last executing test programs: 5m27.598859445s ago: executing program 4 (id=14773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xce05562}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xa4}}, 0x0) 5m27.547038037s ago: executing program 4 (id=14774): r0 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000180)={0x28, r0, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x14, 'broadcast-link\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) 5m27.483185093s ago: executing program 4 (id=14777): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6}]}}}]}, 0x3c}}, 0x404c840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x14, r2, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}}, 0x14}, 0x1, 0x0, 0x3f}, 0x10) 5m27.476175638s ago: executing program 4 (id=14778): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_generic(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3811000043000701fefffffffcdb"], 0x1138}}, 0xc000) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40084}, 0x4) 5m27.327142898s ago: executing program 4 (id=14781): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) 5m26.695923616s ago: executing program 4 (id=14787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfdfbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @TCA_RATE={0x6, 0x5, {0x4b, 0xe3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 5m11.249949286s ago: executing program 32 (id=14787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0xd], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfdfbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9defcb4}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}, @TCA_RATE={0x6, 0x5, {0x4b, 0xe3}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40001}, 0x8090) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) 2m42.593848566s ago: executing program 0 (id=17733): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a0001", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x15}, 0x4000000) 2m42.442946414s ago: executing program 0 (id=17737): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r0, 0x0, 0x4) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xa4, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x5c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "5be775fd0ad748c34738518b138dba412bcbd1db4389473870"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xc, 0x1}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x58}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4b}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r3, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000340)="e7ba3ca05babf96fb713e181096cd0859a155e24b41348702e4d8f478418206dd20d3c0513d718eb448bea91f466275d24b98f1bb34c16cdaa85384bd5632022d40bc658970f75b888b01e840345b1aa3ebc37ebe10bfc02177f9f3e12ad40f792e6359dd9f1a4e1cf40b51e7873962a93f1a2", 0x73}, {&(0x7f00000003c0)="48d0bfef3219e2b99067159d6a228bfe926c99ec25dbb8c4663251475e62e2262fe161e8d0dcdfb2f7e496df3625fd2f0a5c1d94a4cd48024181610448040844c440b83d7f1dd48167b24a118f4ad0f6a07e86bde1cc53b609e552e59421484a1f7f6fa3283be59f808fef30", 0x6c}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="1a23935d630d920075bbdd0de97cd0eb09380363558eb54302dbbbfcb5780ffe43ce3a398a48d173d8bb400cd2a9ef59a1108e7b1d76a4bbfb7cdd5703a015519a5179476e", 0x45}, {&(0x7f00000014c0)="8bc0e1eb77416cb9d56a1511d208d4855b1a780a58cb1ee3cff3487a94ec0012a193e6a04b8d5f4033bdeadb951408309e75ae4082ce9aeb6e79e8ba4ac9ca3d9170a7b7049319eaf98d967fe793a4ef7c7d40260c0a629f5611aa6a1c3444d71c41c089a896828c55564ffa4436e27b56fc494a804081566ba0cb7511af0976bc571b7b03e13a30fce4d50ae7e2ed05eb0f19e7492c5bce9e51b6d7cf9c007a3fea9d72567c28ade69332a359e355774d60797793e8083c85403c", 0xbb}, {&(0x7f0000001580)="fb18c7d74f99ef914d7c91d6abc7e9acc9a8a908dfb2994f9afb23cc0767a0024be51f8879f0f232ea21c80fc9a8ce8aa5aaf00815d410c279cab02ae2e167814094939fdf6458d0bb123412a78efae96847e0dae6a8fb8874cabb344b615e8fee92b1cd883c6c7bcd128095ff9e894162ac4c71c29dfa11efd76b18d552b0e4ecbe9c06d6990a5259c1f110d83c620ff685bcc31f99ddba797950a7f5a5a7e031a57da3aaac4ca547d36f61aeea14f8d24fbacdd3247b0cc0d39029f3", 0xbd}, {&(0x7f0000001640)="8488c40a4d9cd685ffd8b80efdcec672db4f1746ae276fab5dfde048de7f80a09f4c4d2b2e8f40c7974cf39487658ac69114e0bafd82be6a5b0314de2605d3fb83a4d2d19fe725e7bdfba00cbb18b6e65e82578cbf0eef27326eeeede67160084a9e839ec14f9417b65971bcf7dbcf9dc1121e562498faa71c", 0x79}, {&(0x7f00000016c0)="54c3dff0921670eba0eb7ac99d5a6f93a0fe7ddb1f07b0ebb1198e9815d536c8700b9c8ce9dd03bee8d025cc737e03bf98a0ef13d2f16d6cca3eb57b7a10e0bacf89e75bb43b678d7e9547ea6b90e7fa93f3c9559fe83a7a5ed93a1fa3f3136a574682cbcb81469daf97db49744ee465b8c8ae7b668dc0f5ae02776a8916c6b7db43d6150a74e2a16d1fb2da4df3907a0488adf1a923fe724bd06a70716e52a0c8479891b06dc0befdb2ba8895578b77c7c61325901cc98d513b9aa366ed5e9efea49ace9eae56a143a51941f6b15a64d96b3bb676d9a1", 0xd7}, {&(0x7f00000017c0)="28a73d289c6b81ccc8bf5d1ad97308c3ef2a582f53c4f8ce534d0e35ad9c85", 0x1f}, {&(0x7f0000001800)="e654aa2894c677d01701fcbcc97a1522550275eb7baea73568df76e96234d38205239bab577ebc78f4e7dfff85a0aadb15a6ace18f59b7653493e6e371821fbfc8964a0a2639a33af9f27ae75dbc719f9c4320aa629d138c05a5447c618f57c1b41bbacadbfa7409e933881adeb7a9f532d806bbf9512fea13ab5c2c46aa1f4f142f832fc617579d0d175b49321b7d447c09acc555658439c157e6a53e6730a1b1b90c66ccb56c9aaf452ad40c5622c432627e2add2b578e166c30df58db6d3301e6ff801c6ea644ca0dbf733a9ee1e176d64f0c88139c6d1d587b29c6bfb2d91487da4dfdc2e4c03e3be4eeb9f2a527", 0xf0}], 0xa, &(0x7f00000019c0)=[@assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xd}, @iv={0x50, 0x117, 0x2, 0x38, "773244786ef3995b61dc2cc6d2133cdae9328e1e8d09e4f8bbfa3f88e571266ae19bf14faa2ada3ab116d0881b907ea52f57c40d651afb4b"}, @op={0x18}], 0x98, 0x24000004}, 0x880) sendmmsg$alg(r3, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001ac0)="5bc959d69411991f39336c4fbfcb68a076c695de19c7176945fc6b7793ce17ef1cd0b62a298e7b842587e797f7555dc47b4f3dc1397429e4653a86519b3199b49f59950a0c83eabf89ad4676c6b745ccd6705ff722105c0ae0773324e182e54bb848cbe90cd28b036e76b1086af83d8d2b505f29a7e100f9e948789900cda502dfd5abb38de33cad2fbf24631696d296ffe2d2d8ef11cf335e3a55ff04a5b3af3ff8579efe0f63e9b217c6693900", 0xae}, {&(0x7f0000001b80)="d628ec2bb73b9affa058c9dc2280cfba062c0520037b57cd36f83058b81a11b0238cccc235d5bf7c63fea0210d9dc78c61a63d7038b054b7b2aef6802ac362e8085dc6ee664ad41219957aba90f64196231578f685195ff3193a5e5e17b7cf05da85d1ca7bf199a4d9dd486466774930cf7efa12acaefadac71c2b3f2a1921155573f0241c0862e2e2f986333b7508271962c9c7deb9a546f4924705b6ec649099ce9ff43f0b059e40563ca89ebd00c528a04a0acd6d89508b97833911051512cfa068f6242dd4368af3f68574a402e390d498eaffc8a5385179194bb9d90bcf95414663d20e10", 0xe7}], 0x2, &(0x7f0000001cc0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xfffffffa}, @iv={0x48, 0x117, 0x2, 0x32, "de63fdcdcc7deaed435be86a10c0dc20b04eefb54bf86330dc37965d59f4d24cc85984cf0b05cf99d7cc998d817d85c1325a"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x118, 0x117, 0x2, 0xff, "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"}], 0x1220, 0x8010}, {0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002f00)="d4176c93a9c80caa2c2c2b08cfe12de743c7e9d7a1ac5700cab276f0dc0090143db0c9bc0bb407376da33848ca4a4aa87d77d69ede6a5e7c3920c8c897451d5f9ac53a5a42e9cd7de3cc3d548a54aff21454bd532d17c56ddc67817b4e3c17549c883f864fbf888998ab475001ee51b698d73fe0f6b12b51a77c9eea726a81727ae13bbe924a34712e6f6518c82146d95e6500da754ba7d72f60b2e5240a2c0d260bb011ee420261b1318e2d76c1284d44aae155742713b3e763ecc7aa5bb489e818b88e7d38bc47f7d8c5218886b5f6e773a7f507683ab76fdfa179735f31", 0xdf}, {&(0x7f0000003000)="2dfcfc3c41de2cc23e6442a147c164e80bb3524ac893489b32bf018115374617d72092cc132a192c99d2dddbafa1ab5d5b847e7488bb3d93edf511b413e8e8785fb4009b979ace0d6bd1b5d0afcc940af619d765f2157a50394137b23666277e05bedfc27b13c631", 0x68}, {&(0x7f0000003080)="059c08f99a9ce2b39bb43ea196bb6db5a01ffeeeb6357c10470da8fa17dd9c67be047d1dacfc89496da82e8b3a1583af12b6e914617687a43a39922a95bab8e56304138855b188b53fd6c7b9bee448a12d276042465789df841591d3420f498502698e2e880aaf85c529d4795a4f521b4d2e61b6ed2cbba9609780c13e3e9d1e001a43f636890d96fc436dc242be27fdd5a207cdea0cf6f791ffdb5d947e7717ffd37a961cd1e3f809acf37b81e46fdbf085ae745513a2d02b5506f2f5d3", 0xbe}], 0x3, &(0x7f0000003180)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xa0, 0x117, 0x2, 0x89, "4d56c97f8222b372e93509c4e4d8bfe6892cfa0be84f5e2474c1d9fd4126171a738dec0f4d10b42cb4b1157d1d9d3853daf094a0a6737fe8aeda98346ecdd395242b4fe4711f652d46abc046e16bcd9e8b4fe28862c6d78dd7296848d75b7107ba9df7d2412de768073d50a415d2c382dfcdf9bb3461eaff54f102b772b3f35d51fd02c29ed8c3b0f3"}, @assoc={0x18, 0x117, 0x4, 0x7fff}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0x9}], 0x118, 0x800}], 0x2, 0x8800) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000003340)={0x0, @aes256, 0x0, @desc4}) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000003440)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x201}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x34, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x9, 0x3d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x40815) sendmsg$alg(r3, &(0x7f0000004740)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000003480)="d5ad73361c677efe7aa9c6b9d0f8555c05cbe7be4b", 0x15}, {&(0x7f00000034c0)="eec34e9b67a573ffdbf190cf7be9abba347b837558c2af3f62cb70db258c8e72c10216e4c742bd8b4cc4674c2400406d30651f650b04ba910360e2b367a8df176d167da33abf1c569a0bbc3974a6648f27c05d504f64c910bb4f0ff2e97daacdad4dec09d6f0251c8a1a75b313f858c8163cd9fc95445b64f75618", 0x7b}, {&(0x7f0000003540)="725da667dcd3b6180d140cb3fbead5bba95a2d932630c270fcb570a4f147c557a40757303b714b59ffa5ecd23b8390f6b3844fcfe4b8755ccaa85e64f3b6851154e86064a17ba87cdb7e12fc5d0af5f0a364b54339622878ede775138d5202bfa00b514a1ec841f15058bcd8f6f92260532a5cf633abe8d4574d9a8422", 0x7d}, {&(0x7f00000035c0)="37aa54819bbb8c6dfd314759f565a985b8aba47f4f1c24b4fc3d7f5d134342641fb57f1853435be1eeaa4b4b1bcf009a4e687003292dfe3bd0a99a99d51b78d8b256eb4d0358b9e6f44e32aad3629b1683784bdce450395eeb6c3a0c2b2266bb5124d5082b2aefdbb3ab981e16e680c1a6131585a95d10908d1deecc475c1c1b36a96c2b0e9c7f7412541f2bb80328046f7514181bcf31071610d7ab8bbe9ac92d2c16e7271e43310c4dd5ac58f1e14af749f84929902fa9df9cfdf2e8a9", 