last executing test programs: 3.025362543s ago: executing program 0 (id=2001): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x10000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4004001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000001800010000000000fddbdf251d01050008000a00", @ANYRES32, @ANYBLOB='\b\x00\t\x00', @ANYRESOCT], 0x24}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet(r6, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r6, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010000, 0x0) sendto$inet(r6, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000600)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000006c0)={@private2, 0x3c, r4}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x58, 0x0, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x6}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x10, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5}, [@generic={0x91, 0x1, 0x1, 0xd}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800003}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 2.362828165s ago: executing program 4 (id=2010): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000240)=[0x0, 0x6], 0x0, 0x0, 0x2}}, 0x40) r3 = epoll_create(0x8) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000100)={0x30000010}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x67ce, 0x4) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x10}, 0x1, 0x7}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b~', 0x2}], 0x1, 0x0) close(0x3) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) close(0x4) sendmsg$nl_route(r7, 0x0, 0x0) epoll_wait(r3, &(0x7f0000000040)=[{}], 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x54}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xa, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001002500000085100000010000009500000000000000184000000200000000000000000000009500000000000000850000002b00000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 2.114432316s ago: executing program 0 (id=2013): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r0, 0x10e, 0xa, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r6, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2}}}}, 0x30}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000006800090300000000fcffffff0a0000000400000008000b0010"], 0x34}}, 0x4040) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000000480)={&(0x7f0000000040)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0x4004) ioctl$sock_SIOCINQ(r8, 0x541b, &(0x7f0000000080)) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r10 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @loopback={0x0, 0x7ffffffe}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r9, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) read(r9, &(0x7f0000000000)=""/31, 0x1f) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) 2.024831468s ago: executing program 4 (id=2015): syz_emit_ethernet(0x6e, &(0x7f00000004c0)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x38, 0x6, 0xff, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xe, 0x2, 0xfffd, 0x0, 0x0, {[@generic={0x13, 0x12, "be00000080deae1159bf0ddcef2238d0"}, @generic={0x13, 0x2}, @sack={0x5, 0xe, [0x5, 0x5, 0x7f]}]}}}}}}}}, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x12, 0x4) syz_extract_tcp_res(&(0x7f0000000040), 0x7, 0xff) 1.901806221s ago: executing program 0 (id=2017): bpf$PROG_LOAD(0x5, 0x0, 0x45d451805bed8bd9) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f1ea3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b2213fdc2881e1a6ec9d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232f0485a2ca9f37fc9c3d2688efcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdcdeb2af1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f925f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308c"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x76, 0x709, 0x2, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0xc, 0xd, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x4}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000280)={@broadcast, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500", 0x0, 0x0, 0x4, 0xfffffffe}, 0x3c) setsockopt$MRT_ADD_MFC(r1, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x1, 0x0, 0x3}, 0x3c) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x2c}}, 0x4000000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="d800000043000701feffffff00000000017c000004004280b80001"], 0xd8}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x2, 0x10, 0x4, 0x64, 0x2, 0x5, 0x4b, 0xa7, @loopback, @dev={0xac, 0x14, 0x14, 0x35}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r7, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe000031f, 0x0, "ff00000058b274e6d845167fefe428970548fc3c7b00000000000000fcff00", 0xb2, 0xb, 0x6, 0x6}, 0x3c) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f00000003c0)=0xa, 0x4) socket$inet(0x2, 0x1, 0x0) r9 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)={0x88, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'macvlan1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}]}, 0x88}}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) 1.82529969s ago: executing program 4 (id=2019): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901", "0000f0ffffff00"}, 0x38) 1.763662824s ago: executing program 4 (id=2020): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x29, 0x6, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000480)=0x7, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000600)="c14863a4ebabb370f5b1156c0b5c53fd8644dfad68525fede3c90540315ac7a57f58d9029ac746491fc729ed5bb5a9331147ca98f09cc8d96aa31961ae076c646397561cccf7a69a12caba7a648ee8475358acc1e426fb8cd3e1c3c9c5a1f19e9e930b697bcafb3bb69599a565b8e1812cd1ce7c64eee44328139697c02c4a00000000000000ee8081aad4df17a020fc0e1e6aba6bf425a9bb2045765ef9ab0b980a4574ffb7856c6c4c3049c722426a7718bc5beabde6d08257f3b3d2e59aa441248be48acf2b3c7688392b7d4bc034eaf909f432cc", 0xff66) bind$alg(r0, &(0x7f0000001100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40810) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001180)=""/4096, 0x1000}], 0x1}, 0x2000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$int_in(r3, 0x5452, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x2, 0x300) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRESHEX=0x0, @ANYBLOB="5697ed78", @ANYRES64=r4], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.608446977s ago: executing program 0 (id=2022): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)='u', 0x1}], 0x1}, 0x4040001) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000340)={0xa, 0x4e22, 0xc, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/13, 0xd}, 0x2000000d}], 0x1, 0x22, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002900)=@delchain={0x294, 0x65, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff2}, {0xfff3, 0xd}, {0xe, 0x10}}, [@f_tcindex={{0xc}, {0xc, 0x2, [@TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_tcindex={{0xc}, {0x24c, 0x2, [@TCA_TCINDEX_ACT={0x244, 0x7, [@m_xt={0x168, 0x6, 0x0, 0x0, {{0x7}, {0xa0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x51, 0x6, {0xff, 'security\x00', 0x13, 0x7, "971002a264c93b614eb4ce39676648cc2bb93913c2e60bc3c5c90b6dc27ae8995a6cf358c90bd7"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0xa1, 0x6, "4ddec2ce996e3ba91aa18d899bdcb675e4d45f94c88dbf9c647d516790322b676165b56c59c2df90a0c32952c21416259d38043b54386dbe96f359074174771e523d96f7c17fdd3d6340065935caa302c201beccb139741fd47c49a81392ea54d14f8bfd39499f4124457e0695e786de13c0b9d554d408d6fd1d87fa216b9e5784ead4b26aa60ccf82ff6f15cc565dedf2654a84f759e8877f12dad44d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0xd8, 0x9, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, {0x91, 0x6, "b7e559d3e48dc42f10cdad83b45c33853eb2771f09a671692228a7a1c4fd4f631701aaaf6c93b0766a03a6b0f8e1e369916e923f87b42b3fe4132bec74550e055787bcb10ea8b9021b145d418ec88b225a9fb10cdc0e711513670fdac340ad753f20e53e25c1bbc2cb06727064a1093bea6874a4e6315b2dddb3bd5a6c36a0d1dc8daaad4e15fd5819c878b0c9"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_TCINDEX_ACT={0x4}]}}]}, 0x294}}, 0x0) recvmmsg(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000400)=""/62, 0x3e}], 0x1}, 0xfffe}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f00000005c0)=""/199, 0xc7}, {&(0x7f00000006c0)=""/138, 0x8a}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x3}, 0x3}], 0x2, 0x3, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x78, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x64, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff7f0e}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}]}]}, 0x78}}, 0x4050) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) recvmsg$unix(r0, &(0x7f00000038c0)={&(0x7f0000000280)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0}, {0x0, 0x48}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x40010163) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000003c0)=0x6, 0x4) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000780)={0x1, 0x1000}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00'/20, @ANYRES32=0x0, @ANYBLOB="2000080b0a000100aaaaaaaaaabb0000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r9, 0x0, 0x5, 0x0, 0x0) r10 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@gettaction={0x24, 0x32, 0xe72c5f922f23cad9, 0x70bd28, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c844}, 0x4000000) 1.605957077s ago: executing program 4 (id=2023): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_START_REQ(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x1c, r5, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x18000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r6, 0xc020f509, &(0x7f0000000280)={r6, 0x7, 0x104, 0x7ff}) r7 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB='H'], 0x48}, 0x1, 0x0, 0x0, 0x20004810}, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0x2, 0x5000, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000004c0)="48001efbb07d486e", 0x8}, {0x0}], 0x2, 0x0, 0xfffffffffffffff4, 0x60000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000580)={0x248, r10, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x41a}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xe4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x94, 0x3, "18edafa6b1e87eb8fdd26f177a61e39160e8d01f2e2ee7d4bb1cda1e3e1516e4039999f249bd168f81015efa5bc82d488542ec84d20be05790a6b944c9ed5b0ed3581a1cf29042adb3931f4ac4593b0e40fd200cad40ad46f6f23834cc190547d2c311e000264160332f70811bfd998ebd5b88ea84ee1c17ccf033122dd17998c3a98758f562ec9e5616295062d1fd4c"}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "857ea8ff4f88fc2ad4aaa5cb27b83b30a63fb2d7e771872bca9fb8cbf1a73763a2f8"}}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x70000000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb4}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffeffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x401}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1010}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}]}]}, 0x248}, 0x1, 0x0, 0x0, 0x4000800}, 0x4080) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0) 1.228560152s ago: executing program 1 (id=2027): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) syz_emit_ethernet(0x56, &(0x7f0000004180)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6000000000200600fe8000000000000000000000000000aafe8000000000000000000000000000aa80004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="67020100bdec5dc407604e"], 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 1.001928485s ago: executing program 2 (id=2031): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$netlink(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 940.861028ms ago: executing program 1 (id=2032): sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0xe0}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa88"], 0xfdef) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}]}], {0x14}}, 0x64}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x8, 0x7f}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000004c0)={&(0x7f00000006c0)={0x52c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffa221}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_BEARER={0x128, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x326}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'veth0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x652314a1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x100}}, {0x14, 0x2, @in={0x2, 0x4e20, @multicast2}}}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x89c6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x2, @private2, 0x2c}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_NODE={0x170, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "defce7f1cbe71921974b60bbbfa168662f9796fe8c5b008013ddbacc2a"}}, @TIPC_NLA_NODE_ID={0x5e, 0x3, "3bf40e34298b482603cf033117a52d9e0b3ab805de163fd5a2945a2bf26372eefbf4b0910e4e3d451960bc9fab0d6e60fb56531f88a10fc112603f2f40411b9269a896d3aaa918d5eb047130bd46bf6da59cec7427127a5e75fd"}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "74ed40e1d9eac60111aa8a5481cc6aef034d6fd03d"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "8545988e2e8685fdee779831fb6ee8608002bf521ac8"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ID={0x2e, 0x3, "d6f3a7e8c3771a3b82cded3941d9dd9769af1a5699d80c4e20a4ae7d133f4be9df603374f7786b9a251b"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff8}]}]}, @TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6b4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}]}, @TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x11a0d1fa, @remote, 0xc29}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7, @mcast1, 0x5}}}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_BEARER={0xe4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3f}}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, '\x00', 0x10}, 0x100}}, {0x14, 0x2, @in={0x2, 0x4e22, @private=0xa010100}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6f98}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3b77}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @remote, 0x6b26}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x52c}, 0x1, 0x0, 0x0, 0x24000850}, 0x24040840) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000200), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r7) poll(&(0x7f00000003c0)=[{r0, 0x2202}, {r6, 0x8}, {r6, 0x2086}], 0x3, 0x64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x58, r9, 0x2, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0xffffffffffffffa3}, @L2TP_ATTR_DEBUG={0x0, 0x11, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}]}, 0x58}}, 0x0) write$cgroup_int(r8, 0x0, 0x0) getsockopt$ARPT_SO_GET_INFO(r8, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x0, [0x6, 0xf, 0xd]}, &(0x7f00000001c0)=0x44) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 922.876986ms ago: executing program 2 (id=2034): bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f00000000c0)=[{0x9}, {0x5, 0x7, 0x2c, 0x4}, {0xdac3, 0x2, 0x4, 0x2}, {0x77cf, 0x7f, 0x1, 0x80000001}, {0x7, 0x11, 0xcf, 0x7}]}) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000080)={0x6, 0x0, 0x80000000, 0xffff}, 0x10) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$bt_hci(r0, &(0x7f0000000040)=ANY=[], 0x6) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000000100)={0x81, 0x8, 0x3, 0x0, 0x0, [{}, {{r0}, 0x5}, {{r0}, 0x6}]}) 830.580414ms ago: executing program 2 (id=2035): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="2825020000080000200012800c0001006d6163766c616e00100002800a0009000000000000000000080005002034cb9484c30f16d2c27dff72369bc56e18c05e8f59c4a9015ee750fc6fe2587fd668b9de4c77a05a70719538233911f84a2345ccd6321ee872f80713ddf5a43a9c27dc597cf0f8b68d813de2ec588796d462482751f34b29e2107c86d2b073279010b1803daead159bb8fa67bbed904e69f42ef50a5f21caf701", @ANYRES32=r1, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0xafb8a1a4416d9a34}, 0x0) 741.180116ms ago: executing program 3 (id=2036): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) listen(r2, 0x80) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc1ea35512) (async, rerun: 32) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a325bd7000fddbdf25200f0707ce204e22030000002f00000001ffffffc300000006000000000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async, rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x870}, 0x0) (rerun: 64) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) (async, rerun: 64) listen(r4, 0x0) (async, rerun: 64) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) (async, rerun: 32) r6 = accept4$unix(r4, 0x0, 0x0, 0x0) (rerun: 32) recvmmsg(r6, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x3fffffffffffed8, 0x2, 0x0) (async) writev(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)="1c", 0x1}], 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 736.651773ms ago: executing program 0 (id=2037): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) (async) pipe(0xfffffffffffffffe) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, 0x0, &(0x7f0000000140)) 726.722829ms ago: executing program 2 (id=2038): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 665.042523ms ago: executing program 4 (id=2039): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_buf(r0, 0x1, 0x49, &(0x7f0000000100)=""/246, &(0x7f0000000080)=0xf6) r1 = socket(0xa, 0x5, 0x0) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000020202001400020077673200000000000000000000000000090001007379"], 0x4c}, 0x1, 0x40030000000000, 0x0, 0x40084}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@ipv6_newaddrlabel={0x1c, 0x48, 0x201, 0x70bd28, 0x25dfdbfd, {0xa, 0x0, 0xd0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) sendmsg$inet_sctp(r1, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000000000000840000000000000000800f0005000000"], 0x18, 0x4008000}, 0x28008841) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x48) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, 0x0, 0x0) sendmsg$rds(r12, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}], 0x48}, 0x4008011) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000ba05000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000800807b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000001e000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) ioctl$FS_IOC_RESVSP(r12, 0x40305828, &(0x7f0000000440)={0x0, 0x4, 0x84, 0x2000000046}) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x20008004) 627.099279ms ago: executing program 3 (id=2040): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000280)='blkio.bfq.time\x00', 0x275a, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) socket$packet(0x11, 0xa, 0x300) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000880)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0xe, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x1, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000007000200000000000000000000000000008879e66485201a0015ca83740000000000000000000000000000000200"}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x1f, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 595.417989ms ago: executing program 2 (id=2041): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x102}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000400)="100ecdfa1e26538c0100000001008900e2b8f9ef30bce5000000005d7777fe06e6ec01cde7e9818bcf9a626ac1371aa273b5b5a90f5ec603a1807c96a1a6ff6a1822d13a230998d10a028618f7f6d550daabf0e8c62e2f0bd1e8955e5e7e673be5d65d6756ef0f6c4fa61dc576844cfb6abc0f6a6b8209bd8869eb41d1d99a25a77d34949be368b8dc93a76d121cb82bfd6f95b692212f5ea7eec811fe9dafbb26bab82b8ba872a94f5060b48b5b98b6e27ae261ada2446474b3115882b5bc762f037c43affa8f7f003841689fa3a45711cbf4eca4b1900a8a") setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8, 0x6, 0x8, 0x6, 0xa, 0x80000000, 0x3}, 0x1c) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x90}, 0x1c) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @bcast, @null]}) ioctl$sock_rose_SIOCDELRT(r6, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@bcast, @default, @default, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYBLOB="740000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800b000100697036746e6c000044000280050006000800000004001300060011004e22000014000300fc0000000000000008000700070000000600100001000000060012004e2000"/92], 0x74}, 0x1, 0xba01, 0x0, 0x4004001}, 0x4000000) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000140)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) 519.113276ms ago: executing program 0 (id=2042): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r0}, 0x20) sendto$inet6(r0, &(0x7f00000004c0)='+', 