0x42}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 3.064756ms ago: executing program 1 (id=7574): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x5120b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x66f31}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_TTL={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x58}}, 0x2000000) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x40, r3, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1f}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @random="fefca5837ecd"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40002}, 0x40) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000006a0f0000000000000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000d36b7040000000000008500000033000000850000001100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 2.378482ms ago: executing program 2 (id=7575): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'blkio'}]}, 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x20040004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020605000000000000000000000000010500040001000000050001000700000014000780080006000000000508001340000000060500050002b446400009840768e7797a300000000012000300686173683a6e65742c706f72740000"], 0x60}}, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000080)=""/250, 0xfa}, &(0x7f00000001c0), 0x1f}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'blkio'}]}, 0x7) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x34, 0x18, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffc}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x20040004) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x40) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020605000000000000000000000000010500040001000000050001000700000014000780080006000000000508001340000000060500050002b446400009840768e7797a300000000012000300686173683a6e65742c706f72740000"], 0x60}}, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x19}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5758661d46}, 0x4) (async) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f0000000080)=""/250, 0xfa}, &(0x7f00000001c0), 0x1f}, 0x20) (async) 0s ago: executing program 3 (id=7576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, 0x0, &(0x7f0000000040)) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x7800, 0x8000, 0x1, 0x5, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x4003, 0x0, 0x1, 0x4, 0x0, @local, @rand_addr=0x64010101}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @local, @loopback}}}}) (async) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c0002800800014000000011080003400000000508000240f9ffff0214000000110001"], 0xdc}}, 0x0) kernel console output (not intermixed with test programs): 6395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6254'. [ 717.489320][T26395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6254'. [ 717.498809][T26395] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 717.555025][T13895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.565172][T26402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6256'. [ 717.574529][T13895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.647703][T26407] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6258'. [ 717.665723][T13895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.676902][T13895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.797824][T26424] block nbd0: not configured, cannot reconfigure [ 718.386520][T26447] geneve1: entered promiscuous mode [ 718.492787][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 718.505298][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 718.521477][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 718.534002][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 718.549965][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 718.761432][T26463] __nla_validate_parse: 5 callbacks suppressed [ 718.761450][T26463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6271'. [ 718.852499][T26468] netlink: 'syz.4.6272': attribute type 3 has an invalid length. [ 718.891205][T26468] netlink: 'syz.4.6272': attribute type 3 has an invalid length. [ 718.965815][T26468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6272'. [ 719.036845][T26472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.110792][T26454] chnl_net:caif_netlink_parms(): no params data found [ 719.144384][T26478] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6274'. [ 719.180835][T26478] netlink: 'syz.0.6274': attribute type 1 has an invalid length. [ 719.216601][T26472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.386203][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6279'. [ 719.397776][T26472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.454787][T26495] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6280'. [ 719.487520][T26472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.568700][T26454] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.576223][T26454] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.583998][T26454] bridge_slave_0: entered allmulticast mode [ 719.592188][T26454] bridge_slave_0: entered promiscuous mode [ 719.611271][T26454] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.618625][T26454] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.626245][T26454] bridge_slave_1: entered allmulticast mode [ 719.634090][T26454] bridge_slave_1: entered promiscuous mode [ 719.704220][T26454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.722640][T26454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.780463][T26501] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6283'. [ 719.796568][T14319] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.891710][T14319] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.912833][T26499] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6282'. [ 719.926710][T26454] team0: Port device team_slave_0 added [ 719.936821][T14320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 719.948355][T26454] team0: Port device team_slave_1 added [ 719.954519][T14320] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 720.029770][T26454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.042724][T26454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.074863][T26508] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 720.084173][T26454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 720.135342][T26454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 720.143614][T26454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.169930][T26454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 720.324713][T26454] hsr_slave_0: entered promiscuous mode [ 720.347195][T26454] hsr_slave_1: entered promiscuous mode [ 720.365192][T26454] debugfs: 'hsr0' already exists in 'hsr' [ 720.399766][T26454] Cannot create hsr debugfs directory [ 720.534873][T26536] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 720.570739][ T5839] Bluetooth: hci5: command tx timeout [ 720.598436][T26542] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 720.622194][T26541] vlan2: entered promiscuous mode [ 720.627565][T26541] vlan2: entered allmulticast mode [ 720.633109][T26541] hsr_slave_1: entered allmulticast mode [ 720.925248][T26556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6297'. [ 720.969764][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.019083][T26561] netlink: 'syz.1.6296': attribute type 8 has an invalid length. [ 721.070981][T26561] openvswitch: netlink: nsh attribute has 5 unknown bytes. [ 721.088681][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6296'. [ 721.133424][T26561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6296'. [ 721.242624][T26568] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 722.005000][T26454] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 722.037491][T26454] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 722.059148][T26454] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 722.080244][T26454] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 722.282158][T26597] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 722.368096][T26610] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 722.454377][T26454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 722.522959][T26454] 8021q: adding VLAN 0 to HW filter on device team0 [ 722.554616][T14325] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.561906][T14325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.604752][T14320] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.611982][T14320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.634537][T26591] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 722.650501][ T5839] Bluetooth: hci5: command tx timeout [ 722.651906][T26591] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 722.680663][T26591] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 723.038371][T26632] FAULT_INJECTION: forcing a failure. [ 723.038371][T26632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.120101][T26632] CPU: 1 UID: 0 PID: 26632 Comm: syz.2.6318 Not tainted syzkaller #0 PREEMPT(full) [ 723.120129][T26632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 723.120142][T26632] Call Trace: [ 723.120150][T26632] [ 723.120158][T26632] dump_stack_lvl+0xe8/0x150 [ 723.120190][T26632] should_fail_ex+0x412/0x560 [ 723.120221][T26632] _copy_from_user+0x2d/0xb0 [ 723.120243][T26632] xsk_setsockopt+0x43d/0x990 [ 723.120269][T26632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 723.120296][T26632] ? __fget_files+0x2a/0x420 [ 723.120321][T26632] ? aa_sock_opt_perm+0xff/0x1a0 [ 723.120358][T26632] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 723.120379][T26632] ? __pfx_xsk_setsockopt+0x10/0x10 [ 723.120401][T26632] do_sock_setsockopt+0x17c/0x1b0 [ 723.120428][T26632] __x64_sys_setsockopt+0x13d/0x1b0 [ 723.120455][T26632] do_syscall_64+0x14d/0xf80 [ 723.120479][T26632] ? trace_irq_disable+0x3b/0x150 [ 723.120494][T26632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.120511][T26632] ? clear_bhb_loop+0x40/0x90 [ 723.120532][T26632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.120548][T26632] RIP: 0033:0x7f0ae0b9c819 [ 723.120564][T26632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.120579][T26632] RSP: 002b:00007f0ae1ae8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 723.120596][T26632] RAX: ffffffffffffffda RBX: 00007f0ae0e16090 RCX: 00007f0ae0b9c819 [ 723.120610][T26632] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 723.120620][T26632] RBP: 00007f0ae1ae8090 R08: 0000000000000020 R09: 0000000000000000 [ 723.120632][T26632] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 723.120643][T26632] R13: 00007f0ae0e16128 R14: 00007f0ae0e16090 R15: 00007ffe04d9ce88 [ 723.120671][T26632] [ 723.375208][T26454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 723.386407][T26637] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 723.478135][T26644] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 723.582482][T26643] bridge1: entered promiscuous mode [ 723.587746][T26643] bridge1: entered allmulticast mode [ 723.613452][T26643] team0: Port device bridge1 added [ 723.820273][T26648] bridge0: port 3(team0) entered blocking state [ 723.827013][T26648] bridge0: port 3(team0) entered disabled state [ 723.834120][T26648] team0: entered allmulticast mode [ 723.852364][T26648] team_slave_0: entered allmulticast mode [ 723.872556][T26648] team_slave_1: entered allmulticast mode [ 723.894031][T26648] team0: entered promiscuous mode [ 723.909411][T26648] team_slave_0: entered promiscuous mode [ 723.919997][T26648] team_slave_1: entered promiscuous mode [ 723.928434][T26652] __nla_validate_parse: 4 callbacks suppressed [ 723.928455][T26652] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6324'. [ 723.963853][T26648] bridge0: port 3(team0) entered blocking state [ 723.970251][T26648] bridge0: port 3(team0) entered forwarding state [ 724.022173][T26454] veth0_vlan: entered promiscuous mode [ 724.052427][T26454] veth1_vlan: entered promiscuous mode [ 724.125000][T26454] veth0_macvtap: entered promiscuous mode [ 724.143191][T26454] veth1_macvtap: entered promiscuous mode [ 724.152608][T26660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6327'. [ 724.178023][T26454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 724.197225][T26663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6329'. [ 724.201427][T26454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.227217][T14320] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.236471][T14320] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.252781][T14320] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.264948][T14320] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.319323][T26667] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6330'. [ 724.360155][T26667] netlink: 47 bytes leftover after parsing attributes in process `syz.2.6330'. [ 724.390695][T26667] netlink: 'syz.2.6330': attribute type 6 has an invalid length. [ 724.399838][T26667] netlink: 'syz.2.6330': attribute type 6 has an invalid length. [ 724.439280][T14319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.467174][T14319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.525482][T14320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 724.538425][T14320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 724.731312][ T5839] Bluetooth: hci5: command tx timeout [ 725.537241][T26706] xt_hashlimit: size too large, truncated to 1048576 [ 725.816365][T26714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6343'. [ 725.830524][T26714] netlink: 'syz.4.6343': attribute type 25 has an invalid length. [ 725.838501][T26714] netlink: 'syz.4.6343': attribute type 29 has an invalid length. [ 726.189837][T17442] IPVS: starting estimator thread 0... [ 726.201617][T26733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6351'. [ 726.254571][T26733] bridge3: entered promiscuous mode [ 726.260826][T26733] bridge3: entered allmulticast mode [ 726.262317][T26739] netlink: 'syz.0.6352': attribute type 11 has an invalid length. [ 726.268812][T26733] team0: Port device bridge3 added [ 726.309679][T26734] IPVS: using max 30 ests per chain, 72000 per kthread [ 726.417816][T26735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 726.449301][T26748] syzkaller0: entered promiscuous mode [ 726.455136][T26748] syzkaller0: entered allmulticast mode [ 726.552543][T26754] xt_hashlimit: size too large, truncated to 1048576 [ 726.679112][ T5899] IPVS: starting estimator thread 0... [ 726.766340][T26764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'. [ 726.787944][T26761] IPVS: using max 27 ests per chain, 64800 per kthread [ 726.799356][T26764] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6358'. [ 726.810213][ T5839] Bluetooth: hci5: command tx timeout [ 727.352716][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6364'. [ 727.576583][T11679] lec:lec_start_xmit: lec0:No lecd attached [ 727.624338][T26804] syzkaller0: entered promiscuous mode [ 727.631484][T26804] syzkaller0: entered allmulticast mode [ 727.658255][T26804] tc action pedit offset must be on 32 bit boundaries [ 727.715865][T26800] syzkaller0: entered promiscuous mode [ 727.721618][T26800] syzkaller0: entered allmulticast mode [ 728.400049][T26842] netlink: 'syz.4.6374': attribute type 21 has an invalid length. [ 729.683024][T26842] netlink: 'syz.4.6374': attribute type 4 has an invalid length. [ 729.701176][T26842] netlink: 'syz.4.6374': attribute type 3 has an invalid length. [ 729.708949][T26842] __nla_validate_parse: 4 callbacks suppressed [ 729.708967][T26842] netlink: 3 bytes leftover after parsing attributes in process `syz.4.6374'. [ 729.741847][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6376'. [ 729.837743][T26859] wg1 speed is unknown, defaulting to 1000 [ 729.865536][T26859] wg1 speed is unknown, defaulting to 1000 [ 729.900644][T26859] wg1 speed is unknown, defaulting to 1000 [ 729.953310][T26859] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 