0xbe}], 0x4, &(0x7f00000036c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x2}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0x68}], 0x1078, 0x10}, 0x80d5) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000047c0), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000048c0)={&(0x7f0000004780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000004880)={&(0x7f0000004800)={0x60, r4, 0x112, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffff8, 0x4, 0x44adbbb6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd6e}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xe7}]}, 0x60}, 0x1, 0x0, 0x0, 0x67449848a4567eb}, 0x4880) r5 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r5, &(0x7f0000004900)=""/47, 0x2f, 0x40010103, &(0x7f0000004940)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) recvmmsg(r0, &(0x7f0000004fc0)=[{{0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004980)=""/194, 0xc2}, {&(0x7f0000004a80)=""/194, 0xc2}, {&(0x7f0000004b80)=""/252, 0xfc}, {&(0x7f0000004c80)=""/125, 0x7d}, {&(0x7f0000004d00)=""/236, 0xec}, {&(0x7f0000004e00)=""/218, 0xda}], 0x6, &(0x7f0000004f80)=""/6, 0x6}, 0x8}], 0x1, 0x3, &(0x7f0000005000)={0x0, 0x989680}) r6 = accept4$packet(0xffffffffffffffff, &(0x7f0000005040), &(0x7f0000005080)=0x14, 0x80000) getsockname$packet(r6, &(0x7f00000050c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000005100)=0x14) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000005180), r0) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000005240)={&(0x7f0000005140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000005200)={&(0x7f00000051c0)={0x3c, r7, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x30040010}, 0x40000) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000052c0), r0) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000005500)={&(0x7f0000005280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000054c0)={&(0x7f0000005300)={0x184, r8, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc90}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xce16}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffba9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3aa}]}, @TIPC_NLA_SOCK={0xac, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffff9c}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff9}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x400}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80000001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x16}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffd}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x44000}, 0xc800) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000005540)={0x0, 0x2, 0x10}, 0xc) ioctl$XFS_IOC_DIOINFO(r9, 0x800c581e, &(0x7f0000005580)) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000005640)={r9, &(0x7f00000055c0)="76a1a4effd5e06d7f72e1be53dfbe5da87fea755b526ca3ba005e855169540fd473e418c9f918e0e28a94f12e7923e6306515ead807bd152e81f6f30bc60bac4df35d895e4be0777bed9165ea9663619787ae0cbe7aa67b58af7735c32f6dcc90517e4cb5c243387"}, 0x20) r10 = getuid() setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000005680)={{{@in=@multicast1, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x3, 0x4e21, 0x2, 0x2, 0x20, 0x0, 0x0, 0x0, r10}, {0x143c, 0x2, 0x800, 0xfffffffeffffffff, 0x6e6, 0x7, 0x5, 0x8}, {0x6, 0x1, 0xa00, 0x100000001}, 0x8, 0x6e6bb1, 0x0, 0x0, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d2, 0x3c}, 0x2, @in=@private=0xa010102, 0x3504, 0x2, 0x3, 0x3, 0x6, 0x1, 0x4}}, 0xe8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000005940)={@map=r9, 0xffffffffffffffff, 0x19, 0x4}, 0x20) 2m42.390789075s ago: executing program 0 (id=17738): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000001840)=""/4107, 0x100b}, {&(0x7f00000003c0)=""/202, 0xca}, {&(0x7f0000002a00)=""/187, 0xbb}], 0x3}, 0x7}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000002dc0)=""/190, 0xbe}, {&(0x7f0000002e80)=""/135, 0x87}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000000580)=""/42, 0x2a}, {&(0x7f0000003f80)=""/4096, 0x1000}, {&(0x7f0000004f80)=""/240, 0xf0}, {&(0x7f00000001c0)=""/204, 0xcc}], 0x7}, 0x8}], 0x2, 0x2000, 0x0) 2m41.503319505s ago: executing program 0 (id=17755): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0x144, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xc8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3e}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}]}, @CTA_EXPECT_NAT={0x68, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) socket(0x28, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0x3, 0xffff}, {0xffff, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xffff}}}]}, 0x38}}, 0x4000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x4) r9 = socket(0x10, 0x803, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000002100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) ioctl$sock_TIOCINQ(r9, 0x541b, &(0x7f0000000300)) close(r10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r11, 0x0) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x2, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8081}, 0x20008000) sendto(r9, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380), 0x0, &(0x7f00000001c0)=""/204, 0xcc}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 2m41.283423222s ago: executing program 0 (id=17761): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0xd, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20044004) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r2 = socket(0x15, 0x5, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500e1148c000000c5950f000000e6b355b78863e3b181a530229ce9167981577ec07e5d19235269850a75c7a516c685ee94c2434f4b4ef2084e2697a2abf905703491eb13c04d156ea46206d7"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x88) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000000c0)={r4, 0xb7, 0x2}, &(0x7f0000000740)=0x8) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0xa00, 0x4000000}, 0x28) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000300)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000400)='cgroup.kill\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="24005a8020000180140003000000200000000000edff"], 0x40}}, 0x0) socketpair(0x18, 0x2, 0x5fe, &(0x7f0000000180)) 2m41.151398998s ago: executing program 0 (id=17767): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002f000100000000000000000006"], 0x18}], 0x1}, 0x300) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00832bcbe421012dbd7000000000000a00000d00000000020000004a2c175ca54e76133347444b663f8f0900000000000000b2de7dd64610178f0290e2fbfd02f172036a00b5cf5561c60e829927f1f76b48cd84f1ea42b3272efffc914506bebbf3bed7be113c5b68624f791315c8bd14fdbbcbd3d2d1a0de1fc8d0f02e875f406feee7555c56ea392d09d587ee34747a67f04ab1f6aa621e9360efb13f6f1c5a5924625143d3cbfa6e88016f82d1820a9c8263c76eaafa09881a604d705107ff829d3a7b2eabe7a847f437d31c8590dd864e2f519ff43928667dfd3e12b57565fe1882db6eb6ee"], 0x1c}}, 0x8044) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r6, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$llc(r10, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r12 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r13, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 2m25.805998926s ago: executing program 33 (id=17767): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="180000002f000100000000000000000006"], 0x18}], 0x1}, 0x300) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a117436c379020000000000030058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000a000000224e0000", 0x58}], 0x1) ioctl$NILFS_IOCTL_SYNC(0xffffffffffffffff, 0x80086e8a, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c00832bcbe421012dbd7000000000000a00000d00000000020000004a2c175ca54e76133347444b663f8f0900000000000000b2de7dd64610178f0290e2fbfd02f172036a00b5cf5561c60e829927f1f76b48cd84f1ea42b3272efffc914506bebbf3bed7be113c5b68624f791315c8bd14fdbbcbd3d2d1a0de1fc8d0f02e875f406feee7555c56ea392d09d587ee34747a67f04ab1f6aa621e9360efb13f6f1c5a5924625143d3cbfa6e88016f82d1820a9c8263c76eaafa09881a604d705107ff829d3a7b2eabe7a847f437d31c8590dd864e2f519ff43928667dfd3e12b57565fe1882db6eb6ee"], 0x1c}}, 0x8044) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r5 = openat$cgroup_type(r4, &(0x7f0000000300), 0x2, 0x0) r6 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r6, &(0x7f0000000200)={0xa, 0x0, 0x8, @local, 0x200000, 0x2}, 0x20) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) write$cgroup_type(r5, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0xffd5, &(0x7f0000001ac0)={&(0x7f0000000240)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040090) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) connect$llc(r10, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r12 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000200)=0x1, 0x12) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r13, 0x1, 0xffffffff, 0x0, {0x2f}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x0) 1.703777985s ago: executing program 5 (id=20884): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) clock_gettime(0x0, &(0x7f0000002c80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f00000004c0)=""/105, 0x69}], 0x2}, 0x2}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/22, 0x16}], 0x1, &(0x7f0000000780)=""/236, 0xec}, 0xfffffffd}, {{&(0x7f0000000880)=@generic, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/220, 0xdc}, {&(0x7f0000000b80)=""/29, 0x1d}, {&(0x7f0000000bc0)=""/207, 0xcf}], 0x6, &(0x7f0000000e40)=""/130, 0x82}, 0xff}, {{&(0x7f0000000f00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f80)=""/149, 0x95}, {&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/28, 0x1c}, {&(0x7f00000010c0)=""/183, 0xb7}, {&(0x7f0000001180)=""/207, 0xcf}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000001300)=""/28, 0x1c}, {&(0x7f0000001340)=""/69, 0x45}], 0x8, &(0x7f0000001440)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002440)=@in, 