0xfffffceb, 0x8001, 0x0, 0x0) 405.259482ms ago: executing program 1 (id=2043): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a27adf81000", "acef1a3a330723599e69856bf21ad6caf77c9a99b7bbebfa6dc371290d0e3808", "33681901"}, 0x38) 367.132329ms ago: executing program 3 (id=2044): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000540)=[{&(0x7f0000000780)="4a45af168b", 0x5}, {&(0x7f0000002100)="9da1", 0x2}], 0x2) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x407f, 0x4) setsockopt$packet_int(r1, 0x107, 0x9, &(0x7f0000000000)=0x4800, 0x4) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe004681000000078a151f75080039000500", 0x27) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0xf, 0x0, 0x79, 0x3}, @volatile={0x0, 0x0, 0x0, 0x9, 0x4}, @func={0xe, 0x0, 0x0, 0xc, 0x4}, @ptr={0xf, 0x0, 0x0, 0x2, 0x4}]}, {0x0, [0x30, 0x30, 0x5f, 0x61, 0x30, 0x2e, 0x30]}}, &(0x7f0000000140)=""/148, 0x69, 0x94, 0x1, 0x401, 0x10000, @value=r3}, 0x28) 299.506543ms ago: executing program 2 (id=2045): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x1, 0x8, 0x34e90000, 0x7, {{0x2b, 0x4, 0x1, 0x6, 0xac, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0xf, 0x95, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x13, 0x3e, [@broadcast, @multicast2, @multicast1, @rand_addr=0x64010100]}, @end, @timestamp_addr={0x44, 0x3c, 0x22, 0x1, 0xc, [{@empty, 0x6}, {@remote, 0x3ec9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}, {@multicast2, 0xffffffff}, {@loopback, 0x9}, {@empty, 0x4}, {@loopback, 0xd8a8}]}, @ssrr={0x89, 0x13, 0x13, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0x31, [@broadcast, @empty, @local, @multicast1, @loopback, @loopback]}, @timestamp={0x44, 0x8, 0xb1, 0x0, 0xa, [0x4b5a]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x1, 0x8, 0x34e90000, 0x7, {{0x2b, 0x4, 0x1, 0x6, 0xac, 0x66, 0x0, 0x1, 0x29, 0x0, @remote, @multicast2, {[@rr={0x7, 0xf, 0x95, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @rr={0x7, 0x13, 0x3e, [@broadcast, @multicast2, @multicast1, @rand_addr=0x64010100]}, @end, @timestamp_addr={0x44, 0x3c, 0x22, 0x1, 0xc, [{@empty, 0x6}, {@remote, 0x3ec9}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x1}, {@multicast2, 0xffffffff}, {@loopback, 0x9}, {@empty, 0x4}, {@loopback, 0xd8a8}]}, @ssrr={0x89, 0x13, 0x13, [@local, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @lsrr={0x83, 0x1b, 0x31, [@broadcast, @empty, @local, @multicast1, @loopback, @loopback]}, @timestamp={0x44, 0x8, 0xb1, 0x0, 0xa, [0x4b5a]}]}}}}}) shutdown(r0, 0x1) r2 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000180)) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x0, r0}, 0x18) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240), 0x4) ppoll(&(0x7f0000000280)=[{r2, 0x4002}, {r4, 0x400}], 0x2, &(0x7f00000002c0)={0x77359400}, &(0x7f0000000300)={[0xfffffffffffffff7]}, 0x8) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r5, 0x10f, 0x84, &(0x7f0000000340), &(0x7f0000000380)=0x4) close(r5) (async) close(r5) socketpair(0x11, 0x6, 0xf98, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e21, 0x800, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, [0x4, 0x9, 0x6, 0x3, 0x100000001, 0x7, 0x9, 0x7fffffffffffffff, 0x80000000, 0xb1, 0x2, 0xfff, 0x3ff, 0x0, 0x9]}, &(0x7f0000000500)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000540)={r8, 0x5f, "9801820d03fbea6fe1d485f914b28d1e3a5b9593f62c3fcce15d9b43c42c54f7e6eb08e389fd4046a0463ca83d931826378e7ae97056181ce47d098334429fa1ef70aaefef6558d012d27b9f71842ee6ca1dfe7fe07306bb713505b9e578e8"}, &(0x7f00000005c0)=0x67) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x3ff, 0x4) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000600)=0xfffffff7, &(0x7f0000000640)=0x4) (async) getsockopt$netrom_NETROM_T2(r6, 0x103, 0x2, &(0x7f0000000600)=0xfffffff7, &(0x7f0000000640)=0x4) getsockname$tipc(r5, &(0x7f0000000680)=@name, &(0x7f00000006c0)=0x10) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r2, 0x4048587b, &(0x7f0000001f40)={{r2, &(0x7f0000000700)='\x00', 0x22200, &(0x7f0000000740)={@align=0x40, {0x7, 0xf, 0x4, 0xfffffffffffffe01}}, 0x3, &(0x7f0000000780), &(0x7f00000007c0)=0x6}, 0x8, &(0x7f0000001e40)=[{0x3, 0x200, &(0x7f0000000800)='\\\x00', &(0x7f0000000840)="ad0858f513c112be2dad4afb0495908ae770e961ccbc30b3253dde23b1c9236e9a288d550863aa3269b41dca4967051fbef1d5fa8577cc846c75a064036e377bb8184a62a88730f889ebc70bc4fcb07c9fa5b7460eece08d5315e92bd2b2342c830ee71e1de1c677002c646cca2cb273b8ca6218d3bec1d542147039eebd2106bd2ac7e148e6da17c8da8c06bb035a5344d69b4d68229d53f0b8277bc92bdd431770da67ebe0b78462790e9b9581df138f07d167baebbd45b6251723345338d799ebac0bc9df60581a3bb0a78ea899", 0xcf, 0xa}, {0x3, 0x7fffffff, &(0x7f0000000940)='\x00', &(0x7f0000000980)="a66b0842555609f753fbf4f3657286a778e8d768c2caa9f564aa91a9e68d587004d0265d069af408792847812745b33931c3fc74fabf7f183813f641c87ef893365a5139e264e9", 0x47, 0x18}, {0x3, 0x4, &(0x7f0000000a00)='\x00', &(0x7f0000000a40)="cd278073e1c86dfc73ca703f133a6bea9e5cbdcb2ac8138c9bd787f4f3a3324a36ae9012e3098dc29afdf94116fae9660e094cc18f57a0a01f7185d8", 0x3c, 0x33}, {0x3, 0x99e, &(0x7f0000000a80)='\x00', &(0x7f0000000ac0)="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", 0x1000, 0x2}, {0x0, 0x6df6, &(0x7f0000001ac0)='batadv_slave_1\x00', &(0x7f0000001b00)="435de1f93cdd68534ae9e662c7b91776e4a9871600f8720a96193ce7896cf8be932b1c5ec3d6e072142fa3eecfea67c06e18622bed8983058f6ae8a440d762b5d79e6d44b3801573a4cfc5866dbfa09715308c3d314c0a9fee5a789000d60c80b07e95f53ba8656fb21394ce2775155e45b06f320e3b782fe4761cde16a84caede2012341f0e9e604d8f4a8c1dcdffd53cb23ffed74f84e8a3eda27b6bdd7bc98e12575b34499037e180f6388698ceaed68171f85fa500feccb31bd411f7c4507228", 0xc2, 0x18}, {0x3, 0x4, &(0x7f0000001c00)='\x00', &(0x7f0000001c40)="39d805862ab1581898ebb1b940c90061913e54b2cb3a086c4519d41ffc5e1073982f415ea5880e4f03c2a2463ae812798b", 0x31, 0x10}, {0x2, 0xc9b4, &(0x7f0000001c80)='\x00', &(0x7f0000001cc0)="4f17b801946292fab739dc1c7128f72e6c1f8f5291bdb5a37fddfd74b2aa896ba1fe809484fe056fdd9899bd7391405f2310a418e3dbc6a84516788a95fc32cda3394037ffbc0932662250406a72f63dadfd6b07985eedd1f69d4ba5e1e73bf70c4e281c9ef2239a69975a83f4a2783335909b63eb861718449a78863a5d3b66d7", 0x81, 0x28}, {0x2, 0x1db, &(0x7f0000001d80)='2$@{\x00', &(0x7f0000001dc0)="71ab0b1b1dfafa6d92e7330d370539d0c6219add0dc615e5ce83bc22eb68f0cb83c13099c7ac5881323f18d03edff1b02a9b6b504d25aaceed2ea6880b7648984dadebfb31243a7fd31810331793d64d118f8003c3083ece33c4d6d9", 0x5c, 0x1a}]}) write$cgroup_subtree(r9, &(0x7f0000001fc0)={[{0x2d, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'freezer'}, {0x2b, 'net_cls'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2b, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'cpu'}]}, 0x4f) (async) write$cgroup_subtree(r9, &(0x7f0000001fc0)={[{0x2d, 'cpuacct'}, {0x2d, 'devices'}, {0x2b, 'freezer'}, {0x2b, 'net_cls'}, {0x2d, 'perf_event'}, {0x2d, 'net_prio'}, {0x2b, 'rlimit'}, {0x2d, 'rlimit'}, {0x2d, 'cpu'}]}, 0x4f) syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r7) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002080), r7) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000020c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x54, r10, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4040) (async) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f00000021c0)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x54, r10, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4040) r12 = gettid() ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000002200)=0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000003640)) (async) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000003640)=0x0) r15 = socket$nl_route(0x10, 0x3, 0x0) accept(r6, &(0x7f0000003ac0)=@vsock, &(0x7f0000003b40)=0x80) (async) r16 = accept(r6, &(0x7f0000003ac0)=@vsock, &(0x7f0000003b40)=0x80) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000003b80)) (async) ioctl$XFS_IOC_START_COMMIT(r6, 0x80585882, &(0x7f0000003b80)={0xffffffffffffffff}) sendmsg$netlink(r9, &(0x7f00000040c0)={0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000002240)={0x1400, 0x2a, 0x10, 0x70bd28, 0x25dfdbfe, "", [@nested={0x21b, 0x33, 0x0, 0x1, [@nested={0x4, 0xe4}, @generic="b8cc14c3c6def2351437e90f0addb1c02c669fd9e7563d2682482200a083e562ba1647c0e45a3852f43606af3e11160e16daa122436103ec915a84f45d9e09dab2a7769f6b1cec46c0759014812625a4ca55c23d3e0fe5250a83e7f5cd5d7608950f3f2c64c3300905ad87153137da6666c1cbfa978333ae766fadd6fa27b5d518f22c50538459b3cadb96f8fdd61a731cba7e0cf54650a5e87eb96310684522b9acad832be1e67bc8746a465389990fbb4b8622fe788106ca92a35411a6267670dd52aea30342e123a52c3207b5cd993dfddfe7e41b281cf4", @generic="008788f7d2e99fc1ece6ef937c010efc5fb5d759a98d91efc47897cb54444f2fbfc0dc90740092b20b666239e97de49fea82cca81338a02cd3f9f5860b6249798f0da0b9fffb9964afc0c18d58451e19da", @generic="03f326706ae848d5d8f9a3d378c108d37f032bf17b075c64631c62a9fd08c4aeec088dd362ed1aed3d4e30560d40be29b1aa84df9e47210551ddb64c4bdd86cf9ab173bc674305bc86484a9aababcab60219279464c5a1fcf10aa93a3bbcf682850e1832c310b0d21111b982dd6aa1b22d27916ba2dae66196a19e196e1165f675151bd2678f05abc7e69954f99d5167b71b7872fb28fa4e3b6d573a6f83d2918ba9ec3c8fd093c13cb6cb2cf06a2c1eddc9a2544f0e61e5bafc91a8f40b5ef663e8cd3af8c5ddecf3311d05e6d5ae554282ab13c1639f39154222c8c1707d939c2f1882e1", @nested={0x4, 0x40}]}, @typed={0x8, 0xb, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @nested={0x61, 0x7c, 0x0, 0x1, [@nested={0x4, 0x14}, @generic="1262e48b3a79036808473ea841fb551ae94482e17d7b01cb53b255222e25275e3a33bf01eb9051836b36dc6ea44d73de56d0304041e6e1715816a095faf38cf889abc2bae090a43c6bf567b232", @typed={0x8, 0xfe, 0x0, 0x0, @pid=r12}, @nested={0x4, 0x115}]}, @typed={0x8, 0x50, 0x0, 0x0, @fd=r6}, @nested={0x112f, 0xc3, 0x0, 0x1, [@nested={0x4, 0x19}, @generic="f93fc0e8835d9dd2afc8020add48d95bd6989a9fb44a64745fa2113a2e18a2106cf81cde41a6605e78718f7fe569a0c9a5aa8b436969ccb897346ee7e6ee71efdebb862452965021a380341d23035ad4fbccc94605a84ad68cc87b7eb99d8e2bff1844576dc9f9278fd4ee01e2cb2ad6a364476122a01f4a9b0dd33e75ff3a0cb5746ea97792bee0f5046b102bf5b51c2d9f4ca7db2e916ea1ed47d47900e62ab6322cf76ac6e96c8cb828621643350c52dc405f766df4", @generic="4ab49639e3bb95b87352cc154fb920fc0e9df384b0b7d00f72699d94bf77f8347b672cbf168ccf04179c8d51cf9bcae249fdb5b4ad7871a9c39c551f54a4eaa777578907d151187ad6972cc87c66237e0f57a8dff89ceabd4f70ba956f57558d32a4bd0a706bc6787281014aeb028dce", @generic="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"]}, @nested={0x26, 0xa6, 0x0, 0x1, [@typed={0x8, 0xb4, 0x0, 0x0, @fd=r6}, @generic="c132ce1ab7b9301a0edabf7ba47f254d3719", @typed={0x8, 0xf7, 0x0, 0x0, @uid=0xee00}]}, @typed={0x8, 0x11d, 0x0, 0x0, @pid=r13}]}, 0x1400}, {&(0x7f0000003680)={0x29c, 0x19, 0x1, 0x70bd27, 0x25dfdbff, "", [@typed={0x8, 0x6c, 0x0, 0x0, @u32=0x10}, @typed={0xa2, 0x55, 0x0, 0x0, @binary="ecf94f1907aa3ab75240f490e0f8dba39c5949ae5e38e7eb5c80deee0ad6197333153387fe7c5a8149ae918a0375317dcaf45e46697ff91218a6a962762904c33921c631b917f506693d3f752e001fb5e6e0dd7ffbc492c3a30b370f4876699213002bfb25805ff8c5816d24dfb9deb852d52620ba3fa504cc18050fda4a355616e49a9985486a875b87de47d5acf743f5faff2abf304278d95ff591f14d"}, @nested={0xd4, 0x98, 0x0, 0x1, [@generic="0da71615bece081c50d4078ebb23ad93143bd582fe8e08c06712fee26a916b9904ad404834b8fd1d8ae80f9e65288de3cfb9a81c871b336219a1735697a32e262bc1feca94c9f45be560a4607e4e987b92fcae6874a902932d5c1796d6fca84c5371a0f48c79772a9a0ff82aa7930222213a8e11214bd6c5e970bacfd15b23d050c7e41c636c4be87b68e65b6b6871d57a7a7513468611ee4291af639c5ea29c96cf530e8f223e01885ce150afdb1310dacbd7e11bc72b1d59cd4c86bded8f2c", @typed={0x8, 0xdf, 0x0, 0x0, @pid=r14}, @nested={0x4, 0xfc}, @nested={0x4, 0x1c}]}, @generic="10f01234c8ea6caae2910a83ea79ac3119507ebdca298f7966026fb460eba9c8a244bad57ad330b1854924ca1fbc1a07b05c7d42d7202882a7bf69a6ea75906fdbd6c68b97ed1aed84c33fc29a3ab92c0f126547bc4b26a382df3963429704a73219ceb84b26aa4bcb7ecf13cacebfc11f366a34f269114220156e896104db10fc7b13bfa64f800c7351bf9a28d55b59d1a22ac9a2e4aa68d65b45c7f47f026d9329ee5b54e8f8d1f1c6223b83c8a22797cd79b9da9cd6e190d4efb4762420907a001209b54e2a74c8c4a9a0287d53775aae45ccc2b605a402fdeaecb96f9a1c8e1759d9622194095c31068948464d6ea3e1f0e13d", @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x29c}, {&(0x7f0000003940)={0x110, 0x14, 0x300, 0x70bd26, 0x25dfdbfe, "", [@nested={0x100, 0x4d, 0x0, 0x1, [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="6a9c317c4f491dc50443ce1f1f44d0e6d9aff988352c623a4f4b06495016f37438c49592aff3", @generic="2e913bb665827c53120277bf3cc0534390cf3acf03e428317e8cf6435f94b433fde7233b9a7d8098f369254e2c888a6d0263f90051ee41765cf3ac7027564a72ebbff47a3e1a94db77541b9ec16788b104446ae3b3f6294388466b663fe983c4851f85989814708444e1c0c2422aadb21e216d15d8786461ccb6202e7c5aeb88c5bdf2abf9c7d6dc56d66faca5694cc38da86b06a16f2a0cd864e43924c22fd47d3eff7a66ed75ed772b3f6b650a587e1449e049f88a", @typed={0x8, 0x59, 0x0, 0x0, @u32=0x9}, @typed={0x8, 0x9, 0x0, 0x0, @u32=0x180}, @nested={0x4, 0x6}, @nested={0x4, 0x42}]}]}, 0x110}], 0x3, &(0x7f0000003fc0)=[@rights={{0x30, 0x1, 0x1, [r7, r15, r7, r16, r9, r17, r7, r4]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x24, 0x1, 0x1, [r9, r6, 0xffffffffffffffff, 0xffffffffffffffff, r9]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x1c, 0x1, 0x1, [r3, r3, 0xffffffffffffffff]}}], 0xe8, 0x1}, 0x40480c0) 249.28914ms ago: executing program 1 (id=2046): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="400000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400"/64], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket(0x2, 0x2, 0x0) getsockopt$nfc_llcp(r3, 0x88, 0x68, 0x0, 0xfffffffffffffc9a) (async) getsockopt$nfc_llcp(r3, 0x88, 0x68, 0x0, 0xfffffffffffffc9a) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno', 0xa) (async) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno', 0xa) 249.027741ms ago: executing program 3 (id=2047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) 191.275356ms ago: executing program 3 (id=2048): r0 = socket(0x10, 0x803, 0x0) socket(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x240080d0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000200000000000000000000000001050003000a00000008000400", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 119.560755ms ago: executing program 1 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_delroute={0x8c, 0x19, 0x800, 0x70bd29, 0x25dfdbfb, {0xa, 0x94, 0x20, 0x40, 0x1, 0x4, 0xfd, 0x4, 0x1700}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @loopback}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_MULTIPATH={0xc, 0x9, {0xd219, 0x8, 0xce}}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @loopback}}, @RTA_MARK={0x8, 0x10, 0x1}, @RTA_IIF={0x8, 0x3, r3}, @RTA_OIF={0x8, 0x4, r3}]}, 0xfffffffffffffedb}, 0x1, 0x0, 0x0, 0x20040000}, 0x40008c4) socket$nl_route(0x10, 0x3, 0x0) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000100)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000140)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x0, 0x44, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@ipv6_delroute={0x8c, 0x19, 0x800, 0x70bd29, 0x25dfdbfb, {0xa, 0x94, 0x20, 0x40, 0x1, 0x4, 0xfd, 0x4, 0x1700}, [@RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @loopback}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_MULTIPATH={0xc, 0x9, {0xd219, 0x8, 0xce}}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_DST={0x14, 0x2, @loopback}}, @RTA_MARK={0x8, 0x10, 0x1}, @RTA_IIF={0x8, 0x3, r3}, @RTA_OIF={0x8, 0x4, r3}]}, 0xfffffffffffffedb}, 0x1, 0x0, 0x0, 0x20040000}, 0x40008c4) (async) 37.411739ms ago: executing program 3 (id=2050): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800"/14, @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) unshare(0x22020400) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) bind$xdp(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r4, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000cac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = accept(r0, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELOBJ={0x38, 0x14, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}, 0x1, 0x0, 0x0, 0x4000005}, 0x1) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r7, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000500)=@req3={0xc, 0x3a, 0x1000, 0x1000003a, 0x0, 0x0, 0xffffffff}, 0x1c) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}}, 0x24}}, 0x20000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, 0x0, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r11, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="0b1600000000000000004a003400"], 0x14}, 0x1, 0x0, 0x0, 0x4040054}, 0x4040000) 0s ago: executing program 1 (id=2051): r0 = socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet6(0xa, 0x80002, 0x0) listen(r1, 0xda90) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) accept4(r1, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) kernel console output (not intermixed with test programs): 6] ? get_pid_task+0x20/0x1f0 [ 173.169432][ T7096] ? __lock_acquire+0x6b5/0x2cf0 [ 173.169476][ T7096] ? aa_sk_perm+0x6d5/0x900 [ 173.169505][ T7096] ipv6_setsockopt+0x59/0x170 [ 173.169536][ T7096] rawv6_setsockopt+0x276/0x5f0 [ 173.169567][ T7096] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 173.169600][ T7096] ? aa_sock_opt_perm+0xff/0x1a0 [ 173.169629][ T7096] ? sock_common_setsockopt+0x36/0xc0 [ 173.169655][ T7096] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 173.169684][ T7096] do_sock_setsockopt+0x17c/0x1b0 [ 173.169720][ T7096] __x64_sys_setsockopt+0x13d/0x1b0 [ 173.169757][ T7096] do_syscall_64+0x14d/0xf80 [ 173.169785][ T7096] ? trace_irq_disable+0x3b/0x150 [ 173.169813][ T7096] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.169834][ T7096] ? clear_bhb_loop+0x40/0x90 [ 173.169859][ T7096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.169879][ T7096] RIP: 0033:0x7f3573f9c799 [ 173.169899][ T7096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.169915][ T7096] RSP: 002b:00007f3574ea5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 173.169939][ T7096] RAX: ffffffffffffffda RBX: 00007f3574215fa0 RCX: 00007f3573f9c799 [ 173.169954][ T7096] RDX: 00000000000000cd RSI: 0000000000000029 RDI: 0000000000000003 [ 173.169966][ T7096] RBP: 00007f3574ea5090 R08: 000000000000005c R09: 0000000000000000 [ 173.169978][ T7096] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 173.169990][ T7096] R13: 00007f3574216038 R14: 00007f3574215fa0 R15: 00007ffe83ce7818 [ 173.170025][ T7096] [ 173.502597][ T7103] ipt_ECN: cannot use operation on non-tcp rule [ 173.533598][ T7099] netlink: 'syz.2.362': attribute type 4 has an invalid length. [ 173.727941][ T7110] netlink: 'syz.4.366': attribute type 4 has an invalid length. [ 173.781269][ T7112] netlink: 'syz.4.366': attribute type 4 has an invalid length. [ 174.032284][ T7124] FAULT_INJECTION: forcing a failure. [ 174.032284][ T7124] name failslab, interval 1, probability 0, space 0, times 0 [ 174.055167][ T7124] CPU: 0 UID: 0 PID: 7124 Comm: syz.3.369 Not tainted syzkaller #0 PREEMPT(full) [ 174.055198][ T7124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 174.055210][ T7124] Call Trace: [ 174.055218][ T7124] [ 174.055227][ T7124] dump_stack_lvl+0xe8/0x150 [ 174.055260][ T7124] should_fail_ex+0x412/0x560 [ 174.055292][ T7124] should_failslab+0xa8/0x100 [ 174.055320][ T7124] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 174.055351][ T7124] ? __alloc_skb+0x186/0x7d0 [ 174.055378][ T7124] ? __alloc_skb+0x1d0/0x7d0 [ 174.055402][ T7124] ? __local_bh_enable_ip+0xd0/0x130 [ 174.055434][ T7124] __alloc_skb+0x1d0/0x7d0 [ 174.055466][ T7124] netlink_sendmsg+0x5d4/0xb40 [ 174.055505][ T7124] ? __pfx_netlink_sendmsg+0x10/0x10 [ 174.055537][ T7124] ? aa_sock_msg_perm+0xf1/0x1b0 [ 174.055565][ T7124] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.055590][ T7124] ____sys_sendmsg+0x972/0x9f0 [ 174.055621][ T7124] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.055652][ T7124] ? import_iovec+0x73/0xa0 [ 174.055687][ T7124] ___sys_sendmsg+0x2a5/0x360 [ 174.055719][ T7124] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.055779][ T7124] ? __fget_files+0x2a/0x420 [ 174.055806][ T7124] ? __fget_files+0x3a0/0x420 [ 174.055845][ T7124] __x64_sys_sendmsg+0x1bd/0x2a0 [ 174.055869][ T7124] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.055901][ T7124] ? __pfx_ksys_write+0x10/0x10 [ 174.055936][ T7124] do_syscall_64+0x14d/0xf80 [ 174.055964][ T7124] ? trace_irq_disable+0x3b/0x150 [ 174.055991][ T7124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.056012][ T7124] ? clear_bhb_loop+0x40/0x90 [ 174.056037][ T7124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.056056][ T7124] RIP: 0033:0x7f05cbb9c799 [ 174.056076][ T7124] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.056092][ T7124] RSP: 002b:00007f05cc9fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.056115][ T7124] RAX: ffffffffffffffda RBX: 00007f05cbe15fa0 RCX: 00007f05cbb9c799 [ 174.056129][ T7124] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 174.056142][ T7124] RBP: 00007f05cc9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 174.056154][ T7124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 174.056165][ T7124] R13: 00007f05cbe16038 R14: 00007f05cbe15fa0 R15: 00007ffc291bf018 [ 174.056198][ T7124] [ 174.415979][ T7128] netlink: 276 bytes leftover after parsing attributes in process `syz.2.371'. [ 174.484131][ T7135] netlink: 72 bytes leftover after parsing attributes in process `syz.4.370'. [ 174.536171][ T7135] netlink: 72 bytes leftover after parsing attributes in process `syz.4.370'. [ 174.967054][ T7153] netlink: 12 bytes leftover after parsing attributes in process `syz.1.379'. [ 175.034489][ T7161] netlink: 'syz.0.380': attribute type 1 has an invalid length. [ 175.080938][ T7161] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 175.235054][ T7168] FAULT_INJECTION: forcing a failure. [ 175.235054][ T7168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.294639][ T7168] CPU: 1 UID: 0 PID: 7168 Comm: syz.4.382 Not tainted syzkaller #0 PREEMPT(full) [ 175.294667][ T7168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.294678][ T7168] Call Trace: [ 175.294685][ T7168] [ 175.294694][ T7168] dump_stack_lvl+0xe8/0x150 [ 175.294728][ T7168] should_fail_ex+0x412/0x560 [ 175.294756][ T7168] _copy_from_iter+0x1d3/0x1670 [ 175.294788][ T7168] ? rcu_is_watching+0x15/0xb0 [ 175.294823][ T7168] ? __pfx__copy_from_iter+0x10/0x10 [ 175.294858][ T7168] ? netlink_sendmsg+0x650/0xb40 [ 175.294885][ T7168] ? skb_put+0x11b/0x210 [ 175.294917][ T7168] netlink_sendmsg+0x6c0/0xb40 [ 175.294954][ T7168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 175.294986][ T7168] ? aa_sock_msg_perm+0xf1/0x1b0 [ 175.295011][ T7168] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 175.295037][ T7168] ____sys_sendmsg+0x972/0x9f0 [ 175.295067][ T7168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 175.295098][ T7168] ? import_iovec+0x73/0xa0 [ 175.295131][ T7168] ___sys_sendmsg+0x2a5/0x360 [ 175.295157][ T7168] ? __pfx____sys_sendmsg+0x10/0x10 [ 175.295212][ T7168] ? __fget_files+0x2a/0x420 [ 175.295250][ T7168] ? __fget_files+0x3a0/0x420 [ 175.295288][ T7168] __x64_sys_sendmsg+0x1bd/0x2a0 [ 175.295312][ T7168] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 175.295340][ T7168] ? __pfx_ksys_write+0x10/0x10 [ 175.295374][ T7168] do_syscall_64+0x14d/0xf80 [ 175.295402][ T7168] ? trace_irq_disable+0x3b/0x150 [ 175.295429][ T7168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.295449][ T7168] ? clear_bhb_loop+0x40/0x90 [ 175.295474][ T7168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.295492][ T7168] RIP: 0033:0x7f5bee59c799 [ 175.295511][ T7168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 175.295527][ T7168] RSP: 002b:00007f5bef53b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 175.295549][ T7168] RAX: ffffffffffffffda RBX: 00007f5bee815fa0 RCX: 00007f5bee59c799 [ 175.295563][ T7168] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 175.295574][ T7168] RBP: 00007f5bef53b090 R08: 0000000000000000 R09: 0000000000000000 [ 175.295585][ T7168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.295596][ T7168] R13: 00007f5bee816038 R14: 00007f5bee815fa0 R15: 00007ffda96e6108 [ 175.295624][ T7168] [ 175.793159][ T7191] FAULT_INJECTION: forcing a failure. [ 175.793159][ T7191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.844121][ T7191] CPU: 1 UID: 0 PID: 7191 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(full) [ 175.844148][ T7191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 175.844159][ T7191] Call Trace: [ 175.844166][ T7191] [ 175.844173][ T7191] dump_stack_lvl+0xe8/0x150 [ 175.844202][ T7191] should_fail_ex+0x412/0x560 [ 175.844229][ T7191] _copy_to_user+0x31/0xb0 [ 175.844258][ T7191] simple_read_from_buffer+0xe1/0x170 [ 175.844285][ T7191] proc_fail_nth_read+0x1bb/0x230 [ 175.844313][ T7191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.844339][ T7191] ? rw_verify_area+0x2a6/0x4d0 [ 175.844356][ T7191] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.844381][ T7191] vfs_read+0x20c/0xa70 [ 175.844398][ T7191] ? fdget_pos+0x246/0x320 [ 175.844427][ T7191] ? __pfx___mutex_lock+0x10/0x10 [ 175.844453][ T7191] ? __pfx_vfs_read+0x10/0x10 [ 175.844472][ T7191] ? __fget_files+0x2a/0x420 [ 175.844510][ T7191] ? __fget_files+0x3a0/0x420 [ 175.844533][ T7191] ? __fget_files+0x2a/0x420 [ 175.844566][ T7191] ksys_read+0x150/0x270 [ 175.844586][ T7191] ? __pfx_ksys_read+0x10/0x10 [ 175.844616][ T7191] do_syscall_64+0x14d/0xf80 [ 175.844640][ T7191] ? trace_irq_disable+0x3b/0x150 [ 175.844664][ T7191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.844681][ T7191] ? clear_bhb_loop+0x40/0x90 [ 175.844703][ T7191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.844720][ T7191] RIP: 0033:0x7ff0d595cfce [ 175.844739][ T7191] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 175.844755][ T7191] RSP: 002b:00007ff0d67b9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.844777][ T7191] RAX: ffffffffffffffda RBX: 00007ff0d67ba6c0 RCX: 00007ff0d595cfce [ 175.844791][ T7191] RDX: 000000000000000f RSI: 00007ff0d67ba0a0 RDI: 0000000000000004 [ 175.844802][ T7191] RBP: 00007ff0d67ba090 R08: 0000000000000000 R09: 0000000000000000 [ 175.844813][ T7191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.844824][ T7191] R13: 00007ff0d5c16038 R14: 00007ff0d5c15fa0 R15: 00007ffce8e2fde8 [ 175.844856][ T7191] [ 176.138257][ T7172] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 177.658941][ T51] Bluetooth: hci3: command 0x0401 tx timeout [ 177.807300][ T7250] netlink: 276 bytes leftover after parsing attributes in process `syz.2.405'. [ 177.990510][ T7257] netlink: 'syz.2.407': attribute type 3 has an invalid length. [ 178.009098][ T7257] netlink: 'syz.2.407': attribute type 1 has an invalid length. [ 178.016811][ T7257] netlink: 'syz.2.407': attribute type 3 has an invalid length. [ 178.024875][ T7257] netlink: 224 bytes leftover after parsing attributes in process `syz.2.407'. [ 178.255129][ T7267] netlink: 'syz.4.412': attribute type 10 has an invalid length. [ 178.395891][ T7271] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 178.442442][ T7271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 178.942099][ T7302] netlink: 14 bytes leftover after parsing attributes in process `syz.0.420'. [ 179.027732][ T7302] bond0 (unregistering): left promiscuous mode [ 179.034802][ T7302] bond_slave_0: left promiscuous mode [ 179.040821][ T7302] bond_slave_1: left promiscuous mode [ 179.067515][ T7302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.102018][ T7302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.133670][ T7302] bond0 (unregistering): Released all slaves [ 179.158656][ T7304] x_tables: duplicate underflow at hook 2 [ 179.374263][ T7317] netlink: 276 bytes leftover after parsing attributes in process `syz.0.425'. [ 179.415847][ T7317] FAULT_INJECTION: forcing a failure. [ 179.415847][ T7317] name failslab, interval 1, probability 0, space 0, times 0 [ 179.447987][ T7317] CPU: 0 UID: 0 PID: 7317 Comm: syz.0.425 Not tainted syzkaller #0 PREEMPT(full) [ 179.448016][ T7317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 179.448028][ T7317] Call Trace: [ 179.448036][ T7317] [ 179.448045][ T7317] dump_stack_lvl+0xe8/0x150 [ 179.448079][ T7317] should_fail_ex+0x412/0x560 [ 179.448110][ T7317] should_failslab+0xa8/0x100 [ 179.448133][ T7317] ? dst_alloc+0x105/0x170 [ 179.448154][ T7317] kmem_cache_alloc_noprof+0x87/0x650 [ 179.448174][ T7317] ? __pfx_find_exception+0x10/0x10 [ 179.448202][ T7317] ? fib_lookup+0x76/0x440 [ 179.448230][ T7317] dst_alloc+0x105/0x170 [ 179.448268][ T7317] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 179.448298][ T7317] ? ip_route_output_key_hash_rcu+0x1271/0x25d0 [ 179.448340][ T7317] inet_rtm_getroute+0x1121/0x2930 [ 179.448364][ T7317] ? inet_rtm_getroute+0xe67/0x2930 [ 179.448403][ T7317] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 179.448462][ T7317] ? __local_bh_enable_ip+0xd0/0x130 [ 179.448493][ T7317] ? __dev_queue_xmit+0x1efe/0x3870 [ 179.448512][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.448560][ T7317] ? __pfx_inet_rtm_getroute+0x10/0x10 [ 179.448582][ T7317] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 179.448615][ T7317] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 179.448642][ T7317] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.448667][ T7317] ? ref_tracker_free+0x693/0x840 [ 179.448691][ T7317] ? __copy_skb_header+0xa3/0x4a0 [ 179.448713][ T7317] ? __pfx_ref_tracker_free+0x10/0x10 [ 179.448751][ T7317] netlink_rcv_skb+0x232/0x4b0 [ 179.448781][ T7317] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 179.448811][ T7317] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 179.448851][ T7317] ? netlink_deliver_tap+0x2e/0x1b0 [ 179.448887][ T7317] netlink_unicast+0x80f/0x9b0 [ 179.448924][ T7317] ? __pfx_netlink_unicast+0x10/0x10 [ 179.448951][ T7317] ? netlink_sendmsg+0x650/0xb40 [ 179.448976][ T7317] ? skb_put+0x11b/0x210 [ 179.449009][ T7317] netlink_sendmsg+0x813/0xb40 [ 179.449049][ T7317] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.449080][ T7317] ? aa_sock_msg_perm+0xf1/0x1b0 [ 179.449108][ T7317] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 179.449134][ T7317] ____sys_sendmsg+0x972/0x9f0 [ 179.449165][ T7317] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.449197][ T7317] ? import_iovec+0x73/0xa0 [ 179.449230][ T7317] ___sys_sendmsg+0x2a5/0x360 [ 179.449266][ T7317] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.449330][ T7317] ? __fget_files+0x2a/0x420 [ 179.449357][ T7317] ? __fget_files+0x3a0/0x420 [ 179.449397][ T7317] __x64_sys_sendmsg+0x1bd/0x2a0 [ 179.449422][ T7317] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 179.449454][ T7317] ? __pfx_ksys_write+0x10/0x10 [ 179.449490][ T7317] do_syscall_64+0x14d/0xf80 [ 179.449517][ T7317] ? trace_irq_disable+0x3b/0x150 [ 179.449545][ T7317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.449566][ T7317] ? clear_bhb_loop+0x40/0x90 [ 179.449591][ T7317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.449612][ T7317] RIP: 0033:0x7fa8de99c799 [ 179.449633][ T7317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 179.449649][ T7317] RSP: 002b:00007fa8df79b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.449671][ T7317] RAX: ffffffffffffffda RBX: 00007fa8dec15fa0 RCX: 00007fa8de99c799 [ 179.449686][ T7317] RDX: 0000000004040080 RSI: 0000200000000000 RDI: 0000000000000003 [ 179.449699][ T7317] RBP: 00007fa8df79b090 R08: 0000000000000000 R09: 0000000000000000 [ 179.449712][ T7317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.449723][ T7317] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff8feab518 [ 179.449757][ T7317] [ 179.931314][ T7327] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'. [ 180.403344][ T7344] netlink: 'syz.0.434': attribute type 15 has an invalid length. [ 180.616116][ T7349] vlan2: entered promiscuous mode [ 180.667439][ T7349] geneve1: entered promiscuous mode [ 180.675730][ T7349] vlan2: entered allmulticast mode [ 180.694831][ T7349] geneve1: entered allmulticast mode [ 180.932071][ T7364] xt_CT: No such helper "snmp_trap" [ 180.954835][ T7382] netlink: 276 bytes leftover after parsing attributes in process `syz.1.445'. [ 181.058235][ T7386] netlink: 36 bytes leftover after parsing attributes in process `syz.4.444'. [ 181.100705][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'. [ 181.500817][ T7409] netlink: 'syz.3.455': attribute type 3 has an invalid length. [ 181.573710][ T7409] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 181.601756][ T7409] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 181.737459][ T7419] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 181.756937][ T7422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.454'. [ 182.192729][ T7443] netlink: 276 bytes leftover after parsing attributes in process `syz.1.465'. [ 182.222025][ T7443] FAULT_INJECTION: forcing a failure. [ 182.222025][ T7443] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.240742][ T7443] CPU: 1 UID: 0 PID: 7443 Comm: syz.1.465 Not tainted syzkaller #0 PREEMPT(full) [ 182.240770][ T7443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 182.240782][ T7443] Call Trace: [ 182.240790][ T7443] [ 182.240799][ T7443] dump_stack_lvl+0xe8/0x150 [ 182.240833][ T7443] should_fail_ex+0x412/0x560 [ 182.240865][ T7443] _copy_to_user+0x31/0xb0 [ 182.240896][ T7443] simple_read_from_buffer+0xe1/0x170 [ 182.240926][ T7443] proc_fail_nth_read+0x1bb/0x230 [ 182.240957][ T7443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.240987][ T7443] ? rw_verify_area+0x2a6/0x4d0 [ 182.241006][ T7443] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.241034][ T7443] vfs_read+0x20c/0xa70 [ 182.241051][ T7443] ? fdget_pos+0x246/0x320 [ 182.241083][ T7443] ? __pfx___mutex_lock+0x10/0x10 [ 182.241109][ T7443] ? __pfx_vfs_read+0x10/0x10 [ 182.241129][ T7443] ? __fget_files+0x2a/0x420 [ 182.241159][ T7443] ? __fget_files+0x3a0/0x420 [ 182.241185][ T7443] ? __fget_files+0x2a/0x420 [ 182.241222][ T7443] ksys_read+0x150/0x270 [ 182.241246][ T7443] ? __pfx_ksys_read+0x10/0x10 [ 182.241278][ T7443] do_syscall_64+0x14d/0xf80 [ 182.241303][ T7443] ? trace_irq_disable+0x3b/0x150 [ 182.241329][ T7443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.241349][ T7443] ? clear_bhb_loop+0x40/0x90 [ 182.241372][ T7443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.241391][ T7443] RIP: 0033:0x7f3573f5cfce [ 182.241410][ T7443] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 182.241425][ T7443] RSP: 002b:00007f3574ea4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.241454][ T7443] RAX: ffffffffffffffda RBX: 00007f3574ea56c0 RCX: 00007f3573f5cfce [ 182.241468][ T7443] RDX: 000000000000000f RSI: 00007f3574ea50a0 RDI: 0000000000000004 [ 182.241480][ T7443] RBP: 00007f3574ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 182.241492][ T7443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.241503][ T7443] R13: 00007f3574216038 R14: 00007f3574215fa0 R15: 00007ffe83ce7818 [ 182.241537][ T7443] [ 182.905762][ T7466] netlink: 'syz.4.473': attribute type 10 has an invalid length. [ 182.910553][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 182.925018][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.2.474'. [ 182.938259][ T7466] netlink: 156 bytes leftover after parsing attributes in process `syz.4.473'. [ 182.983800][ T7470] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.007054][ T7471] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.146120][ T7475] syz.2.474 (7475) used greatest stack depth: 17472 bytes left [ 183.323746][ T7492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.480'. [ 184.453071][ T7536] syzkaller0: entered promiscuous mode [ 184.460600][ T7536] syzkaller0: entered allmulticast mode [ 186.067955][ T7571] FAULT_INJECTION: forcing a failure. [ 186.067955][ T7571] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.082564][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.4.509 Not tainted syzkaller #0 PREEMPT(full) [ 186.082593][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 186.082604][ T7571] Call Trace: [ 186.082613][ T7571] [ 186.082622][ T7571] dump_stack_lvl+0xe8/0x150 [ 186.082656][ T7571] should_fail_ex+0x412/0x560 [ 186.082688][ T7571] _copy_from_user+0x2d/0xb0 [ 186.082720][ T7571] ___sys_sendmsg+0x1c6/0x360 [ 186.082748][ T7571] ? __pfx____sys_sendmsg+0x10/0x10 [ 186.082810][ T7571] ? __fget_files+0x2a/0x420 [ 186.082838][ T7571] ? __fget_files+0x3a0/0x420 [ 186.082878][ T7571] __x64_sys_sendmsg+0x1bd/0x2a0 [ 186.082903][ T7571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 186.082935][ T7571] ? __pfx_ksys_write+0x10/0x10 [ 186.082970][ T7571] do_syscall_64+0x14d/0xf80 [ 186.082998][ T7571] ? trace_irq_disable+0x3b/0x150 [ 186.083027][ T7571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.083047][ T7571] ? clear_bhb_loop+0x40/0x90 [ 186.083073][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.083092][ T7571] RIP: 0033:0x7f5bee59c799 [ 186.083112][ T7571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 186.083129][ T7571] RSP: 002b:00007f5bef53b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.083151][ T7571] RAX: ffffffffffffffda RBX: 00007f5bee815fa0 RCX: 00007f5bee59c799 [ 186.083165][ T7571] RDX: 0000000000040010 RSI: 0000200000000340 RDI: 0000000000000003 [ 186.083187][ T7571] RBP: 00007f5bef53b090 R08: 0000000000000000 R09: 0000000000000000 [ 186.083199][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.083211][ T7571] R13: 00007f5bee816038 R14: 00007f5bee815fa0 R15: 00007ffda96e6108 [ 186.083245][ T7571] [ 186.454909][ T7584] __nla_validate_parse: 4 callbacks suppressed [ 186.454931][ T7584] netlink: 276 bytes leftover after parsing attributes in process `syz.2.515'. [ 186.681697][ T7595] netlink: 276 bytes leftover after parsing attributes in process `syz.3.513'. [ 186.865894][ T7600] syzkaller0: entered promiscuous mode [ 186.882473][ T7600] syzkaller0: entered allmulticast mode [ 187.136535][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.522'. [ 188.337982][ T7617] netlink: 'syz.2.524': attribute type 3 has an invalid length. [ 188.346263][ T7617] netlink: 104 bytes leftover after parsing attributes in process `syz.2.524'. [ 188.389269][ T5907] IPVS: starting estimator thread 0... [ 188.509915][ T7626] IPVS: using max 30 ests per chain, 72000 per kthread [ 188.700583][ T7642] netlink: 'syz.3.531': attribute type 10 has an invalid length. [ 188.748595][ T7642] netlink: 40 bytes leftover after parsing attributes in process `syz.3.531'. [ 188.770195][ T7642] dummy0: entered promiscuous mode [ 188.786528][ T7642] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 188.888959][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.534'. [ 188.897843][ T7649] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 188.907937][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.534'. [ 188.919915][ T7649] bond0 (unregistering): Released all slaves [ 188.975310][ T7646] tipc: Started in network mode [ 188.981642][ T7646] tipc: Node identity 569eb025da3c, cluster identity 4711 [ 188.990876][ T7646] tipc: Enabled bearer , priority 0 [ 188.998204][ T7654] syzkaller0: entered promiscuous mode [ 189.008023][ T7654] syzkaller0: entered allmulticast mode [ 189.046521][ T7645] tipc: Resetting bearer [ 189.140162][ T7663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 189.193548][ T7663] netlink: 24 bytes leftover after parsing attributes in process `syz.0.540'. [ 189.205560][ T163] tipc: Resetting bearer [ 189.860774][ T7700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.551'. [ 190.080146][ T5885] tipc: Node number set to 2359472165 [ 191.032601][ T7753] netlink: 'syz.4.566': attribute type 3 has an invalid length. [ 191.097433][ T7757] netlink: 'syz.1.567': attribute type 9 has an invalid length. [ 191.118653][ T7757] netlink: 'syz.1.567': attribute type 11 has an invalid length. [ 191.147046][ T7757] netlink: 'syz.1.567': attribute type 12 has an invalid length. [ 191.460189][ T7769] IPv6: sit1: Disabled Multicast RS [ 191.573238][ T7779] FAULT_INJECTION: forcing a failure. [ 191.573238][ T7779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.616513][ T7781] netlink: 'syz.1.577': attribute type 1 has an invalid length. [ 191.619347][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: syz.3.576 Not tainted syzkaller #0 PREEMPT(full) [ 191.619374][ T7779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 191.619413][ T7779] Call Trace: [ 191.619421][ T7779] [ 191.619429][ T7779] dump_stack_lvl+0xe8/0x150 [ 191.619460][ T7779] should_fail_ex+0x412/0x560 [ 191.619490][ T7779] _copy_from_iter+0x1d3/0x1670 [ 191.619515][ T7779] ? rcu_is_watching+0x15/0xb0 [ 191.619552][ T7779] ? skb_ext_add+0x148/0x8f0 [ 191.619580][ T7779] ? kmem_cache_alloc_noprof+0x307/0x650 [ 191.619598][ T7779] ? skb_ext_add+0x148/0x8f0 [ 191.619624][ T7779] ? __pfx__copy_from_iter+0x10/0x10 [ 191.619652][ T7779] ? skb_ext_add+0x3b3/0x8f0 [ 191.619678][ T7779] ? dev_get_by_index+0x22/0x2e0 [ 191.619699][ T7779] ? skb_put+0x11b/0x210 [ 191.619729][ T7779] raw_sendmsg+0x3db/0xf90 [ 191.619760][ T7779] ? __pfx_raw_sendmsg+0x10/0x10 [ 191.619787][ T7779] ? aa_sock_msg_perm+0xf1/0x1b0 [ 191.619813][ T7779] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 191.619836][ T7779] ____sys_sendmsg+0x972/0x9f0 [ 191.619864][ T7779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.619892][ T7779] ? import_iovec+0x73/0xa0 [ 191.619922][ T7779] ___sys_sendmsg+0x2a5/0x360 [ 191.619946][ T7779] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.620000][ T7779] ? __fget_files+0x2a/0x420 [ 191.620024][ T7779] ? __fget_files+0x3a0/0x420 [ 191.620060][ T7779] __x64_sys_sendmsg+0x1bd/0x2a0 [ 191.620082][ T7779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 191.620110][ T7779] ? __pfx_ksys_write+0x10/0x10 [ 191.620141][ T7779] do_syscall_64+0x14d/0xf80 [ 191.620166][ T7779] ? trace_irq_disable+0x3b/0x150 [ 191.620190][ T7779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.620209][ T7779] ? clear_bhb_loop+0x40/0x90 [ 191.620231][ T7779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.620249][ T7779] RIP: 0033:0x7f05cbb9c799 [ 191.620267][ T7779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.620282][ T7779] RSP: 002b:00007f05cc9fe028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.620304][ T7779] RAX: ffffffffffffffda RBX: 00007f05cbe15fa0 RCX: 00007f05cbb9c799 [ 191.620317][ T7779] RDX: 0000000000040010 RSI: 0000200000000340 RDI: 0000000000000003 [ 191.620328][ T7779] RBP: 00007f05cc9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 191.620339][ T7779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.620349][ T7779] R13: 00007f05cbe16038 R14: 00007f05cbe15fa0 R15: 00007ffc291bf018 [ 191.620386][ T7779] [ 191.922785][ T7795] __nla_validate_parse: 3 callbacks suppressed [ 191.922805][ T7795] netlink: 20 bytes leftover after parsing attributes in process `syz.1.577'. [ 192.031801][ T7795] bond0: (slave bridge3): making interface the new active one [ 192.043174][ T7795] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 192.076656][ T7800] FAULT_INJECTION: forcing a failure. [ 192.076656][ T7800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.090579][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.3.582 Not tainted syzkaller #0 PREEMPT(full) [ 192.090606][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.090617][ T7800] Call Trace: [ 192.090625][ T7800] [ 192.090633][ T7800] dump_stack_lvl+0xe8/0x150 [ 192.090668][ T7800] should_fail_ex+0x412/0x560 [ 192.090697][ T7800] _copy_from_user+0x2d/0xb0 [ 192.090725][ T7800] tls_setsockopt+0x678/0x15c0 [ 192.090760][ T7800] ? __pfx_tls_setsockopt+0x10/0x10 [ 192.090795][ T7800] ? __fget_files+0x2a/0x420 [ 192.090821][ T7800] ? aa_sock_opt_perm+0xff/0x1a0 [ 192.090848][ T7800] ? sock_common_setsockopt+0x36/0xc0 [ 192.090873][ T7800] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 192.090901][ T7800] do_sock_setsockopt+0x17c/0x1b0 [ 192.090935][ T7800] __x64_sys_setsockopt+0x13d/0x1b0 [ 192.090971][ T7800] do_syscall_64+0x14d/0xf80 [ 192.090997][ T7800] ? trace_irq_disable+0x3b/0x150 [ 192.091024][ T7800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.091043][ T7800] ? clear_bhb_loop+0x40/0x90 [ 192.091067][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.091085][ T7800] RIP: 0033:0x7f05cbb9c799 [ 192.091103][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.091119][ T7800] RSP: 002b:00007f05cc9fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 192.091141][ T7800] RAX: ffffffffffffffda RBX: 00007f05cbe15fa0 RCX: 00007f05cbb9c799 [ 192.091155][ T7800] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000003 [ 192.091166][ T7800] RBP: 00007f05cc9fe090 R08: 0000000000000038 R09: 0000000000000000 [ 192.091177][ T7800] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 192.091188][ T7800] R13: 00007f05cbe16038 R14: 00007f05cbe15fa0 R15: 00007ffc291bf018 [ 192.091223][ T7800] [ 192.494312][ T7809] netlink: 276 bytes leftover after parsing attributes in process `syz.1.585'. [ 192.614262][ T7815] x_tables: duplicate underflow at hook 3 [ 192.811256][ T7825] FAULT_INJECTION: forcing a failure. [ 192.811256][ T7825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.869803][ T7825] CPU: 0 UID: 0 PID: 7825 Comm: syz.4.591 Not tainted syzkaller #0 PREEMPT(full) [ 192.869831][ T7825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 192.869842][ T7825] Call Trace: [ 192.869850][ T7825] [ 192.869859][ T7825] dump_stack_lvl+0xe8/0x150 [ 192.869892][ T7825] should_fail_ex+0x412/0x560 [ 192.869923][ T7825] _copy_from_iter+0x1d3/0x1670 [ 192.869951][ T7825] ? rcu_is_watching+0x15/0xb0 [ 192.869981][ T7825] ? skb_ext_add+0x148/0x8f0 [ 192.870012][ T7825] ? kmem_cache_alloc_noprof+0x307/0x650 [ 192.870031][ T7825] ? skb_ext_add+0x148/0x8f0 [ 192.870059][ T7825] ? __pfx__copy_from_iter+0x10/0x10 [ 192.870088][ T7825] ? skb_ext_add+0x3b3/0x8f0 [ 192.870116][ T7825] ? dev_get_by_index+0x22/0x2e0 [ 192.870137][ T7825] ? skb_put+0x11b/0x210 [ 192.870168][ T7825] raw_sendmsg+0x3db/0xf90 [ 192.870203][ T7825] ? __pfx_raw_sendmsg+0x10/0x10 [ 192.870232][ T7825] ? aa_sock_msg_perm+0xf1/0x1b0 [ 192.870258][ T7825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 192.870283][ T7825] ____sys_sendmsg+0x972/0x9f0 [ 192.870310][ T7825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.870336][ T7825] ? import_iovec+0x73/0xa0 [ 192.870368][ T7825] ___sys_sendmsg+0x2a5/0x360 [ 192.870404][ T7825] ? __pfx____sys_sendmsg+0x10/0x10 [ 192.870458][ T7825] ? __fget_files+0x2a/0x420 [ 192.870486][ T7825] ? __fget_files+0x3a0/0x420 [ 192.870524][ T7825] __x64_sys_sendmsg+0x1bd/0x2a0 [ 192.870548][ T7825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 192.870579][ T7825] ? __pfx_ksys_write+0x10/0x10 [ 192.870612][ T7825] do_syscall_64+0x14d/0xf80 [ 192.870637][ T7825] ? trace_irq_disable+0x3b/0x150 [ 192.870662][ T7825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.870683][ T7825] ? clear_bhb_loop+0x40/0x90 [ 192.870706][ T7825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.870723][ T7825] RIP: 0033:0x7f5bee59c799 [ 192.870743][ T7825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.870758][ T7825] RSP: 002b:00007f5bef53b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.870780][ T7825] RAX: ffffffffffffffda RBX: 00007f5bee815fa0 RCX: 00007f5bee59c799 [ 192.870793][ T7825] RDX: 0000000000040010 RSI: 0000200000000340 RDI: 0000000000000003 [ 192.870806][ T7825] RBP: 00007f5bef53b090 R08: 0000000000000000 R09: 0000000000000000 [ 192.870827][ T7825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.870839][ T7825] R13: 00007f5bee816038 R14: 00007f5bee815fa0 R15: 00007ffda96e6108 [ 192.870870][ T7825] [ 193.269160][ T7840] x_tables: duplicate underflow at hook 2 [ 193.295421][ T7835] xt_bpf: check failed: parse error [ 193.334152][ T7835] lo speed is unknown, defaulting to 1000 [ 193.391994][ T7835] lo speed is unknown, defaulting to 1000 [ 193.426697][ T7835] lo speed is unknown, defaulting to 1000 [ 193.476563][ T7835] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 193.640858][ T7855] x_tables: duplicate underflow at hook 3 [ 193.650080][ T7835] lo speed is unknown, defaulting to 1000 [ 193.660367][ T7835] lo speed is unknown, defaulting to 1000 [ 193.670765][ T7835] lo speed is unknown, defaulting to 1000 [ 193.682653][ T7835] lo speed is unknown, defaulting to 1000 [ 193.706676][ T7857] gtp0: entered promiscuous mode [ 193.728717][ T7857] gtp0: entered allmulticast mode [ 193.771034][ T7835] lo speed is unknown, defaulting to 1000 [ 193.939262][ T7862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.608'. [ 193.953354][ T7863] FAULT_INJECTION: forcing a failure. [ 193.953354][ T7863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.997649][ T7863] CPU: 1 UID: 0 PID: 7863 Comm: syz.3.609 Not tainted syzkaller #0 PREEMPT(full) [ 193.997679][ T7863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 193.997691][ T7863] Call Trace: [ 193.997699][ T7863] [ 193.997708][ T7863] dump_stack_lvl+0xe8/0x150 [ 193.997743][ T7863] should_fail_ex+0x412/0x560 [ 193.997776][ T7863] _copy_from_user+0x2d/0xb0 [ 193.997809][ T7863] kstrtouint_from_user+0xd6/0x180 [ 193.997839][ T7863] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 193.997886][ T7863] proc_fail_nth_write+0x8e/0x210 [ 193.997915][ T7863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 193.997950][ T7863] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 193.997981][ T7863] vfs_write+0x29a/0xb90 [ 193.998014][ T7863] ? __pfx_vfs_write+0x10/0x10 [ 193.998039][ T7863] ? __fget_files+0x2a/0x420 [ 193.998072][ T7863] ? __fget_files+0x3a0/0x420 [ 193.998100][ T7863] ? __fget_files+0x2a/0x420 [ 193.998139][ T7863] ksys_write+0x150/0x270 [ 193.998165][ T7863] ? __pfx_ksys_write+0x10/0x10 [ 193.998202][ T7863] do_syscall_64+0x14d/0xf80 [ 193.998231][ T7863] ? trace_irq_disable+0x3b/0x150 [ 193.998259][ T7863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.998280][ T7863] ? clear_bhb_loop+0x40/0x90 [ 193.998307][ T7863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.998335][ T7863] RIP: 0033:0x7f05cbb5cfce [ 193.998355][ T7863] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 193.998371][ T7863] RSP: 002b:00007f05cc9fdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 193.998393][ T7863] RAX: ffffffffffffffda RBX: 00007f05cc9fe6c0 RCX: 00007f05cbb5cfce [ 193.998407][ T7863] RDX: 0000000000000001 RSI: 00007f05cc9fe0a0 RDI: 0000000000000004 [ 193.998420][ T7863] RBP: 00007f05cc9fe090 R08: 0000000000000000 R09: 0000000000000000 [ 193.998432][ T7863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.998448][ T7863] R13: 00007f05cbe16038 R14: 00007f05cbe15fa0 R15: 00007ffc291bf018 [ 193.998479][ T7863] [ 194.348971][ T7874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.612'. [ 194.394215][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.412915][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.615'. [ 194.691013][ T7881] x_tables: duplicate underflow at hook 3 [ 194.833812][ T7891] sock: sock_timestamping_bind_phc: sock not bind to device [ 194.848019][ T7890] sock: sock_timestamping_bind_phc: sock not bind to device [ 195.016265][ T7899] syz.2.621 uses old SIOCAX25GETINFO [ 195.144610][ T7902] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 195.285136][ T7909] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 195.485996][ T7916] lo speed is unknown, defaulting to 1000 [ 195.574660][ T7924] openvswitch: netlink: Actions may not be safe on all matching packets [ 195.636138][ T7927] x_tables: duplicate underflow at hook 3 [ 195.708583][ T7929] netlink: 47 bytes leftover after parsing attributes in process `syz.1.633'. [ 195.841988][ T7940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 195.851352][ T7934] netlink: 40 bytes leftover after parsing attributes in process `syz.3.631'. [ 195.880473][ T7937] tipc: New replicast peer: 0.0.0.0 [ 195.899187][ T7937] tipc: Enabled bearer , priority 10 [ 196.287279][ T7959] netlink: 14 bytes leftover after parsing attributes in process `syz.0.639'. [ 196.358803][ T7959] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'. [ 196.472207][ T7971] x_tables: duplicate underflow at hook 3 [ 196.969357][ T7988] team_slave_0: entered promiscuous mode [ 196.975376][ T7988] team_slave_1: entered promiscuous mode [ 197.032229][ T7988] 8021q: adding VLAN 0 to HW filter on device macvlan6 [ 197.044834][ T7997] netlink: 'syz.0.652': attribute type 3 has an invalid length. [ 197.054950][ T1207] tipc: Node number set to 398968409 [ 197.097879][ T7997] __nla_validate_parse: 4 callbacks suppressed [ 197.097901][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 197.113403][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 197.132226][ T35] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.132380][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.652'. [ 197.152310][ T7997] netlink: 4 bytes leftover after parsing attributes in process `syz.0.652'. [ 197.160908][ T35] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.180726][ T35] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.197005][ T35] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.348229][ T8006] FAULT_INJECTION: forcing a failure. [ 197.348229][ T8006] name failslab, interval 1, probability 0, space 0, times 0 [ 197.397518][ T8006] CPU: 1 UID: 0 PID: 8006 Comm: syz.0.654 Not tainted syzkaller #0 PREEMPT(full) [ 197.397548][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 197.397560][ T8006] Call Trace: [ 197.397568][ T8006] [ 197.397577][ T8006] dump_stack_lvl+0xe8/0x150 [ 197.397611][ T8006] should_fail_ex+0x412/0x560 [ 197.397642][ T8006] should_failslab+0xa8/0x100 [ 197.397667][ T8006] ? skb_clone+0x212/0x3a0 [ 197.397688][ T8006] kmem_cache_alloc_noprof+0x87/0x650 [ 197.397719][ T8006] skb_clone+0x212/0x3a0 [ 197.397744][ T8006] __netlink_deliver_tap+0x404/0x850 [ 197.397784][ T8006] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.397814][ T8006] netlink_deliver_tap+0x19c/0x1b0 [ 197.397842][ T8006] netlink_sendskb+0x68/0x140 [ 197.397870][ T8006] netlink_unicast+0x3a3/0x9b0 [ 197.397904][ T8006] ? __pfx_netlink_unicast+0x10/0x10 [ 197.397941][ T8006] netlink_rcv_skb+0x2b6/0x4b0 [ 197.397969][ T8006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 197.397992][ T8006] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 197.398037][ T8006] ? down_read+0x272/0x2e0 [ 197.398055][ T8006] ? genl_rcv+0xd/0x40 [ 197.398076][ T8006] genl_rcv+0x28/0x40 [ 197.398094][ T8006] netlink_unicast+0x80f/0x9b0 [ 197.398128][ T8006] ? __pfx_netlink_unicast+0x10/0x10 [ 197.398154][ T8006] ? netlink_sendmsg+0x650/0xb40 [ 197.398176][ T8006] ? skb_put+0x11b/0x210 [ 197.398207][ T8006] netlink_sendmsg+0x813/0xb40 [ 197.398244][ T8006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.398284][ T8006] ? aa_sock_msg_perm+0xf1/0x1b0 [ 197.398311][ T8006] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.398338][ T8006] ____sys_sendmsg+0x972/0x9f0 [ 197.398370][ T8006] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.398401][ T8006] ? import_iovec+0x73/0xa0 [ 197.398436][ T8006] ___sys_sendmsg+0x2a5/0x360 [ 197.398466][ T8006] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.398527][ T8006] ? __fget_files+0x2a/0x420 [ 197.398554][ T8006] ? __fget_files+0x3a0/0x420 [ 197.398594][ T8006] __x64_sys_sendmsg+0x1bd/0x2a0 [ 197.398618][ T8006] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.398650][ T8006] ? __pfx_ksys_write+0x10/0x10 [ 197.398686][ T8006] do_syscall_64+0x14d/0xf80 [ 197.398714][ T8006] ? trace_irq_disable+0x3b/0x150 [ 197.398742][ T8006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.398763][ T8006] ? clear_bhb_loop+0x40/0x90 [ 197.398788][ T8006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.398808][ T8006] RIP: 0033:0x7fa8de99c799 [ 197.398828][ T8006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.398844][ T8006] RSP: 002b:00007fa8df79b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.398867][ T8006] RAX: ffffffffffffffda RBX: 00007fa8dec15fa0 RCX: 00007fa8de99c799 [ 197.398881][ T8006] RDX: 0000000000000004 RSI: 00002000000001c0 RDI: 0000000000000003 [ 197.398893][ T8006] RBP: 00007fa8df79b090 R08: 0000000000000000 R09: 0000000000000000 [ 197.398905][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.398917][ T8006] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff8feab518 [ 197.398951][ T8006] [ 197.763501][ T8011] x_tables: duplicate underflow at hook 3 [ 197.954567][ T8018] netlink: 40 bytes leftover after parsing attributes in process `syz.2.659'. [ 198.327986][ T8038] netlink: 84 bytes leftover after parsing attributes in process `syz.4.666'. [ 198.381200][ T8041] netlink: 8 bytes leftover after parsing attributes in process `syz.1.669'. [ 198.397654][ T8041] netlink: 60 bytes leftover after parsing attributes in process `syz.1.669'. [ 198.631612][ T8047] x_tables: duplicate underflow at hook 3 [ 198.896967][ T8054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.674'. [ 199.038244][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 199.345604][ T8076] x_tables: duplicate underflow at hook 3 [ 199.523415][ T8079] bond0: option broadcast_neighbor: invalid value (30) [ 199.573603][ T8079] bond0 (unregistering): Released all slaves [ 200.043561][ T8120] x_tables: duplicate underflow at hook 3 [ 200.513556][ T8140] sch_fq: defrate 4294967293 ignored. [ 200.777525][ T8157] x_tables: duplicate underflow at hook 3 [ 200.893217][ T8163] netlink: 'syz.0.711': attribute type 5 has an invalid length. [ 200.901936][ T8163] netlink: 'syz.0.711': attribute type 6 has an invalid length. [ 201.568676][ T8199] x_tables: duplicate underflow at hook 3 [ 201.671357][ T8193] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.679231][ T8193] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.793514][ T8193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.806318][ T8193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.918587][ T58] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.934285][ T58] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.944282][ T58] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.959443][ T58] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.103768][ T8221] bridge_slave_1: left allmulticast mode [ 202.132083][ T8221] bridge_slave_1: left promiscuous mode [ 202.142848][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.173869][ T8221] bridge_slave_0: left allmulticast mode [ 202.182224][ T8221] bridge_slave_0: left promiscuous mode [ 202.195069][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.268506][ T8224] __nla_validate_parse: 10 callbacks suppressed [ 202.268528][ T8224] netlink: 52 bytes leftover after parsing attributes in process `syz.2.730'. [ 202.404106][ T8235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.734'. [ 202.416165][ T8235] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 202.446653][ T8237] bond3: (slave bond_slave_1): Device is not our slave [ 202.453810][ T8237] bond3: option active_slave: invalid value (bond_slave_1) [ 202.463135][ T8237] bond3 (unregistering): Released all slaves [ 202.620007][ T8242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.734'. [ 202.653077][ T8242] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 202.670306][ T8242] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 203.266440][ T8279] netlink: 44 bytes leftover after parsing attributes in process `syz.0.746'. [ 203.568344][ T8292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.750'. [ 203.598634][ T8292] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 203.616716][ T8295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.751'. [ 203.618912][ T8292] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 203.665523][ T8291] lo speed is unknown, defaulting to 1000 [ 203.671192][ T8288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.749'. [ 203.672282][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.751'. [ 203.698564][ T8295] netlink: 6 bytes leftover after parsing attributes in process `syz.3.751'. [ 203.779808][ T8295] xt_hashlimit: max too large, truncated to 1048576 [ 203.786713][ T8295] xt_bpf: check failed: parse error [ 203.804919][ T8295] netlink: 'syz.3.751': attribute type 8 has an invalid length. [ 204.033144][ T8309] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 204.206220][ T8316] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 204.318010][ T8316] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.339972][ T8322] bond1: (slave geneve2): making interface the new active one [ 204.350142][ T8322] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 204.360889][ T8308] lo speed is unknown, defaulting to 1000 [ 204.402305][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.411794][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.439955][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.467344][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.714139][ T8339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 205.269380][ T8355] lo speed is unknown, defaulting to 1000 [ 205.332626][ T8369] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.377101][ T8375] netlink: 'syz.0.776': attribute type 30 has an invalid length. [ 205.389482][ T8363] xt_HMARK: spi-set and port-set can't be combined [ 205.452366][ T8375] bond0: option arp_missed_max: invalid value (0) [ 205.469139][ T8375] bond0: option arp_missed_max: allowed values 1 - 255 [ 205.485854][ T8375] bond0 (unregistering): Released all slaves [ 205.781476][ T8389] nbd: must specify at least one socket [ 206.213944][ T8400] syzkaller0: entered promiscuous mode [ 206.227954][ T8400] syzkaller0: entered allmulticast mode [ 206.236276][ T8405] tipc: Resetting bearer [ 206.260876][ T8409] netlink: 'syz.3.785': attribute type 11 has an invalid length. [ 206.701781][ T5834] Bluetooth: hci3: command 0x0401 tx timeout [ 206.701802][ T5838] Bluetooth: hci1: command 0x0406 tx timeout [ 206.701839][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 206.709285][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 208.278878][ T8401] tipc: Resetting bearer [ 208.722280][ T8437] __nla_validate_parse: 6 callbacks suppressed [ 208.722300][ T8437] netlink: 16 bytes leftover after parsing attributes in process `syz.4.787'. [ 