730.017742][T26871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6379'. [ 730.018937][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.043923][T26868] netlink: 212088 bytes leftover after parsing attributes in process `syz.4.6381'. [ 730.056372][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.068257][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.088827][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.098804][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.123626][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.136490][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.147126][T26859] wg1 speed is unknown, defaulting to 1000 [ 730.369148][T26897] xt_hashlimit: size too large, truncated to 1048576 [ 730.620752][T26907] netlink: 'syz.1.6391': attribute type 2 has an invalid length. [ 731.027258][T26930] netlink: 'syz.2.6399': attribute type 15 has an invalid length. [ 731.143441][T26939] xt_hashlimit: size too large, truncated to 1048576 [ 731.153178][T26930] bond1: entered promiscuous mode [ 731.178168][T26931] vcan1: entered promiscuous mode [ 731.199176][T26949] tipc: Failed to remove unknown binding: 66,0,0/0:489432636/489432638 [ 731.207863][T26949] tipc: Failed to remove unknown binding: 66,0,0/0:489432636/489432637 [ 731.239713][T26931] vcan1: entered allmulticast mode [ 731.245661][T26931] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 731.266641][T26931] bond1: (slave vcan1): Error -95 calling set_mac_address [ 731.544382][T26966] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6404'. [ 731.558108][T13895] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.590497][T13895] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.608000][T13895] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.661798][T13895] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 731.695307][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6407'. [ 731.735432][T26964] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6407'. [ 731.764348][T26964] bridge_slave_0: left allmulticast mode [ 731.770861][T26964] bridge_slave_0: left promiscuous mode [ 731.776710][T26964] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.794515][T26964] bridge_slave_1: left allmulticast mode [ 731.800411][T26964] bridge_slave_1: left promiscuous mode [ 731.807124][T26964] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.827973][T26964] bond0: (slave bond_slave_0): Releasing backup interface [ 731.856713][T26964] bond0: (slave bond_slave_1): Releasing backup interface [ 731.898809][T26964] team0: Port device team_slave_0 removed [ 731.921511][T26964] team0: Port device team_slave_1 removed [ 731.928098][T26964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 731.937274][T26964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.953917][T26964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.961976][T26964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.971088][T26964] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 732.301118][T26984] netlink: 35911 bytes leftover after parsing attributes in process `syz.0.6411'. [ 732.319435][T26984] netlink: 'syz.0.6411': attribute type 1 has an invalid length. [ 732.523879][T26995] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.6414'. [ 732.555760][T26995] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6414'. [ 732.643103][T26998] bond1: option miimon: invalid value (18446744073709551607) [ 732.671248][T26998] bond1: option miimon: allowed values 0 - 2147483647 [ 732.692152][T26998] bond1 (unregistering): Released all slaves [ 732.768469][T27008] xt_hashlimit: size too large, truncated to 1048576 [ 732.809719][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5230 ms [ 732.817839][ C1] lec:lec_tx_timeout: lec0 [ 733.813895][T27051] xt_hashlimit: size too large, truncated to 1048576 [ 734.200777][T27075] netlink: 'syz.2.6440': attribute type 62 has an invalid length. [ 734.409370][T27090] dvmrp1: entered allmulticast mode [ 734.450078][T27098] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 734.808866][T27159] __nla_validate_parse: 16 callbacks suppressed [ 734.808887][T27159] netlink: 35911 bytes leftover after parsing attributes in process `syz.0.6449'. [ 734.832674][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 734.836812][T27132] netlink: 'syz.0.6449': attribute type 1 has an invalid length. [ 734.849759][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6452'. [ 735.009888][T27167] netlink: 'syz.1.6454': attribute type 62 has an invalid length. [ 735.236144][T27172] xt_hashlimit: size too large, truncated to 1048576 [ 735.451230][T27178] tipc: Started in network mode [ 735.470741][T27178] tipc: Node identity fa2327fd4f1a, cluster identity 4711 [ 735.492910][T27178] tipc: Enabled bearer , priority 0 [ 735.537034][T27179] syzkaller0: entered promiscuous mode [ 735.562109][T27185] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 735.576229][T27179] syzkaller0: entered allmulticast mode [ 735.640722][T27184] bond1: option updelay: invalid value (18446744072924056005) [ 735.648309][T27184] bond1: option updelay: allowed values 0 - 2147483647 [ 735.657874][T27184] bond1 (unregistering): Released all slaves [ 735.689764][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 735.700151][T27179] tipc: Resetting bearer [ 735.751612][T27179] tipc: Disabling bearer [ 735.769255][T27190] FAULT_INJECTION: forcing a failure. [ 735.769255][T27190] name failslab, interval 1, probability 0, space 0, times 0 [ 735.783260][T27190] CPU: 0 UID: 0 PID: 27190 Comm: syz.2.6461 Not tainted syzkaller #0 PREEMPT(full) [ 735.783284][T27190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 735.783296][T27190] Call Trace: [ 735.783304][T27190] [ 735.783313][T27190] dump_stack_lvl+0xe8/0x150 [ 735.783343][T27190] should_fail_ex+0x412/0x560 [ 735.783375][T27190] should_failslab+0xa8/0x100 [ 735.783400][T27190] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 735.783422][T27190] ? __alloc_skb+0x186/0x7d0 [ 735.783441][T27190] ? __alloc_skb+0x1d0/0x7d0 [ 735.783467][T27190] ? __local_bh_enable_ip+0xd0/0x130 [ 735.783495][T27190] __alloc_skb+0x1d0/0x7d0 [ 735.783520][T27190] netlink_sendmsg+0x5d4/0xb40 [ 735.783550][T27190] ? __pfx_netlink_sendmsg+0x10/0x10 [ 735.783574][T27190] ? aa_sock_msg_perm+0xf1/0x1b0 [ 735.783602][T27190] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 735.783626][T27190] ____sys_sendmsg+0x972/0x9f0 [ 735.783659][T27190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 735.783691][T27190] ? import_iovec+0x73/0xa0 [ 735.783714][T27190] ___sys_sendmsg+0x2a5/0x360 [ 735.783742][T27190] ? __pfx____sys_sendmsg+0x10/0x10 [ 735.783799][T27190] ? __fget_files+0x2a/0x420 [ 735.783823][T27190] ? __fget_files+0x3a0/0x420 [ 735.783858][T27190] __x64_sys_sendmsg+0x1bd/0x2a0 [ 735.783884][T27190] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 735.783917][T27190] ? __pfx_ksys_write+0x10/0x10 [ 735.783948][T27190] do_syscall_64+0x14d/0xf80 [ 735.783973][T27190] ? trace_irq_disable+0x3b/0x150 [ 735.783990][T27190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.784009][T27190] ? clear_bhb_loop+0x40/0x90 [ 735.784031][T27190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.784050][T27190] RIP: 0033:0x7f0ae0b9c819 [ 735.784068][T27190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.784084][T27190] RSP: 002b:00007f0ae1b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 735.784104][T27190] RAX: ffffffffffffffda RBX: 00007f0ae0e15fa0 RCX: 00007f0ae0b9c819 [ 735.784119][T27190] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 735.784131][T27190] RBP: 00007f0ae1b09090 R08: 0000000000000000 R09: 0000000000000000 [ 735.784143][T27190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.784155][T27190] R13: 00007f0ae0e16038 R14: 00007f0ae0e15fa0 R15: 00007ffe04d9ce88 [ 735.784184][T27190] [ 736.089931][T27192] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6463'. [ 736.098840][T27192] netlink: 'syz.1.6463': attribute type 29 has an invalid length. [ 736.120934][T27192] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6463'. [ 736.270634][T27205] netlink: 'syz.1.6467': attribute type 62 has an invalid length. [ 736.321529][T27197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.381811][T27210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6468'. [ 736.382970][T27183] delete_channel: no stack [ 736.532803][T27215] xt_hashlimit: size too large, truncated to 1048576 [ 736.561125][T27218] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 736.569285][T27219] FAULT_INJECTION: forcing a failure. [ 736.569285][T27219] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.583336][T27219] CPU: 1 UID: 0 PID: 27219 Comm: syz.2.6472 Not tainted syzkaller #0 PREEMPT(full) [ 736.583359][T27219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 736.583370][T27219] Call Trace: [ 736.583378][T27219] [ 736.583386][T27219] dump_stack_lvl+0xe8/0x150 [ 736.583413][T27219] should_fail_ex+0x412/0x560 [ 736.583438][T27219] _copy_from_iter+0x1d3/0x1670 [ 736.583462][T27219] ? rcu_is_watching+0x15/0xb0 [ 736.583486][T27219] ? __pfx__copy_from_iter+0x10/0x10 [ 736.583513][T27219] ? netlink_sendmsg+0x650/0xb40 [ 736.583528][T27219] ? skb_put+0x11b/0x210 [ 736.583547][T27219] netlink_sendmsg+0x6c0/0xb40 [ 736.583568][T27219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.583586][T27219] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.583607][T27219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.583625][T27219] ____sys_sendmsg+0x972/0x9f0 [ 736.583649][T27219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.583672][T27219] ? import_iovec+0x73/0xa0 [ 736.583690][T27219] ___sys_sendmsg+0x2a5/0x360 [ 736.583711][T27219] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.583759][T27219] ? __fget_files+0x2a/0x420 [ 736.583780][T27219] ? __fget_files+0x3a0/0x420 [ 736.583806][T27219] __x64_sys_sendmsg+0x1bd/0x2a0 [ 736.583826][T27219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 736.583850][T27219] ? __pfx_ksys_write+0x10/0x10 [ 736.583873][T27219] do_syscall_64+0x14d/0xf80 [ 736.583892][T27219] ? trace_irq_disable+0x3b/0x150 [ 736.583906][T27219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.583920][T27219] ? clear_bhb_loop+0x40/0x90 [ 736.583937][T27219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.583950][T27219] RIP: 0033:0x7f0ae0b9c819 [ 736.583964][T27219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.583977][T27219] RSP: 002b:00007f0ae1b09028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 736.583993][T27219] RAX: ffffffffffffffda RBX: 00007f0ae0e15fa0 RCX: 00007f0ae0b9c819 [ 736.584004][T27219] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 736.584014][T27219] RBP: 00007f0ae1b09090 R08: 0000000000000000 R09: 0000000000000000 [ 736.584023][T27219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.584032][T27219] R13: 00007f0ae0e16038 R14: 00007f0ae0e15fa0 R15: 00007ffe04d9ce88 [ 736.584053][T27219] [ 736.985076][T27230] netlink: 35911 bytes leftover after parsing attributes in process `syz.3.6475'. [ 737.033646][T27230] netlink: 'syz.3.6475': attribute type 1 has an invalid length. [ 737.106917][T27233] bond2: Removing last ns target with arp_interval on [ 737.125528][T27239] netlink: 'syz.0.6480': attribute type 89 has an invalid length. [ 737.197975][T27245] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6481'. [ 737.292333][T27254] syz_tun: entered promiscuous mode [ 737.297920][T27254] macvtap1: entered promiscuous mode [ 737.355659][T27254] syz_tun: left promiscuous mode [ 737.395922][T27259] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 737.669956][T27271] FAULT_INJECTION: forcing a failure. [ 737.669956][T27271] name failslab, interval 1, probability 0, space 0, times 0 [ 737.706551][T27271] CPU: 0 UID: 0 PID: 27271 Comm: syz.1.6487 Not tainted syzkaller #0 PREEMPT(full) [ 737.706578][T27271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 737.706590][T27271] Call Trace: [ 737.706598][T27271] [ 737.706607][T27271] dump_stack_lvl+0xe8/0x150 [ 737.706645][T27271] should_fail_ex+0x412/0x560 [ 737.706678][T27271] should_failslab+0xa8/0x100 [ 737.706702][T27271] ? skb_clone+0x212/0x3a0 [ 737.706725][T27271] kmem_cache_alloc_noprof+0x87/0x650 [ 737.706745][T27271] ? __netlink_lookup+0xc6/0x8b0 [ 737.706774][T27271] skb_clone+0x212/0x3a0 [ 737.706802][T27271] __netlink_deliver_tap+0x404/0x850 [ 737.706835][T27271] ? netlink_deliver_tap+0x2e/0x1b0 [ 737.706857][T27271] netlink_deliver_tap+0x19c/0x1b0 [ 737.706879][T27271] netlink_unicast+0x7e3/0x9b0 [ 737.706915][T27271] ? __pfx_netlink_unicast+0x10/0x10 [ 737.706945][T27271] ? netlink_sendmsg+0x650/0xb40 [ 737.706964][T27271] ? skb_put+0x11b/0x210 [ 737.706989][T27271] netlink_sendmsg+0x813/0xb40 [ 737.707019][T27271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 737.707043][T27271] ? aa_sock_msg_perm+0xf1/0x1b0 [ 737.707071][T27271] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 737.707095][T27271] ____sys_sendmsg+0x972/0x9f0 [ 737.707129][T27271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 737.707162][T27271] ? import_iovec+0x73/0xa0 [ 737.707186][T27271] ___sys_sendmsg+0x2a5/0x360 [ 737.707216][T27271] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.707275][T27271] ? __fget_files+0x2a/0x420 [ 737.707300][T27271] ? __fget_files+0x3a0/0x420 [ 737.707337][T27271] __x64_sys_sendmsg+0x1bd/0x2a0 [ 737.707364][T27271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 737.707397][T27271] ? __pfx_ksys_write+0x10/0x10 [ 737.707430][T27271] do_syscall_64+0x14d/0xf80 [ 737.707456][T27271] ? trace_irq_disable+0x3b/0x150 [ 737.707472][T27271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.707491][T27271] ? clear_bhb_loop+0x40/0x90 [ 737.707513][T27271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.707531][T27271] RIP: 0033:0x7f8d3c19c819 [ 737.707549][T27271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.707565][T27271] RSP: 002b:00007f8d3d03a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.707585][T27271] RAX: ffffffffffffffda RBX: 00007f8d3c415fa0 RCX: 00007f8d3c19c819 [ 737.707599][T27271] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 737.707611][T27271] RBP: 00007f8d3d03a090 R08: 0000000000000000 R09: 0000000000000000 [ 737.707633][T27271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.707644][T27271] R13: 00007f8d3c416038 R14: 00007f8d3c415fa0 R15: 00007fff0c650918 [ 737.707675][T27271] [ 738.017830][T27276] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 738.095959][ T29] audit: type=1107 audit(1775071037.745:6): pid=27273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 738.126197][T27284] netlink: 'syz.1.6490': attribute type 1 has an invalid length. [ 738.175206][T27284] netlink: 'syz.1.6490': attribute type 2 has an invalid length. [ 738.203552][T27274] syzkaller0: entered promiscuous mode [ 738.258521][T27274] syzkaller0: entered allmulticast mode [ 738.578205][T27297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6494'. [ 738.711602][T27307] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6496'. [ 738.791833][T27304] bond1: option arp_interval: invalid value (18446744073709551615) [ 738.809808][T27304] bond1: option arp_interval: allowed values 0 - 2147483647 [ 738.819167][T27304] bond1 (unregistering): Released all slaves [ 738.846032][T27314] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 738.933248][T27316] FAULT_INJECTION: forcing a failure. [ 738.933248][T27316] name failslab, interval 1, probability 0, space 0, times 0 [ 738.965708][T27316] CPU: 0 UID: 0 PID: 27316 Comm: syz.4.6500 Not tainted syzkaller #0 PREEMPT(full) [ 738.965734][T27316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 738.965746][T27316] Call Trace: [ 738.965753][T27316] [ 738.965761][T27316] dump_stack_lvl+0xe8/0x150 [ 738.965790][T27316] should_fail_ex+0x412/0x560 [ 738.965821][T27316] should_failslab+0xa8/0x100 [ 738.965842][T27316] ? skb_clone+0x212/0x3a0 [ 738.965863][T27316] kmem_cache_alloc_noprof+0x87/0x650 [ 738.965881][T27316] ? __netlink_lookup+0xc6/0x8b0 [ 738.965907][T27316] skb_clone+0x212/0x3a0 [ 