0x80, &(0x7f0000002a00)=[{&(0x7f00000024c0)=""/177, 0xb1}, {&(0x7f0000002580)=""/58, 0x3a}, {&(0x7f00000025c0)=""/19, 0x13}, {&(0x7f0000002600)=""/200, 0xc8}, {&(0x7f0000002700)=""/96, 0x60}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/26, 0x1a}, {&(0x7f0000002800)=""/217, 0xd9}, {&(0x7f0000002900)=""/246, 0xf6}], 0x9, &(0x7f0000002ac0)=""/96, 0x60}, 0x7690}], 0x5, 0x0, &(0x7f0000002cc0)={r1, r2+10000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.702717751s ago: executing program 6 (id=20885): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000007c80)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="21dbfc", 0x3}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000060) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000680001000000000000000000020000040000b2b1dacc4369d42dfec06cbf18da8b0000cbbc86236b96991a388ec61397e7e843ebf8a59ea5a30ac08a1acc2db54624214c11d1698e457cc0f5f2f65be91c88366feae928e9ab7da2131aea009beb6b04921d338860aa2747482fa796ba6b1e24d3b02ffc7eba"], 0x18}}, 0x0) 1.616293307s ago: executing program 6 (id=20887): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) 1.555665684s ago: executing program 3 (id=20889): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x2, 0x0, "d32984bd1ca44c066af5160e961701a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000001200000000001900", 0x3c}, 0x60) (async) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x1, 0x70ad2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4190}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8014}, 0x20000040) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$sock_ifreq(r3, 0x8948, &(0x7f00000004c0)={'vlan0\x00', @ifru_mtu=0x2}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES16=r6, @ANYRES16=r5, @ANYBLOB="31030000007b37703a3d478c500008000300", @ANYRESOCT, @ANYBLOB="080006"], 0x24}}, 0x4000004) (async) bind$nfc_llcp(r3, &(0x7f00000000c0)={0x27, r2, 0x1, 0x4, 0x0, 0xff, "bac5115c7dad488702b535116fad55baf63cdd52fc30106310abb622a1c3c01c13c04df6b906288e64e96754059e65c39c5759b069d6e6d9589e5f2348878c", 0x24}, 0x60) close(r1) (async, rerun: 32) r7 = socket$kcm(0x29, 0x7, 0x0) (rerun: 32) sendmmsg(r7, &(0x7f0000000440)=[{{&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000180)=[{0x38, 0x2a9, 0xe2e0, "585b026c5a7e734d11610e34f68eecbd9eff251a959acd48b38bbe658ba52c88f234"}, {0x100, 0x1, 0x4f2, "ff11df6228c0706d8f394b976f7cb9f771c8fc7f0a23fc10129be96a0041b50e9ebb27aa3ddd74a846368653d2792eace829ad3045bfbc4ab7804a6da03995d3ca8382c30ee5bf3ae1ea6f6f36892be12a6773b7326e900d44c145d17a61892fbad90dae35756c3da079d287711e00569e62f82083e0e0b7cddc50484eb4b65b9056261894aa89a1a80eab9d04e546c141e09fad140d39e00cc6639406912138deceeda39e859792566d6a74fc678584723f2ba3eb8aec85642dfcc2d436e4c8f71eb80417ab0db99318e57692354ec46e1301984b853ae811d6b1cfb9973dbc5c57f371456f363a4bb5b916d72152"}, {0x30, 0x107, 0x7, "ec268ed3fe0692ee3204ccaeef8b9e8a8ac1c9091e2397348bdbdd"}, {0x108, 0x114, 0x6, "f6766a1e16a3dc1c87a91d2c65dba16ad73025ddca49334dea48dac1389edd1b7015c57c2cc591d913460398e0d64069fbef8742c58a93a322ddf3d2a9e105992d95317404da8134d06558e7ed9851716424a8f61d629f31cf7a2f473ffefdb238c72fad2ce7bc52be245e2b5b2e327d9521dab1a8468d978ebace1234eca22ec45b6ff7be9378da205ad26e17109f002961328cac71b65c71b727235ef648a19d612561c7dfcb8a8945bbb04f25e5796ee671fee86fa5212fd02b79a0c73e773ac392f2aa278d34becafcee158f3116720f5c536cbd4e662e3b8f475f55f31f5e6bfea5caa8fd55fa204b1edb524a4dca6060836fba73"}, {0x38, 0x118, 0x1, "73224ed640646df81d6cfe56ed9e6d9e19cec52083fd5b90d5bb7f3b9ad12f5695ce2402e4"}], 0x2a8}}], 0x1, 0x4000090) 1.541906991s ago: executing program 5 (id=20890): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1, r1}}, 0x40) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@delchain={0x2c, 0x65, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x10}, {0x7, 0x9}, {0xffff, 0x3}}, [@TCA_RATE={0x6, 0x5, {0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x5) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"/277], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@ccm_128={{0x303}, "0e57b3d487e2db32", "4f2c3e223509000000000000000000d3", '\x00', "6775c975b6b15e11"}, 0x28) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) (async) writev(r2, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b6", 0x3}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x5, 0x34, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000002000000000000000600000018110000", @ANYRES32, @ANYBLOB="0000000000002000b702000014000000dd5888d2e1a7d234fb6f5a2cda320a0cb7030000000000008500000083000000bf0900000000000055090100", @ANYRES32=0x1, @ANYBLOB="000000000100000018420000feffffff0000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x1ff, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) readv(r2, &(0x7f00000006c0)=[{0x0}], 0x1) (async, rerun: 32) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000300)={'vlan1\x00', @remote}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008000300", @ANYRES32=r9], 0x2c}}, 0x4000000) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030425bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="40450000000001001ca80012800b00010067616574617000000c00028008000400b200000000000a0090", @ANYRES32=r9, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) 1.50883056s ago: executing program 6 (id=20891): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="64000000020605000000000000000000000049001400078008000800000000000800064000000000050001001b00000005000500020000000500040000000000090002009c5b7a310000000015000300686173683a6970"], 0x64}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0xfffffff9, 0x57, 0x1bc4, 0x1, 0x10000005, 0x5, 0x400, 0x36}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {0xc, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_ATM={0x8, 0x4, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r12, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r13, 0x1, 0x0, 0x6, @multicast}, 0x14) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=@can_newroute={0x154, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_XOR={0x15, 0x3, {{{}, 0x0, 0x0, 0x0, 0x0, "dd5f392602cc3057"}, 0x5}}, @CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x0, 0x0, 0x0, 0x0, "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", 0x3, "bd3d13746078e05fb6a2112ea9e93b498f4bdefc"}}]}, 0x154}}, 0x0) 1.504490339s ago: executing program 2 (id=20892): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000096c0), r1) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000009c80)={0x0, 0x0, &(0x7f0000009c40)={&(0x7f0000009c00)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) socketpair(0xb, 0xe361bcd883a26e46, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRESDEC=r0, @ANYRES32=r6, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x6, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, r6, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x2) r13 = socket(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r9], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x24, r2, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x4004) r14 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$IPT_SO_GET_INFO(r14, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x3f39, 0x4a3, 0xdb4, 0x7, 0xa6]}, &(0x7f0000000300)=0x54) r15 = socket$nl_route(0x10, 0x3, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r15, 0x82307202, &(0x7f0000000800)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) accept(r15, &(0x7f0000000040)=@ethernet={0x0, @broadcast}, &(0x7f00000000c0)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000400)={'filter\x00', 0x4}, 0x68) socket(0x10, 0x3, 0x0) 1.323543623s ago: executing program 5 (id=20893): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f00000004c0)=@in6={0x21, 0x4, 0xa, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x24) close(0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) close(r0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000800), r3) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000180)=ANY=[@ANYBLOB="e2a5a06f4beda6c11e96a2704a9491ea0952721d4e15df8a1972d9c9b7140cf81bd804ddad128a4fe2c89bafee4c7aa7627ce1e0aa2069fc1c04bf045c51683be54b60", @ANYRES16=r4, @ANYBLOB="11002bbd7000fcdbdf25010000000500030001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x800) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000006c0001"], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000100)={r6, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000080)={r6, 0x1, 0x6, @multicast}, 0x10) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r7, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x51, 0x0}}], 0x1, 0xc041) close(0x4) 1.256958558s ago: executing program 3 (id=20894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8917}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r2, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r2, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r5) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x0, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "0b86c107cddd39d10e870794ae120f860174b07efe05336d54f519ebba5a2b26", "5e5992c2209db5127a4a84d3d6e03d081a4118a2bbd22f0ca038289c45b30eca6703476382c29175c40096a9c60c3cce", "6a9f3a451dd7eb4523e02c2a4a00f81073727f3ac9f91e284b975a32", {"8f865412904b133eebafc6eb170fb006", "21144ab13a642475fc21552dce5cda9c"}}}}}}}, 0x0) 1.14787784s ago: executing program 2 (id=20896): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x2}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x53}, 0x94) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)=""/73, 0x49}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f00000000c0)=""/106, 0x6a}, {&(0x7f00000001c0)=""/240, 0xf0}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/14, 0xe}], 0x6}, 0x20) 1.09314936s ago: executing program 1 (id=20898): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) bind$nfc_llcp(r0, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x4, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0x3a}, 0x60) r1 