208.888279][ T8440] xt_hashlimit: max too large, truncated to 1048576 [ 208.914083][ T8440] xt_bpf: check failed: parse error [ 209.343206][ T58] tipc: Resetting bearer [ 209.520589][ T8468] netlink: 32 bytes leftover after parsing attributes in process `syz.2.800'. [ 209.608810][ T8470] netlink: 'syz.2.800': attribute type 10 has an invalid length. [ 209.617044][ T8470] bridge0: port 3(gretap0) entered disabled state [ 209.623756][ T8470] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.631618][ T8470] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.674345][ T8470] bridge0: port 3(gretap0) entered blocking state [ 209.681064][ T8470] bridge0: port 3(gretap0) entered forwarding state [ 209.688057][ T8470] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.695321][ T8470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.702937][ T8470] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.710201][ T8470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.732298][ T8470] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 210.010455][ T8481] netlink: 48 bytes leftover after parsing attributes in process `syz.0.804'. [ 210.590804][ T8494] bridge_slave_1: left allmulticast mode [ 210.596534][ T8494] bridge_slave_1: left promiscuous mode [ 210.649067][ T8494] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.687605][ T8496] netlink: 'syz.0.809': attribute type 27 has an invalid length. [ 210.796865][ T8509] netlink: 'syz.2.814': attribute type 8 has an invalid length. [ 210.840866][ T8511] netlink: 'syz.3.811': attribute type 10 has an invalid length. [ 210.870147][ T8496] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 210.922631][ T8496] tipc: Resetting bearer [ 210.947016][ T8496] syzkaller0: left promiscuous mode [ 210.954433][ T8496] syzkaller0: left allmulticast mode [ 211.144903][ T8497] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.216982][ T8497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 211.242049][ T8511] mac80211_hwsim hwsim10 wlan1: entered promiscuous mode [ 211.249858][ T8518] x_tables: duplicate underflow at hook 3 [ 211.271109][ T8511] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 211.308878][ T58] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.352206][ T5885] lo speed is unknown, defaulting to 1000 [ 211.371861][ T58] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.381407][ T5885] syz2: Port: 1 Link ACTIVE [ 211.394919][ T58] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.432214][ T58] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.442179][ T8523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.817'. [ 211.761377][ T8546] netlink: 40 bytes leftover after parsing attributes in process `syz.3.826'. [ 211.792962][ T8548] x_tables: duplicate underflow at hook 3 [ 211.932313][ T8553] netlink: 'syz.3.830': attribute type 1 has an invalid length. [ 212.118227][ T8560] syzkaller1: entered promiscuous mode [ 212.124465][ T8560] syzkaller1: entered allmulticast mode [ 212.469797][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.837'. [ 212.488578][ T8576] netlink: 'syz.3.837': attribute type 30 has an invalid length. [ 212.506824][ T8576] netlink: 'syz.3.837': attribute type 29 has an invalid length. [ 212.527607][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.837'. [ 212.694214][ T8582] x_tables: duplicate underflow at hook 3 [ 212.707463][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.840'. [ 213.086264][ T8602] netlink: 68 bytes leftover after parsing attributes in process `syz.4.848'. [ 213.263687][ T8612] netlink: 40 bytes leftover after parsing attributes in process `syz.1.853'. [ 213.282154][ T8614] x_tables: duplicate underflow at hook 3 [ 213.997814][ T8649] syzkaller0: entered promiscuous mode [ 213.999753][ T8650] x_tables: duplicate underflow at hook 3 [ 214.007236][ T8649] syzkaller0: entered allmulticast mode [ 214.161915][ T8656] dvmrp1: entered allmulticast mode [ 214.168716][ T8655] __nla_validate_parse: 8 callbacks suppressed [ 214.168736][ T8655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.867'. [ 214.193253][ T8656] Bluetooth: MGMT ver 1.23 [ 214.202116][ T8652] dvmrp1: left allmulticast mode [ 214.285686][ T5907] IPVS: starting estimator thread 0... [ 214.381275][ T8662] IPVS: using max 25 ests per chain, 60000 per kthread [ 214.780838][ T8681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.840240][ T5885] lo speed is unknown, defaulting to 1000 [ 214.873563][ T5885] syz2: Port: 1 Link DOWN [ 214.913390][ T8686] x_tables: duplicate underflow at hook 3 [ 215.052672][ T8696] netlink: 8 bytes leftover after parsing attributes in process `syz.4.880'. [ 215.351718][ T8715] sctp: [Deprecated]: syz.4.887 (pid 8715) Use of int in max_burst socket option. [ 215.351718][ T8715] Use struct sctp_assoc_value instead [ 215.608904][ T8722] netlink: 'syz.4.889': attribute type 11 has an invalid length. [ 215.854583][ T8729] x_tables: duplicate underflow at hook 3 [ 216.140280][ T8746] syzkaller1: entered promiscuous mode [ 216.196686][ T8750] xt_TCPMSS: Only works on TCP SYN packets [ 216.326145][ T8757] x_tables: duplicate underflow at hook 3 [ 216.529637][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.905'. [ 217.014364][ T8784] x_tables: duplicate underflow at hook 3 [ 217.028795][ T5829] Bluetooth: hci0: command 0x0406 tx timeout [ 217.035130][ T51] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 217.102947][ T51] Bluetooth: hci4: link tx timeout [ 217.109110][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 217.567821][ T8808] netlink: 'syz.1.920': attribute type 10 has an invalid length. [ 217.958345][ T8829] x_tables: duplicate underflow at hook 3 [ 217.971860][ T8832] netlink: 3 bytes leftover after parsing attributes in process `syz.2.929'. [ 218.336411][ T8848] xt_TCPMSS: Only works on TCP SYN packets [ 218.415131][ T8843] netlink: 'syz.3.933': attribute type 5 has an invalid length. [ 218.462801][ T8849] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.927727][ T8868] x_tables: duplicate underflow at hook 3 [ 218.948516][ T8872] FAULT_INJECTION: forcing a failure. [ 218.948516][ T8872] name failslab, interval 1, probability 0, space 0, times 0 [ 218.963634][ T8872] CPU: 1 UID: 0 PID: 8872 Comm: syz.1.938 Not tainted syzkaller #0 PREEMPT(full) [ 218.963663][ T8872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 218.963674][ T8872] Call Trace: [ 218.963682][ T8872] [ 218.963691][ T8872] dump_stack_lvl+0xe8/0x150 [ 218.963725][ T8872] should_fail_ex+0x412/0x560 [ 218.963757][ T8872] should_failslab+0xa8/0x100 [ 218.963787][ T8872] __kmalloc_noprof+0xe8/0x760 [ 218.963821][ T8872] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 218.963851][ T8872] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 218.963882][ T8872] genl_family_rcv_msg_doit+0xd9/0x330 [ 218.963912][ T8872] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 218.963943][ T8872] ? apparmor_capable+0x126/0x170 [ 218.963977][ T8872] ? bpf_lsm_capable+0x9/0x20 [ 218.964003][ T8872] ? security_capable+0x7e/0x2c0 [ 218.964034][ T8872] genl_rcv_msg+0x61c/0x7a0 [ 218.964062][ T8872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.964081][ T8872] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 218.964107][ T8872] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 218.964127][ T8872] ? __pfx_nl80211_post_doit+0x10/0x10 [ 218.964159][ T8872] ? netlink_rcv_skb+0x1c7/0x4b0 [ 218.964192][ T8872] netlink_rcv_skb+0x232/0x4b0 [ 218.964218][ T8872] ? __pfx_genl_rcv_msg+0x10/0x10 [ 218.964241][ T8872] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 218.964287][ T8872] ? down_read+0x272/0x2e0 [ 218.964303][ T8872] ? genl_rcv+0xd/0x40 [ 218.964324][ T8872] genl_rcv+0x28/0x40 [ 218.964341][ T8872] netlink_unicast+0x80f/0x9b0 [ 218.964375][ T8872] ? __pfx_netlink_unicast+0x10/0x10 [ 218.964400][ T8872] ? netlink_sendmsg+0x650/0xb40 [ 218.964423][ T8872] ? skb_put+0x11b/0x210 [ 218.964454][ T8872] netlink_sendmsg+0x813/0xb40 [ 218.964492][ T8872] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.964520][ T8872] ? aa_sock_msg_perm+0xf1/0x1b0 [ 218.964546][ T8872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 218.964571][ T8872] ____sys_sendmsg+0x972/0x9f0 [ 218.964602][ T8872] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.964633][ T8872] ? import_iovec+0x73/0xa0 [ 218.964667][ T8872] ___sys_sendmsg+0x2a5/0x360 [ 218.964693][ T8872] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.964748][ T8872] ? __fget_files+0x2a/0x420 [ 218.964776][ T8872] ? __fget_files+0x3a0/0x420 [ 218.964825][ T8872] __x64_sys_sendmsg+0x1bd/0x2a0 [ 218.964848][ T8872] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.964879][ T8872] ? __pfx_ksys_write+0x10/0x10 [ 218.964915][ T8872] do_syscall_64+0x14d/0xf80 [ 218.964943][ T8872] ? trace_irq_disable+0x3b/0x150 [ 218.964969][ T8872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.964989][ T8872] ? clear_bhb_loop+0x40/0x90 [ 218.965013][ T8872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.965033][ T8872] RIP: 0033:0x7f3573f9c799 [ 218.965051][ T8872] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.965067][ T8872] RSP: 002b:00007f3574ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.965088][ T8872] RAX: ffffffffffffffda RBX: 00007f3574215fa0 RCX: 00007f3573f9c799 [ 218.965102][ T8872] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000004 [ 218.965114][ T8872] RBP: 00007f3574ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 218.965125][ T8872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.965136][ T8872] R13: 00007f3574216038 R14: 00007f3574215fa0 R15: 00007ffe83ce7818 [ 218.965168][ T8872] [ 219.310159][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 219.541684][ T8885] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.948'. [ 219.668934][ T8894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.947'. [ 219.678965][ T8894] netlink: 32 bytes leftover after parsing attributes in process `syz.1.947'. [ 219.871463][ T8887] delete_channel: no stack [ 219.904390][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.954'. [ 219.919257][ T8907] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.952'. [ 220.362174][ T8916] FAULT_INJECTION: forcing a failure. [ 220.362174][ T8916] name failslab, interval 1, probability 0, space 0, times 0 [ 220.377149][ T8916] CPU: 0 UID: 0 PID: 8916 Comm: syz.0.958 Not tainted syzkaller #0 PREEMPT(full) [ 220.377176][ T8916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 220.377187][ T8916] Call Trace: [ 220.377195][ T8916] [ 220.377203][ T8916] dump_stack_lvl+0xe8/0x150 [ 220.377238][ T8916] should_fail_ex+0x412/0x560 [ 220.377269][ T8916] should_failslab+0xa8/0x100 [ 220.377297][ T8916] __kmalloc_noprof+0xe8/0x760 [ 220.377320][ T8916] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 220.377351][ T8916] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 220.377382][ T8916] genl_family_rcv_msg_doit+0xd9/0x330 [ 220.377411][ T8916] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 220.377442][ T8916] ? apparmor_capable+0x126/0x170 [ 220.377476][ T8916] ? bpf_lsm_capable+0x9/0x20 [ 220.377503][ T8916] ? security_capable+0x7e/0x2c0 [ 220.377534][ T8916] genl_rcv_msg+0x61c/0x7a0 [ 220.377562][ T8916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.377582][ T8916] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 220.377610][ T8916] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 220.377631][ T8916] ? __pfx_nl80211_post_doit+0x10/0x10 [ 220.377660][ T8916] ? __lock_acquire+0x6b5/0x2cf0 [ 220.377699][ T8916] netlink_rcv_skb+0x232/0x4b0 [ 220.377728][ T8916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 220.377751][ T8916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.377798][ T8916] ? down_read+0x272/0x2e0 [ 220.377816][ T8916] ? genl_rcv+0xd/0x40 [ 220.377838][ T8916] genl_rcv+0x28/0x40 [ 220.377856][ T8916] netlink_unicast+0x80f/0x9b0 [ 220.377891][ T8916] ? __pfx_netlink_unicast+0x10/0x10 [ 220.377918][ T8916] ? netlink_sendmsg+0x650/0xb40 [ 220.377944][ T8916] ? skb_put+0x11b/0x210 [ 220.377977][ T8916] netlink_sendmsg+0x813/0xb40 [ 220.378015][ T8916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.378053][ T8916] ? aa_sock_msg_perm+0xf1/0x1b0 [ 220.378089][ T8916] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.378115][ T8916] ____sys_sendmsg+0x972/0x9f0 [ 220.378146][ T8916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.378177][ T8916] ? import_iovec+0x73/0xa0 [ 220.378212][ T8916] ___sys_sendmsg+0x2a5/0x360 [ 220.378239][ T8916] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.378299][ T8916] ? __fget_files+0x2a/0x420 [ 220.378328][ T8916] ? __fget_files+0x3a0/0x420 [ 220.378368][ T8916] __x64_sys_sendmsg+0x1bd/0x2a0 [ 220.378393][ T8916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.378425][ T8916] ? __pfx_ksys_write+0x10/0x10 [ 220.378456][ T8916] do_syscall_64+0x14d/0xf80 [ 220.378483][ T8916] ? trace_irq_disable+0x3b/0x150 [ 220.378509][ T8916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.378529][ T8916] ? clear_bhb_loop+0x40/0x90 [ 220.378553][ T8916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.378571][ T8916] RIP: 0033:0x7fa8de99c799 [ 220.378589][ T8916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.378602][ T8916] RSP: 002b:00007fa8df79b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.378619][ T8916] RAX: ffffffffffffffda RBX: 00007fa8dec15fa0 RCX: 00007fa8de99c799 [ 220.378631][ T8916] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000004 [ 220.378644][ T8916] RBP: 00007fa8df79b090 R08: 0000000000000000 R09: 0000000000000000 [ 220.378655][ T8916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.378666][ T8916] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff8feab518 [ 220.378697][ T8916] [ 221.119661][ T8930] sctp: [Deprecated]: syz.2.964 (pid 8930) Use of int in maxseg socket option. [ 221.119661][ T8930] Use struct sctp_assoc_value instead [ 221.249588][ T8932] netlink: 'syz.3.965': attribute type 3 has an invalid length. [ 221.280195][ T8932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.965'. [ 221.385978][ T8946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.968'. [ 221.502111][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 221.519220][ T8954] netlink: 8 bytes leftover after parsing attributes in process `syz.4.972'. [ 221.529452][ T8955] FAULT_INJECTION: forcing a failure. [ 221.529452][ T8955] name failslab, interval 1, probability 0, space 0, times 0 [ 221.568911][ T8955] CPU: 0 UID: 0 PID: 8955 Comm: syz.2.971 Not tainted syzkaller #0 PREEMPT(full) [ 221.568980][ T8955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 221.568992][ T8955] Call Trace: [ 221.569005][ T8955] [ 221.569016][ T8955] dump_stack_lvl+0xe8/0x150 [ 221.569048][ T8955] should_fail_ex+0x412/0x560 [ 221.569081][ T8955] should_failslab+0xa8/0x100 [ 221.569114][ T8955] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 221.569146][ T8955] ? __alloc_skb+0x1d0/0x7d0 [ 221.569171][ T8955] ? __local_bh_enable_ip+0xd0/0x130 [ 221.569199][ T8955] __alloc_skb+0x1d0/0x7d0 [ 221.569232][ T8955] nl80211_tx_mgmt+0x9fa/0xe50 [ 221.569263][ T8955] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 221.569297][ T8955] ? __cfg80211_wdev_from_attrs+0x6d6/0x780 [ 221.569358][ T8955] ? nl80211_pre_doit+0x4f1/0x930 [ 221.569393][ T8955] genl_family_rcv_msg_doit+0x22a/0x330 [ 221.569422][ T8955] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 221.569467][ T8955] ? bpf_lsm_capable+0x9/0x20 [ 221.569491][ T8955] ? security_capable+0x7e/0x2c0 [ 221.569522][ T8955] genl_rcv_msg+0x61c/0x7a0 [ 221.569550][ T8955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.569568][ T8955] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 221.569593][ T8955] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 221.569614][ T8955] ? __pfx_nl80211_post_doit+0x10/0x10 [ 221.569641][ T8955] ? __lock_acquire+0x6b5/0x2cf0 [ 221.569678][ T8955] netlink_rcv_skb+0x232/0x4b0 [ 221.569705][ T8955] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.569727][ T8955] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.569839][ T8955] ? down_read+0x272/0x2e0 [ 221.569857][ T8955] ? genl_rcv+0xd/0x40 [ 221.569878][ T8955] genl_rcv+0x28/0x40 [ 221.569895][ T8955] netlink_unicast+0x80f/0x9b0 [ 221.569929][ T8955] ? __pfx_netlink_unicast+0x10/0x10 [ 221.569954][ T8955] ? netlink_sendmsg+0x650/0xb40 [ 221.569978][ T8955] ? skb_put+0x11b/0x210 [ 221.570010][ T8955] netlink_sendmsg+0x813/0xb40 [ 221.570047][ T8955] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.570077][ T8955] ? aa_sock_msg_perm+0xf1/0x1b0 [ 221.570103][ T8955] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 221.570128][ T8955] ____sys_sendmsg+0x972/0x9f0 [ 221.570157][ T8955] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.570188][ T8955] ? import_iovec+0x73/0xa0 [ 221.570222][ T8955] ___sys_sendmsg+0x2a5/0x360 [ 221.570248][ T8955] ? __pfx____sys_sendmsg+0x10/0x10 [ 221.570310][ T8955] ? __fget_files+0x2a/0x420 [ 221.570338][ T8955] ? __fget_files+0x3a0/0x420 [ 221.570385][ T8955] __x64_sys_sendmsg+0x1bd/0x2a0 [ 221.570409][ T8955] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 221.570441][ T8955] ? __pfx_ksys_write+0x10/0x10 [ 221.570479][ T8955] do_syscall_64+0x14d/0xf80 [ 221.570510][ T8955] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.570531][ T8955] ? clear_bhb_loop+0x40/0x90 [ 221.570557][ T8955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.570578][ T8955] RIP: 0033:0x7ff0d599c799 [ 221.570599][ T8955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.570616][ T8955] RSP: 002b:00007ff0d67ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.570640][ T8955] RAX: ffffffffffffffda RBX: 00007ff0d5c15fa0 RCX: 00007ff0d599c799 [ 221.570655][ T8955] RDX: 0000000000000080 RSI: 0000200000000200 RDI: 0000000000000004 [ 221.570668][ T8955] RBP: 00007ff0d67ba090 R08: 0000000000000000 R09: 0000000000000000 [ 221.570680][ T8955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.570692][ T8955] R13: 00007ff0d5c16038 R14: 00007ff0d5c15fa0 R15: 00007ffce8e2fde8 [ 221.570728][ T8955] [ 222.231265][ T8963] netlink: 'syz.2.978': attribute type 13 has an invalid length. [ 222.347047][ T8972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.978'. [ 222.558955][ T8981] netlink: 'syz.0.982': attribute type 16 has an invalid length. [ 222.633149][ T8975] lo speed is unknown, defaulting to 1000 [ 222.685651][ T8984] syzkaller1: entered promiscuous mode [ 222.691413][ T8984] syzkaller1: entered allmulticast mode [ 222.917066][ T8973] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 223.383527][ T9017] tipc: Started in network mode [ 223.388849][ T9017] tipc: Node identity 0a50035cac0f, cluster identity 4711 [ 223.397468][ T9017] tipc: Enabled bearer , priority 0 [ 223.442352][ T9025] syzkaller0: entered promiscuous mode [ 223.447871][ T9025] syzkaller0: entered allmulticast mode [ 223.469619][ T9026] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 223.522143][ T9026] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 223.535780][ T9018] lo speed is unknown, defaulting to 1000 [ 223.559551][ T9020] lo speed is unknown, defaulting to 1000 [ 223.566684][ T9017] tipc: Resetting bearer [ 223.586283][ T9017] tipc: Disabling bearer [ 224.488393][ T9059] mac80211_hwsim hwsim4 syzkaller0: Caught tx_queue_len zero misconfig [ 224.525338][ T9070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.536224][ T9070] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 224.551076][ T9070] bond0: (slave gre0): Error -95 calling set_mac_address [ 224.806894][ T9087] __nla_validate_parse: 3 callbacks suppressed [ 224.806916][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 225.154076][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1011'. [ 225.652831][ T9121] tipc: Started in network mode [ 225.674936][ T9121] tipc: Node identity 6277258496fd, cluster identity 4711 [ 225.696035][ T9121] tipc: Enabled bearer , priority 0 [ 225.753664][ T9125] syzkaller0: entered promiscuous mode [ 225.766550][ T9125] syzkaller0: entered allmulticast mode [ 225.875506][ T9117] tipc: Resetting bearer [ 225.933363][ T9115] tipc: Resetting bearer [ 225.992918][ T9115] tipc: Disabling bearer [ 226.085273][ T9133] bond2: option mode: invalid value (254) [ 226.130815][ T9133] bond2 (unregistering): Released all slaves [ 226.297039][ T9146] syz.3.1024 (9146) used obsolete PPPIOCDETACH ioctl [ 226.363010][ T9155] netlink: 'syz.2.1027': attribute type 1 has an invalid length. [ 226.524777][ T9155] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.603857][ T9168] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1027'. [ 226.720506][ T9174] netlink: 'syz.3.1030': attribute type 10 has an invalid length. [ 226.739837][ T9159] bond4: (slave veth3): Enslaving