738.965934][T27316] __netlink_deliver_tap+0x404/0x850 [ 738.965965][T27316] ? netlink_deliver_tap+0x2e/0x1b0 [ 738.965987][T27316] netlink_deliver_tap+0x19c/0x1b0 [ 738.966008][T27316] netlink_unicast+0x7e3/0x9b0 [ 738.966054][T27316] ? __pfx_netlink_unicast+0x10/0x10 [ 738.966084][T27316] ? netlink_sendmsg+0x650/0xb40 [ 738.966102][T27316] ? skb_put+0x11b/0x210 [ 738.966126][T27316] netlink_sendmsg+0x813/0xb40 [ 738.966152][T27316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.966174][T27316] ? aa_sock_msg_perm+0xf1/0x1b0 [ 738.966201][T27316] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.966233][T27316] ____sys_sendmsg+0x972/0x9f0 [ 738.966269][T27316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.966304][T27316] ? import_iovec+0x73/0xa0 [ 738.966334][T27316] ___sys_sendmsg+0x2a5/0x360 [ 738.966362][T27316] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.966418][T27316] ? __fget_files+0x2a/0x420 [ 738.966444][T27316] ? __fget_files+0x3a0/0x420 [ 738.966479][T27316] __x64_sys_sendmsg+0x1bd/0x2a0 [ 738.966506][T27316] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 738.966538][T27316] ? __pfx_ksys_write+0x10/0x10 [ 738.966569][T27316] do_syscall_64+0x14d/0xf80 [ 738.966593][T27316] ? trace_irq_disable+0x3b/0x150 [ 738.966610][T27316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.966629][T27316] ? clear_bhb_loop+0x40/0x90 [ 738.966651][T27316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.966669][T27316] RIP: 0033:0x7f2152b9c819 [ 738.966687][T27316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.966703][T27316] RSP: 002b:00007f2153972028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.966723][T27316] RAX: ffffffffffffffda RBX: 00007f2152e15fa0 RCX: 00007f2152b9c819 [ 738.966741][T27316] RDX: 0000000000000018 RSI: 0000200000000540 RDI: 0000000000000003 [ 738.966753][T27316] RBP: 00007f2153972090 R08: 0000000000000000 R09: 0000000000000000 [ 738.966764][T27316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.966776][T27316] R13: 00007f2152e16038 R14: 00007f2152e15fa0 R15: 00007fffc2582c78 [ 738.966805][T27316] [ 739.791679][T27366] syzkaller1: entered promiscuous mode [ 739.797314][T27366] syzkaller1: entered allmulticast mode [ 739.876247][T27370] __nla_validate_parse: 1 callbacks suppressed [ 739.876261][T27370] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6513'. [ 739.975019][T27379] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6514'. [ 740.215967][T27369] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6514'. [ 740.242633][T27394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6521'. [ 740.256419][T27386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6520'. [ 740.509682][T27407] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6525'. [ 740.557971][T27409] bridge0: entered promiscuous mode [ 740.569915][T27409] vlan3: entered promiscuous mode [ 740.632214][T27414] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6528'. [ 740.653900][T27411] netlink: 'syz.3.6526': attribute type 13 has an invalid length. [ 740.810203][T27422] debugfs: 'netdev:syzkaller0' already exists in 'phy56' [ 740.838461][T27422] tipc: Enabling of bearer rejected, failed to enable media [ 741.011496][T27431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6534'. [ 741.041653][T27434] block nbd0: not configured, cannot reconfigure [ 741.140042][T27437] netlink: 'syz.0.6538': attribute type 1 has an invalid length. [ 741.156411][T27440] tipc: Started in network mode [ 741.178277][T27440] tipc: Node identity 0abf86eade2a, cluster identity 4711 [ 741.199996][T27440] tipc: Enabled bearer , priority 0 [ 741.208136][T27444] syzkaller0: entered promiscuous mode [ 741.219208][T27445] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 741.228916][T27444] syzkaller0: entered allmulticast mode [ 741.261039][T27450] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6540'. [ 741.291189][T27440] syzkaller0: mtu less than device minimum [ 741.308794][T27440] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6537'. [ 741.363642][T27440] tipc: Resetting bearer [ 741.430998][T27440] tipc: Disabling bearer [ 741.750020][T27480] IPv6: addrconf: prefix option has invalid lifetime [ 741.758451][T27479] xt_hashlimit: size too large, truncated to 1048576 [ 741.804846][T27482] netlink: 'syz.4.6552': attribute type 1 has an invalid length. [ 742.069030][ T29] audit: type=1800 audit(1775071041.715:7): pid=27493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6556" name="memory.events" dev="tmpfs" ino=654 res=0 errno=0 [ 742.106379][ T29] audit: type=1804 audit(1775071041.745:8): pid=27493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.6556" name="/newroot/125/memory.events" dev="tmpfs" ino=654 res=1 errno=0 [ 742.183227][T14321] tipc: Subscription rejected, illegal request [ 742.436752][T27507] netlink: 'syz.4.6561': attribute type 4 has an invalid length. [ 742.635340][T27516] netlink: 'syz.2.6564': attribute type 3 has an invalid length. [ 742.715601][T27520] xt_hashlimit: size too large, truncated to 1048576 [ 742.973340][T27526] netlink: 'syz.4.6568': attribute type 1 has an invalid length. [ 743.045847][T27538] lo: Caught tx_queue_len zero misconfig [ 743.127449][T27532] wg1 speed is unknown, defaulting to 1000 [ 743.412246][T27558] bond0: (slave dummy0): Releasing backup interface [ 743.465418][T27558] bridge_slave_0: left allmulticast mode [ 743.487279][T27558] bridge_slave_0: left promiscuous mode [ 743.509907][T27558] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.566907][T27558] bridge_slave_1: left allmulticast mode [ 743.574483][T27558] bridge_slave_1: left promiscuous mode [ 743.582770][T27558] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.602239][T27558] bond0: (slave bond_slave_0): Releasing backup interface [ 743.640574][T27558] bond0: (slave bond_slave_1): Releasing backup interface [ 743.720403][T27558] team0: Port device team_slave_0 removed [ 743.756491][T27558] team0: Port device team_slave_1 removed [ 743.772204][T27558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 743.780267][T27558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.789348][T27558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 743.801171][T27558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.815527][T27558] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 744.000963][T27571] xt_hashlimit: size too large, truncated to 1048576 [ 744.991288][T27610] __nla_validate_parse: 18 callbacks suppressed [ 744.991310][T27610] netlink: 35911 bytes leftover after parsing attributes in process `syz.3.6589'. [ 745.074347][T27609] netlink: 'syz.3.6589': attribute type 1 has an invalid length. [ 745.500536][T27627] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 745.573790][T27630] netlink: 732 bytes leftover after parsing attributes in process `syz.2.6599'. [ 745.616264][T27630] netlink: 732 bytes leftover after parsing attributes in process `syz.2.6599'. [ 745.637486][T27635] xt_hashlimit: size too large, truncated to 1048576 [ 745.707859][T27629] geneve2: entered allmulticast mode [ 745.845084][T27646] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6601'. [ 745.862148][T27645] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 745.937634][T27648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6603'. [ 746.264117][T27663] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6609'. [ 746.645661][T27691] tipc: Enabled bearer , priority 0 [ 746.653462][T27691] syzkaller0: entered promiscuous mode [ 746.658952][T27691] syzkaller0: entered allmulticast mode [ 746.668784][T27691] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6619'. [ 746.693405][T27691] tipc: Resetting bearer [ 746.735143][T27690] tipc: Resetting bearer [ 746.772826][T27690] tipc: Disabling bearer [ 746.979502][T27706] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 746.986812][T27706] IPv6: NLM_F_CREATE should be set when creating new route [ 747.030616][T27706] lo: entered allmulticast mode [ 747.031570][T27712] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.6625'. [ 747.059488][T27706] tunl0: entered allmulticast mode [ 747.083612][T27706] gre0: entered allmulticast mode [ 747.118353][T27706] gretap0: entered allmulticast mode [ 747.134595][T27706] erspan0: entered allmulticast mode [ 747.151158][T27706] ip_vti0: entered allmulticast mode [ 747.166186][T27706] ip6_vti0: entered allmulticast mode [ 747.188388][T27706] sit0: entered allmulticast mode [ 747.215652][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 747.239013][T27706] ip6tnl0: entered allmulticast mode [ 747.263352][T27706] ip6gre0: entered allmulticast mode [ 747.282165][T27706] syz_tun: entered allmulticast mode [ 747.292841][T27706] ip6gretap0: entered allmulticast mode [ 747.303764][T27706] bridge0: port 3(team0) entered disabled state [ 747.310342][T27706] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.317896][T27706] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.328187][T27706] bridge0: entered allmulticast mode [ 747.339142][T27706] vcan0: entered allmulticast mode [ 747.345405][T27706] bond0: entered allmulticast mode [ 747.350725][T27706] bond_slave_0: entered allmulticast mode [ 747.356466][T27706] bond_slave_1: entered allmulticast mode [ 747.366457][T27706] dummy0: entered allmulticast mode [ 747.373736][T27706] nlmon0: entered allmulticast mode [ 747.381447][T27706] caif0: entered allmulticast mode [ 747.386780][T27706] batadv0: entered allmulticast mode [ 747.394170][T27706] vxcan0: entered allmulticast mode [ 747.401397][T27706] vxcan1: entered allmulticast mode [ 747.407421][T27706] veth0: entered allmulticast mode [ 747.415804][T27706] veth1: entered allmulticast mode [ 747.423567][T27706] wg0: entered allmulticast mode [ 747.430438][T27706] wg1: entered allmulticast mode [ 747.437128][T27706] wg2: entered allmulticast mode [ 747.443925][T27706] veth0_to_bridge: entered allmulticast mode [ 747.453958][T27706] veth1_to_bridge: entered allmulticast mode [ 747.464416][T27706] veth0_to_bond: entered allmulticast mode [ 747.472833][T27706] veth1_to_bond: entered allmulticast mode [ 747.482639][T27706] veth0_to_team: entered allmulticast mode [ 747.491980][T27706] veth1_to_team: entered allmulticast mode [ 747.501862][T27706] veth0_to_batadv: entered allmulticast mode [ 747.509853][T27706] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.517288][T27706] batadv_slave_0: entered allmulticast mode [ 747.525990][T27706] veth1_to_batadv: entered allmulticast mode [ 747.535806][T27706] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.545282][T27706] batadv_slave_1: entered allmulticast mode [ 747.553453][T27706] xfrm0: entered allmulticast mode [ 747.560525][T27706] veth0_to_hsr: entered allmulticast mode [ 747.568091][T27706] hsr_slave_0: entered allmulticast mode [ 747.575986][T27706] veth1_to_hsr: entered allmulticast mode [ 747.586458][T27706] hsr0: entered allmulticast mode [ 747.596301][T27706] veth1_virt_wifi: entered allmulticast mode [ 747.604302][T27706] veth0_virt_wifi: entered allmulticast mode [ 747.613830][T27706] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 747.621595][T27706] veth1_macvtap: entered allmulticast mode [ 747.629018][T27706] veth0_macvtap: entered allmulticast mode [ 747.637600][T27706] macvtap0: entered allmulticast mode [ 747.644815][T27706] macsec0: entered allmulticast mode [ 747.652957][T27706] geneve0: entered allmulticast mode [ 747.660780][T27706] geneve1: left promiscuous mode [ 747.665753][T27706] geneve1: entered allmulticast mode [ 747.672399][T27706] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 747.681674][T27706] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 747.692913][T27706] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 747.703299][T27706] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 747.712034][T27706] mac80211_hwsim hwsim57 wlan0: entered allmulticast mode [ 747.719317][T27706] mac80211_hwsim hwsim58 wlan1: entered allmulticast mode [ 747.727811][T27706] vlan2: left promiscuous mode [ 747.733469][T27706] vlan3: entered allmulticast mode [ 747.740935][T27706] bridge2: entered allmulticast mode [ 747.748817][T27706] bond1: entered allmulticast mode [ 747.876671][T27740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6632'. [ 747.880764][T27738] netlink: 35911 bytes leftover after parsing attributes in process `syz.2.6631'. [ 747.909862][T27738] netlink: 'syz.2.6631': attribute type 1 has an invalid length. [ 748.956100][T27724] vlan3: left promiscuous mode [ 749.021443][T27115] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.058827][T27740] ip6tnl1: entered promiscuous mode [ 749.143207][T27115] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.170567][T27115] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.186280][T27115] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.213204][T27115] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.372921][T27777] ip6t_srh: unknown srh match flags 4000 [ 749.401400][T27115] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.418609][T27115] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.442970][T27115] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.026952][T27809] openvswitch: netlink: Message has 28 unknown bytes. [ 751.416581][T27799] batadv1: entered promiscuous mode [ 751.613491][T27828] __nla_validate_parse: 4 callbacks suppressed [ 751.613515][T27828] netlink: 35911 bytes leftover after parsing attributes in process `syz.1.6649'. [ 751.631383][T27828] netlink: 'syz.1.6649': attribute type 1 has an invalid length. [ 751.712302][T27837] TCP: TCP_TX_DELAY enabled [ 751.732930][T27836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6653'. [ 751.779498][T27841] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6656'. [ 751.810930][T27838] netlink: 'syz.0.6655': attribute type 1 has an invalid length. [ 751.818689][T27838] netlink: 'syz.0.6655': attribute type 2 has an invalid length. [ 751.848069][T27836] tun0: tun_chr_ioctl cmd 1074812118 [ 751.854182][T27836] tun0: tun_chr_ioctl cmd 1074033169 [ 751.868832][T27836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6653'. [ 751.877895][T27836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6653'. [ 752.386751][T27871] netlink: 'syz.3.6666': attribute type 30 has an invalid length. [ 752.398139][T27871] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6666'. [ 752.452389][T27871] bond0: option arp_missed_max: invalid value (0) [ 752.459007][T27871] bond0: option arp_missed_max: allowed values 1 - 255 [ 752.579893][T27876] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6668'. [ 752.618959][T27876] 8021q: adding VLAN 0 to HW filter on device bond2 [ 752.631645][T27876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6668'. [ 752.652965][T27876] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 752.675410][T27879] tipc: Enabling of bearer rejected, failed to enable media [ 752.809609][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5590 ms [ 752.817679][ C1] lec:lec_tx_timeout: lec0 [ 752.861405][T27880] IPVS: set_ctl: invalid protocol: 60 172.30.0.4:20000 [ 752.866077][T27879] wg1 speed is unknown, defaulting to 1000 [ 753.060982][T27895] netlink: 64 bytes leftover after parsing attributes in process `syz.2.6672'. [ 753.081721][T27895] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6672'. [ 753.122929][T27895] netlink: 'syz.2.6672': attribute type 1 has an invalid length. [ 753.635506][T27924] netlink: 'syz.3.6683': attribute type 1 has an invalid length. [ 753.677914][T27924] 8021q: adding VLAN 0 to HW filter on device bond1 [ 753.768745][T27924] bond1: (slave veth5): Enslaving as an active interface with a down link [ 753.829422][T27926] bond1: (slave veth7): Enslaving as an active interface with a down link [ 753.864252][T27924] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 753.913759][T27932] block nbd4: NBD_DISCONNECT [ 753.918827][T27933] netlink: 'syz.0.6684': attribute type 1 has an invalid length. [ 754.525273][T27968] wg1 speed is unknown, defaulting to 1000 [ 754.527544][T27964] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 