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000002d350000000000006507000002000000070700004a0000007d75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b672d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a97677400"/480], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001080)={r2, 0x291, 0x2}, 0x8) getsockopt$inet_buf(r0, 0x118, 0x1, 0x0, &(0x7f00000003c0)) 1.031292433s ago: executing program 1 (id=20899): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0xac}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)=""/100, 0x64}, {&(0x7f00000018c0)=""/4122, 0x107b}, {&(0x7f0000000080)=""/118, 0x76}, {&(0x7f0000001740)=""/72, 0x48}, {&(0x7f0000000000)=""/73, 0x49}, {&(0x7f0000000100)=""/45}], 0x5}, 0x7}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x800}, {{0x0, 0x0, 0x0}, 0x80000}, {{0x0, 0x0, 0x0}, 0x8000005}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}}], 0x5c, 0x2042, 0x0) 915.765116ms ago: executing program 2 (id=20900): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) clock_gettime(0x0, &(0x7f0000002c80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f00000004c0)=""/105, 0x69}], 0x2}, 0x2}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/22, 0x16}], 0x1, &(0x7f0000000780)=""/236, 0xec}, 0xfffffffd}, {{&(0x7f0000000880)=@generic, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/220, 0xdc}, {&(0x7f0000000b80)=""/29, 0x1d}, {&(0x7f0000000bc0)=""/207, 0xcf}], 0x6, &(0x7f0000000e40)=""/130, 0x82}, 0xff}, {{&(0x7f0000000f00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f80)=""/149, 0x95}, {&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/28, 0x1c}, {&(0x7f00000010c0)=""/183, 0xb7}, {&(0x7f0000001180)=""/207, 0xcf}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000001300)=""/28, 0x1c}, {&(0x7f0000001340)=""/69, 0x45}], 0x8, &(0x7f0000001440)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002440)=@in, 0x80, &(0x7f0000002a00)=[{&(0x7f00000024c0)=""/177, 0xb1}, {&(0x7f0000002580)=""/58, 0x3a}, {&(0x7f00000025c0)=""/19, 0x13}, {&(0x7f0000002600)=""/200, 0xc8}, {&(0x7f0000002700)=""/96, 0x60}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/26, 0x1a}, {&(0x7f0000002800)=""/217, 0xd9}, {&(0x7f0000002900)=""/246, 0xf6}], 0x9, &(0x7f0000002ac0)=""/96, 0x60}, 0x7690}], 0x5, 0x0, &(0x7f0000002cc0)={r1, r2+10000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 915.584545ms ago: executing program 6 (id=20901): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "8750bb", 0x28, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, {[@dstopts={0x2, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @padn, @hao={0xc9, 0x10, @empty}]}]}}}}}, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) 867.98219ms ago: executing program 5 (id=20902): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0xf}}) r2 = accept4(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) 866.298677ms ago: executing program 1 (id=20903): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50100000000ffdbdf2507000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="014dc09e03"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r1, &(0x7f0000000080)="8631738ae3ec42f5888c8b813c49fcebd00fb5da16045da3c347376e77a7f6e749d9480bb979ae7f998e35813d870bb1ff5b8fc5a7efabcdc5965e6715b33ad44a1c68bbb4c03dd0fecd3c88e2ca09287f37b4bb34e42ab62b373ecea4237378bb5c97d56e10cf3c228cc5c3c5b2fc774446bf7b7a2223d204278f224d2526ef7cde66f1d61fb097d136e14fa9604622bce7e7d38cbcd80e538e02f89a0c2716286e6c70a0e69ae8c96f9d28adadedf08a19051a2a1c06408677285f343f7cdfcd35860eed6a257ec40e0a874a85b1b6c3650363b60b1d96c91c", 0xda, 0x2000c844, &(0x7f0000000180)={0x2, 0x0, @private=0xa010101, 0x1}, 0x10) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x55083}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}}, @IFLA_GTP_LOCAL={0x8, 0x7, @rand_addr=0x64010101}]}}}]}, 0x4c}}, 0x8040) 866.147574ms ago: executing program 3 (id=20904): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@bridge_newvlan={0x24, 0x70, 0x239, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r1}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x2}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x44014) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}}, 0x14}}, 0x44) 818.143336ms ago: executing program 1 (id=20905): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1ffdb808ffcd4cf6427d9e05578e8aa01a0ff9b7f1d3e6b6e1cbdbe5364b641d93c34174540c19059a4955359941cbb1aab8db32a8a982e6df28ed431bf70fa3b91b5ae3ecc1aac2f3fd9fcbcf215f9869d13b221c6cdb53962ced36663d5f2b8e2650e901cdb359f51b48c3b3f65768deac7009cb84df738f4b99418d7c3cf311aa10fe3efbc467771d752ba55349508052be34f5dde8153d99eb2d929fcc2c60e80892b363463596fdf21eb4ae62f41ca1a5ceebfe0d09e030f918ff54caee33e9831c367cc57975c40d0ce34408fc8d99c27055cf32a7", @ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000440)={0x2, 0x3}, 0x8) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r2) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0xc004800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000001000000000000000000000850000005300000018010000207834b000000000002020207b1af8ff00000000bfa100000000000007010000f8ff"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x32752275d7d1e3ca, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006"], 0x0, 0x349, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'macvlan0\x00', @random="bdfd45c12945"}) r3 = socket(0x28, 0x3, 0xff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00022dbd7000fbdbdf250500000008000600e9856699a9f0c40600000044000280de08000700ad0200000800050009000000080007000900000005000d000100000008000800f4ffffff05000d000100000006000b000200000005000d0001000000"], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4008845) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', r6}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket(0x1, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000000)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}, @in6={0xa, 0x4e22, 0x2, @empty, 0xa1}, @in6={0xa, 0x4e21, 0x9bc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, @in={0x2, 0x4e21, @broadcast}], 0x58) 807.91602ms ago: executing program 2 (id=20906): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)=ANY=[@ANYBLOB="1800000014000104595e0000008000001e"], 0x18}}, 0x0) (async) 800.00995ms ago: executing program 5 (id=20907): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x0, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4002090}, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x89fd, &(0x7f0000000040)={'bond0\x00'}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) accept4(r0, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet(r5, &(0x7f0000003740)=[{{&(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, &(0x7f0000000540)=[{&(0x7f00000003c0)="6e3d0c67399566d5a37dd0a59f03fd814fbdb56abbfdb0cdc76d0181690c86974cf8b7bfd10d709e5c8e0c7a50e23e9bcb5c88d1c3d23c00", 0x38}, {&(0x7f0000000440)="96eccf17bb24e230f4765827666fef44c916a3dec6f15ba3fba205e86abe7befe64bf62a4f87fed29a1a968119412a3d49e3d5f7200626f57c48cec9c946a08b51f1426988685760b105b907448797d28e98dffe0a2f7d5cc7759d623a98693d6b6e689199cac1562b1afbbcac1db5058e8a93ccb9720dcda298852d0319ad63858891f87d7c1e1358686da63e62b707504c7d00f0", 0x95}, {&(0x7f0000000240)}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000000680)="a2f679b6ed1db199df86fad76def949a03d32465d809f8ddd7ec661e5c3425767c69df69011e86c17e2ff2d7ba6b", 0x2e}, {&(0x7f0000000ac0)}], 0x2, &(0x7f0000000b40)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB="0a0101000000000002"], 0x138}}, {{&(0x7f0000000c80)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000ec0)=[{0x0}, {&(0x7f0000000cc0)}, {0x0, 0x3e}, {&(0x7f0000000d40)="9d95dc241f0492a02ce435d13bf664a5d857d0b92212d4c40967856e7076189dba9d2225384116b3c5cb9467db9ed51db106b6625fa496d9d5c7d3c9142cac9ec6b1df7c0e24cd635daafde510c50d707c3118fb341f0f01c60b245c3e47f9325d7d608b5c0d", 0x66}, {&(0x7f0000000e40)}], 0x5}}, {{&(0x7f0000000f40)={0x2, 0x4e23, @local}, 0x10, &(0x7f00000010c0)=[{&(0x7f0000000f80)="b42a47ee33372db9a50dddb310ac812af40493c54caf570ccd9e2c3470a710e87f61299516d2903c3e150ff6b7847d94eccfd0d812e2b96ee4e7a941b5bfc07193ce9faa13330f22270a853a13d030768893b2804ea025bf71d7e7e820250e112e2ddba3dcf9e5c50f89741b61ebcbc1c04b0089514dfcc955596f39e846f3", 0x7f}, {&(0x7f0000001000)}, {0x0}], 0x3}}, {{&(0x7f0000001180)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f0000001200)=[{&(0x7f00000011c0)="85a020c09399747b4fd7d8c826065244fe9dddb2287f68215529bd4aef0358cfc1dc387d05d3b32e", 0x28}, {0x0}], 0x2}}, {{&(0x7f0000001240)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000003700)=[{&(0x7f0000003680)="587ce5e95e4cd9567748a6bfc1d1cc78b5eda56a9828eac894a8eaeb5e49995ff849cf3e418c434b82e0fc652add94574db0b35f9917fbc4b0841ce7d9ccb77450b98f8f16627b33beda78376ee8f1b89e8dc5d51e9951cbf9cf8fdfa4b7301c3e61a83a13b0ca256d", 0x69}], 0x1}}], 0x6, 0x200460c0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0x5ee, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 747.925986ms ago: executing program 6 (id=20908): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x421, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad, 0x60e1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x2}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 747.756401ms ago: executing program 3 (id=20909): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r0}) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000400)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, 0x0, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[], 0x27) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @multicast}]}, 0x40}}, 0x88890) 666.238886ms ago: executing program 3 (id=20910): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdc01}, 0x10}}, 0x0) (fail_nth: 10) 637.133272ms ago: executing program 2 (id=20911): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000000), &(0x7f00000000c0)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in6=@private2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x5, 0x4e20, 0xffbe, 0xa, 0x80, 0xa0, 0x2}, {0x5, 0x6, 0x5, 0x2, 0x101, 0x10, 0xae, 0xe67}, {0xb, 0x277, 0x9, 0x3}, 0x10000, 