as an active interface with a down link [ 226.806926][ T9162] bond4: (slave dummy0): making interface the new active one [ 226.836190][ T9162] dummy0: entered promiscuous mode [ 226.851678][ T9162] bond4: (slave dummy0): Enslaving as an active interface with an up link [ 226.875411][ T9169] : renamed from lo [ 226.897164][ T9168] bond4: (slave dummy0): Releasing active interface [ 226.939683][ T9181] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20001 [ 226.948668][ T9168] dummy0 (unregistering): left promiscuous mode [ 227.000567][ T9174] dummy0: left promiscuous mode [ 227.030556][ T9174] team0: Port device dummy0 added [ 227.287699][ T9196] bond0: entered promiscuous mode [ 227.323663][ T9196] bond_slave_0: entered promiscuous mode [ 227.341326][ T9196] bond_slave_1: entered promiscuous mode [ 227.347264][ T9196] bridge0: entered promiscuous mode [ 227.402186][ T9196] batadv0: entered promiscuous mode [ 227.426926][ T9196] debugfs: 'hsr1' already exists in 'hsr' [ 227.443062][ T9196] Cannot create hsr debugfs directory [ 227.495891][ T9196] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 227.751429][ T9221] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.1046'. [ 227.977012][ T9232] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1049'. [ 228.095070][ T9235] tipc: Enabled bearer , priority 0 [ 228.121548][ T9235] syzkaller0: entered promiscuous mode [ 228.144098][ T9235] syzkaller0: entered allmulticast mode [ 228.184375][ T9235] tipc: Resetting bearer [ 228.215898][ T9234] tipc: Resetting bearer [ 228.296696][ T9234] tipc: Disabling bearer [ 228.774445][ T9260] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 228.782929][ T9260] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 228.847952][ T9260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1060'. [ 228.879491][ T9268] netlink: 'syz.1.1064': attribute type 1 has an invalid length. [ 229.083398][ T9277] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 229.124701][ T9277] netlink: 'syz.0.1066': attribute type 1 has an invalid length. [ 229.197640][ T9279] syzkaller0: entered promiscuous mode [ 229.204643][ T9279] syzkaller0: entered allmulticast mode [ 229.811832][ T9318] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 229.829275][ T9318] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 230.181267][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 230.194522][ T9336] netlink: 'syz.2.1083': attribute type 7 has an invalid length. [ 230.319795][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 230.331325][ T9336] netlink: 'syz.2.1083': attribute type 7 has an invalid length. [ 230.643842][ T9353] syzkaller0: entered promiscuous mode [ 230.681339][ T9353] syzkaller0: entered allmulticast mode [ 230.740249][ T9364] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1093'. [ 230.764173][ T9361] speed is unknown, defaulting to 1000 [ 231.677443][ T9409] syzkaller1: entered promiscuous mode [ 231.689378][ T9409] syzkaller1: entered allmulticast mode [ 232.153145][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1115'. [ 232.589397][ T9461] FAULT_INJECTION: forcing a failure. [ 232.589397][ T9461] name failslab, interval 1, probability 0, space 0, times 0 [ 232.602970][ T9461] CPU: 0 UID: 0 PID: 9461 Comm: syz.1.1122 Not tainted syzkaller #0 PREEMPT(full) [ 232.603008][ T9461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 232.603020][ T9461] Call Trace: [ 232.603028][ T9461] [ 232.603036][ T9461] dump_stack_lvl+0xe8/0x150 [ 232.603071][ T9461] should_fail_ex+0x412/0x560 [ 232.603099][ T9461] should_failslab+0xa8/0x100 [ 232.603126][ T9461] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 232.603148][ T9461] ? __alloc_skb+0x186/0x7d0 [ 232.603173][ T9461] ? __alloc_skb+0x1d0/0x7d0 [ 232.603196][ T9461] ? __local_bh_enable_ip+0xd0/0x130 [ 232.603225][ T9461] __alloc_skb+0x1d0/0x7d0 [ 232.603255][ T9461] alloc_skb_with_frags+0xca/0x890 [ 232.603289][ T9461] ? is_bpf_text_address+0x26/0x2b0 [ 232.603317][ T9461] sock_alloc_send_pskb+0x878/0x990 [ 232.603344][ T9461] ? __kernel_text_address+0xd/0x30 [ 232.603377][ T9461] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 232.603397][ T9461] ? do_raw_spin_lock+0x12b/0x2f0 [ 232.603428][ T9461] ? __lock_acquire+0x6b5/0x2cf0 [ 232.603457][ T9461] __ip_append_data+0x2bc5/0x3f30 [ 232.603507][ T9461] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 232.603553][ T9461] ? ipv4_mtu+0x23/0x650 [ 232.603583][ T9461] ? __pfx___ip_append_data+0x10/0x10 [ 232.603612][ T9461] ? ipv4_mtu+0x23/0x650 [ 232.603638][ T9461] ? __pfx_ipv4_mtu+0x10/0x10 [ 232.603664][ T9461] ? ip_setup_cork+0x57e/0xa50 [ 232.603696][ T9461] ip_make_skb+0x22e/0x450 [ 232.603732][ T9461] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 232.603760][ T9461] ? __pfx_ip_make_skb+0x10/0x10 [ 232.603812][ T9461] ? __sock_cmsg_send+0x450/0x9f0 [ 232.603854][ T9461] udp_sendmsg+0x18fd/0x21a0 [ 232.603885][ T9461] ? string+0x279/0x2b0 [ 232.603918][ T9461] ? __pfx_udp_sendmsg+0x10/0x10 [ 232.603947][ T9461] ? format_decode+0x5a3/0xe10 [ 232.604078][ T9461] ? get_random_u32+0x4ce/0x8b0 [ 232.604123][ T9461] udpv6_sendmsg+0x996/0x25c0 [ 232.604165][ T9461] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 232.604184][ T9461] ? udp_lib_get_port+0x168d/0x1b70 [ 232.604238][ T9461] ? inet_send_prepare+0x1b9/0x270 [ 232.604266][ T9461] ? inet_send_prepare+0x1b9/0x270 [ 232.604300][ T9461] ? inet_send_prepare+0x1b9/0x270 [ 232.604326][ T9461] ? __local_bh_enable_ip+0xd0/0x130 [ 232.604352][ T9461] ? inet_send_prepare+0x1b9/0x270 [ 232.604383][ T9461] ? inet6_sendmsg+0xe4/0x120 [ 232.604403][ T9461] ____sys_sendmsg+0x5c7/0x9f0 [ 232.604431][ T9461] ? __pfx_____sys_sendmsg+0x10/0x10 [ 232.604460][ T9461] ? import_iovec+0x73/0xa0 [ 232.604490][ T9461] ___sys_sendmsg+0x2a5/0x360 [ 232.604514][ T9461] ? __pfx____sys_sendmsg+0x10/0x10 [ 232.604575][ T9461] ? __fget_files+0x2a/0x420 [ 232.604601][ T9461] ? __fget_files+0x3a0/0x420 [ 232.604634][ T9461] __x64_sys_sendmsg+0x1bd/0x2a0 [ 232.604655][ T9461] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 232.604682][ T9461] ? __pfx_ksys_write+0x10/0x10 [ 232.604711][ T9461] do_syscall_64+0x14d/0xf80 [ 232.604736][ T9461] ? trace_irq_disable+0x3b/0x150 [ 232.604759][ T9461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.604777][ T9461] ? clear_bhb_loop+0x40/0x90 [ 232.604798][ T9461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.604816][ T9461] RIP: 0033:0x7f3573f9c799 [ 232.604835][ T9461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.604851][ T9461] RSP: 002b:00007f3574ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 232.604872][ T9461] RAX: ffffffffffffffda RBX: 00007f3574215fa0 RCX: 00007f3573f9c799 [ 232.604885][ T9461] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 232.604896][ T9461] RBP: 00007f3574ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 232.604915][ T9461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.604925][ T9461] R13: 00007f3574216038 R14: 00007f3574215fa0 R15: 00007ffe83ce7818 [ 232.604954][ T9461] [ 232.807295][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ab3ec00: rx timeout, send abort [ 233.004381][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ab3ec00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 233.485101][ T9484] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1133'. [ 233.590861][ T9492] FAULT_INJECTION: forcing a failure. [ 233.590861][ T9492] name failslab, interval 1, probability 0, space 0, times 0 [ 233.630410][ T9492] CPU: 1 UID: 0 PID: 9492 Comm: syz.1.1135 Not tainted syzkaller #0 PREEMPT(full) [ 233.630441][ T9492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.630454][ T9492] Call Trace: [ 233.630462][ T9492] [ 233.630470][ T9492] dump_stack_lvl+0xe8/0x150 [ 233.630505][ T9492] should_fail_ex+0x412/0x560 [ 233.630537][ T9492] should_failslab+0xa8/0x100 [ 233.630563][ T9492] ? ip_vs_conn_new+0x11c/0x25d0 [ 233.630593][ T9492] kmem_cache_alloc_noprof+0x87/0x650 [ 233.630623][ T9492] ip_vs_conn_new+0x11c/0x25d0 [ 233.630670][ T9492] ? ip_vs_ct_in_get+0xab/0x1350 [ 233.630713][ T9492] ? ip_vs_ct_in_get+0x12cb/0x1350 [ 233.630741][ T9492] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 233.630776][ T9492] ? ip_vs_ct_in_get+0xab/0x1350 [ 233.630810][ T9492] ? rcu_is_watching+0x15/0xb0 [ 233.630839][ T9492] ? kfree+0x4d/0x630 [ 233.630864][ T9492] ip_vs_schedule+0x137a/0x1d70 [ 233.630908][ T9492] ? __pfx_ip_vs_schedule+0x10/0x10 [ 233.630945][ T9492] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 233.630979][ T9492] ? ip_vs_service_find+0xbc/0x3c0 [ 233.631009][ T9492] udp_conn_schedule+0x359/0x750 [ 233.631046][ T9492] ? __pfx_udp_conn_schedule+0x10/0x10 [ 233.631080][ T9492] ? __lock_acquire+0x6b5/0x2cf0 [ 233.631112][ T9492] ip_vs_in_hook+0x1011/0x22e0 [ 233.631148][ T9492] ? ip_vs_out_hook+0xccd/0x13e0 [ 233.631170][ T9492] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 233.631203][ T9492] ? __pfx_ip_vs_out_hook+0x10/0x10 [ 233.631229][ T9492] ? ipt_do_table+0x2b2/0x1630 [ 233.631269][ T9492] ? iptable_mangle_hook+0x2c7/0x4c0 [ 233.631296][ T9492] ? nf_nat_ipv4_local_fn+0x1de/0x540 [ 233.631323][ T9492] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 233.631348][ T9492] nf_hook_slow+0xc5/0x220 [ 233.631380][ T9492] ? __pfx_dst_output+0x10/0x10 [ 233.631414][ T9492] nf_hook+0x22a/0x3a0 [ 233.631445][ T9492] ? nf_hook+0xa1/0x3a0 [ 233.631471][ T9492] ? __pfx_nf_hook+0x10/0x10 [ 233.631501][ T9492] ? __pfx_dst_output+0x10/0x10 [ 233.631535][ T9492] ? __ip_local_out+0x152/0x6a0 [ 233.631566][ T9492] __ip_local_out+0x558/0x6a0 [ 233.631591][ T9492] ? __pfx_dst_output+0x10/0x10 [ 233.631623][ T9492] ip_local_out+0x2a/0x190 [ 233.631654][ T9492] ip_send_skb+0x45/0xc0 [ 233.631685][ T9492] udp_send_skb+0x7e4/0xf70 [ 233.631729][ T9492] udp_sendmsg+0x1937/0x21a0 [ 233.631756][ T9492] ? string+0x279/0x2b0 [ 233.631790][ T9492] ? __pfx_udp_sendmsg+0x10/0x10 [ 233.631821][ T9492] ? format_decode+0x5a3/0xe10 [ 233.631872][ T9492] ? get_random_u32+0x4ce/0x8b0 [ 233.631903][ T9492] udpv6_sendmsg+0x996/0x25c0 [ 233.631943][ T9492] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 233.631963][ T9492] ? udp_lib_get_port+0x168d/0x1b70 [ 233.632022][ T9492] ? inet_send_prepare+0x1b9/0x270 [ 233.632053][ T9492] ? inet_send_prepare+0x1b9/0x270 [ 233.632085][ T9492] ? inet_send_prepare+0x1b9/0x270 [ 233.632110][ T9492] ? __local_bh_enable_ip+0xd0/0x130 [ 233.632135][ T9492] ? inet_send_prepare+0x1b9/0x270 [ 233.632169][ T9492] ? inet6_sendmsg+0xe4/0x120 [ 233.632191][ T9492] ____sys_sendmsg+0x5c7/0x9f0 [ 233.632223][ T9492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 233.632251][ T9492] ? import_iovec+0x73/0xa0 [ 233.632282][ T9492] ___sys_sendmsg+0x2a5/0x360 [ 233.632305][ T9492] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.632365][ T9492] ? __fget_files+0x2a/0x420 [ 233.632393][ T9492] ? __fget_files+0x3a0/0x420 [ 233.632434][ T9492] __x64_sys_sendmsg+0x1bd/0x2a0 [ 233.632458][ T9492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 233.632489][ T9492] ? __pfx_ksys_write+0x10/0x10 [ 233.632526][ T9492] do_syscall_64+0x14d/0xf80 [ 233.632554][ T9492] ? trace_irq_disable+0x3b/0x150 [ 233.632581][ T9492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.632601][ T9492] ? clear_bhb_loop+0x40/0x90 [ 233.632626][ T9492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.632645][ T9492] RIP: 0033:0x7f3573f9c799 [ 233.632667][ T9492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.632683][ T9492] RSP: 002b:00007f3574ea5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.632714][ T9492] RAX: ffffffffffffffda RBX: 00007f3574215fa0 RCX: 00007f3573f9c799 [ 233.632729][ T9492] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 233.632742][ T9492] RBP: 00007f3574ea5090 R08: 0000000000000000 R09: 0000000000000000 [ 233.632754][ T9492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.632767][ T9492] R13: 00007f3574216038 R14: 00007f3574215fa0 R15: 00007ffe83ce7818 [ 233.632802][ T9492] [ 234.076635][ T9492] IPVS: ip_vs_conn_new(): no memory [ 234.086679][ T9496] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1136'. [ 234.276304][ T9503] IPVS: set_ctl: invalid protocol: 59 255.255.255.255:20004 [ 234.305835][ T9503] raw_sendmsg: syz.0.1137 forgot to set AF_INET. Fix it! [ 234.433702][ T9514] netlink: 'syz.1.1141': attribute type 4 has an invalid length. [ 234.448650][ T9514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1141'. [ 234.815972][ T9534] veth0: entered promiscuous mode [ 234.852302][ T9534] veth0: left promiscuous mode [ 234.926898][ T9541] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1151'. [ 234.939808][ T9544] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1151'. [ 235.120003][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1154'. [ 235.725787][ T9552] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.733827][ T9552] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.767613][ T9571] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1158'. [ 235.784205][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 235.794200][ T9552] team_slave_0: left promiscuous mode [ 235.802874][ T9552] team_slave_1: left promiscuous mode [ 235.809220][ T9571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1158'. [ 236.276437][ T9552] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 236.293488][ T9552] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 236.490063][ T9552] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 236.588048][ T9552] vlan2: left promiscuous mode [ 236.593389][ T9552] geneve1: left promiscuous mode [ 236.599093][ T9552] vlan2: left allmulticast mode [ 236.604427][ T9552] geneve1: left allmulticast mode [ 236.619136][ T9569] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 236.663184][ T35] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.682913][ T35] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.708752][ T35] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.717854][ T35] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.330204][ T9607] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1168'. [ 237.478126][ T9612] netlink: 'syz.0.1171': attribute type 21 has an invalid length. [ 237.486389][ T9612] IPv6: NLM_F_CREATE should be specified when creating new route [ 237.506005][ T9612] netem: change failed [ 237.520326][ T9612] syzkaller0: entered promiscuous mode [ 237.525858][ T9612] syzkaller0: entered allmulticast mode [ 237.539183][ T9612] tipc: Resetting bearer [ 237.550002][ T9612] netlink: 'syz.0.1171': attribute type 1 has an invalid length. [ 237.558117][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 237.569484][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1171'. [ 237.580819][ T9612] netlink: 'syz.0.1171': attribute type 2 has an invalid length. [ 237.608762][ T9612] netlink: 'syz.0.1171': attribute type 2 has an invalid length. [ 237.620367][ T9612] netlink: 'syz.0.1171': attribute type 2 has an invalid length. [ 237.726649][ T9619] : renamed from veth0_to_bond [ 237.842620][ T9621] netlink: 'syz.4.1174': attribute type 1 has an invalid length. [ 237.851031][ T9621] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1174'. [ 237.863135][ T9621] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1174'. [ 237.877564][ T9625] syzkaller0: entered promiscuous mode [ 237.883650][ T9625] syzkaller0: entered allmulticast mode [ 238.142904][ T9634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1179'. [ 238.217377][ T9638] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1180'. [ 238.316333][ T9635] speed is unknown, defaulting to 1000 [ 238.500020][ T9650] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 238.518785][ T9650] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 238.566784][ T9650] netlink: 'syz.1.1183': attribute type 3 has an invalid length. [ 238.936312][ T9663] pim6reg: tun_chr_ioctl cmd 1074812118 [ 238.985643][ T9663] syzkaller0: entered promiscuous mode [ 238.991253][ T9663] syzkaller0: entered allmulticast mode [ 239.044915][ T9666] speed is unknown, defaulting to 1000 [ 240.037867][ T9698] syzkaller0: entered promiscuous mode [ 240.059693][ T9698] syzkaller0: entered allmulticast mode [ 240.224137][ T9708] speed is unknown, defaulting to 1000 [ 240.367518][ T9718] validate_nla: 62 callbacks suppressed [ 240.367544][ T9718] netlink: 'syz.2.1207': attribute type 1 has an invalid length. [ 241.268406][ T9766] __nla_validate_parse: 42 callbacks suppressed [ 241.306058][ T9766] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1219'. [ 241.480838][ T9776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1224'. [ 241.524706][ T9776] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1224'. [ 241.978058][ T9798] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1232'. [ 242.526663][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1237'. [ 243.116413][ T9838] tap0: tun_chr_ioctl cmd 1074025677 [ 243.139037][ T9838] tap0: linktype set to 6 [ 243.228846][ T9844] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1248'. [ 243.457846][ T9852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 243.904262][ T9885] speed is unknown, defaulting to 1000 [ 243.976669][ T9880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1258'. [ 244.029353][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1264'. [ 244.068839][ T9891] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1264'. [ 244.509852][ T9918] netlink: 'syz.4.1274': attribute type 3 has an invalid length. [ 244.702585][ T9931] veth1_to_bond: entered allmulticast mode [ 244.722685][ T9924] veth1_to_bond: left allmulticast mode [ 245.462204][ T9976] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 246.335396][T10021] tipc: Resetting bearer [ 246.350568][T10024] __nla_validate_parse: 82 callbacks suppressed [ 246.350588][T10024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1316'. [ 246.633950][T10042] speed is unknown, defaulting to 1000 [ 246.673992][T10044] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1320'. [ 247.124978][T10020] tipc: Resetting bearer [ 247.362131][T10081] netlink: 'syz.0.1332': attribute type 1 has an invalid length. [ 247.412316][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.421440][ T13] tipc: Resetting bearer [ 247.431407][T10084] netlink: 'syz.3.1333': attribute type 39 has an invalid length. [ 247.453778][T10081] vlan0: entered promiscuous mode [ 247.459029][T10081] bond0: entered promiscuous mode [ 247.464559][T10081] vlan0: entered allmulticast mode [ 247.471315][T10081] bond0: entered allmulticast mode [ 247.497108][T10086] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1333'. [ 247.505154][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 247.543659][T10081] bond0: (slave bridge3): making interface the new active one [ 247.551630][T10081] bridge3: entered promiscuous mode [ 247.557157][T10081] bridge3: entered allmulticast mode [ 247.564767][T10081] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 248.089000][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1345'. [ 248.126793][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.179514][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.211582][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.233575][ T49] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.289672][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1349'. [ 248.330715][T10125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1349'. [ 255.820870][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 262.132802][T10168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 262.650453][T10188] netlink: 'syz.3.1364': attribute type 61 has an invalid length. [ 262.696769][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1367'. [ 262.783040][T10161] speed is unknown, defaulting to 1000 [ 263.227327][T10228] netlink: 'syz.3.1376': attribute type 9 has an invalid length. [ 263.283401][T10231] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1377'. [ 263.728007][T10247] workqueue: name exceeds WQ_NAME_LEN. Truncating to: . ΁ *] [ 263.822206][T10255] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 264.195589][T10270] netlink: 'syz.4.1391': attribute type 1 has an invalid length. [ 264.231388][T10282] xt_hashlimit: size too large, truncated to 1048576 [ 264.245611][T10282] xt_hashlimit: max too large, truncated to 1048576 [ 264.289281][T10278] can: request_module (can-proto-5) failed. [ 264.356664][T10270] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.480711][T10273] ip6tnl0: Caught tx_queue_len zero misconfig [ 264.512182][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1397'. [ 264.593151][T10295] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1398'. [ 264.614307][T10297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 