754.542694][T27973] netlink: 'syz.1.6699': attribute type 1 has an invalid length. [ 754.687265][T27979] netlink: 'syz.1.6704': attribute type 1 has an invalid length. [ 754.947300][T27988] syzkaller0: entered promiscuous mode [ 754.999864][T27988] syzkaller0: entered allmulticast mode [ 755.155071][T28000] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 755.282622][T28007] netlink: 'syz.4.6714': attribute type 1 has an invalid length. [ 755.452399][T28013] xt_hashlimit: size too large, truncated to 1048576 [ 756.329014][T28000] geneve2: left allmulticast mode [ 756.338487][T28000] batadv1: left promiscuous mode [ 756.389302][T28026] hsr_slave_1 (unregistering): left promiscuous mode [ 756.406440][T27111] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.419529][T27111] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.466732][T27111] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.499795][T27113] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.662166][T28034] syzkaller0: entered promiscuous mode [ 756.670849][T28034] syzkaller0: entered allmulticast mode [ 756.696148][T28041] __nla_validate_parse: 9 callbacks suppressed [ 756.696169][T28041] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6724'. [ 756.756222][T28035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6721'. [ 756.988658][T28066] netlink: 35911 bytes leftover after parsing attributes in process `syz.1.6731'. [ 757.028581][T28066] netlink: 'syz.1.6731': attribute type 1 has an invalid length. [ 758.789678][T28050] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 758.810347][ T5839] Bluetooth: hci0: command 0x0401 tx timeout [ 759.081259][T28098] tipc: Started in network mode [ 759.090575][T28098] tipc: Node identity ac14142f, cluster identity 4711 [ 759.111030][T28098] tipc: New replicast peer: 0.0.0.0 [ 759.120337][T28098] tipc: Enabled bearer , priority 10 [ 759.127836][T28103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6743'. [ 759.145208][T28105] tipc: New replicast peer: 172.30.1.3 [ 759.153473][T28103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6743'. [ 759.162509][T28103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6743'. [ 759.188402][T28103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6743'. [ 759.212696][T28103] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6743'. [ 759.241218][T28103] netlink: 'syz.3.6743': attribute type 6 has an invalid length. [ 759.398936][T28122] wg1 speed is unknown, defaulting to 1000 [ 759.591465][T28140] netlink: 64 bytes leftover after parsing attributes in process `syz.0.6748'. [ 759.759461][T28132] wg1 speed is unknown, defaulting to 1000 [ 759.908897][T28152] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 760.112315][T28155] netlink: zone id is out of range [ 760.117570][T28155] netlink: get zone limit has 8 unknown bytes [ 760.355552][ T5934] tipc: Node number set to 2886997039 [ 760.511546][T28167] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6759'. [ 760.864497][T28198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.056859][T28207] bridge_slave_0: left allmulticast mode [ 761.063510][T28207] bridge_slave_0: left promiscuous mode [ 761.070241][T28207] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.100611][T28207] bridge_slave_1: left allmulticast mode [ 761.107924][T28207] bridge_slave_1: left promiscuous mode [ 761.114037][T28207] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.135575][T28207] bond0: (slave bond_slave_0): Releasing backup interface [ 761.158587][T28207] bond0: (slave bond_slave_1): Releasing backup interface [ 761.199255][T28207] team0: Port device team_slave_0 removed [ 761.223346][T28207] team0: Port device team_slave_1 removed [ 761.240827][T28207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.249792][T28207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.259023][T28207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.266717][T28207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.288696][T28207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.306820][ T5906] wg1 speed is unknown, defaulting to 1000 [ 761.334278][T28225] bridge_slave_0: left allmulticast mode [ 761.341443][T28225] bridge_slave_0: left promiscuous mode [ 761.360070][T28225] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.382960][T28225] bridge_slave_1: left allmulticast mode [ 761.398904][T28225] bridge_slave_1: left promiscuous mode [ 761.410692][T28225] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.426317][T28225] bond0: (slave bond_slave_0): Releasing backup interface [ 761.440690][T28225] bond0: (slave bond_slave_1): Releasing backup interface [ 761.476906][T28225] team0: Port device team_slave_0 removed [ 761.496613][T28225] team0: Port device team_slave_1 removed [ 761.503483][T28225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 761.511668][T28225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 761.532110][T28225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 761.539516][T28225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.574662][T28225] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 761.682999][T28243] netlink: 'syz.4.6780': attribute type 13 has an invalid length. [ 761.705266][T27113] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.705335][T28243] netlink: 'syz.4.6780': attribute type 13 has an invalid length. [ 761.714896][T27113] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.733901][T27113] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.743961][T27113] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.854530][T28257] pimreg: tun_chr_ioctl cmd 1074025677 [ 761.863871][T28257] pimreg: linktype set to 774 [ 762.125723][T28279] __nla_validate_parse: 7 callbacks suppressed [ 762.125743][T28279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6788'. [ 762.225068][T28275] tc_dump_action: action bad kind [ 762.584772][T28297] bond1: option xmit_hash_policy: invalid value (10) [ 762.608891][T28297] bond1 (unregistering): Released all slaves [ 762.681798][T28308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6795'. [ 762.694808][T28308] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6795'. [ 762.721280][T28308] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 762.881923][T28321] syzkaller0: entered promiscuous mode [ 762.887542][T28321] syzkaller0: entered allmulticast mode [ 763.288389][T28355] bond3: option lacp_active: invalid value (8) [ 763.296446][T28355] bond3 (unregistering): Released all slaves [ 763.849989][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 763.870375][T28392] syzkaller0: entered promiscuous mode [ 763.886126][T28392] syzkaller0: entered allmulticast mode [ 763.906932][T28396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 763.916931][T28396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6820'. [ 763.935234][T28392] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6819'. [ 763.938074][T28396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6820'. [ 763.970325][T28396] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6820'. [ 764.129804][T28404] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 764.146918][T28404] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 764.212115][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6826'. [ 764.250635][T28407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6826'. [ 764.284933][T28407] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 764.416881][T28417] ip6tnl0: Caught tx_queue_len zero misconfig [ 764.493558][T28424] netlink: 'syz.1.6833': attribute type 1 has an invalid length. [ 764.527469][T28426] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 764.581777][T28424] 8021q: adding VLAN 0 to HW filter on device bond1 [ 764.622036][T28434] openvswitch: netlink: Message has 8 unknown bytes. [ 764.644738][T28424] vlan0: entered promiscuous mode [ 764.670507][T28424] bond1: entered promiscuous mode [ 764.678246][T28424] vlan0: entered allmulticast mode [ 764.697635][T28424] bond1: entered allmulticast mode [ 764.733348][T28424] netlink: 'syz.1.6833': attribute type 1 has an invalid length. [ 764.751962][T28424] nbd: couldn't find device at index -427251215 [ 764.807724][T28424] bond1: (slave bridge3): making interface the new active one [ 764.826946][T28424] bridge3: entered promiscuous mode [ 764.843258][T28424] bridge3: entered allmulticast mode [ 764.858734][T28424] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 764.873199][T28452] netlink: 'syz.4.6842': attribute type 10 has an invalid length. [ 764.883971][T28452] veth1: left allmulticast mode [ 764.895453][T28452] veth1: entered promiscuous mode [ 764.906709][T28452] veth1: entered allmulticast mode [ 764.918902][T28452] team0: Port device veth1 added [ 765.068603][T28462] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 765.127026][T28465] netlink: 'syz.4.6848': attribute type 8 has an invalid length. [ 765.145150][T28465] bond0: entered promiscuous mode [ 765.161668][T28465] bond_slave_0: entered promiscuous mode [ 765.179219][T28465] bond_slave_1: entered promiscuous mode [ 765.196033][T28469] block nbd0: not configured, cannot reconfigure [ 765.209486][T28465] gretap0: entered promiscuous mode [ 765.236235][T28465] debugfs: 'hsr1' already exists in 'hsr' [ 765.247302][T28465] Cannot create hsr debugfs directory [ 765.254125][T28465] hsr1: entered promiscuous mode [ 765.384951][T28485] debugfs: 'netdev:syzkaller0' already exists in 'phy53' [ 765.432244][T28485] tipc: Enabling of bearer rejected, failed to enable media [ 765.646414][T28505] tipc: Enabled bearer , priority 0 [ 765.765391][T28511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 765.922887][T28523] netlink: 'syz.1.6864': attribute type 62 has an invalid length. [ 765.924359][T28517] bond3: entered promiscuous mode [ 765.949686][T28517] 8021q: adding VLAN 0 to HW filter on device bond3 [ 766.658293][T28546] bond3 (unregistering): Released all slaves [ 766.790098][ T5879] tipc: Node number set to 3040421885 [ 766.974595][T28566] netlink: 'syz.2.6875': attribute type 62 has an invalid length. [ 767.133992][T28582] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 767.154843][T28578] __nla_validate_parse: 14 callbacks suppressed [ 767.154863][T28578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6880'. [ 767.179679][T28578] netlink: 'syz.2.6880': attribute type 29 has an invalid length. [ 767.187538][T28578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6880'. [ 767.523521][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6888'. [ 767.545361][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6888'. [ 767.592555][T28607] netlink: 'syz.2.6889': attribute type 3 has an invalid length. [ 767.664941][T28605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6888'. [ 767.699782][T28605] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6888'. [ 767.788796][T28611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6889'. [ 768.103405][T28615] netlink: 'syz.3.6890': attribute type 62 has an invalid length. [ 768.183333][T28617] bridge0: port 1(vlan2) entered blocking state [ 768.195394][T28617] bridge0: port 1(vlan2) entered disabled state [ 768.229936][T28617] vlan2: entered allmulticast mode [ 768.235094][T28617] geneve0: entered allmulticast mode [ 768.244455][T28617] vlan2: entered promiscuous mode [ 768.254255][T28617] geneve0: entered promiscuous mode [ 768.393900][T28626] macvtap0: entered promiscuous mode [ 768.410770][T28626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6893'. [ 768.419702][T28629] sctp: [Deprecated]: syz.0.6895 (pid 28629) Use of int in max_burst socket option. [ 768.419702][T28629] Use struct sctp_assoc_value instead [ 768.531273][T28626] macvtap0 (unregistering): left promiscuous mode [ 768.558575][T28634] syzkaller0: entered promiscuous mode [ 768.568896][T28634] syzkaller0: entered allmulticast mode [ 768.575967][T14321] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xf5 [ 768.854562][T28650] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 768.928360][T28654] netlink: 'syz.3.6902': attribute type 62 has an invalid length. [ 769.000692][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6903'. [ 769.019007][T28657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6903'. [ 769.250169][T28629] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 769.277542][T28670] tipc: Enabled bearer , priority 0 [ 769.344665][T28670] syzkaller0: entered allmulticast mode [ 769.414420][T28670] tipc: Resetting bearer [ 769.425043][T28669] tipc: Resetting bearer [ 769.508632][T28669] tipc: Disabling bearer [ 769.753577][T28700] validate_nla: 1 callbacks suppressed [ 769.753596][T28700] netlink: 'syz.3.6915': attribute type 10 has an invalid length. [ 769.773656][T28701] netlink: 'syz.2.6914': attribute type 62 has an invalid length. [ 769.812200][T28703] netlink: 'syz.3.6915': attribute type 10 has an invalid length. [ 769.830422][T28700] team0: Port device dummy0 added [ 769.893798][T28703] team0: Port device dummy0 removed [ 769.948395][T28703] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 770.100849][T28709] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 770.225279][T28716] syzkaller0: entered promiscuous mode [ 770.231003][T28716] syzkaller0: entered allmulticast mode [ 770.711256][T28737] netlink: 'syz.4.6926': attribute type 62 has an invalid length. [ 771.497915][T28776] tc_dump_action: action bad kind [ 771.623629][T28783] netlink: 'syz.0.6938': attribute type 62 has an invalid length. [ 771.893239][T28798] xt_CT: You must specify a L4 protocol and not use inversions on it [ 771.948428][T28799] netlink: 'syz.0.6940': attribute type 1 has an invalid length. [ 772.574626][T28797] vlan0: left promiscuous mode [ 772.742534][T28797] bond1: left promiscuous mode [ 772.747338][T28797] bond1: left allmulticast mode [ 772.816465][ T796] wg1 speed is unknown, defaulting to 1000 [ 772.816648][T28820] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 772.833418][ T796] syz0: Port: 1 Link DOWN [ 772.870592][T27111] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.894911][T27111] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.918623][T28826] __nla_validate_parse: 6 callbacks suppressed [ 772.918644][T28826] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6945'. [ 772.925363][T27111] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.943404][T28826] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6945'. [ 772.989712][T27111] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.996587][T28829] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6945'. [ 773.049152][T28831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6948'. [ 773.114086][T28835] netlink: 'syz.1.6950': attribute type 62 has an invalid length. [ 773.169244][T28839] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6951'. [ 773.181542][T28839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6951'. [ 773.220486][T28839] netlink: 568 bytes leftover after parsing attributes in process `syz.4.6951'. [ 773.257704][T28842] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6952'. [ 773.260042][T28846] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6954'. [ 773.282705][T28849] netlink: 'syz.3.6955': attribute type 31 has an invalid length. [ 773.307660][T28842] ip6gre1: entered promiscuous mode [ 773.323983][T28842] ip6gre1: entered allmulticast mode [ 773.349337][T27115] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.358076][T27115] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.369933][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.551099][T28869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6960'. [ 773.735416][T28884] netlink: 'syz.1.6963': attribute type 62 has an invalid length. [ 773.788723][T28887] netlink: 'syz.4.6964': attribute type 1 has an invalid length. [ 773.852469][T28887] 8021q: adding VLAN 0 to HW filter on device bond4 [ 773.866651][T28891] vlan0: entered allmulticast mode [ 773.872254][T28891] bond4: entered allmulticast mode [ 773.917434][T28887] bond4: (slave geneve2): making interface the new active one [ 773.925215][T28887] geneve2: entered allmulticast mode [ 773.941972][T28887] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 773.951029][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 773.968827][T14321] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.986010][T14321] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.040667][T14321] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.060512][T14321] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 774.200370][T28908] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 774.333503][T28916] xt_hashlimit: size too large, truncated to 1048576 [ 774.334344][T28907] wg1 speed is unknown, defaulting to 1000 [ 774.410024][ T796] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 775.274055][T28961] validate_nla: 2 callbacks suppressed [ 775.274070][T28961] netlink: 'syz.1.6987': attribute type 62 has an invalid length. [ 775.375844][T26362] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.407316][T26362] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.469240][T26362] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.487701][T26362] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.521846][T26362] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.541652][T26362] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.583234][T26362] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 775.618802][T26362] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.793371][T28981] xt_hashlimit: size too large, truncated to 1048576 [ 776.451045][T29009] netlink: 'syz.2.6999': attribute type 62 has an invalid length. [ 776.838022][T29030] netlink: 'syz.3.7004': attribute type 2 has an invalid length. [ 776.856302][T29030] netlink: 'syz.3.7004': attribute type 2 has an invalid length. [ 777.006674][T29044] netlink: 'syz.2.7007': attribute type 29 has an invalid length. [ 777.181571][T29047] xt_hashlimit: size too large, truncated to 1048576 [ 777.325785][T29055] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 777.550913][T29062] netlink: 'syz.1.7012': attribute type 2 has an invalid length. [ 777.609828][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 777.825961][T29083] FAULT_INJECTION: forcing a failure. [ 777.825961][T29083] name failslab, interval 1, probability 0, space 0, times 0 [ 777.845569][T29083] CPU: 0 UID: 0 PID: 29083 Comm: syz.1.7018 Not tainted syzkaller #0 PREEMPT(full) [ 777.845604][T29083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 777.845616][T29083] Call Trace: [ 777.845625][T29083] [ 777.845634][T29083] dump_stack_lvl+0xe8/0x150 [ 777.845664][T29083] should_fail_ex+0x412/0x560 [ 777.845696][T29083] should_failslab+0xa8/0x100 [ 777.845721][T29083] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 777.845744][T29083] ? __alloc_skb+0x1d0/0x7d0 [ 777.845764][T29083] ? __local_bh_enable_ip+0xd0/0x130 [ 777.845792][T29083] __alloc_skb+0x1d0/0x7d0 [ 777.845818][T29083] __ipv6_ifa_notify+0x1d0/0xc60 [ 777.845838][T29083] ? atomic_notifier_call_chain+0x16e/0x180 [ 777.845873][T29083] ? __pfx___ipv6_ifa_notify+0x10/0x10 [ 777.845894][T29083] ? __pfx_ipv6_add_addr+0x10/0x10 [ 777.845931][T29083] inet6_addr_add+0x68d/0xb20 [ 777.845966][T29083] inet6_rtm_newaddr+0xa17/0xe30 [ 777.845997][T29083] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 777.846039][T29083] ? __pfx_inet6_rtm_newaddr+0x10/0x10 [ 777.846058][T29083] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 777.846080][T29083] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 777.846099][T29083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 777.846122][T29083] ? __lock_acquire+0x6b5/0x2cf0 [ 777.846155][T29083] netlink_rcv_skb+0x232/0x4b0 [ 777.846178][T29083] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 777.846200][T29083] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 777.846231][T29083] ? netlink_deliver_tap+0x2e/0x1b0 [ 777.846260][T29083] netlink_unicast+0x80f/0x9b0 [ 777.846297][T29083] ? __pfx_netlink_unicast+0x10/0x10 [ 777.846326][T29083] ? netlink_sendmsg+0x650/0xb40 [ 777.846345][T29083] ? skb_put+0x11b/0x210 [ 777.846370][T29083] netlink_sendmsg+0x813/0xb40 [ 777.846399][T29083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.846421][T29083] ? __fget_files+0x2a/0x420 [ 777.846445][T29083] ? aa_sock_msg_perm+0xf1/0x1b0 [ 777.846473][T29083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 777.846494][T29083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 777.846516][T29083] __sys_sendto+0x672/0x710 [ 777.846540][T29083] ? __pfx___sys_sendto+0x10/0x10 [ 777.846560][T29083] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 777.846606][T29083] ? __fget_files+0x3a0/0x420 [ 777.846643][T29083] ? ksys_write+0x242/0x270 [ 777.846666][T29083] ? __pfx_ksys_write+0x10/0x10 [ 777.846692][T29083] __x64_sys_sendto+0xde/0x100 [ 777.846717][T29083] do_syscall_64+0x14d/0xf80 [ 777.846741][T29083] ? trace_irq_disable+0x3b/0x150 [ 777.846756][T29083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.846774][T29083] ? clear_bhb_loop+0x40/0x90 [ 777.846797][T29083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.846816][T29083] RIP: 0033:0x7f8d3c19c819 [ 777.846834][T29083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.846849][T29083] RSP: 002b:00007f8d3d03a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 777.846870][T29083] RAX: ffffffffffffffda RBX: 00007f8d3c415fa0 RCX: 00007f8d3c19c819 [ 777.846884][T29083] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 777.846896][T29083] RBP: 00007f8d3d03a090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 777.846908][T29083] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 777.846920][T29083] R13: 00007f8d3c416038 R14: 00007f8d3c415fa0 R15: 00007fff0c650918 [ 777.846950][T29083] [ 778.199425][T29084] __nla_validate_parse: 18 callbacks suppressed [ 778.199444][T29084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7019'. [ 778.304473][T29092] wg1: entered promiscuous mode [ 778.344962][T29092] wg1: entered allmulticast mode [ 779.384289][T29137] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.540237][T29150] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode [ 779.547560][T29150] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode [ 779.653359][T29157] xt_hashlimit: size too large, truncated to 1048576 [ 779.662486][T29142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.674638][T29142] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.688044][T29142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 779.780443][ T5940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 779.898816][T29167] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7038'. [ 780.099079][T29181] netlink: 'syz.4.7044': attribute type 10 has an invalid length. [ 780.178071][T29181] IPVS: Scheduler module ip_vs_ not found [ 780.258254][T29181] IPVS: length: 24 != 12312 [ 780.339844][T29186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 780.397786][T27120] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 780.619022][T29224] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7055'. [ 780.730313][ T9] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 780.790792][T29226] wg1 speed is unknown, defaulting to 1000 [ 781.099161][T29264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7064'. [ 781.457477][T27151] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 781.468188][T27151] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 781.516914][T29288] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7070'. [ 781.582092][T29291] macvtap0: entered promiscuous mode [ 781.592190][T29290] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7071'. [ 781.609867][T29290] veth0_macvtap: left promiscuous mode [ 781.669306][T29290] macvtap0 (unregistering): left promiscuous mode [ 781.703378][T29295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7072'. [ 781.712761][T29295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7072'. [ 781.722570][T29295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7072'. [ 781.733283][T29295] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7072'. [ 782.064048][T29305] syzkaller1: entered promiscuous mode [ 782.079240][T29305] syzkaller1: entered allmulticast mode [ 782.099854][ T7014] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 782.767582][T29369] wg1 speed is unknown, defaulting to 1000 [ 783.117156][T29401] tipc: Enabling of bearer rejected, failed to enable media [ 783.139130][T29402] netlink: 'syz.2.7101': attribute type 9 has an invalid length. [ 783.140159][T29408] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 783.181499][T29406] sit1: entered promiscuous mode [ 783.408612][T27888] udevd[27888]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 783.431523][T29415] xt_CT: No such helper "syz0" [ 783.902687][T29444] __nla_validate_parse: 167 callbacks suppressed [ 783.902709][T29444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7115'. [ 783.942835][T29447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7117'. [ 784.071727][T29457] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 784.084740][T29459] syz.3.7120 uses old SIOCAX25GETINFO [ 784.530420][T29486] netlink: 'syz.3.7129': attribute type 10 has an invalid length. [ 784.543740][T29489] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7130'. [ 784.553065][T29486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7129'. [ 784.564473][T29486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7129'. [ 784.578231][T29487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7127'. [ 784.585387][T29491] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7131'. [ 784.602594][T29489] vlan1: entered allmulticast mode [ 784.606882][T29486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7129'. [ 784.608365][T29489] bridge4: entered allmulticast mode [ 784.625983][T29487] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7127'. [ 784.637063][T29487] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 784.658996][T29489] erspan0: left allmulticast mode [ 784.725552][T29498] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 784.839325][T29495] bridge0: left promiscuous mode [ 784.882897][T29495] bridge0: entered promiscuous mode [ 784.910669][T29495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 784.931327][T29495] 8021q: adding VLAN 0 to HW filter on device team0 [ 784.980017][T29495] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 785.010038][T29519] netlink: 52 bytes leftover after parsing attributes in process `syz.4.7135'. [ 785.046214][T29496] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 785.129810][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 785.605748][T29553] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 785.686722][T29558] netlink: 'syz.4.7148': attribute type 1 has an invalid length. [ 785.711598][T29558] NCSI netlink: No device for ifindex 0 [ 785.940368][T29573] netlink: 'syz.1.7154': attribute type 2 has an invalid length. [ 785.986356][T29573] úÁàél24): entered promiscuous mode [ 786.261810][T29602] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 786.311634][T29614] IPVS: set_ctl: invalid protocol: 67 172.20.20.187:20004 [ 786.585522][T29630] netlink: 'syz.3.7171': attribute type 2 has an invalid length. [ 787.006573][T29657] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 787.484788][T29670] team0: Device vlan4 is already an upper device of the team interface [ 787.577755][T29680] FAULT_INJECTION: forcing a failure. [ 787.577755][T29680] name failslab, interval 1, probability 0, space 0, times 0 [ 787.590750][T29680] CPU: 0 UID: 0 PID: 29680 Comm: syz.0.7188 Not tainted syzkaller #0 PREEMPT(full) [ 787.590775][T29680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 787.590788][T29680] Call Trace: [ 787.590796][T29680] [ 787.590805][T29680] dump_stack_lvl+0xe8/0x150 [ 787.590836][T29680] should_fail_ex+0x412/0x560 [ 787.590867][T29680] should_failslab+0xa8/0x100 [ 787.590913][T29680] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 787.590936][T29680] ? __alloc_skb+0x186/0x7d0 [ 787.590956][T29680] ? __alloc_skb+0x1d0/0x7d0 [ 787.590981][T29680] ? __local_bh_enable_ip+0xd0/0x130 [ 787.591010][T29680] __alloc_skb+0x1d0/0x7d0 [ 787.591031][T29680] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 787.591057][T29680] netlink_sendmsg+0x5d4/0xb40 [ 787.591088][T29680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.591112][T29680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 787.591140][T29680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 787.591163][T29680] ____sys_sendmsg+0x972/0x9f0 [ 787.591196][T29680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.591228][T29680] ? import_iovec+0x73/0xa0 [ 787.591251][T29680] ___sys_sendmsg+0x2a5/0x360 [ 787.591280][T29680] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.591337][T29680] ? __fget_files+0x2a/0x420 [ 787.591362][T29680] ? __fget_files+0x3a0/0x420 [ 787.591397][T29680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 787.591424][T29680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.591456][T29680] ? __pfx_ksys_write+0x10/0x10 [ 787.591488][T29680] do_syscall_64+0x14d/0xf80 [ 787.591513][T29680] ? trace_irq_disable+0x3b/0x150 [ 787.591530][T29680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.591548][T29680] ? clear_bhb_loop+0x40/0x90 [ 787.591570][T29680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.591590][T29680] RIP: 0033:0x7f293179c819 [ 787.591608][T29680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.591625][T29680] RSP: 002b:00007f2932574028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.591644][T29680] RAX: ffffffffffffffda RBX: 00007f2931a15fa0 RCX: 00007f293179c819 [ 787.591658][T29680] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 787.591669][T29680] RBP: 00007f2932574090 R08: 0000000000000000 R09: 0000000000000000 [ 787.591681][T29680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.591692][T29680] R13: 00007f2931a16038 R14: 00007f2931a15fa0 R15: 00007fffb3de85c8 [ 787.591721][T29680] [ 788.256817][T29704] wg1 speed is unknown, defaulting to 1000 [ 788.317515][T29705] tls: option downdelay: invalid value (18446744073709547007) [ 788.325234][T29705] tls: option downdelay: allowed values 0 - 2147483647 [ 788.342015][T29705] tls (unregistering): Released all slaves [ 789.042661][T29741] Unsupported ieee802154 address type: 0 [ 789.532102][T29732] mac80211_hwsim hwsim52 ªªªªª;: renamed from wlan0 [ 789.532175][T29705] __nla_validate_parse: 20 callbacks suppressed [ 789.532190][T29705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7197'. [ 789.556402][T29705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7197'. [ 789.583422][T27151] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.600557][T27151] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.716241][T27151] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.725505][T27151] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.776115][T29751] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 789.798707][T29750] syzkaller0: entered promiscuous mode [ 789.808807][T29750] syzkaller0: entered allmulticast mode [ 789.816586][ T5940] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.015770][T29763] FAULT_INJECTION: forcing a failure. [ 790.015770][T29763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.030348][T29764] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7215'. [ 790.060434][T29763] CPU: 1 UID: 0 PID: 29763 Comm: syz.1.7214 Not tainted syzkaller #0 PREEMPT(full) [ 790.060457][T29763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 790.060468][T29763] Call Trace: [ 790.060475][T29763] [ 790.060482][T29763] dump_stack_lvl+0xe8/0x150 [ 790.060512][T29763] should_fail_ex+0x412/0x560 [ 790.060542][T29763] _copy_from_iter+0x1d3/0x1670 [ 790.060572][T29763] ? rcu_is_watching+0x15/0xb0 [ 790.060601][T29763] ? __pfx__copy_from_iter+0x10/0x10 [ 790.060635][T29763] ? netlink_sendmsg+0x650/0xb40 [ 790.060653][T29763] ? skb_put+0x11b/0x210 [ 790.060676][T29763] netlink_sendmsg+0x6c0/0xb40 [ 790.060703][T29763] ? __pfx_netlink_sendmsg+0x10/0x10 [ 790.060732][T29763] ? aa_sock_msg_perm+0xf1/0x1b0 [ 790.060760][T29763] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 790.060784][T29763] ____sys_sendmsg+0x972/0x9f0 [ 790.060814][T29763] ? __pfx_____sys_sendmsg+0x10/0x10 [ 790.060843][T29763] ? import_iovec+0x73/0xa0 [ 790.060866][T29763] ___sys_sendmsg+0x2a5/0x360 [ 790.060894][T29763] ? __pfx____sys_sendmsg+0x10/0x10 [ 790.060948][T29763] ? __fget_files+0x2a/0x420 [ 790.060973][T29763] ? __fget_files+0x3a0/0x420 [ 790.061008][T29763] __x64_sys_sendmsg+0x1bd/0x2a0 [ 790.061032][T29763] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 790.061070][T29763] ? __pfx_ksys_write+0x10/0x10 [ 790.061101][T29763] do_syscall_64+0x14d/0xf80 [ 790.061126][T29763] ? trace_irq_disable+0x3b/0x150 [ 790.061142][T29763] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.061160][T29763] ? clear_bhb_loop+0x40/0x90 [ 790.061180][T29763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.061196][T29763] RIP: 0033:0x7f8d3c19c819 [ 790.061213][T29763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.061228][T29763] RSP: 002b:00007f8d3d03a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 790.061247][T29763] RAX: ffffffffffffffda RBX: 00007f8d3c415fa0 RCX: 00007f8d3c19c819 [ 790.061260][T29763] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 790.061272][T29763] RBP: 00007f8d3d03a090 R08: 0000000000000000 R09: 0000000000000000 [ 790.061283][T29763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.061294][T29763] R13: 00007f8d3c416038 R14: 00007f8d3c415fa0 R15: 00007fff0c650918 [ 790.061321][T29763] [ 790.410034][T29774] xfrm0: entered allmulticast mode [ 790.415397][T29774] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 790.707650][T29797] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7226'. [ 790.725126][T29800] 8021q: VLANs not supported on sit0 [ 790.732128][T29800] netlink: 'syz.2.7227': attribute type 2 has an invalid length. [ 790.747391][T29800] : entered promiscuous mode [ 790.813149][ T7003] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 790.862430][T27120] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 791.001659][T29810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7231'. [ 791.236391][T11679] lec:lec_start_xmit: lec0:No lecd attached [ 791.328215][T29810] syzkaller1: entered promiscuous mode [ 791.333881][T29810] syzkaller1: entered allmulticast mode [ 791.341832][T29810] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7231'. [ 791.477478][T29831] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7237'. [ 791.525741][T29832] syzkaller0: entered promiscuous mode [ 791.531449][T29832] syzkaller0: entered allmulticast mode [ 791.611618][T29837] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7239'. [ 791.659185][T29839] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7240'. [ 791.687084][T29839] openvswitch: netlink: Flow actions attr not present in new flow. [ 791.808313][T29850] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7243'. [ 791.901599][T29858] xt_ecn: cannot match TCP bits for non-tcp packets [ 791.932017][T27135] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 791.947130][T27135] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 792.015224][T29868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 792.143614][T29881] netlink: 'syz.1.7252': attribute type 7 has an invalid length. [ 792.152445][T29881] netlink: 'syz.1.7252': attribute type 8 has an invalid length. [ 792.234494][T29891] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 792.242766][T29891] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 792.419409][T29906] netlink: 'syz.4.7258': attribute type 1 has an invalid length. [ 792.473887][T29906] bond5: (slave bridge5): making interface the new active one [ 792.493191][T29906] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 792.513351][T29906] 8021q: adding VLAN 0 to HW filter on device bond5 [ 792.649767][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 792.698465][T29921] netlink: 'syz.1.7265': attribute type 21 has an invalid length. [ 792.706661][T29921] netlink: 'syz.1.7265': attribute type 1 has an invalid length. [ 792.810804][ T9] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 792.849190][T29930] wg1 speed is unknown, defaulting to 1000 [ 793.169357][T29947] netlink: 'syz.1.7272': attribute type 13 has an invalid length. [ 793.229858][T29947] netlink: 'syz.1.7272': attribute type 17 has an invalid length. [ 793.438146][T29947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 793.829949][T29984] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 794.543454][T29993] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 794.571245][T30003] __nla_validate_parse: 18 callbacks suppressed [ 794.571267][T30003] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7283'. [ 794.897526][T30019] FAULT_INJECTION: forcing a failure. [ 794.897526][T30019] name failslab, interval 1, probability 0, space 0, times 0 [ 794.919924][T30019] CPU: 0 UID: 0 PID: 30019 Comm: syz.0.7292 Not tainted syzkaller #0 PREEMPT(full) [ 794.919951][T30019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 794.919962][T30019] Call Trace: [ 794.919969][T30019] [ 794.919978][T30019] dump_stack_lvl+0xe8/0x150 [ 794.920008][T30019] should_fail_ex+0x412/0x560 [ 794.920040][T30019] should_failslab+0xa8/0x100 [ 794.920066][T30019] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 794.920089][T30019] ? __alloc_skb+0x1d0/0x7d0 [ 794.920109][T30019] ? __local_bh_enable_ip+0xd0/0x130 [ 794.920137][T30019] __alloc_skb+0x1d0/0x7d0 [ 794.920157][T30019] ? netlink_ack_tlv_len+0x6c/0x210 [ 794.920180][T30019] netlink_ack+0x146/0xa50 [ 794.920198][T30019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.920224][T30019] ? __lock_acquire+0x6b5/0x2cf0 [ 794.920258][T30019] netlink_rcv_skb+0x2b6/0x4b0 [ 794.920280][T30019] ? __pfx_genl_rcv_msg+0x10/0x10 [ 794.920306][T30019] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 794.920343][T30019] ? down_read+0x272/0x2e0 [ 794.920360][T30019] ? genl_rcv+0xd/0x40 [ 794.920385][T30019] genl_rcv+0x28/0x40 [ 794.920407][T30019] netlink_unicast+0x80f/0x9b0 [ 794.920442][T30019] ? __pfx_netlink_unicast+0x10/0x10 [ 794.920471][T30019] ? netlink_sendmsg+0x650/0xb40 [ 794.920490][T30019] ? skb_put+0x11b/0x210 [ 794.920516][T30019] netlink_sendmsg+0x813/0xb40 [ 794.920545][T30019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 794.920569][T30019] ? aa_sock_msg_perm+0xf1/0x1b0 [ 794.920597][T30019] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.920621][T30019] ____sys_sendmsg+0x972/0x9f0 [ 794.920654][T30019] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.920694][T30019] ? import_iovec+0x73/0xa0 [ 794.920721][T30019] ___sys_sendmsg+0x2a5/0x360 [ 794.920751][T30019] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.920809][T30019] ? __fget_files+0x2a/0x420 [ 794.920835][T30019] ? __fget_files+0x3a0/0x420 [ 794.920871][T30019] __x64_sys_sendmsg+0x1bd/0x2a0 [ 794.920898][T30019] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.920930][T30019] ? __pfx_ksys_write+0x10/0x10 [ 794.920961][T30019] do_syscall_64+0x14d/0xf80 [ 794.920985][T30019] ? trace_irq_disable+0x3b/0x150 [ 794.921001][T30019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.921016][T30019] ? clear_bhb_loop+0x40/0x90 [ 794.921037][T30019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.921053][T30019] RIP: 0033:0x7f293179c819 [ 794.921069][T30019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.921083][T30019] RSP: 002b:00007f2932574028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.921100][T30019] RAX: ffffffffffffffda RBX: 00007f2931a15fa0 RCX: 00007f293179c819 [ 794.921113][T30019] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 794.921124][T30019] RBP: 00007f2932574090 R08: 0000000000000000 R09: 0000000000000000 [ 794.921135][T30019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 794.921146][T30019] R13: 00007f2931a16038 R14: 00007f2931a15fa0 R15: 00007fffb3de85c8 [ 794.921175][T30019] [ 795.320794][T30022] netlink: 'syz.2.7294': attribute type 62 has an invalid length. [ 795.472076][T30035] FAULT_INJECTION: forcing a failure. [ 795.472076][T30035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 795.491776][T30035] CPU: 1 UID: 0 PID: 30035 Comm: syz.0.7298 Not tainted syzkaller #0 PREEMPT(full) [ 795.491804][T30035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 795.491815][T30035] Call Trace: [ 795.491823][T30035] [ 795.491831][T30035] dump_stack_lvl+0xe8/0x150 [ 795.491862][T30035] should_fail_ex+0x412/0x560 [ 795.491893][T30035] _copy_from_user+0x2d/0xb0 [ 795.491916][T30035] ___sys_sendmsg+0x1c6/0x360 [ 795.491946][T30035] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.491969][T30035] ? kstrtouint+0x6e/0xe0 [ 795.492017][T30035] ? __fget_files+0x2a/0x420 [ 795.492043][T30035] ? __fget_files+0x3a0/0x420 [ 795.492078][T30035] __sys_sendmmsg+0x27c/0x4e0 [ 795.492107][T30035] ? __pfx___sys_sendmmsg+0x10/0x10 [ 795.492129][T30035] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 795.492179][T30035] ? ksys_write+0x242/0x270 [ 795.492201][T30035] ? __pfx_ksys_write+0x10/0x10 [ 795.492227][T30035] __x64_sys_sendmmsg+0xa0/0xc0 [ 795.492253][T30035] do_syscall_64+0x14d/0xf80 [ 795.492278][T30035] ? trace_irq_disable+0x3b/0x150 [ 795.492295][T30035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.492314][T30035] ? clear_bhb_loop+0x40/0x90 [ 795.492337][T30035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.492355][T30035] RIP: 0033:0x7f293179c819 [ 795.492373][T30035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 795.492396][T30035] RSP: 002b:00007f2932574028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 795.492417][T30035] RAX: ffffffffffffffda RBX: 00007f2931a15fa0 RCX: 00007f293179c819 [ 795.492431][T30035] RDX: 0000000000000001 RSI: 0000200000001500 RDI: 0000000000000005 [ 795.492443][T30035] RBP: 00007f2932574090 R08: 0000000000000000 R09: 0000000000000000 [ 795.492455][T30035] R10: 000000000000c040 R11: 0000000000000246 R12: 0000000000000001 [ 795.492467][T30035] R13: 00007f2931a16038 R14: 00007f2931a15fa0 R15: 00007fffb3de85c8 [ 795.492497][T30035] [ 795.733662][T30036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7297'. [ 795.768079][T30036] xt_hashlimit: size too large, truncated to 1048576 [ 795.776576][T30036] xt_hashlimit: max too large, truncated to 1048576 [ 795.777845][T30038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7300'. [ 795.802485][T30038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7300'. [ 795.817595][T30038] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 795.895547][T30042] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7299'. [ 796.009737][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 796.051715][T30047] netlink: 'syz.0.7301': attribute type 1 has an invalid length. [ 796.117143][T30047] 8021q: adding VLAN 0 to HW filter on device bond3 [ 796.139248][T30044] ipvlan2: entered promiscuous mode [ 796.183190][T30044] ipvlan2: entered allmulticast mode [ 796.193858][T30044] bond3: entered allmulticast mode [ 796.256333][T30047] bond3: (slave ip6gretap1): making interface the new active one [ 796.264342][T30047] ip6gretap1: entered allmulticast mode [ 796.272310][T30047] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 796.328698][T30061] netlink: 'syz.4.7307': attribute type 62 has an invalid length. [ 796.344125][T30059] netlink: 'syz.1.7306': attribute type 33 has an invalid length. [ 796.658272][T30082] netlink: 'syz.4.7312': attribute type 1 has an invalid length. [ 796.809665][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5570 ms [ 796.817794][ C1] lec:lec_tx_timeout: lec0 [ 796.883864][T30082] 8021q: adding VLAN 0 to HW filter on device bond6 [ 796.976257][T30084] bond6: (slave geneve3): making interface the new active one [ 796.985744][T30084] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 797.002442][T27151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.011676][T27151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.030913][T27151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.058290][T27151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.141671][T30100] netlink: 'syz.4.7318': attribute type 62 has an invalid length. [ 797.178354][T30105] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7319'. [ 797.188259][T30106] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7319'. [ 797.479767][T30121] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7325'. [ 797.495141][T30121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7325'. [ 797.529102][T30122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7325'. [ 797.723074][T30139] netlink: 'syz.0.7330': attribute type 62 has an invalid length. [ 797.821951][T30151] netlink: 'syz.2.7335': attribute type 5 has an invalid length. [ 797.862849][T30156] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 797.901754][T30149] bond2: option all_slaves_active: invalid value (5) [ 797.910820][T30149] bond2 (unregistering): Released all slaves [ 797.948305][T30154] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 797.972006][T30159] netlink: 'syz.2.7337': attribute type 8 has an invalid length. [ 798.086442][T30167] veth1: entered allmulticast mode [ 798.102645][T30169] netlink: zone id is out of range [ 798.113921][T30167] tipc: New replicast peer: 255.255.255.255 [ 798.124433][T30169] netlink: del zone limit has 8 unknown bytes [ 798.148698][T30167] tipc: Enabled bearer , priority 10 [ 798.159391][T30172] No such timeout policy "syz0" [ 798.371273][T30181] wg1 speed is unknown, defaulting to 1000 [ 798.659154][T30197] IPVS: set_ctl: invalid protocol: 1 100.1.1.0:20002 [ 799.534999][T30229] syzkaller0: entered promiscuous mode [ 799.560521][T30229] syzkaller0: entered allmulticast mode [ 799.637814][T30234] netlink: 'syz.1.7361': attribute type 62 has an invalid length. [ 799.745817][T30241] __nla_validate_parse: 4 callbacks suppressed [ 799.745837][T30241] netlink: 63 bytes leftover after parsing attributes in process `syz.4.7363'. [ 799.797433][T30244] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7365'. [ 799.819980][T30244] netlink: 'syz.1.7365': attribute type 9 has an invalid length. [ 799.887984][T30251] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.7367'. [ 799.910711][T30251] wg1: left promiscuous mode [ 799.915440][T30251] wg1: left allmulticast mode [ 799.924484][T30251] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 799.974197][T30254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7366'. [ 800.299856][T30280] veth0_to_team: left allmulticast mode [ 800.314756][T30280] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7376'. [ 800.436699][T30282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 800.463080][ T5940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 800.489692][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 800.844132][T30302] netlink: 666 bytes leftover after parsing attributes in process `syz.3.7381'. [ 801.450092][ T5940] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 801.466291][T30318] validate_nla: 3 callbacks suppressed [ 801.466305][T30318] netlink: 'syz.0.7386': attribute type 62 has an invalid length. [ 801.508528][T30320] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.546558][T30325] netlink: 36 bytes leftover after parsing attributes in process `syz.0.7388'. [ 801.653233][T30328] sctp: [Deprecated]: syz.0.7388 (pid 30328) Use of int in maxseg socket option. [ 801.653233][T30328] Use struct sctp_assoc_value instead [ 801.668107][T30328] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7388'. [ 803.274281][T30280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 803.408304][T30338] netlink: 'syz.1.7391': attribute type 4 has an invalid length. [ 803.416308][T30338] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7391'. [ 803.428725][T30338] .