0x6e6bb2, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x4d3, 0x3c}, 0x2, @in=@remote, 0x34ff, 0xae29c6556c73008b, 0x3, 0x2, 0x100008, 0x8, 0x6}}, 0xe8) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r3, 0xb101, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300021700000000000000000000000200080008000000a30000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000040009000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000070019"], 0xb8}, 0x1, 0x7}, 0x0) 305.116288ms ago: executing program 5 (id=20912): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket(0x2, 0x80805, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async, rerun: 64) r3 = socket(0x2000000015, 0x80005, 0x0) (rerun: 64) setsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, &(0x7f0000000180)=0x8, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x4f, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x21}, 0x6}, 0x7) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x68, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_IFACE={0x14, 0x17, 'ip6_vti0\x00'}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00'}}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x4}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x10008047}, 0x4048000) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x9) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) (async) socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async, rerun: 64) write$tun(r5, &(0x7f00000002c0)={@void, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0xfff}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x20, 0x68, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x2, 0x0}, @empty}, {0x0, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x66, 0x100, @void}}}}}}}}, 0x32) (async) r8 = socket$inet(0xa, 0x801, 0x84) connect$inet(r8, 0x0, 0x0) (async) listen(r8, 0x8) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0xc, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x48}}, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 181.886777ms ago: executing program 2 (id=20913): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}}], {0x14}}, 0x3c}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b0b, &(0x7f0000000100)={'wlan1\x00', @random='\x00\x00 \x00'}) 142.298198ms ago: executing program 6 (id=20914): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001a80)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0x4c}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @remote}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0x1}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x9f, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x24000000) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001680)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001640)={&(0x7f0000000800)={0xe0c, 0x0, 0x5, 0x300, 0x0, 0x0, {0x0, 0x0, 0xa}, [{{0x254, 0x1, {{0x1, 0x101}, 0x9, 0x9, 0x4, 0x6, 0x3, 'syz1\x00', "80749057ff1029abd1d4f4cac53de4bdf64c12f170055cfb41460cc62deb96f6", "f1f31ea76c26bba8a2eef06bc3562d1063171c482c50c85ed9165a516564dfad", [{0x5, 0x17a9, {0x2, 0x1ff}}, {0x6, 0x1, {0x1, 0xe}}, {0x40, 0x3, {0x2, 0x3}}, {0x307, 0x7, {0x1, 0x10}}, {0x0, 0xa, {0x1, 0xfffffff8}}, {0x9, 0x6, {0x2, 0x4}}, {0x6, 0x6, {0x1, 0x7}}, {0x3, 0x9, {0x1, 0x6}}, {0xff66, 0xf, {0x2}}, {0xb2, 0x788d, {0x3, 0x61}}, {0xffff, 0xfff9, {0x0, 0xad}}, {0x1, 0x0, {0x3, 0xffff}}, {0xd, 0x1, {0x2, 0x1}}, {0x7, 0xb6c, {0x1, 0x4}}, {0x1, 0x4}, {0xffff, 0xffff, {0x2, 0xf}}, {0x5, 0x1, {0x3, 0x100}}, {0x2, 0x42, {0x0, 0x4771ede0}}, {0x4, 0x5, {0x3, 0x6f15}}, {0x3, 0x7fff, {0x1, 0x6}}, {0x2, 0x7c, {0x1, 0x7}}, {0x3, 0x9, {0x3, 0x4}}, {0xe, 0x5, {0x0, 0xa}}, {0x2, 0x1, {0x0, 0x29b}}, {0x8, 0x7, {0x3, 0x4dff}}, {0x6, 0x3, {0x1, 0xa}}, {0x6, 0x9, {0x1, 0x7fff}}, {0xfff, 0x93da, {0x0, 0x7}}, {0x8000, 0x3, {0x0, 0x2}}, {0x1, 0x2, {0x2, 0xfffffe01}}, {0x2, 0x200, {0x2, 0x80000001}}, {0x0, 0x8, {0x1, 0x2514}}, {0x51c, 0x6, {0x2, 0x41}}, {0x9, 0x10, {0x1, 0xff}}, {0x4, 0x6284, {0x2, 0xd}}, {0xc2d7, 0x59, {0x1, 0xd}}, {0x8, 0xb90e, {0x0, 0xb58d}}, {0x7, 0x0, {0x1, 0x5}}, {0x4, 0x400, {0x1, 0x6}}, {0xc16a, 0xee92, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x2, 0x4, 0x8, 0xc, 0xd, 'syz1\x00', "bfee6008f2b10dc7215603d32f4f0caeb8f9ae4a47a7046888b6a5ceb223678c", "7fcc548f5e8fdcdf833f775c7e72af5448466b1422392a98339981d406e81a23", [{0x900, 0x9c, {0x3, 0x4}}, {0xfff9, 0x9130, {0x1, 0xe5}}, {0x0, 0xff, {0x3, 0x8}}, {0x2, 0x9, {0x1, 0x5}}, {0x4, 0x8, {0x2, 0x323}}, {0xff, 0x8, {0x2, 0x6}}, {0x4, 0x1000, {0x2, 0x7}}, {0x2, 0x6, {0x1, 0xa1}}, {0x5, 0x5, {0x3, 0x8}}, {0x9, 0x1, {0x1, 0x8000}}, {0x1000, 0x9d, {0x3, 0xbc}}, {0x5, 0x7ff, {0x1, 0x7}}, {0x400, 0x1ff, {0x2, 0x2}}, {0x0, 0xb1, {0x2, 0x3}}, {0xd65, 0x1, {0x0, 0x10001}}, {0xfff, 0x5c8d, {0x1, 0xe3}}, {0xde44, 0xfff, {0x3, 0x10001}}, {0x8, 0x2, {0x0, 0x6}}, {0x0, 0x1, {0x1, 0xffffffff}}, {0x9, 0x4, {0x3, 0xfffffc00}}, {0xfff2, 0xffff, {0x0, 0x5}}, {0xa63, 0x8000, {0x3, 0x390a}}, {0x2, 0xfff8, {0x0, 0x6}}, {0x8, 0x5d, {0x0, 0x2}}, {0xffb9, 0xff, {0x0, 0x3}}, {0x8, 0x3, {0x2, 0x1}}, {0xc, 0xffff, {0x1}}, {0xffff, 0x65c9, {0x0, 0x7fff}}, {0xc, 0x7, {0x1, 0x2}}, {0xd, 0x200, {0x3, 0x9}}, {0x5, 0x6, {0x0, 0x401}}, {0x0, 0x400, {0x1, 0x8}}, {0x7, 0x5, {0x1, 0x1}}, {0x6, 0x68f, {0x8ffffba5ed117bcb, 0xc0}}, {0x430, 0x3, {0x0, 0x2}}, {0xca9a, 0x1, {0x2, 0x5}}, {0xa, 0x81, {0x1, 0x7}}, {0x7, 0x835e, {0x0, 0x25fe}}, {0x7ef4, 0x3, {0x0, 0xffffffff}}, {0xff82, 0x9, {0x1, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x4}, 0x4, 0x6, 0xfc01, 0x3edd, 0x12, 'syz0\x00', "a420b21826f3107239f626130670f8f4ebd794549b7a95816808a5d22c14a03a", "3cf2457169fd9d3fb3f3a917b954676ef0904afc4837372502bf1a3c14a547fd", [{0x3, 0x8000, {0x0, 0x7}}, {0x1, 0x2, {0x3, 0x100}}, {0x8, 0x7, {0x1, 0xe}}, {0x9, 0x7, {0x2, 0xb}}, {0x9, 0x6, {0x0, 0xffffffff}}, {0x0, 0x8000, {0x3, 0x8000}}, {0x80, 0x7, {0x0, 0x7ff}}, {0x6, 0x4, {0x0, 0x5}}, {0x0, 0xa6, {0x1, 0x6}}, {0x7, 0x0, {0x3, 0x1}}, {0x0, 0x7, {0x2, 0x40}}, {0x6, 0x3, {0x2}}, {0x401, 0x4, {0x3, 0x7}}, {0x5, 0x0, {0x1, 0xc}}, {0x101, 0x14, {0x0, 0xfffffff9}}, {0x9, 0xd, {0x2, 0x4}}, {0x2, 0x401, {0x3, 0xfffffff8}}, {0x1, 0x4, {0x0, 0x2}}, {0x0, 0x0, {0x0, 0x3ff}}, {0x5, 0x6c8c, {0x2, 0x6}}, {0x9, 0xfffb, {0x2, 0x1}}, {0x8001, 0xfff, {0x1, 0x7fff}}, {0xfffb, 0xfffa, {0x2}}, {0x7, 0x1, {0x0, 0x8}}, {0x8000, 0x1, {0x0, 0x9}}, {0x1637, 0x2, {0x1, 0xb3f}}, {0x3, 0xfffd, {0x1, 0x4}}, {0x6, 0x7f, {0x2, 0x7}}, {0x8, 0x18, {0x1, 0x5}}, {0x4, 0x7, {0x2, 0xfff}}, {0x8001, 0xff, {0x1, 0x5}}, {0x8, 0x6, {0x2, 0xfffffffe}}, {0x200, 0x5, {0x1, 0x7ff}}, {0xfffc, 0x1, {0x1, 0xfffffffa}}, {0x101, 0x1, {0x4, 0x7ff}}, {0x2, 0x8, {0x0, 0x12}}, {0x236, 0xf4e4, {0x2, 0x1}}, {0x40, 0x2, {0x3, 0x80}}, {0x94c, 0x7, {0x0, 0x9}}, {0x3, 0xf5, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x6}, 0x3, 0x1, 0x7, 0x0, 0x0, 'syz0\x00', "cdd054bf9bcf17099918d271506dd42e680e470d14e9b316103b9ad649d20fec", "ff1cf54a219153c9b7ad1706d39c5b9063284b1ec4b900e555aa99f45704c350", [{0x2, 0x9, {0x3, 0x7}}, {0x6, 0x4, {0x1, 0x1}}, {0x1000, 0x3d, {0x1, 0x8}}, {0x3, 0x6, {0x0, 0x6}}, {0x8, 0x4, {0x3}}, {0x8, 0x6, {0x3, 0x6}}, {0x8, 0xa, {0x2, 0x4}}, {0x0, 0x2, {0x0, 0x8}}, {0x8000, 0x3, {0x0, 0x80}}, {0x4, 0x7, {0x2, 0xf}}, {0x9, 0x3, {0x0, 0xd1}}, {0x8, 0x95, {0x0, 0xf35}}, {0x8000, 0x0, {0x0, 0x5}}, {0xfff, 0x2, {0x0, 0x1688}}, {0xfff8, 0xfff, {0x3, 0x80000000}}, {0x3, 0xa, {0x3, 0x78d}}, {0x84, 0x8, {0x0, 0x1bf}}, {0xed0b, 0x3}, {0x0, 0x4405, {0x1}}, {0x9, 0x0, {0x3, 0x40}}, {0x6, 0x75, {0x0, 0xff}}, {0x6, 0x1, {0x2, 0x56f4e1f6}}, {0xb, 0x0, {0x0, 0x8}}, {0xf800, 0xeec, {0x0, 0x9}}, {0xf6f3, 0x0, {0x0, 0xfffffff5}}, {0x3ff, 0x7ff, {0x2, 0x7}}, {0x8, 0x9, {0x0, 0x1}}, {0x2, 0x9, {0x3, 0x6261}}, {0x4, 0xeb51, {0x2, 0x9}}, {0x9, 0x8, {0x3, 0x4}}, {0x8001, 0x6, {0x1, 0x3}}, {0x800, 0x1, {0x2, 0x5}}, {0xfff, 0x6, {0x0, 0x7}}, {0x401, 0x81, {0x3, 0x7}}, {0xfc, 0xd5f8, {0x0, 0x8}}, {0x6, 0x1e6, {0x3, 0x1dea}}, {0x287, 0xfff7, {0x2, 0x8}}, {0x40, 0x5, {0x2}}, {0x0, 0x5, {0x2, 0x1}}, {0x1ff, 0x40, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x2, 0x6}, 0x1c, 0x2, 0xf929, 0x0, 0x4, 'syz0\x00', "54053e4c1a54b327c775540b9f10d0492eab3f1eb8803390d183267bc4e0c3d5", "8038c2245d8218dc7a482e96f618868a7a60c3933be91d6e9d30c36fbaf1259a", [{0x8, 0x5de, {0x1, 0x6}}, {0x2, 0x8, {0x3, 0x4}}, {0x1, 0x0, {0x3, 0x4}}, {0x4b, 0xe, {0x2, 0x3}}, {0x2, 0x4, {0x0, 0x1}}, {0xbfd1, 0x3e71, {0x2, 0x7f}}, {0xfff8, 0x9, {0x1, 0x58f65b30}}, {0x7, 0x9, {0x0, 0x8}}, {0x48c, 0xaf, {0x1, 0x1}}, {0x6, 0x0, {0x2, 0x2}}, {0x5, 0x0, {0x2, 0x5}}, {0x4, 0xff, {0x3, 0x8c54}}, {0x1, 0xb38, {0x1}}, {0x4, 0x1, {0x2, 0x1}}, {0x0, 0x5, {0x1, 0x6}}, {0x9, 0x5, {0x3, 0x5}}, {0x5, 0x7, {0x3, 0xff}}, {0x6, 0x7fff, {0x2}}, {0xa82a, 0x8, {0x0, 0x6}}, {0x7f, 0x5, {0x1, 0x4}}, {0x3a8, 0x7fff, {0x2, 0x8001}}, {0x6, 0x5, {0x1, 0xc}}, {0x7ff, 0x7, {0x2, 0x7f}}, {0x3ff, 0x9d, {0x1, 0x4}}, {0x9f4f, 0x3, {0x2, 0x7}}, {0x9, 0x5, {0x0, 0x10}}, {0xac, 0x4, {0x3, 0x3}}, {0x4, 0x6, {0x3, 0xc165}}, {0x1, 0x8, {0x1, 0x879b}}, {0x8, 0x6, {0x2, 0x10}}, {0x96, 0x8, {0x1, 0xffffffff}}, {0x6, 0x0, {0x2, 0x7}}, {0x8, 0x290, {0x3, 0x2}}, {0x42e7, 0xb15a, {0x2, 0xfffffff9}}, {0x5, 0xffff, {0x2, 0xffff0000}}, {0x8, 0x9, {0x0, 0xffffffff}}, {0x110f, 0x4d, {0x3, 0x5}}, {0xfff, 0x2, {0x2, 0x5}}, {0xb, 0xe118, {0x1, 0x8}}, {0x5, 0xfc5f, {0x3, 0xc3f}}]}}}, {{0x254, 0x1, {{0x3, 0x9e1}, 0x6, 0xc0, 0x4, 0x2, 0xf, 'syz1\x00', "2eca05367f4927178f96644057dae86770f3d3b9e00ff90313ce2d3ed9744d51", "c7f4f3da3ff9e764067e47f713b3491aa0c6f2f3e9d17aad12023aa0303641d0", [{0xffff, 0x2324, {0x1, 0x3f}}, {0x8001, 0x8001, {0x3, 0x9}}, {0xc, 0x0, {0x3, 0x3}}, {0x5, 0x5, {0x0, 0x3}}, {0x3c0, 0x5, {0x1, 0x7}}, {0x7, 0x5, {0x1, 0x10}}, {0x275e, 0xaa, {0x2, 0x65}}, {0x6, 0x4, {0x3, 0x7}}, {0x5, 0x5, {0x3, 0x8}}, {0xbf00, 0xada, {0x2, 0xc6}}, {0x87, 0x68, {0x0, 0x3ff}}, {0x5, 0xdf, {0x2, 0x2}}, {0x8, 0x5, {0x0, 0x3ff}}, {0x0, 0xaa2, {0x1, 0x5}}, {0xf, 0x1, {0x3, 0x3ff}}, {0x6, 0x2, {0x3, 0x200}}, {0xff, 0x8, {0x2, 0x3ff}}, {0xfff7, 0x656, {0x1, 0xfd850320}}, {0x5, 0x8, {0x1, 0x5}}, {0x3ff, 0x6, {0x0, 0x7fffffff}}, {0x4, 0x4, {0x1, 0xd}}, {0x8, 0x7b, {0x1, 