265.625353][T10345] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1416'. [ 266.205789][T10371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1424'. [ 266.489192][T10381] netlink: 'syz.2.1428': attribute type 11 has an invalid length. [ 266.557569][T10383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1429'. [ 266.851208][T10391] speed is unknown, defaulting to 1000 [ 266.912700][T10397] netlink: 'syz.2.1432': attribute type 10 has an invalid length. [ 266.944787][T10402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1434'. [ 267.181954][T10410] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1436'. [ 267.225969][T10414] netlink: 'syz.3.1438': attribute type 6 has an invalid length. [ 267.236008][T10410] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.301798][T10407] syzkaller1: entered promiscuous mode [ 267.307332][T10407] syzkaller1: entered allmulticast mode [ 267.382193][T10409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1437'. [ 267.724050][T10431] openvswitch: netlink: Unexpected mask (mask=200240, allowed=10048) [ 268.014543][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1447'. [ 268.103453][T10456] Cannot find add_set index 1 as target [ 268.119743][T10456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1450'. [ 268.269513][T10467] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1450'. [ 268.516234][T10475] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1453'. [ 268.583037][T10476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1455'. [ 268.863934][T10488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1459'. [ 268.927651][T10488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 268.951630][T10491] netlink: 'syz.2.1460': attribute type 1 has an invalid length. [ 268.973322][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1460'. [ 270.059929][T10542] wg0: entered promiscuous mode [ 270.064864][T10542] wg0: entered allmulticast mode [ 270.391292][T10547] dvmrp0: entered allmulticast mode [ 270.443029][T10561] ip6tnl4: entered promiscuous mode [ 270.730776][T10576] FAULT_INJECTION: forcing a failure. [ 270.730776][T10576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.761379][T10576] CPU: 1 UID: 0 PID: 10576 Comm: syz.0.1487 Not tainted syzkaller #0 PREEMPT(full) [ 270.761408][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 270.761421][T10576] Call Trace: [ 270.761429][T10576] [ 270.761438][T10576] dump_stack_lvl+0xe8/0x150 [ 270.761473][T10576] should_fail_ex+0x412/0x560 [ 270.761504][T10576] _copy_from_iter+0x1d3/0x1670 [ 270.761537][T10576] ? rcu_is_watching+0x15/0xb0 [ 270.761572][T10576] ? __pfx__copy_from_iter+0x10/0x10 [ 270.761610][T10576] ? netlink_sendmsg+0x650/0xb40 [ 270.761647][T10576] ? skb_put+0x11b/0x210 [ 270.761681][T10576] netlink_sendmsg+0x6c0/0xb40 [ 270.761719][T10576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 270.761752][T10576] ? aa_sock_msg_perm+0xf1/0x1b0 [ 270.761780][T10576] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 270.761807][T10576] ____sys_sendmsg+0x972/0x9f0 [ 270.761839][T10576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 270.761871][T10576] ? import_iovec+0x73/0xa0 [ 270.761906][T10576] ___sys_sendmsg+0x2a5/0x360 [ 270.761926][T10576] ? get_pid_task+0x20/0x1f0 [ 270.761960][T10576] ? __pfx____sys_sendmsg+0x10/0x10 [ 270.762005][T10576] ? sb_end_write+0xe9/0x1c0 [ 270.762046][T10576] ? __pfx_vfs_write+0x10/0x10 [ 270.762079][T10576] __x64_sys_sendmsg+0x1bd/0x2a0 [ 270.762104][T10576] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 270.762136][T10576] ? __pfx_ksys_write+0x10/0x10 [ 270.762171][T10576] do_syscall_64+0x14d/0xf80 [ 270.762200][T10576] ? trace_irq_disable+0x3b/0x150 [ 270.762228][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.762249][T10576] ? clear_bhb_loop+0x40/0x90 [ 270.762274][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.762293][T10576] RIP: 0033:0x7fa8de99c799 [ 270.762313][T10576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 270.762330][T10576] RSP: 002b:00007fa8df79b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 270.762353][T10576] RAX: ffffffffffffffda RBX: 00007fa8dec15fa0 RCX: 00007fa8de99c799 [ 270.762374][T10576] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000008 [ 270.762386][T10576] RBP: 00007fa8df79b090 R08: 0000000000000000 R09: 0000000000000000 [ 270.762398][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 270.762411][T10576] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff8feab518 [ 270.762445][T10576] [ 271.130237][T10584] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 271.649456][T10604] speed is unknown, defaulting to 1000 [ 272.190298][T10628] geneve1: Caught tx_queue_len zero misconfig [ 272.284847][T10630] speed is unknown, defaulting to 1000 [ 272.464824][T10642] tipc: Enabled bearer , priority 0 [ 272.472602][T10636] speed is unknown, defaulting to 1000 [ 273.002350][T10659] siw: device registration error -23 [ 273.014249][T10661] __nla_validate_parse: 10 callbacks suppressed [ 273.014274][T10661] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1511'. [ 273.319670][T10667] syzkaller0: entered promiscuous mode [ 273.336454][T10667] syzkaller0: entered allmulticast mode [ 273.372749][T10674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1515'. [ 273.403440][T10677] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1516'. [ 273.439107][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 273.714065][T10681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1518'. [ 273.827570][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 273.930931][T10700] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 274.010375][T10700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1521'. [ 274.294149][T10718] netlink: 'syz.1.1526': attribute type 2 has an invalid length. [ 274.453616][T10726] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1527'. [ 274.506724][T10729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 274.668276][T10737] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1528'. [ 274.695969][T10741] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 274.784566][T10737] bond3: entered promiscuous mode [ 275.166158][T10769] xt_CT: You must specify a L4 protocol and not use inversions on it [ 275.248761][T10766] bond4: entered promiscuous mode [ 275.299994][T10776] openvswitch: netlink: Flow key attribute not present in set flow. [ 275.550083][T10790] netlink: 'syz.1.1549': attribute type 9 has an invalid length. [ 275.574201][T10791] debugfs: 'netdev:syzkaller0' already exists in 'phy4' [ 276.187962][T10810] netlink: 'syz.4.1553': attribute type 178 has an invalid length. [ 278.197613][T10872] speed is unknown, defaulting to 1000 [ 278.342754][T10887] netlink: 'syz.3.1574': attribute type 30 has an invalid length. [ 279.142584][T10928] __nla_validate_parse: 1 callbacks suppressed [ 279.142606][T10928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1595'. [ 279.389056][T10927] veth1: entered promiscuous mode [ 279.394283][T10927] veth1: entered allmulticast mode [ 279.895325][T10975] netlink: 'syz.1.1605': attribute type 3 has an invalid length. [ 280.212959][T10991] nbd: nbd0 already in use [ 280.230956][T10991] block nbd0: NBD_DISCONNECT [ 280.246292][T10991] block nbd0: Send disconnect failed -104 [ 280.255697][T10991] block nbd0: shutting down sockets [ 280.360375][T11005] netlink: 'syz.2.1615': attribute type 12 has an invalid length. [ 280.407468][T11008] geneve1 speed is unknown, defaulting to 1000 [ 280.413747][T11005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1615'. [ 280.457609][T11008] geneve1 speed is unknown, defaulting to 1000 [ 280.499417][T11008] geneve1 speed is unknown, defaulting to 1000 [ 280.617607][T11008] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 280.805093][T11008] geneve1 speed is unknown, defaulting to 1000 [ 280.850549][T11020] speed is unknown, defaulting to 1000 [ 280.877796][T11020] geneve1 speed is unknown, defaulting to 1000 [ 280.972721][T11030] bridge_slave_1: left allmulticast mode [ 280.980111][T11030] bridge_slave_1: left promiscuous mode [ 280.986532][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.997170][T11030] bridge_slave_0: left allmulticast mode [ 281.003127][T11030] bridge_slave_0: left promiscuous mode [ 281.009928][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.083433][T11008] geneve1 speed is unknown, defaulting to 1000 [ 281.109812][T11008] geneve1 speed is unknown, defaulting to 1000 [ 281.123892][T11008] geneve1 speed is unknown, defaulting to 1000 [ 281.140024][T11008] geneve1 speed is unknown, defaulting to 1000 [ 281.377242][T11040] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1626'. [ 281.514860][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1632'. [ 281.526736][T11053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1632'. [ 281.536693][T11053] netlink: 'syz.3.1632': attribute type 6 has an invalid length. [ 281.545705][T11053] netlink: 'syz.3.1632': attribute type 6 has an invalid length. [ 281.781343][T11068] netlink: 'syz.1.1635': attribute type 1 has an invalid length. [ 281.800937][T11068] netlink: 'syz.1.1635': attribute type 2 has an invalid length. [ 281.859617][T11073] syzkaller1: entered promiscuous mode [ 281.865142][T11073] syzkaller1: entered allmulticast mode [ 282.061882][T11082] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1640'. [ 282.339001][T11090] tipc: MTU too low for tipc bearer [ 282.451444][T11100] netlink: 'syz.0.1648': attribute type 2 has an invalid length. [ 282.461415][T11100] netlink: 'syz.0.1648': attribute type 2 has an invalid length. [ 283.663299][T11154] rdma_rxe: rxe_newlink: failed to add lo [ 283.733552][T11156] openvswitch: netlink: Missing key (keys=40, expected=80) [ 283.756044][T11157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1667'. [ 286.499006][T11142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.702096][T11178] bridge0: port 3(syz_tun) entered blocking state [ 286.723645][T11178] bridge0: port 3(syz_tun) entered disabled state [ 286.742622][T11178] syz_tun: entered allmulticast mode [ 286.751820][T11178] syz_tun: entered promiscuous mode [ 286.758129][T11178] bridge0: port 3(syz_tun) entered blocking state [ 286.764980][T11178] bridge0: port 3(syz_tun) entered forwarding state [ 286.829171][T11186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'. [ 286.872423][T11186] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1680'. [ 286.950008][T11192] batadv_slave_1: entered promiscuous mode [ 286.966731][T11192] openvswitch: netlink: Duplicate key (type 21). [ 287.021514][T11190] batadv_slave_1: left promiscuous mode [ 287.045041][T11199] netlink: 'syz.1.1683': attribute type 1 has an invalid length. [ 287.103445][T11199] bond4: entered promiscuous mode [ 287.109047][T11199] 8021q: adding VLAN 0 to HW filter on device bond4 [ 287.232432][T11203] bond4: (slave bridge0): making interface the new active one [ 287.258584][T11203] bridge0: entered promiscuous mode [ 287.266154][T11203] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 287.342787][T11210] syzkaller0: entered promiscuous mode [ 287.348334][T11210] syzkaller0: entered allmulticast mode [ 287.656323][T11228] xt_CT: No such helper "syz0" [ 287.783686][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1691'. [ 287.945033][T11239] bond5: entered promiscuous mode [ 287.999647][T11239] macvlan11: entered promiscuous mode [ 288.005090][T11239] macvlan11: entered allmulticast mode [ 288.016444][T11239] bond5: (slave macvlan11): Opening slave failed [ 288.369754][T11265] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 288.793308][T11289] netlink: 'syz.2.1707': attribute type 1 has an invalid length. [ 288.909611][T11283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1705'. [ 288.930340][T11283] netlink: 'syz.0.1705': attribute type 3 has an invalid length. [ 289.231324][T11302] netlink: 'syz.3.1712': attribute type 1 has an invalid length. [ 289.252138][T11302] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1712'. [ 289.332546][T11307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1712'. [ 289.710147][T11328] tipc: Enabling of bearer rejected, already enabled [ 289.948634][T11340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1724'. [ 289.974954][T11340] netlink: 'syz.0.1724': attribute type 4 has an invalid length. [ 290.001839][T11340] netlink: 'syz.0.1724': attribute type 4 has an invalid length. [ 290.014243][T11346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'. [ 290.039637][T11348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1728'. [ 290.082407][ T5885] speed is unknown, defaulting to 1000 [ 290.088359][ T5885] syz2: Port: 1 Link ACTIVE [ 290.107826][T11345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1727'. [ 290.761161][T11388] speed is unknown, defaulting to 1000 [ 290.769431][T11388] geneve1 speed is unknown, defaulting to 1000 [ 291.176579][ T1207] speed is unknown, defaulting to 1000 [ 291.198516][ T1207] syz2: Port: 1 Link DOWN [ 291.259769][T11416] Bluetooth: MGMT ver 1.23 [ 291.544444][T11424] bridge3: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 291.701703][ T29] audit: type=1804 audit(1773708601.136:6): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1755" name="/newroot/348/memory.events" dev="tmpfs" ino=1797 res=1 errno=0 [ 291.753406][ T29] audit: type=1800 audit(1773708601.136:7): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1755" name="memory.events" dev="tmpfs" ino=1797 res=0 errno=0 [ 291.867763][ T29] audit: type=1804 audit(1773708601.136:8): pid=11432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1755" name="/newroot/348/memory.events" dev="tmpfs" ino=1797 res=1 errno=0 [ 292.107749][T11457] __nla_validate_parse: 6 callbacks suppressed [ 292.107774][T11457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'. [ 292.143529][T11461] syzkaller1: entered promiscuous mode [ 292.151532][T11459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1765'. [ 292.161129][T11461] syzkaller1: entered allmulticast mode [ 292.226580][T11468] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 292.472324][T11475] speed is unknown, defaulting to 1000 [ 292.485843][T11475] geneve1 speed is unknown, defaulting to 1000 [ 292.587269][T11483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1772'. [ 292.812761][T11502] syzkaller0: entered promiscuous mode [ 292.818582][T11502] syzkaller0: entered allmulticast mode [ 292.847013][T11502] tipc: Enabling of bearer rejected, failed to enable media [ 292.858034][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.089258][T11515] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1778'. [ 293.222888][T11521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1784'. [ 293.386201][T11531] openvswitch: netlink: IPv4 tun info is not correct [ 293.530925][T11538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 293.531893][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1787'. [ 293.553818][T11541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 293.560035][T11538] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 293.968020][T11556] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1792'. [ 294.095980][T11558] batadv_slave_0: entered promiscuous mode [ 294.102646][T11558] batadv_slave_0: entered allmulticast mode [ 294.109335][T11558] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 294.121336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.173854][T11558] bond6: option resend_igmp: invalid value (2878) [ 294.180879][T11558] bond6: option resend_igmp: allowed values 0 - 255 [ 294.191923][T11558] bond6 (unregistering): Released all slaves [ 294.673294][T11592] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 295.147343][T11628] netlink: 'syz.0.1810': attribute type 11 has an invalid length. [ 295.888985][T11661] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 295.977997][T11664] xt_l2tp: v2 tid > 0xffff: 37482740 [ 296.447766][T11699] FAULT_INJECTION: forcing a failure. [ 296.447766][T11699] name failslab, interval 1, probability 0, space 0, times 0 [ 296.461605][T11699] CPU: 1 UID: 0 PID: 11699 Comm: syz.0.1832 Not tainted syzkaller #0 PREEMPT(full) [ 296.461636][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 296.461649][T11699] Call Trace: [ 296.461658][T11699] [ 296.461667][T11699] dump_stack_lvl+0xe8/0x150 [ 296.461702][T11699] should_fail_ex+0x412/0x560 [ 296.461735][T11699] should_failslab+0xa8/0x100 [ 296.461764][T11699] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 296.461789][T11699] ? __alloc_skb+0x1d0/0x7d0 [ 296.461825][T11699] __alloc_skb+0x1d0/0x7d0 [ 296.461859][T11699] tcp_stream_alloc_skb+0x3f/0x580 [ 296.461886][T11699] tcp_sendmsg_locked+0x1375/0x5490 [ 296.461923][T11699] ? __lock_acquire+0x6b5/0x2cf0 [ 296.461996][T11699] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 296.462025][T11699] ? tcp_sendmsg+0x21/0x50 [ 296.462050][T11699] ? __local_bh_enable_ip+0xd0/0x130 [ 296.462078][T11699] ? __pfx_inet_sendmsg+0x10/0x10 [ 296.462107][T11699] tcp_sendmsg+0x2f/0x50 [ 296.462127][T11699] __sys_sendto+0x5de/0x710 [ 296.462158][T11699] ? __pfx___sys_sendto+0x10/0x10 [ 296.462184][T11699] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 296.462226][T11699] ? __fget_files+0x3a0/0x420 [ 296.462278][T11699] ? ksys_write+0x242/0x270 [ 296.462303][T11699] ? __pfx_ksys_write+0x10/0x10 [ 296.462331][T11699] __x64_sys_sendto+0xde/0x100 [ 296.462365][T11699] do_syscall_64+0x14d/0xf80 [ 296.462393][T11699] ? trace_irq_disable+0x3b/0x150 [ 296.462420][T11699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.462440][T11699] ? clear_bhb_loop+0x40/0x90 [ 296.462464][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.462483][T11699] RIP: 0033:0x7fa8de99c799 [ 296.462503][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.462520][T11699] RSP: 002b:00007fa8df79b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 296.462544][T11699] RAX: ffffffffffffffda RBX: 00007fa8dec15fa0 RCX: 00007fa8de99c799 [ 296.462559][T11699] RDX: 0000000000000381 RSI: 00002000000004c0 RDI: 0000000000000003 [ 296.462571][T11699] RBP: 00007fa8df79b090 R08: 0000000000000000 R09: 0000000000000000 [ 296.462583][T11699] R10: 0000000000000805 R11: 0000000000000246 R12: 0000000000000001 [ 296.462601][T11699] R13: 00007fa8dec16038 R14: 00007fa8dec15fa0 R15: 00007fff8feab518 [ 296.462638][T11699] [ 296.814019][T11704] ip6erspan0: entered allmulticast mode [ 297.015114][T11711] netpci0: tun_chr_ioctl cmd 1074025678 [ 297.031564][T11711] netpci0: group set to 0 [ 297.278780][T11728] __nla_validate_parse: 9 callbacks suppressed [ 297.278801][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1841'. [ 297.331506][T11728] vlan2: entered promiscuous mode [ 297.357609][T11728] bridge0: entered promiscuous mode [ 297.426487][T11742] sit0: entered allmulticast mode [ 297.451767][T11742] pim6reg: entered allmulticast mode [ 297.633472][T11750] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'. [ 297.891454][T11764] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1854'. [ 297.927658][T11765] ip6tnl0: entered promiscuous mode [ 297.938526][T11765] ip6tnl0: entered allmulticast mode [ 298.106343][T11769] speed is unknown, defaulting to 1000 [ 298.125082][T11769] geneve1 speed is unknown, defaulting to 1000 [ 298.988251][T11811] netlink: 'syz.3.1863': attribute type 39 has an invalid length. [ 299.073297][T11815] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1869'. [ 299.140104][T11819] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1868'. [ 299.877171][T11850] lo: entered allmulticast mode [ 299.899950][T11850] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 300.484439][T11871] tunl0: Caught tx_queue_len zero misconfig [ 300.542127][T11875] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20002 [ 300.674246][T11882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1894'. [ 300.695548][T11881] netlink: 'syz.1.1893': attribute type 1 has an invalid length. [ 300.752920][T11885] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1895'. [ 301.004914][T11894] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1901'. [ 301.010016][T11892] netlink: 'syz.4.1898': attribute type 1 has an invalid length. [ 301.022860][T11892] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1898'. [ 301.339156][T11906] IPVS: Scheduler module ip_vs_sip not found [ 301.467252][T11906] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1904'. [ 301.887290][T11940] syzkaller0: entered promiscuous mode [ 301.898674][T11940] syzkaller0: entered allmulticast mode [ 302.304751][T11958] ip6gre1: entered promiscuous mode [ 302.320272][T11958] ip6gre1: entered allmulticast mode [ 302.483346][T11967] FAULT_INJECTION: forcing a failure. [ 