`: renamed from bond0 (while UP) [ 803.431792][T30337] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7392'. [ 803.475423][T30339] can: request_module (can-proto-0) failed. [ 803.498512][T30337] Bluetooth: MGMT ver 1.23 [ 803.882187][T30377] netlink: 'syz.0.7405': attribute type 1 has an invalid length. [ 804.034168][T30388] xt_hashlimit: size too large, truncated to 1048576 [ 804.052086][T30390] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 804.069086][T30390] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 804.169746][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 804.305792][T30402] bond4 (unregistering): Released all slaves [ 804.554361][T30416] wg1 speed is unknown, defaulting to 1000 [ 804.664576][T30435] team_slave_1: Caught tx_queue_len zero misconfig [ 804.776551][T30441] xt_hashlimit: size too large, truncated to 1048576 [ 805.228049][T30465] __nla_validate_parse: 12 callbacks suppressed [ 805.228071][T30465] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7426'. [ 805.537026][T30455] syzkaller0: entered promiscuous mode [ 805.550531][T30455] syzkaller0: entered allmulticast mode [ 806.601984][T30508] netlink: 'syz.2.7438': attribute type 13 has an invalid length. [ 806.612773][T30508] netlink: 'syz.2.7438': attribute type 17 has an invalid length. [ 808.019814][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 808.267015][T30508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 808.276644][T30508] 8021q: adding VLAN 0 to HW filter on device team0 [ 808.299834][T30508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 808.327126][T30510] netlink: 'syz.4.7439': attribute type 6 has an invalid length. [ 808.688012][ T1303] lec:lec_start_xmit: lec0:No lecd attached [ 808.982132][T30542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7448'. [ 809.157587][T30544] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7449'. [ 809.334697][T30546] FAULT_INJECTION: forcing a failure. [ 809.334697][T30546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 809.348124][T30546] CPU: 0 UID: 0 PID: 30546 Comm: syz.4.7450 Not tainted syzkaller #0 PREEMPT(full) [ 809.348149][T30546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 809.348160][T30546] Call Trace: [ 809.348169][T30546] [ 809.348177][T30546] dump_stack_lvl+0xe8/0x150 [ 809.348208][T30546] should_fail_ex+0x412/0x560 [ 809.348239][T30546] _copy_from_user+0x2d/0xb0 [ 809.348262][T30546] ___sys_sendmsg+0x1c6/0x360 [ 809.348294][T30546] ? __pfx____sys_sendmsg+0x10/0x10 [ 809.348351][T30546] ? __fget_files+0x2a/0x420 [ 809.348377][T30546] ? __fget_files+0x3a0/0x420 [ 809.348413][T30546] __x64_sys_sendmsg+0x1bd/0x2a0 [ 809.348439][T30546] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 809.348473][T30546] ? __pfx_ksys_write+0x10/0x10 [ 809.348504][T30546] do_syscall_64+0x14d/0xf80 [ 809.348529][T30546] ? trace_irq_disable+0x3b/0x150 [ 809.348546][T30546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.348565][T30546] ? clear_bhb_loop+0x40/0x90 [ 809.348587][T30546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.348606][T30546] RIP: 0033:0x7f2152b9c819 [ 809.348624][T30546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 809.348640][T30546] RSP: 002b:00007f2153972028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 809.348660][T30546] RAX: ffffffffffffffda RBX: 00007f2152e15fa0 RCX: 00007f2152b9c819 [ 809.348673][T30546] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 809.348686][T30546] RBP: 00007f2153972090 R08: 0000000000000000 R09: 0000000000000000 [ 809.348698][T30546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 809.348709][T30546] R13: 00007f2152e16038 R14: 00007f2152e15fa0 R15: 00007fffc2582c78 [ 809.348746][T30546] [ 809.618221][T30548] bridge6: entered promiscuous mode [ 809.624178][T30548] bridge6: entered allmulticast mode [ 809.638730][T30548] team0: Port device bridge6 added [ 809.871082][T30559] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 809.894701][T30559] bond3: (slave lo): Enslaving as an active interface with an up link [ 809.936923][T30559] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 809.954259][T30558] debugfs: 'netdev:syzkaller0' already exists in 'phy58' [ 809.979108][T30568] syzkaller1: entered promiscuous mode [ 809.985393][T30568] syzkaller1: entered allmulticast mode [ 810.039794][T30558] tipc: Enabling of bearer rejected, already enabled [ 810.077864][T30576] tls_set_device_offload_rx: netdev not found [ 810.160612][T30580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7459'. [ 810.170962][T30581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7458'. [ 810.219815][T30584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 810.261295][T30589] FAULT_INJECTION: forcing a failure. [ 810.261295][T30589] name failslab, interval 1, probability 0, space 0, times 0 [ 810.312453][T30589] CPU: 1 UID: 0 PID: 30589 Comm: syz.1.7461 Not tainted syzkaller #0 PREEMPT(full) [ 810.312480][T30589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 810.312492][T30589] Call Trace: [ 810.312500][T30589] [ 810.312508][T30589] dump_stack_lvl+0xe8/0x150 [ 810.312539][T30589] should_fail_ex+0x412/0x560 [ 810.312570][T30589] should_failslab+0xa8/0x100 [ 810.312595][T30589] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 810.312617][T30589] ? __alloc_skb+0x186/0x7d0 [ 810.312637][T30589] ? __alloc_skb+0x1d0/0x7d0 [ 810.312655][T30589] ? __local_bh_enable_ip+0xd0/0x130 [ 810.312683][T30589] __alloc_skb+0x1d0/0x7d0 [ 810.312709][T30589] netlink_sendmsg+0x5d4/0xb40 [ 810.312738][T30589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 810.312762][T30589] ? aa_sock_msg_perm+0xf1/0x1b0 [ 810.312790][T30589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 810.312814][T30589] ____sys_sendmsg+0x972/0x9f0 [ 810.312846][T30589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 810.312878][T30589] ? import_iovec+0x73/0xa0 [ 810.312902][T30589] ___sys_sendmsg+0x2a5/0x360 [ 810.312930][T30589] ? __pfx____sys_sendmsg+0x10/0x10 [ 810.312984][T30589] ? __fget_files+0x2a/0x420 [ 810.313009][T30589] ? __fget_files+0x3a0/0x420 [ 810.313044][T30589] __x64_sys_sendmsg+0x1bd/0x2a0 [ 810.313068][T30589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 810.313100][T30589] ? __pfx_ksys_write+0x10/0x10 [ 810.313130][T30589] do_syscall_64+0x14d/0xf80 [ 810.313155][T30589] ? trace_irq_disable+0x3b/0x150 [ 810.313171][T30589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.313189][T30589] ? clear_bhb_loop+0x40/0x90 [ 810.313211][T30589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.313229][T30589] RIP: 0033:0x7f8d3c19c819 [ 810.313246][T30589] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.313262][T30589] RSP: 002b:00007f8d3d03a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 810.313282][T30589] RAX: ffffffffffffffda RBX: 00007f8d3c415fa0 RCX: 00007f8d3c19c819 [ 810.313296][T30589] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 810.313307][T30589] RBP: 00007f8d3d03a090 R08: 0000000000000000 R09: 0000000000000000 [ 810.313319][T30589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.313330][T30589] R13: 00007f8d3c416038 R14: 00007f8d3c415fa0 R15: 00007fff0c650918 [ 810.313359][T30589] [ 810.693240][T30608] FAULT_INJECTION: forcing a failure. [ 810.693240][T30608] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 810.737703][T30608] CPU: 0 UID: 0 PID: 30608 Comm: syz.0.7463 Not tainted syzkaller #0 PREEMPT(full) [ 810.737730][T30608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 810.737742][T30608] Call Trace: [ 810.737750][T30608] [ 810.737759][T30608] dump_stack_lvl+0xe8/0x150 [ 810.737791][T30608] should_fail_ex+0x412/0x560 [ 810.737820][T30608] _copy_from_user+0x2d/0xb0 [ 810.737842][T30608] ___sys_recvmsg+0x175/0x590 [ 810.737865][T30608] ? __lock_acquire+0x6b5/0x2cf0 [ 810.737894][T30608] ? __pfx____sys_recvmsg+0x10/0x10 [ 810.737949][T30608] do_recvmmsg+0x334/0x800 [ 810.737980][T30608] ? __pfx_do_recvmmsg+0x10/0x10 [ 810.738012][T30608] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 810.738053][T30608] __x64_sys_recvmmsg+0x198/0x250 [ 810.738080][T30608] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 810.738112][T30608] do_syscall_64+0x14d/0xf80 [ 810.738137][T30608] ? trace_irq_disable+0x3b/0x150 [ 810.738153][T30608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.738171][T30608] ? clear_bhb_loop+0x40/0x90 [ 810.738193][T30608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.738211][T30608] RIP: 0033:0x7f293179c819 [ 810.738228][T30608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.738243][T30608] RSP: 002b:00007f292f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 810.738264][T30608] RAX: ffffffffffffffda RBX: 00007f2931a16090 RCX: 00007f293179c819 [ 810.738278][T30608] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 810.738290][T30608] RBP: 00007f292f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 810.738302][T30608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 810.738313][T30608] R13: 00007f2931a16128 R14: 00007f2931a16090 R15: 00007fffb3de85c8 [ 810.738342][T30608] [ 811.122086][T30628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7474'. [ 811.251187][T30634] netlink: 'syz.2.7476': attribute type 4 has an invalid length. [ 811.319757][T30636] netlink: 48 bytes leftover after parsing attributes in process `syz.4.7477'. [ 811.526399][T30655] xt_hashlimit: size too large, truncated to 1048576 [ 811.689069][T30670] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7488'. [ 812.084979][T30695] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7497'. [ 812.101639][T30696] FAULT_INJECTION: forcing a failure. [ 812.101639][T30696] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 812.116923][T30696] CPU: 0 UID: 0 PID: 30696 Comm: syz.1.7496 Not tainted syzkaller #0 PREEMPT(full) [ 812.116948][T30696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 812.116959][T30696] Call Trace: [ 812.116966][T30696] [ 812.116974][T30696] dump_stack_lvl+0xe8/0x150 [ 812.117005][T30696] should_fail_ex+0x412/0x560 [ 812.117034][T30696] _copy_from_user+0x2d/0xb0 [ 812.117054][T30696] ___sys_recvmsg+0x175/0x590 [ 812.117077][T30696] ? __lock_acquire+0x6b5/0x2cf0 [ 812.117104][T30696] ? __pfx____sys_recvmsg+0x10/0x10 [ 812.117159][T30696] do_recvmmsg+0x334/0x800 [ 812.117188][T30696] ? __pfx_do_recvmmsg+0x10/0x10 [ 812.117220][T30696] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 812.117259][T30696] __x64_sys_recvmmsg+0x198/0x250 [ 812.117285][T30696] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 812.117319][T30696] do_syscall_64+0x14d/0xf80 [ 812.117341][T30696] ? trace_irq_disable+0x3b/0x150 [ 812.117356][T30696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.117374][T30696] ? clear_bhb_loop+0x40/0x90 [ 812.117394][T30696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 812.117412][T30696] RIP: 0033:0x7f8d3c19c819 [ 812.117430][T30696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 812.117446][T30696] RSP: 002b:00007f8d3d019028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 812.117465][T30696] RAX: ffffffffffffffda RBX: 00007f8d3c416090 RCX: 00007f8d3c19c819 [ 812.117478][T30696] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 812.117490][T30696] RBP: 00007f8d3d019090 R08: 0000000000000000 R09: 0000000000000000 [ 812.117502][T30696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 812.117512][T30696] R13: 00007f8d3c416128 R14: 00007f8d3c416090 R15: 00007fff0c650918 [ 812.117548][T30696] [ 812.320046][T30701] x_tables: duplicate underflow at hook 3 [ 812.549790][T30703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7500'. [ 813.165917][T30730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7511'. [ 813.497404][T30747] FAULT_INJECTION: forcing a failure. [ 813.497404][T30747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 813.511398][T30747] CPU: 0 UID: 0 PID: 30747 Comm: syz.0.7516 Not tainted syzkaller #0 PREEMPT(full) [ 813.511423][T30747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 813.511434][T30747] Call Trace: [ 813.511442][T30747] [ 813.511450][T30747] dump_stack_lvl+0xe8/0x150 [ 813.511480][T30747] should_fail_ex+0x412/0x560 [ 813.511509][T30747] _copy_from_user+0x2d/0xb0 [ 813.511529][T30747] ___sys_recvmsg+0x175/0x590 [ 813.511551][T30747] ? __lock_acquire+0x6b5/0x2cf0 [ 813.511576][T30747] ? __pfx____sys_recvmsg+0x10/0x10 [ 813.511631][T30747] do_recvmmsg+0x334/0x800 [ 813.511657][T30747] ? __pfx_do_recvmmsg+0x10/0x10 [ 813.511689][T30747] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 813.511729][T30747] __x64_sys_recvmmsg+0x198/0x250 [ 813.511756][T30747] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 813.511789][T30747] do_syscall_64+0x14d/0xf80 [ 813.511813][T30747] ? trace_irq_disable+0x3b/0x150 [ 813.511828][T30747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.511846][T30747] ? clear_bhb_loop+0x40/0x90 [ 813.511867][T30747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.511884][T30747] RIP: 0033:0x7f293179c819 [ 813.511902][T30747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.511916][T30747] RSP: 002b:00007f292f9f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 813.511936][T30747] RAX: ffffffffffffffda RBX: 00007f2931a16090 RCX: 00007f293179c819 [ 813.511949][T30747] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000004 [ 813.511961][T30747] RBP: 00007f292f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 813.511973][T30747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 813.511984][T30747] R13: 00007f2931a16128 R14: 00007f2931a16090 R15: 00007fffb3de85c8 [ 813.512014][T30747] [ 813.690776][T30750] atomic_op ffff88805b9be998 conn xmit_atomic 0000000000000000 [ 813.859901][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5170 ms [ 813.868022][ C1] lec:lec_tx_timeout: lec0 [ 814.164869][T30769] netlink: 'syz.2.7527': attribute type 11 has an invalid length. [ 814.322329][T30778] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7531'. [ 814.551032][T30785] bond0: option arp_validate: invalid value (55553) [ 814.577748][T30785] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 814.585128][T30785] IPv6: NLM_F_CREATE should be set when creating new route [ 814.592390][T30785] IPv6: NLM_F_CREATE should be set when creating new route [ 814.644255][T30789] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7534'. [ 815.044838][T30807] 8021q: adding VLAN 0 to HW filter on device bond4 [ 815.073819][T30807] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7537'. [ 815.091612][T30811] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7542'. [ 815.357994][T30824] tipc: Invalid UDP bearer configuration [ 815.358043][T30824] tipc: Enabling of bearer rejected, failed to enable media [ 815.385646][T30826] netlink: 'syz.0.7547': attribute type 1 has an invalid length. [ 815.406489][T30824] netlink: 'syz.1.7546': attribute type 39 has an invalid length. [ 815.539141][T30835] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 815.572352][T30835] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 815.590329][T30835] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 815.618833][T30835] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 815.642589][T30835] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 815.732003][T30835] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 815.849922][T30835] netlink: 'syz.4.7550': attribute type 2 has an invalid length. [ 815.859788][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 816.294443][T30852] __nla_validate_parse: 68 callbacks suppressed [ 816.294464][T30852] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7556'. [ 816.354905][T30855] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.7559'. [ 816.372532][T30859] FAULT_INJECTION: forcing a failure. [ 816.372532][T30859] name failslab, interval 1, probability 0, space 0, times 0 [ 816.388661][T30859] CPU: 1 UID: 0 PID: 30859 Comm: syz.1.7558 Not tainted syzkaller #0 PREEMPT(full) [ 816.388684][T30859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 816.388695][T30859] Call Trace: [ 816.388703][T30859] [ 816.388710][T30859] dump_stack_lvl+0xe8/0x150 [ 816.388740][T30859] should_fail_ex+0x412/0x560 [ 816.388771][T30859] should_failslab+0xa8/0x100 [ 