0x1fc00000}}, {0x9, 0x9, {0x2, 0x7f}}, {0x0, 0x81, {0x1, 0x7}}, {0x4c9b, 0x9, {0x0, 0xb6f}}, {0x4, 0x0, {0x2, 0x4}}, {0x7180, 0x9, {0x1, 0x8}}, {0x5, 0x95d7, {0x1, 0xfffffffe}}, {0xf, 0x2, {0x0, 0x1000}}, {0x7, 0x9e1, {0x1, 0x4}}, {0x7, 0x5, {0x1, 0x9}}, {0x5, 0x4, {0x3, 0x3}}, {0x3739, 0x9, {0x2, 0x9}}, {0x4, 0xfffd, {0x0, 0x4}}, {0x83ee, 0x81, {0x2, 0x4}}, {0x8, 0x9, {0x3, 0x4}}, {0x6, 0x3, {0x3, 0x8}}, {0x7f, 0x9, {0x3, 0x13}}, {0x400, 0x2, {0x2, 0x306c}}, {0xfffd, 0x3, {0x0, 0x42}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000) 75.822959ms ago: executing program 3 (id=20915): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_DESC={0xc0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0xa4, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x78f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc7e}]}]}, @NFTA_SET_DESC_SIZE={0x8}]}]}], {0x14, 0x10}}, 0x124}}, 0x4008050) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r2) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="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"], 0xfc}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_MGMT_A_DOMAIN={0x9, 0x1, ']}}@\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x6}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1d}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_DOMAIN={0x9, 0x1, 'syz2\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000400)={0x28, r6, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x2000c000) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz0\x00', 0x200002, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000002600)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000002540)={0x28, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffe}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x800) 75.552706ms ago: executing program 1 (id=20916): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) clock_gettime(0x0, &(0x7f0000002c80)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002b40)=[{{&(0x7f0000000280)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000540)=[{&(0x7f00000003c0)=""/70, 0x46}, {&(0x7f00000004c0)=""/105, 0x69}], 0x2}, 0x2}, {{&(0x7f0000000580)=@phonet, 0x80, &(0x7f0000000640)=[{&(0x7f0000000600)=""/22, 0x16}], 0x1, &(0x7f0000000780)=""/236, 0xec}, 0xfffffffd}, {{&(0x7f0000000880)=@generic, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/251, 0xfb}, {&(0x7f0000000a00)}, {&(0x7f0000000a40)}, {&(0x7f0000000a80)=""/220, 0xdc}, {&(0x7f0000000b80)=""/29, 0x1d}, {&(0x7f0000000bc0)=""/207, 0xcf}], 0x6, &(0x7f0000000e40)=""/130, 0x82}, 0xff}, {{&(0x7f0000000f00)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f80)=""/149, 0x95}, {&(0x7f0000001040)=""/12, 0xc}, {&(0x7f0000001080)=""/28, 0x1c}, {&(0x7f00000010c0)=""/183, 0xb7}, {&(0x7f0000001180)=""/207, 0xcf}, {&(0x7f0000001280)=""/119, 0x77}, {&(0x7f0000001300)=""/28, 0x1c}, {&(0x7f0000001340)=""/69, 0x45}], 0x8, &(0x7f0000001440)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002440)=@in, 0x80, &(0x7f0000002a00)=[{&(0x7f00000024c0)=""/177, 0xb1}, {&(0x7f0000002580)=""/58, 0x3a}, {&(0x7f00000025c0)=""/19, 0x13}, {&(0x7f0000002600)=""/200, 0xc8}, {&(0x7f0000002700)=""/96, 0x60}, {&(0x7f0000002780)=""/37, 0x25}, {&(0x7f00000027c0)=""/26, 0x1a}, {&(0x7f0000002800)=""/217, 0xd9}, {&(0x7f0000002900)=""/246, 0xf6}], 0x9, &(0x7f0000002ac0)=""/96, 0x60}, 0x7690}], 0x5, 0x0, &(0x7f0000002cc0)={r1, r2+10000000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 0s ago: executing program 1 (id=20917): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c000000180001efff00000000000000050000000800b8"], 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x0, 0x0, 0x0, 0xf}}) r2 = accept4(r0, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x800) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) getsockname$packet(r2, &(0x7f0000000100), &(0x7f0000000140)=0x14) kernel console output (not intermixed with test programs): 00007f514d041090 R08: 0000000000000000 R09: 0000000000000000 [ 838.393239][T21670] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 838.393249][T21670] R13: 00007f514c416038 R14: 00007f514c415fa0 R15: 00007ffd4f5a5888 [ 838.393268][T21670] [ 838.687870][T21680] netlink: 'syz.1.19014': attribute type 2 has an invalid length. [ 839.077456][T21711] ipt_ECN: cannot use operation on non-tcp rule [ 839.102345][T21707] can: request_module (can-proto-0) failed. [ 839.135737][T21714] syzkaller0: entered promiscuous mode [ 839.161526][T21714] syzkaller0: entered allmulticast mode [ 839.192138][T21717] 8021q: VLANs not supported on ip_vti0 [ 839.376976][T21733] netlink: 'syz.6.19034': attribute type 2 has an invalid length. [ 839.420795][T21733] netlink: 'syz.6.19034': attribute type 2 has an invalid length. [ 839.543440][T21751] ipt_ECN: cannot use operation on non-tcp rule [ 839.749583][T21764] syzkaller1: entered promiscuous mode [ 839.774604][T21764] syzkaller1: entered allmulticast mode [ 839.816156][T21764] netlink: 'syz.5.19046': attribute type 5 has an invalid length. [ 839.943623][T21778] netlink: 'syz.6.19051': attribute type 2 has an invalid length. [ 839.954968][T21778] netlink: 'syz.6.19051': attribute type 2 has an invalid length. [ 839.991551][T21781] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 840.025134][T21786] ipt_ECN: cannot use operation on non-tcp rule [ 840.114881][T21796] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 840.337227][T21806] tipc: Resetting bearer [ 840.382509][T21812] netlink: 'syz.6.19064': attribute type 10 has an invalid length. [ 840.410300][T21812] team0: entered allmulticast mode [ 840.452880][T21812] team_slave_0: entered allmulticast mode [ 840.469366][T21812] team_slave_1: entered allmulticast mode [ 840.483557][T21812] bridge0: port 3(team0) entered blocking state [ 840.510993][T21812] bridge0: port 3(team0) entered disabled state [ 840.529531][T21812] team0: entered promiscuous mode [ 840.541800][T21812] team_slave_0: entered promiscuous mode [ 840.554349][T21812] team_slave_1: entered promiscuous mode [ 840.564225][T21803] tipc: Enabling of bearer rejected, already enabled [ 840.663320][T21831] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 840.682897][T21833] FAULT_INJECTION: forcing a failure. [ 840.682897][T21833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 840.695811][T21839] ipt_ECN: cannot use operation on non-tcp rule [ 840.705548][T21833] CPU: 1 UID: 0 PID: 21833 Comm: syz.6.19071 Not tainted syzkaller #0 PREEMPT(full) [ 840.705577][T21833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 840.705587][T21833] Call Trace: [ 840.705598][T21833] [ 840.705606][T21833] dump_stack_lvl+0xe8/0x150 [ 840.705632][T21833] should_fail_ex+0x40c/0x560 [ 840.705652][T21833] _copy_from_user+0x2d/0xb0 [ 840.705673][T21833] do_ipv6_setsockopt+0x249/0x3180 [ 840.705696][T21833] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 840.705718][T21833] ? __mutex_trylock_common+0x15f/0x270 [ 840.705738][T21833] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 840.705756][T21833] ? get_pid_task+0x20/0x1f0 [ 840.705772][T21833] ? rcu_is_watching+0x15/0xb0 [ 840.705790][T21833] ? lock_release+0x4b/0x3c0 [ 840.705811][T21833] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 840.705836][T21833] ? preempt_count_add+0x91/0x190 [ 840.705861][T21833] ? rcu_is_watching+0x15/0xb0 [ 840.705923][T21833] ? lock_release+0x4b/0x3c0 [ 840.705963][T21833] ? aa_sk_perm+0x6d5/0x900 [ 840.705991][T21833] ? __pfx_aa_sk_perm+0x10/0x10 [ 840.706012][T21833] ? lock_release+0x4b/0x3c0 [ 840.706033][T21833] ? aa_sock_opt_perm+0xff/0x1a0 [ 840.706051][T21833] ipv6_setsockopt+0x59/0x170 [ 840.706075][T21833] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 840.706094][T21833] do_sock_setsockopt+0x17c/0x1b0 [ 840.706118][T21833] __x64_sys_setsockopt+0x13d/0x1b0 [ 840.706140][T21833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.706155][T21833] do_syscall_64+0x174/0x580 [ 840.706186][T21833] ? trace_irq_disable+0x3b/0x140 [ 840.706207][T21833] ? clear_bhb_loop+0x40/0x90 [ 840.706223][T21833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.706236][T21833] RIP: 0033:0x7f482219ce59 [ 840.706252][T21833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.706266][T21833] RSP: 002b:00007f482302e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 840.706284][T21833] RAX: ffffffffffffffda RBX: 00007f4822415fa0 RCX: 00007f482219ce59 [ 840.706295][T21833] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 840.706306][T21833] RBP: 00007f482302e090 R08: 0000000000000688 R09: 0000000000000000 [ 840.706315][T21833] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000001 [ 840.706326][T21833] R13: 00007f4822416038 R14: 00007f4822415fa0 R15: 00007fff74c11fa8 [ 840.706346][T21833] [ 841.049187][T21841] bridge18: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 841.093212][T21846] netlink: 'syz.3.19077': attribute type 1 has an invalid length. [ 841.233001][T21865] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 841.554337][T21897] netlink: 'syz.1.19092': attribute type 2 has an invalid length. [ 841.582913][T21897] netlink: 'syz.1.19092': attribute type 2 has an invalid length. [ 841.717310][T21914] ipt_ECN: cannot use operation on non-tcp rule [ 841.791234][T21921] vlan1: entered allmulticast mode [ 841.821440][T21921] veth0_vlan: entered allmulticast mode [ 841.897180][T21928] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 842.040546][T21943] __nla_validate_parse: 25 callbacks suppressed [ 842.040572][T21943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.19110'. [ 842.083792][T21943] netlink: 43 bytes leftover after parsing attributes in process `syz.1.19110'. [ 842.102927][T21943] netlink: 'syz.1.19110': attribute type 6 has an invalid length. [ 842.146483][T21943] netlink: 43 bytes leftover after parsing attributes in process `syz.1.19110'. [ 842.295827][T21964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19118'. [ 842.330000][T21964] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19118'. [ 842.466104][T21988] netlink: 17 bytes leftover after parsing attributes