302.483346][T11967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.496717][T11969] wg1: entered promiscuous mode [ 302.510947][T11969] wg1: entered allmulticast mode [ 302.512548][T11967] CPU: 0 UID: 0 PID: 11967 Comm: syz.4.1920 Not tainted syzkaller #0 PREEMPT(full) [ 302.512572][T11967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.512583][T11967] Call Trace: [ 302.512591][T11967] [ 302.512598][T11967] dump_stack_lvl+0xe8/0x150 [ 302.512630][T11967] should_fail_ex+0x412/0x560 [ 302.512658][T11967] _copy_from_iter+0x1d3/0x1670 [ 302.512687][T11967] ? rcu_is_watching+0x15/0xb0 [ 302.512718][T11967] ? __pfx__copy_from_iter+0x10/0x10 [ 302.512751][T11967] ? netlink_sendmsg+0x650/0xb40 [ 302.512775][T11967] ? skb_put+0x11b/0x210 [ 302.512805][T11967] netlink_sendmsg+0x6c0/0xb40 [ 302.512838][T11967] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.512867][T11967] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.512892][T11967] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.512916][T11967] ____sys_sendmsg+0x972/0x9f0 [ 302.512943][T11967] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.512992][T11967] ? import_iovec+0x73/0xa0 [ 302.513022][T11967] ___sys_sendmsg+0x2a5/0x360 [ 302.513046][T11967] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.513099][T11967] ? __fget_files+0x2a/0x420 [ 302.513124][T11967] ? __fget_files+0x3a0/0x420 [ 302.513160][T11967] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.513181][T11967] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.513218][T11967] ? __pfx_ksys_write+0x10/0x10 [ 302.513250][T11967] do_syscall_64+0x14d/0xf80 [ 302.513276][T11967] ? trace_irq_disable+0x3b/0x150 [ 302.513300][T11967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.513319][T11967] ? clear_bhb_loop+0x40/0x90 [ 302.513342][T11967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.513359][T11967] RIP: 0033:0x7f5bee59c799 [ 302.513378][T11967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.513393][T11967] RSP: 002b:00007f5bef53b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.513414][T11967] RAX: ffffffffffffffda RBX: 00007f5bee815fa0 RCX: 00007f5bee59c799 [ 302.513427][T11967] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 302.513439][T11967] RBP: 00007f5bef53b090 R08: 0000000000000000 R09: 0000000000000000 [ 302.513450][T11967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.513461][T11967] R13: 00007f5bee816038 R14: 00007f5bee815fa0 R15: 00007ffda96e6108 [ 302.513491][T11967] [ 302.896275][T11988] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 302.981396][T11998] speed is unknown, defaulting to 1000 [ 303.031420][T11998] geneve1 speed is unknown, defaulting to 1000 [ 303.061021][T12000] __nla_validate_parse: 2 callbacks suppressed [ 303.061044][T12000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1926'. [ 303.173122][T12012] xt_l2tp: missing protocol rule (udp|l2tpip) [ 303.459423][T12025] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1934'. [ 303.555204][T12032] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.632220][T12037] netlink: 'syz.4.1938': attribute type 1 has an invalid length. [ 303.636987][T12039] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1940'. [ 303.681426][T12037] bond5: entered promiscuous mode [ 303.688182][T12037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.773446][T12037] 8021q: adding VLAN 0 to HW filter on device bond5 [ 303.814894][T12037] bond5: (slave vti0): The slave device specified does not support setting the MAC address [ 303.851649][T12037] bond5: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 303.879089][T12037] bond5: (slave vti0): making interface the new active one [ 303.898576][T12037] vti0: entered promiscuous mode [ 303.905485][T12037] bond5: (slave vti0): Enslaving as an active interface with an up link [ 303.967778][T12060] sctp: [Deprecated]: syz.2.1947 (pid 12060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 303.967778][T12060] Use struct sctp_sack_info instead [ 304.091027][T12066] A link change request failed with some changes committed already. Interface 26 may have been left with an inconsistent configuration, please check. [ 304.419666][T12086] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 304.479819][T12086] netlink: 'syz.0.1952': attribute type 2 has an invalid length. [ 304.513302][T12086] !: entered promiscuous mode [ 304.568714][T12091] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1955'. [ 304.604399][T12096] netlink: 'syz.3.1958': attribute type 1 has an invalid length. [ 304.622657][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1958'. [ 304.700274][T12100] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1957'. [ 304.799409][T12096] vlan2: entered allmulticast mode [ 304.810836][T12096] bridge0: entered allmulticast mode [ 304.861162][T12112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1960'. [ 304.987986][T12112] geneve1 speed is unknown, defaulting to 1000 [ 305.101874][T12118] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1959'. [ 305.111458][T12118] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1959'. [ 305.136283][T12118] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1959'. [ 305.763827][T12143] netlink: 'syz.2.1968': attribute type 11 has an invalid length. [ 305.939473][T12152] syzkaller0: left allmulticast mode [ 306.152304][T12165] tipc: Resetting bearer [ 306.171527][T12165] tipc: Enabling of bearer rejected, already enabled [ 306.224156][T12165] tipc: Resetting bearer [ 306.277711][T12164] tipc: Resetting bearer [ 306.324446][ T13] tipc: Resetting bearer [ 306.372163][T12172] netlink: 'syz.2.1976': attribute type 10 has an invalid length. [ 306.442537][T12172] hsr0: entered promiscuous mode [ 306.464241][T12172] bridge0: port 2(hsr0) entered blocking state [ 306.492653][T12172] bridge0: port 2(hsr0) entered disabled state [ 306.531080][T12172] hsr0: entered allmulticast mode [ 306.536175][T12172] hsr_slave_0: entered allmulticast mode [ 306.590149][T12172] hsr_slave_1: entered allmulticast mode [ 306.636380][T12172] bridge0: port 2(hsr0) entered blocking state [ 306.642879][T12172] bridge0: port 2(hsr0) entered forwarding state [ 306.716408][T12185] netlink: 'syz.3.1978': attribute type 10 has an invalid length. [ 306.766608][T12186] netlink: 'syz.3.1978': attribute type 10 has an invalid length. [ 306.774992][T12189] netlink: 'syz.0.1980': attribute type 2 has an invalid length. [ 306.876642][T12186] team0: Port device dummy0 removed [ 306.888356][T12186] dummy0: entered promiscuous mode [ 306.931703][T12186] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 307.130472][T12167] openvswitch: netlink: Flow actions attr not present in new flow. [ 307.647887][T12233] netlink: 'syz.2.1990': attribute type 1 has an invalid length. [ 307.662976][T12228] bond1: entered promiscuous mode [ 307.668713][T12228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 307.740482][T12233] 8021q: adding VLAN 0 to HW filter on device bond5 [ 308.264339][T12261] netlink: 'syz.4.1998': attribute type 13 has an invalid length. [ 308.273279][T12261] netlink: 'syz.4.1998': attribute type 17 has an invalid length. [ 308.334731][T12263] __nla_validate_parse: 14 callbacks suppressed [ 308.334754][T12263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1998'. [ 308.375569][T12261] erspan0: entered promiscuous mode [ 308.485592][T12261] ip6gretap0: left promiscuous mode [ 308.512373][T12261] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.523376][T12261] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 308.593680][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 308.605339][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2003'. [ 308.642161][T12274] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 308.654516][T12274] bond6 (unregistering): Released all slaves [ 308.688289][T12270] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2003'. [ 308.699608][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2003'. [ 308.845182][T12283] lo: Caught tx_queue_len zero misconfig [ 308.862529][T12283] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2009'. [ 309.106341][T12289] "syz.4.2010" (12289) uses obsolete ecb(arc4) skcipher [ 309.443789][T12316] netlink: 'syz.0.2017': attribute type 3 has an invalid length. [ 309.494912][T12316] block nbd0: NBD_DISCONNECT [ 309.520374][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2017'. [ 309.533037][T12316] siw: device registration error -23 [ 309.666865][T12328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 309.692633][T12330] netlink: 'syz.3.2021': attribute type 1 has an invalid length. [ 309.700841][T12330] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2021'. [ 309.734490][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 309.791954][T12328] team1: entered promiscuous mode [ 309.797227][T12328] team1: entered allmulticast mode [ 309.803829][T12328] 8021q: adding VLAN 0 to HW filter on device team1 [ 309.813458][T12333] team2 (uninitialized): Failed to send options change via netlink (err -105) [ 309.901936][T12333] team2: entered promiscuous mode [ 309.907162][T12333] team2: entered allmulticast mode [ 309.914007][T12333] 8021q: adding VLAN 0 to HW filter on device team2 [ 309.927696][T12331] tc_dump_action: action bad kind [ 310.321918][T12357] gre0: entered promiscuous mode [ 310.330361][T12357] gre0: entered allmulticast mode [ 310.443797][T12366] netlink: 'syz.2.2035': attribute type 9 has an invalid length. [ 311.077984][T12377] team0: Port device netdevsim0 removed [ 311.159860][T12414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.190332][T12414] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 311.258998][ C1] [ 311.261388][ C1] ============================================ [ 311.267547][ C1] WARNING: possible recursive locking detected [ 311.273831][ C1] syzkaller #0 Not tainted [ 311.278257][ C1] -------------------------------------------- [ 311.284402][ C1] syz-executor/5825 is trying to acquire lock: [ 311.290636][ C1] ffff88807d692f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 311.299997][ C1] [ 311.299997][ C1] but task is already holding lock: [ 311.307572][ C1] ffff88806d4caf70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 311.318157][ C1] [ 311.318157][ C1] other info that might help us debug this: [ 311.326209][ C1] Possible unsafe locking scenario: [ 311.326209][ C1] [ 311.333658][ C1] CPU0 [ 311.336930][ C1] ---- [ 311.340203][ C1] lock(&hsr->seqnr_lock); [ 311.344713][ C1] lock(&hsr->seqnr_lock); [ 311.349215][ C1] [ 311.349215][ C1] *** DEADLOCK *** [ 311.349215][ C1] [ 311.357451][ C1] May be due to missing lock nesting notation [ 311.357451][ C1] [ 311.365762][ C1] 17 locks held by syz-executor/5825: [ 311.371132][ C1] #0: ffffffff8e82a330 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x130/0x4b0 [ 311.380111][ C1] #1: ffff888055034080 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x181/0x1d90 [ 311.389161][ C1] #2: ffff888055031bc0 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x26f/0x1d90 [ 311.398579][ C1] #3: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 311.408423][ C1] #4: ffff8880791dc138 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 311.418965][ C1] #5: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 311.428717][ C1] #6: ffff888029954c78 (ptlock_ptr(ptdesc)#2/1){+.+.}-{3:3}, at: copy_pmd_range+0x6e8/0x8050 [ 311.439001][ C1] #7: ffffc90000a08ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x640 [ 311.449012][ C1] #8: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 311.458596][ C1] #9: ffff88806d4caf70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 311.469300][ C1] #10: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 311.478878][ C1] #11: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 311.488981][ C1] #12: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900 [ 311.498654][ C1] #13: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 311.508832][ C1] #14: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1980 [ 311.518405][ C1] #15: ffffffff8e75e480 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28b/0x3870 [ 311.528445][ C1] #16: ffffffff8e75e420 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 311.537668][ C1] [ 311.537668][ C1] stack backtrace: [ 311.543567][ C1] CPU: 1 UID: 0 PID: 5825 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 311.543585][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 311.543595][ C1] Call Trace: [ 311.543602][ C1] [ 311.543609][ C1] dump_stack_lvl+0xe8/0x150 [ 311.543630][ C1] print_deadlock_bug+0x279/0x290 [ 311.543652][ C1] __lock_acquire+0x253f/0x2cf0 [ 311.543673][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 311.543694][ C1] lock_acquire+0xf0/0x2e0 [ 311.543711][ C1] ? hsr_dev_xmit+0x237/0x360 [ 311.543728][ C1] ? hsr_dev_xmit+0x237/0x360 [ 311.543743][ C1] _raw_spin_lock_bh+0x36/0x50 [ 311.543761][ C1] ? hsr_dev_xmit+0x237/0x360 [ 311.543775][ C1] hsr_dev_xmit+0x237/0x360 [ 311.543789][ C1] ? hsr_dev_xmit+0x2d/0x360 [ 311.543804][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 311.543825][ C1] __dev_queue_xmit+0x1557/0x3870 [ 311.543843][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 311.543861][ C1] ? __dev_queue_xmit+0x28b/0x3870 [ 311.543876][ C1] ? ebt_do_table+0x2665/0x2830 [ 311.543891][ C1] ? ebt_do_table+0x2665/0x2830 [ 311.543907][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 311.543930][ C1] ? br_nf_post_routing+0x219/0xfe0 [ 311.543955][ C1] br_dev_queue_push_xmit+0x370/0x4a0 [ 311.543978][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 311.543997][ C1] NF_HOOK+0x360/0x3f0 [ 311.544018][ C1] ? NF_HOOK+0xa2/0x3f0 [ 311.544036][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 311.544054][ C1] ? irq_exit_rcu+0x9/0x30 [ 311.544071][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 311.544095][ C1] br_forward_finish+0xd3/0x130 [ 311.544113][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 311.544133][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 311.544153][ C1] NF_HOOK+0x360/0x3f0 [ 311.544173][ C1] ? NF_HOOK+0xa2/0x3f0 [ 311.544191][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 311.544210][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 311.544237][ C1] ? __skb_clone+0x483/0x7a0 [ 311.544251][ C1] ? br_handle_vlan+0x61/0x530 [ 311.544269][ C1] __br_forward+0x397/0x540 [ 311.544287][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 311.544308][ C1] br_flood+0x6ee/0xb80 [ 311.544331][ C1] ? br_dev_xmit+0x193/0x1980 [ 311.544346][ C1] br_dev_xmit+0x12bd/0x1980 [ 311.544361][ C1] ? br_dev_xmit+0x193/0x1980 [ 311.544378][ C1] ? __pfx_br_dev_xmit+0x10/0x10 [ 311.544392][ C1] ? __skb_get_hash_net+0x13f/0x2e0 [ 311.544407][ C1] ? __pfx___skb_get_hash_net+0x10/0x10 [ 311.544421][ C1] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 311.544437][ C1] ? skb_network_protocol+0x234/0x3f0 [ 311.544452][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 311.544469][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 311.544489][ C1] __dev_queue_xmit+0x1557/0x3870 [ 311.544508][ C1] ? __dev_queue_xmit+0x28b/0x3870 [ 311.544523][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 311.544542][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 311.544564][ C1] ? __pfx_bond_get_slave_by_id+0x10/0x10 [ 311.544587][ C1] bond_start_xmit+0xd5c/0x1900 [ 311.544606][ C1] ? bond_start_xmit+0xb4/0x1900 [ 311.544622][ C1] ? __pfx_bond_start_xmit+0x10/0x10 [ 311.544639][ C1] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 311.544655][ C1] ? skb_network_protocol+0x234/0x3f0 [ 311.544670][ C1] ? __pfx_passthru_features_check+0x10/0x10 [ 311.544687][ C1] dev_hard_start_xmit+0x2d8/0x870 [ 311.544706][ C1] __dev_queue_xmit+0x1557/0x3870 [ 311.544721][ C1] ? handle_softirqs+0x22a/0x870 [ 311.544739][ C1] ? copy_pmd_range+0xa22/0x8050 [ 311.544754][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.544769][ C1] ? __dev_queue_xmit+0x28b/0x3870 [ 311.544787][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 311.544805][ C1] ? __copy_skb_header+0xa3/0x4a0 [ 311.544822][ C1] ? hsr_addr_subst_dest+0x30d/0xa90 [ 311.544839][ C1] ? skb_clone+0x246/0x3a0 [ 311.544854][ C1] hsr_forward_skb+0x157b/0x2860 [ 311.544874][ C1] ? hsr_forward_skb+0xb3/0x2860 [ 311.544892][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 311.544909][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 311.544924][ C1] ? __asan_memset+0x22/0x50 [ 311.544938][ C1] ? __skb_pad+0x405/0x610 [ 311.544954][ C1] send_hsr_supervision_frame+0x731/0xcb0 [ 311.544976][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 311.544994][ C1] hsr_announce+0x1db/0x370 [ 311.545009][ C1] ? hsr_announce+0x89/0x370 [ 311.545024][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 311.545042][ C1] call_timer_fn+0x192/0x640 [ 311.545060][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 311.545074][ C1] ? call_timer_fn+0xd4/0x640 [ 311.545090][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 311.545110][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 311.545128][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 311.545144][ C1] __run_timer_base+0x652/0x8b0 [ 311.545159][ C1] ? ktime_get+0x45/0x200 [ 311.545176][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 311.545194][ C1] ? sched_clock_cpu+0x74/0x440 [ 311.545215][ C1] run_timer_softirq+0xb7/0x170 [ 311.545237][ C1] handle_softirqs+0x22a/0x870 [ 311.545256][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 311.545276][ C1] __irq_exit_rcu+0x5f/0x150 [ 311.545293][ C1] irq_exit_rcu+0x9/0x30 [ 311.545310][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 311.545330][ C1] [ 311.545336][ C1] [ 311.545341][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 311.545358][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x7e/0x90 [ 311.545381][ C1] Code: c1 e1 05 4c 8d 51 28 4d 39 ca 77 1e 49 ff c0 4c 89 02 48 c7 44 0a 08 07 00 00 00 48 89 7c 0a 10 48 89 74 0a 18 48 89 44 0a 20 8d f5 eb 09 cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 [ 311.545395][ C1] RSP: 0018:ffffc90003dd7318 EFLAGS: 00000293 [ 311.545408][ C1] RAX: ffffffff821679f2 RBX: 0000000000000000 RCX: ffff888032bf0000 [ 311.545419][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.545428][ C1] RBP: ffffc90003dd75b0 R08: ffffea0001acbac7 R09: 1ffffd4000359758 [ 311.545439][ C1] R10: dffffc0000000000 R11: fffff94000359759 R12: ffffea0001acbac0 [ 311.545450][ C1] R13: dffffc0000000000 R14: 0000000000000115 R15: 00007f3573cea000 [ 311.545463][ C1] ? copy_pmd_range+0xa22/0x8050 [ 311.545480][ C1] copy_pmd_range+0xa22/0x8050 [ 311.545494][ C1] ? arch_stack_walk+0xfb/0x150 [ 311.545525][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 311.545538][ C1] ? kernel_clone+0x248/0x8e0 [ 311.545556][ C1] ? __x64_sys_clone+0x1b6/0x230 [ 311.545575][ C1] ? do_syscall_64+0x14d/0xf80 [ 311.545597][ C1] ? mas_wr_walk_descend+0x525/0x860 [ 311.545617][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 311.545634][ C1] ? mas_wr_store_type+0xcc2/0x19d0 [ 311.545655][ C1] copy_page_range+0xbe8/0x11f0 [ 311.545679][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 311.545698][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 311.545718][ C1] dup_mmap+0xf40/0x1d90 [ 311.545738][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 311.545756][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 311.545783][ C1] copy_mm+0x13b/0x4b0 [ 311.545802][ C1] copy_process+0x18b6/0x3cf0 [ 311.545823][ C1] ? copy_process+0x921/0x3cf0 [ 311.545845][ C1] ? __pfx_copy_process+0x10/0x10 [ 311.545864][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 311.545883][ C1] kernel_clone+0x248/0x8e0 [ 311.545905][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 311.545930][ C1] __x64_sys_clone+0x1b6/0x230 [ 311.545951][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 311.545977][ C1] ? do_user_addr_fault+0xc6f/0x1340 [ 311.545999][ C1] do_syscall_64+0x14d/0xf80 [ 311.546018][ C1] ? trace_irq_disable+0x3b/0x150 [ 311.546038][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.546052][ C1] ? clear_bhb_loop+0x40/0x90 [ 311.546068][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.546082][ C1] RIP: 0033:0x7f3573fc5212 [ 311.546095][ C1] Code: 89 e7 e8 71 8b f7 ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 311.546107][ C1] RSP: 002b:00007ffe83ce7a30 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 311.546122][ C1] RAX: ffffffffffffffda RBX: 00007ffe83ce7a30 RCX: 00007f3573fc5212 [ 311.546132][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 311.546141][ C1] RBP: 00007ffe83ce7bbc R08: 0000000000000000 R09: 0000000000000001 [ 311.546151][ C1] R10: 00005555771717d0 R11: 0000000000000246 R12: 0000000000000001 [ 311.546160][ C1] R13: 00000000000927c0 R14: 000000000004bf7a R15: 00007ffe83ce7c10 [ 311.546176][ C1]