816.388796][T30859] __kmalloc_cache_noprof+0x88/0x660 [ 816.388819][T30859] ? rtm_new_nexthop+0x2aa1/0x84c0 [ 816.388842][T30859] rtm_new_nexthop+0x2aa1/0x84c0 [ 816.388860][T30859] ? kasan_save_track+0x3e/0x80 [ 816.388879][T30859] ? kasan_save_free_info+0x46/0x50 [ 816.388903][T30859] ? __kasan_slab_free+0x5c/0x80 [ 816.388924][T30859] ? netlink_deliver_tap+0x19c/0x1b0 [ 816.388962][T30859] ? netlink_unicast+0x7e3/0x9b0 [ 816.388986][T30859] ? netlink_sendmsg+0x813/0xb40 [ 816.389003][T30859] ? ___sys_sendmsg+0x2a5/0x360 [ 816.389024][T30859] ? do_syscall_64+0x14d/0xf80 [ 816.389049][T30859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.389076][T30859] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 816.389117][T30859] ? kasan_quarantine_put+0xbb/0x1f0 [ 816.389137][T30859] ? lockdep_hardirqs_on+0x7a/0x110 [ 816.389165][T30859] ? kmem_cache_free+0x187/0x630 [ 816.389190][T30859] ? nlmon_xmit+0xb0/0x100 [ 816.389233][T30859] ? lockdep_hardirqs_on+0x7a/0x110 [ 816.389255][T30859] ? __dev_queue_xmit+0x28b/0x3870 [ 816.389277][T30859] ? __local_bh_enable_ip+0xd0/0x130 [ 816.389298][T30859] ? __dev_queue_xmit+0x28b/0x3870 [ 816.389341][T30859] ? __pfx_rtm_new_nexthop+0x10/0x10 [ 816.389359][T30859] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 816.389380][T30859] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 816.389397][T30859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 816.389415][T30859] ? ref_tracker_free+0x693/0x840 [ 816.389430][T30859] ? __copy_skb_header+0xa3/0x4a0 [ 816.389454][T30859] ? __pfx_ref_tracker_free+0x10/0x10 [ 816.389480][T30859] netlink_rcv_skb+0x232/0x4b0 [ 816.389501][T30859] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 816.389520][T30859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 816.389552][T30859] ? netlink_deliver_tap+0x2e/0x1b0 [ 816.389575][T30859] netlink_unicast+0x80f/0x9b0 [ 816.389606][T30859] ? __pfx_netlink_unicast+0x10/0x10 [ 816.389633][T30859] ? netlink_sendmsg+0x650/0xb40 [ 816.389649][T30859] ? skb_put+0x11b/0x210 [ 816.389669][T30859] netlink_sendmsg+0x813/0xb40 [ 816.389696][T30859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 816.389719][T30859] ? aa_sock_msg_perm+0xf1/0x1b0 [ 816.389746][T30859] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 816.389770][T30859] ____sys_sendmsg+0x972/0x9f0 [ 816.389802][T30859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 816.389833][T30859] ? import_iovec+0x73/0xa0 [ 816.389857][T30859] ___sys_sendmsg+0x2a5/0x360 [ 816.389885][T30859] ? __pfx____sys_sendmsg+0x10/0x10 [ 816.389940][T30859] ? __fget_files+0x2a/0x420 [ 816.389965][T30859] ? __fget_files+0x3a0/0x420 [ 816.389999][T30859] __x64_sys_sendmsg+0x1bd/0x2a0 [ 816.390027][T30859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 816.390060][T30859] ? __pfx_ksys_write+0x10/0x10 [ 816.390091][T30859] do_syscall_64+0x14d/0xf80 [ 816.390115][T30859] ? trace_irq_disable+0x3b/0x150 [ 816.390131][T30859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.390150][T30859] ? clear_bhb_loop+0x40/0x90 [ 816.390172][T30859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 816.390197][T30859] RIP: 0033:0x7f8d3c19c819 [ 816.390215][T30859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 816.390231][T30859] RSP: 002b:00007f8d3d03a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 816.390251][T30859] RAX: ffffffffffffffda RBX: 00007f8d3c415fa0 RCX: 00007f8d3c19c819 [ 816.390264][T30859] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 816.390277][T30859] RBP: 00007f8d3d03a090 R08: 0000000000000000 R09: 0000000000000000 [ 816.390288][T30859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 816.390299][T30859] R13: 00007f8d3c416038 R14: 00007f8d3c415fa0 R15: 00007fff0c650918 [ 816.390329][T30859] [ 816.485411][T30866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7560'. [ 816.800829][T27747] IPVS: starting estimator thread 0... [ 816.808677][T30869] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7560'. [ 816.889883][T30877] IPVS: using max 32 ests per chain, 76800 per kthread [ 816.949014][T30872] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7562'. [ 816.997154][T30876] bond0: (slave gretap1): making interface the new active one [ 817.022784][T30876] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 817.102805][T30866] bond2: option lacp_rate: invalid value (64) [ 817.111194][T30866] bond2 (unregistering): Released all slaves [ 817.159419][T30890] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7566'. [ 817.427599][T30908] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7572'. [ 817.493331][T30908] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 817.562022][T30915] openvswitch: netlink: EtherType 50a is less than min 600 [ 817.604869][T30916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7573'. [ 818.310638][T30920] bridge5: entered allmulticast mode [ 818.342026][ C1] ------------[ cut here ]------------ [ 818.347929][ C1] sk->sk_forward_alloc [ 818.347949][ C1] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#1: syz-executor/25696 [ 818.362425][ C1] Modules linked in: [ 818.366771][ C1] CPU: 1 UID: 0 PID: 25696 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 818.376400][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 818.386502][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 818.392368][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 d0 c3 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 c2 c3 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 b4 c3 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 818.412040][ C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00010246 [ 818.418130][ C1] RAX: ffffffff8a26eabc RBX: dffffc0000000000 RCX: ffff8880285ddb80 [ 818.426171][ C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 818.429261][T30928] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7575'. [ 818.434188][ C1] RBP: 0000000000000090 R08: ffff88805994e027 R09: 1ffff1100b329c04 [ 818.434214][ C1] R10: dffffc0000000000 R11: ffffed100b329c05 R12: ffff88805994dd80 [ 818.434229][ C1] R13: dffffc0000000000 R14: ffff88805994e00c R15: ffffffff8fca6c80 [ 818.434245][ C1] FS: 0000555578795500(0000) GS:ffff888125555000(0000) knlGS:0000000000000000 [ 818.434263][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 818.482966][ C1] CR2: 00005555787954e8 CR3: 0000000048faa000 CR4: 00000000003526f0 [ 818.490997][ C1] Call Trace: [ 818.494287][ C1] [ 818.497147][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 818.502753][ C1] __sk_destruct+0x85/0x880 [ 818.507289][ C1] ? rcu_core+0x751/0x1070 [ 818.511763][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 818.516899][ C1] rcu_core+0x7cd/0x1070 [ 818.521221][ C1] ? __pfx_rcu_core+0x10/0x10 [ 818.525909][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 818.531174][ C1] ? sched_clock_cpu+0x74/0x440 [ 818.536052][ C1] handle_softirqs+0x22a/0x870 [ 818.540889][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 818.545685][ C1] __irq_exit_rcu+0x5f/0x150 [ 818.550347][ C1] irq_exit_rcu+0x9/0x30 [ 818.554616][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 818.560320][ C1] [ 818.563263][ C1] [ 818.566208][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 818.572245][ C1] RIP: 0010:__might_resched+0x11d/0x4d0 [ 818.577825][ C1] Code: 9b 02 00 00 41 8b 04 24 c1 e0 08 44 01 e8 39 d8 75 48 9c 58 a9 00 02 00 00 74 3f 4d 8d 6e 2c 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 d7 02 00 00 41 f6 45 00 02 75 21 4d 8d ae e8 0a 00 00 [ 818.597511][ C1] RSP: 0018:ffffc900033a7890 EFLAGS: 00000a03 [ 818.603629][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 [ 818.611661][ C1] RDX: 0000000000000000 RSI: ffffffff8e19b8e3 RDI: ffffffff8c27ca80 [ 818.619678][ C1] RBP: dffffc0000000000 R08: ffffffff901188b7 R09: 1ffffffff2023116 [ 818.627665][ C1] R10: dffffc0000000000 R11: fffffbfff2023117 R12: ffff8880285de044 [ 818.635696][ C1] R13: ffff8880285ddbac R14: ffff8880285ddb80 R15: 1ffff110050bbc08 [ 818.643821][ C1] ? __might_fault+0x52/0x130 [ 818.648520][ C1] __might_fault+0x76/0x130 [ 818.653071][ C1] _copy_from_iter+0x100/0x1670 [ 818.657954][ C1] ? anon_pipe_write+0x15b/0x1480 [ 818.663058][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 818.668384][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 818.673509][ C1] ? aa_file_perm+0x50e/0x15e0 [ 818.678018][T30938] netlink: 35911 bytes leftover after parsing attributes in process `syz.0.7577'. [ 818.678292][ C1] ? page_copy_sane+0x4e/0x270 [ 818.678325][ C1] copy_page_from_iter+0xdd/0x170 [ 818.697348][ C1] anon_pipe_write+0xa0b/0x1480 [ 818.702298][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 818.707374][ C1] ? __pfx_anon_pipe_write+0x10/0x10 [ 818.712699][ C1] ? apparmor_file_permission+0x1f4/0x300 [ 818.718439][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 818.723872][ C1] ? security_file_permission+0x75/0x260 [ 818.729537][ C1] vfs_write+0x61d/0xb90 [ 818.733846][ C1] ? __pfx_vfs_write+0x10/0x10 [ 818.738607][ C1] ? __x64_sys_wait4+0x1b7/0x240 [ 818.743674][ C1] ksys_write+0x150/0x270 [ 818.748025][ C1] ? __pfx_ksys_write+0x10/0x10 [ 818.752953][ C1] do_syscall_64+0x14d/0xf80 [ 818.757580][ C1] ? trace_irq_disable+0x3b/0x150 [ 818.762635][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.768712][ C1] ? clear_bhb_loop+0x40/0x90 [ 818.773437][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.779350][ C1] RIP: 0033:0x7f2152b5d04e [ 818.783807][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 818.803495][ C1] RSP: 002b:00007fffc2582f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.811960][ C1] RAX: ffffffffffffffda RBX: 0000555578795500 RCX: 00007f2152b5d04e [ 818.819973][ C1] RDX: 0000000000000004 RSI: 00007fffc2583070 RDI: 00000000000000f8 [ 818.827966][ C1] RBP: 00007fffc258301c R08: 0000000000000000 R09: 0000000000000000 [ 818.836068][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000142 [ 818.844080][ C1] R13: 00000000000927c0 R14: 00000000000c7bf8 R15: 00007fffc2583070 [ 818.852102][ C1] [ 818.855176][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 818.862464][ C1] CPU: 1 UID: 0 PID: 25696 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 818.871996][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 818.882045][ C1] Call Trace: [ 818.885318][ C1] [ 818.888156][ C1] vpanic+0x56c/0xa60 [ 818.892136][ C1] ? __pfx__printk+0x10/0x10 [ 818.896718][ C1] ? __pfx_vpanic+0x10/0x10 [ 818.901213][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 818.906516][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 818.911723][ C1] panic+0xc5/0xd0 [ 818.915460][ C1] ? __pfx_panic+0x10/0x10 [ 818.919920][ C1] __warn+0x315/0x4f0 [ 818.923917][ C1] ? inet_sock_destruct+0x62d/0x740 [ 818.929116][ C1] ? inet_sock_destruct+0x62d/0x740 [ 818.934315][ C1] __report_bug+0x29a/0x540 [ 818.938820][ C1] ? kasan_save_track+0x3e/0x80 [ 818.943671][ C1] ? kasan_save_free_info+0x46/0x50 [ 818.948868][ C1] ? __kasan_slab_free+0x5c/0x80 [ 818.953803][ C1] ? inet_sock_destruct+0x62d/0x740 [ 818.959533][ C1] ? __pfx___report_bug+0x10/0x10 [ 818.964570][ C1] ? copy_page_from_iter+0xdd/0x170 [ 818.969766][ C1] ? anon_pipe_write+0xa0b/0x1480 [ 818.974800][ C1] ? vfs_write+0x61d/0xb90 [ 818.979208][ C1] ? ksys_write+0x150/0x270 [ 818.983700][ C1] ? do_syscall_64+0x14d/0xf80 [ 818.988474][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.994573][ C1] ? inet_sock_destruct+0x62d/0x740 [ 818.999783][ C1] report_bug+0x16a/0x220 [ 819.004132][ C1] ? inet_sock_destruct+0x62d/0x740 [ 819.009326][ C1] ? inet_sock_destruct+0x62f/0x740 [ 819.014519][ C1] handle_bug+0x9c/0x200 [ 819.018756][ C1] exc_invalid_op+0x1a/0x50 [ 819.023260][ C1] asm_exc_invalid_op+0x1a/0x20 [ 819.028112][ C1] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 819.033925][ C1] Code: 0f 0b 90 e9 58 fe ff ff e8 d0 c3 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 c2 c3 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 b4 c3 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 819.053547][ C1] RSP: 0018:ffffc90000a08d48 EFLAGS: 00010246 [ 819.059666][ C1] RAX: ffffffff8a26eabc RBX: dffffc0000000000 RCX: ffff8880285ddb80 [ 819.067651][ C1] RDX: 0000000000000100 RSI: 0000000000000090 RDI: 0000000000000000 [ 819.075626][ C1] RBP: 0000000000000090 R08: ffff88805994e027 R09: 1ffff1100b329c04 [ 819.083598][ C1] R10: dffffc0000000000 R11: ffffed100b329c05 R12: ffff88805994dd80 [ 819.091560][ C1] R13: dffffc0000000000 R14: ffff88805994e00c R15: ffffffff8fca6c80 [ 819.099529][ C1] ? inet_sock_destruct+0x62c/0x740 [ 819.104739][ C1] ? inet_sock_destruct+0x62c/0x740 [ 819.109936][ C1] ? __pfx_udp_destruct_sock+0x10/0x10 [ 819.115386][ C1] __sk_destruct+0x85/0x880 [ 819.119885][ C1] ? rcu_core+0x751/0x1070 [ 819.124293][ C1] ? __pfx___sk_destruct+0x10/0x10 [ 819.129398][ C1] rcu_core+0x7cd/0x1070 [ 819.133651][ C1] ? __pfx_rcu_core+0x10/0x10 [ 819.138321][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 819.143514][ C1] ? sched_clock_cpu+0x74/0x440 [ 819.148363][ C1] handle_softirqs+0x22a/0x870 [ 819.153124][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 819.157902][ C1] __irq_exit_rcu+0x5f/0x150 [ 819.162508][ C1] irq_exit_rcu+0x9/0x30 [ 819.166757][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 819.172394][ C1] [ 819.175316][ C1] [ 819.178235][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 819.184205][ C1] RIP: 0010:__might_resched+0x11d/0x4d0 [ 819.189753][ C1] Code: 9b 02 00 00 41 8b 04 24 c1 e0 08 44 01 e8 39 d8 75 48 9c 58 a9 00 02 00 00 74 3f 4d 8d 6e 2c 4c 89 e8 48 c1 e8 03 0f b6 04 28 <84> c0 0f 85 d7 02 00 00 41 f6 45 00 02 75 21 4d 8d ae e8 0a 00 00 [ 819.209440][ C1] RSP: 0018:ffffc900033a7890 EFLAGS: 00000a03 [ 819.215502][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000046 [ 819.223462][ C1] RDX: 0000000000000000 RSI: ffffffff8e19b8e3 RDI: ffffffff8c27ca80 [ 819.231425][ C1] RBP: dffffc0000000000 R08: ffffffff901188b7 R09: 1ffffffff2023116 [ 819.239385][ C1] R10: dffffc0000000000 R11: fffffbfff2023117 R12: ffff8880285de044 [ 819.247346][ C1] R13: ffff8880285ddbac R14: ffff8880285ddb80 R15: 1ffff110050bbc08 [ 819.255325][ C1] ? __might_fault+0x52/0x130 [ 819.260004][ C1] __might_fault+0x76/0x130 [ 819.264500][ C1] _copy_from_iter+0x100/0x1670 [ 819.269355][ C1] ? anon_pipe_write+0x15b/0x1480 [ 819.274373][ C1] ? __pfx__copy_from_iter+0x10/0x10 [ 819.279655][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 819.284679][ C1] ? aa_file_perm+0x50e/0x15e0 [ 819.289430][ C1] ? page_copy_sane+0x4e/0x270 [ 819.294186][ C1] copy_page_from_iter+0xdd/0x170 [ 819.299207][ C1] anon_pipe_write+0xa0b/0x1480 [ 819.304052][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 819.309084][ C1] ? __pfx_anon_pipe_write+0x10/0x10 [ 819.314367][ C1] ? apparmor_file_permission+0x1f4/0x300 [ 819.320085][ C1] ? bpf_lsm_file_permission+0x9/0x20 [ 819.325449][ C1] ? security_file_permission+0x75/0x260 [ 819.331079][ C1] vfs_write+0x61d/0xb90 [ 819.335324][ C1] ? __pfx_vfs_write+0x10/0x10 [ 819.340081][ C1] ? __x64_sys_wait4+0x1b7/0x240 [ 819.345025][ C1] ksys_write+0x150/0x270 [ 819.349348][ C1] ? __pfx_ksys_write+0x10/0x10 [ 819.354211][ C1] do_syscall_64+0x14d/0xf80 [ 819.358798][ C1] ? trace_irq_disable+0x3b/0x150 [ 819.363807][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.369867][ C1] ? clear_bhb_loop+0x40/0x90 [ 819.374549][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.380432][ C1] RIP: 0033:0x7f2152b5d04e [ 819.384839][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 819.404435][ C1] RSP: 002b:00007fffc2582f78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 819.412841][ C1] RAX: ffffffffffffffda RBX: 0000555578795500 RCX: 00007f2152b5d04e [ 819.420803][ C1] RDX: 0000000000000004 RSI: 00007fffc2583070 RDI: 00000000000000f8 [ 819.428760][ C1] RBP: 00007fffc258301c R08: 0000000000000000 R09: 0000000000000000 [ 819.436717][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000142 [ 819.444687][ C1] R13: 00000000000927c0 R14: 00000000000c7bf8 R15: 00007fffc2583070 [ 819.452664][ C1] [ 819.456043][ C1] Kernel Offset: disabled [ 819.460355][ C1] Rebooting in 86400 seconds..