in process `syz.5.19126'. [ 842.488182][T21988] netlink: 14601 bytes leftover after parsing attributes in process `syz.5.19126'. [ 842.685374][T22000] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19131'. [ 842.706207][T22000] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 842.830092][T22020] Cannot find add_set index 4 as target [ 843.066757][T22039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 843.089381][T22041] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19144'. [ 843.144095][T22041] 8021q: adding VLAN 0 to HW filter on device bond6 [ 843.151413][T22044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19144'. [ 843.246460][T22044] macvlan2: entered promiscuous mode [ 843.267477][T22044] macvlan2: entered allmulticast mode [ 843.299005][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 843.318070][T22051] batman_adv: batadv0: Adding interface: wlan0 [ 843.351712][T22051] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.395405][T22051] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 843.523807][T22066] ipt_ECN: cannot use operation on non-tcp rule [ 843.546421][T22071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 843.624369][T22071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.726338][T22084] xt_hashlimit: size too large, truncated to 1048576 [ 843.808284][T22090] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 843.864972][T22090] tipc: Disabling bearer [ 843.890894][T22090] 0ªX¹¦Dö»: entered allmulticast mode [ 844.021608][T22105] tipc: Enabling of bearer rejected, already enabled [ 844.206730][T22123] FAULT_INJECTION: forcing a failure. [ 844.206730][T22123] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.253559][T22123] CPU: 1 UID: 0 PID: 22123 Comm: syz.1.19176 Not tainted syzkaller #0 PREEMPT(full) [ 844.253583][T22123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.253593][T22123] Call Trace: [ 844.253599][T22123] [ 844.253606][T22123] dump_stack_lvl+0xe8/0x150 [ 844.253630][T22123] should_fail_ex+0x40c/0x560 [ 844.253650][T22123] _copy_to_user+0x31/0xb0 [ 844.253673][T22123] br_dev_siocdevprivate+0xebd/0x16b0 [ 844.253779][T22123] ? __pfx_br_dev_siocdevprivate+0x10/0x10 [ 844.253799][T22123] ? rcu_is_watching+0x15/0xb0 [ 844.253818][T22123] ? __mutex_lock+0x30d/0x1550 [ 844.253849][T22123] ? do_vfs_ioctl+0x116f/0x1540 [ 844.253873][T22123] ? dev_ioctl+0x83c/0x1150 [ 844.253893][T22123] ? __pfx___mutex_lock+0x10/0x10 [ 844.253912][T22123] ? full_name_hash+0x92/0xe0 [ 844.253932][T22123] dev_ifsioc+0xb56/0x1360 [ 844.253954][T22123] dev_ioctl+0x84c/0x1150 [ 844.253975][T22123] sock_ioctl+0x753/0x7e0 [ 844.253991][T22123] ? lock_release+0x4b/0x3c0 [ 844.254015][T22123] ? __pfx_sock_ioctl+0x10/0x10 [ 844.254030][T22123] ? __fget_files+0x3a2/0x420 [ 844.254047][T22123] ? __fget_files+0x2a/0x420 [ 844.254065][T22123] ? bpf_lsm_file_ioctl+0x9/0x20 [ 844.254088][T22123] ? __pfx_sock_ioctl+0x10/0x10 [ 844.254104][T22123] __se_sys_ioctl+0xfc/0x170 [ 844.254124][T22123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.254140][T22123] do_syscall_64+0x174/0x580 [ 844.254158][T22123] ? trace_irq_disable+0x3b/0x140 [ 844.254178][T22123] ? clear_bhb_loop+0x40/0x90 [ 844.254194][T22123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.254209][T22123] RIP: 0033:0x7f475419ce59 [ 844.254225][T22123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.254239][T22123] RSP: 002b:00007f475501c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.254257][T22123] RAX: ffffffffffffffda RBX: 00007f4754415fa0 RCX: 00007f475419ce59 [ 844.254268][T22123] RDX: 00002000000001c0 RSI: 00000000000089f0 RDI: 0000000000000003 [ 844.254278][T22123] RBP: 00007f475501c090 R08: 0000000000000000 R09: 0000000000000000 [ 844.254288][T22123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.254297][T22123] R13: 00007f4754416038 R14: 00007f4754415fa0 R15: 00007ffca41e6508 [ 844.254315][T22123] [ 844.871301][T22149] syzkaller0: entered promiscuous mode [ 844.892276][T22149] syzkaller0: entered allmulticast mode [ 844.925232][T22161] batman_adv: batadv0: Adding interface: wlan0 [ 844.932600][T22161] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 844.973938][T22161] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 845.017107][T22158] FAULT_INJECTION: forcing a failure. [ 845.017107][T22158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 845.052409][T22158] CPU: 1 UID: 0 PID: 22158 Comm: syz.3.19191 Not tainted syzkaller #0 PREEMPT(full) [ 845.052433][T22158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 845.052443][T22158] Call Trace: [ 845.052449][T22158] [ 845.052456][T22158] dump_stack_lvl+0xe8/0x150 [ 845.052480][T22158] should_fail_ex+0x40c/0x560 [ 845.052500][T22158] _copy_to_user+0x31/0xb0 [ 845.052522][T22158] simple_read_from_buffer+0xe1/0x170 [ 845.052543][T22158] proc_fail_nth_read+0x1bb/0x230 [ 845.052566][T22158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.052587][T22158] ? rw_verify_area+0x24a/0x4c0 [ 845.052607][T22158] ? dev_ioctl+0x83c/0x1150 [ 845.052627][T22158] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 845.052646][T22158] vfs_read+0x213/0xa80 [ 845.052666][T22158] ? __pfx___mutex_lock+0x10/0x10 [ 845.052688][T22158] ? __pfx_vfs_read+0x10/0x10 [ 845.052708][T22158] ? __fget_files+0x3a2/0x420 [ 845.052724][T22158] ? __fget_files+0x2a/0x420 [ 845.052741][T22158] ksys_read+0x150/0x270 [ 845.052758][T22158] ? __pfx_ksys_read+0x10/0x10 [ 845.052774][T22158] ? rcu_is_watching+0x15/0xb0 [ 845.052789][T22158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.052802][T22158] do_syscall_64+0x174/0x580 [ 845.052818][T22158] ? trace_irq_disable+0x3b/0x140 [ 845.052836][T22158] ? clear_bhb_loop+0x40/0x90 [ 845.052853][T22158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.052867][T22158] RIP: 0033:0x7f6a06f5d68e [ 845.052881][T22158] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 845.052893][T22158] RSP: 002b:00007f6a07f33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 845.052910][T22158] RAX: ffffffffffffffda RBX: 00007f6a07f346c0 RCX: 00007f6a06f5d68e [ 845.052923][T22158] RDX: 000000000000000f RSI: 00007f6a07f340a0 RDI: 0000000000000004 [ 845.052932][T22158] RBP: 00007f6a07f34090 R08: 0000000000000000 R09: 0000000000000000 [ 845.052942][T22158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.052951][T22158] R13: 00007f6a07216038 R14: 00007f6a07215fa0 R15: 00007ffd1da0a6e8 [ 845.052973][T22158] [ 845.061453][T22165] bond21: option min_links: invalid value (18446744073709551614) [ 845.306748][T22165] bond21: option min_links: allowed values 0 - 2147483647 [ 845.317461][T22165] bond21 (unregistering): Released all slaves [ 845.371823][T22171] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 845.384621][T22171] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 845.566997][T22204] ipt_ECN: cannot use operation on non-tcp rule [ 845.595797][T22198] 8021q: adding VLAN 0 to HW filter on device bond26 [ 845.797908][T22217] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 846.088198][T22237] ipt_ECN: cannot use operation on non-tcp rule [ 848.921126][T22220] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 849.030788][T22245] validate_nla: 9 callbacks suppressed [ 849.030805][T22245] netlink: 'syz.5.19217': attribute type 2 has an invalid length. [ 849.059588][T22245] netlink: 'syz.5.19217': attribute type 2 has an invalid length. [ 849.095149][T22259] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 849.107571][T22249] netlink: 'syz.6.19219': attribute type 2 has an invalid length. [ 849.122175][T22249] netlink: 'syz.6.19219': attribute type 2 has an invalid length. [ 849.207157][T22267] IPv6: NLM_F_CREATE should be specified when creating new route [ 849.377001][T22285] __nla_validate_parse: 5 callbacks suppressed [ 849.377020][T22285] netlink: 830 bytes leftover after parsing attributes in process `syz.6.19230'. [ 849.418380][T22285] syzkaller1: entered promiscuous mode [ 849.426159][T22285] syzkaller1: entered allmulticast mode [ 849.544825][T22303] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19233'. [ 849.811781][T22323] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 849.843608][T22323] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 849.850282][T22327] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19246'. [ 849.937427][T22333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19248'. [ 849.957607][T22333] netlink: 'syz.1.19248': attribute type 1 has an invalid length. [ 850.092384][T22343] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 850.110931][T22343] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 850.143256][T22348] netlink: 'syz.6.19255': attribute type 2 has an invalid length. [ 850.177482][T22348] netlink: 'syz.6.19255': attribute type 2 has an invalid length. [ 850.246491][T22354] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 850.430679][T22367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19262'. [ 850.442015][T22368] mac80211_hwsim hwsim44 syzkaller0: left promiscuous mode [ 850.450017][T22368] mac80211_hwsim hwsim44 syzkaller0: left allmulticast mode [ 850.477078][T22364] syzkaller1: entered promiscuous mode [ 850.489282][T22364] syzkaller1: entered allmulticast mode [ 850.573153][T22371] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19263'. [ 850.882257][T22394] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19272'. [ 850.934723][T22398] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19273'. [ 851.038183][T22405] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 851.060475][T22405] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.114116][T22403] netlink: 1240 bytes leftover after parsing attributes in process `syz.1.19276'. [ 851.128407][T22413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19280'. [ 851.318503][T22424] mac80211_hwsim hwsim44 syzkaller0: entered promiscuous mode [ 851.330740][T22423] netlink: 'syz.2.19282': attribute type 4 has an invalid length. [ 851.347626][T22424] mac80211_hwsim hwsim44 syzkaller0: entered allmulticast mode [ 851.358468][T10031] block nbd5: Receive control failed (result -32) [ 851.453365][T22417] lo speed is unknown, defaulting to 1000 [ 851.617965][T22439] ipt_ECN: cannot use operation on non-tcp rule [ 851.724770][T22444] netlink: 'syz.5.19292': attribute type 2 has an invalid length. [ 851.738685][T22444] netlink: 'syz.5.19292': attribute type 2 has an invalid length. [ 851.958445][T22467] macsec2: entered promiscuous mode [ 851.979556][T22467] bridge0: entered promiscuous mode [ 852.003539][T22467] macsec2: entered allmulticast mode [ 852.017408][T22467] bridge0: entered allmulticast mode [ 852.024186][T22467] bridge0: port 4(macsec2) entered blocking state [ 852.031842][T22467] bridge0: port 4(macsec2) entered disabled state [ 852.229058][T22467] bridge0: left allmulticast mode [ 852.241304][T22467] bridge0: left promiscuous mode [ 852.393783][T22495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 852.434551][T22501] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 852.545475][T22510] workqueue: Failed to create a rescuer kthread for wq "bond21": -EINTR [ 852.669743][T22526] ipt_ECN: cannot use operation on non-tcp rule [ 853.148907][T22552] syzkaller1: entered promiscuous mode [ 853.169988][T22552] syzkaller1: entered allmulticast mode [ 853.476752][T22575] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 853.596339][T22589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 854.007052][T22623] FAULT_INJECTION: forcing a failure. [ 854.007052][T22623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.042839][T22623] CPU: 1 UID: 0 PID: 22623 Comm: syz.5.19355 Not tainted syzkaller #0 PREEMPT(full) [ 854.042861][T22623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.042871][T22623] Call Trace: [ 854.042877][T22623] [ 854.042883][T22623] dump_stack_lvl+0xe8/0x150 [ 854.042905][T22623] should_fail_ex+0x40c/0x560 [ 854.042923][T22623] prepare_alloc_pages+0x230/0x650 [ 854.042948][T22623] __alloc_frozen_pages_noprof+0x12f/0x380 [ 854.042978][T22623] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 854.043002][T22623] ? __pfx_policy_nodemask+0x10/0x10 [ 854.043025][T22623] ? nl80211_msg_put_channel+0x6c1/0x15d0 [ 854.043136][T22623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.043153][T22623] alloc_pages_mpol+0x212/0x380 [ 854.043179][T22623] folio_alloc_mpol_noprof+0x39/0x160 [ 854.043200][T22623] vma_alloc_folio_noprof+0xe1/0x1e0 [ 854.043221][T22623] ? nla_put+0xd0/0x150 [ 854.043238][T22623] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 854.043259][T22623] ? __pte_offset_map+0x29/0x240 [ 854.043278][T22623] ? lock_acquire+0x5f/0x350 [ 854.043301][T22623] do_pte_missing+0x1750/0x3540 [ 854.043327][T22623] handle_mm_fault+0x1b36/0x3080 [ 854.043374][T22623] ? handle_mm_fault+0xec/0x3080 [ 854.043395][T22623] ? __pfx_handle_mm_fault+0x10/0x10 [ 854.043417][T22623] ? ____sys_recvmsg+0x1e6/0x4a0 [ 854.043440][T22623] ? lock_mm_and_find_vma+0xa7/0x340 [ 854.043463][T22623] do_user_addr_fault+0x744/0x1340 [ 854.043485][T22623] exc_page_fault+0x6a/0xc0 [ 854.043506][T22623] asm_exc_page_fault+0x26/0x30 [ 854.043521][T22623] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 854.043539][T22623] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 854.043552][T22623] RSP: 0018:ffffc9000de874f8 EFLAGS: 00050202 [ 854.043566][T22623] RAX: ffffffff84af8b01 RBX: ffff888074c28000 RCX: 0000000000000e94 [ 854.043578][T22623] RDX: 0000000000000000 RSI: ffff888074c28000 RDI: 0000200000002c80 [ 854.043589][T22623] RBP: ffffc9000de87670 R08: ffff888074c28e93 R09: 1ffff1100e9851d2 [ 854.043601][T22623] R10: dffffc0000000000 R11: ffffed100e9851d3 R12: dffffc0000000000 [ 854.043613][T22623] R13: 0000000000000000 R14: ffffc9000de87d10 R15: 0000000000000e94 [ 854.043626][T22623] ? _copy_to_iter+0x471/0x1810 [ 854.043648][T22623] _copy_to_iter+0x49d/0x1810 [ 854.043674][T22623] ? lock_release+0x4b/0x3c0 [ 854.043701][T22623] ? __pfx__copy_to_iter+0x10/0x10 [ 854.043718][T22623] ? rcu_is_watching+0x15/0xb0 [ 854.043735][T22623] ? trace_irq_enable+0x3b/0x140 [ 854.043762][T22623] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 854.043781][T22623] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 854.043807][T22623] __skb_datagram_iter+0xf8/0x980 [ 854.043821][T22623] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 854.043839][T22623] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 854.043863][T22623] skb_copy_datagram_iter+0xb5/0x240 [ 854.043880][T22623] netlink_recvmsg+0x2b9/0xa50 [ 854.043899][T22623] ? __pfx_netlink_recvmsg+0x10/0x10 [ 854.043913][T22623] ? unwind_next_frame+0x8f/0x2550 [ 854.043930][T22623] ? rcu_is_watching+0x15/0xb0 [ 854.043948][T22623] ? aa_sock_msg_perm+0xf1/0x1b0 [ 854.043965][T22623] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 854.043991][T22623] ? security_socket_recvmsg+0x7e/0x2c0 [ 854.044010][T22623] ? __pfx_netlink_recvmsg+0x10/0x10 [ 854.044025][T22623] sock_recvmsg_nosec+0x10c/0x140 [ 854.044045][T22623] ____sys_recvmsg+0x3e3/0x4a0 [ 854.044069][T22623] ? __pfx_____sys_recvmsg+0x10/0x10 [ 854.044098][T22623] ? import_iovec+0x73/0xa0 [ 854.044118][T22623] ___sys_recvmsg+0x213/0x5a0 [ 854.044142][T22623] ? __pfx____sys_recvmsg+0x10/0x10 [ 854.044165][T22623] ? __fget_files+0x2a/0x420 [ 854.044182][T22623] ? rcu_is_watching+0x15/0xb0 [ 854.044205][T22623] ? rcu_is_watching+0x15/0xb0 [ 854.044220][T22623] ? lock_release+0x4b/0x3c0 [ 854.044241][T22623] ? __might_fault+0xcb/0x130 [ 854.044260][T22623] do_recvmmsg+0x31a/0x7f0 [ 854.044294][T22623] ? __pfx_do_recvmmsg+0x10/0x10 [ 854.044322][T22623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 854.044343][T22623] ? __fget_files+0x3a2/0x420 [ 854.044364][T22623] __x64_sys_recvmmsg+0x198/0x250 [ 854.044379][T22623] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 854.044409][T22623] ? rcu_is_watching+0x15/0xb0 [ 854.044426][T22623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.044443][T22623] do_syscall_64+0x174/0x580 [ 854.044463][T22623] ? trace_irq_disable+0x3b/0x140 [ 854.044482][T22623] ? clear_bhb_loop+0x40/0x90 [ 854.044500][T22623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.044515][T22623] RIP: 0033:0x7fdaf439ce59 [ 854.044530][T22623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.044544][T22623] RSP: 002b:00007fdaf52dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 854.044560][T22623] RAX: ffffffffffffffda RBX: 00007fdaf4615fa0 RCX: 00007fdaf439ce59 [ 854.044572][T22623] RDX: 0000000000000004 RSI: 0000200000008840 RDI: 0000000000000003 [ 854.044582][T22623] RBP: 00007fdaf52dc090 R08: 0000000000000000 R09: 0000000000000000 [ 854.044592][T22623] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 854.044602][T22623] R13: 00007fdaf4616038 R14: 00007fdaf4615fa0 R15: 00007ffcc092e5d8 [ 854.044621][T22623] [ 854.656613][T22633] IPVS: set_ctl: invalid protocol: 25885 224.0.0.1:20001 [ 854.776903][T22642] __nla_validate_parse: 80 callbacks suppressed [ 854.776920][T22642] netlink: 45 bytes leftover after parsing attributes in process `syz.1.19361'. [ 855.592669][T22679] validate_nla: 6 callbacks suppressed [ 855.592685][T22679] netlink: 'syz.5.19375': attribute type 2 has an invalid length. [ 855.621973][T22682] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 855.638592][T22680] 0ªX¹¦Dö»: left allmulticast mode [ 855.669438][T22679] netlink: 'syz.5.19375': attribute type 2 has an invalid length. [ 855.691032][T22687] netlink: 'syz.2.19374': attribute type 2 has an invalid length. [ 855.715048][T22687] netlink: 'syz.2.19374': attribute type 8 has an invalid length. [ 855.721057][T22680] syzkaller1: left allmulticast mode [ 855.735439][T22677] syz_tun: entered allmulticast mode [ 855.735452][T22687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.19374'. [ 855.756523][T22690] netlink: 45 bytes leftover after parsing attributes in process `syz.3.19378'. [ 855.894953][T22697] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19382'. [ 856.098615][T22719] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19390'. [ 856.172511][T22722] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19391'. [ 856.198014][T22719] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19390'. [ 856.214444][T22719] netlink: 'syz.3.19390': attribute type 10 has an invalid length. [ 856.312198][T22727] netlink: 45 bytes leftover after parsing attributes in process `syz.2.19392'. [ 856.341088][T22730] ipt_ECN: cannot use operation on non-tcp rule [ 856.429158][T22734] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 856.598691][T22749] syzkaller0: entered promiscuous mode [ 856.625880][T22749] syzkaller0: entered allmulticast mode [ 856.643936][T22749] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 856.703909][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19400'. [ 856.748264][T22753] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19401'. [ 857.280309][T22736] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 857.497768][T22772] FAULT_INJECTION: forcing a failure. [ 857.497768][T22772] name failslab, interval 1, probability 0, space 0, times 0 [ 857.510760][T22772] CPU: 1 UID: 0 PID: 22772 Comm: syz.2.19408 Not tainted syzkaller #0 PREEMPT(full) [ 857.510784][T22772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 857.510794][T22772] Call Trace: [ 857.510801][T22772] [ 857.510808][T22772] dump_stack_lvl+0xe8/0x150 [ 857.510832][T22772] should_fail_ex+0x40c/0x560 [ 857.510852][T22772] should_failslab+0xa8/0x100 [ 857.510875][T22772] kmem_cache_alloc_bulk_noprof+0x85/0x7c0 [ 857.510898][T22772] ? pfn_valid+0x125/0x4c0 [ 857.510918][T22772] bpf_test_run_xdp_live+0x16e9/0x1c20 [ 857.510944][T22772] ? bpf_test_run_xdp_live+0x43e/0x1c20 [ 857.510970][T22772] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 857.511002][T22772] ? 0xffffffffa0201a58 [ 857.511015][T22772] ? 0xffffffffa020358c [ 857.511028][T22772] ? 0xffffffffa02035d4 [ 857.511040][T22772] ? 0xffffffffa0203690 [ 857.511061][T22772] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 857.511081][T22772] ? _copy_from_user+0x94/0xb0 [ 857.511100][T22772] ? bpf_test_init+0x113/0x150 [ 857.511120][T22772] ? xdp_convert_md_to_buff+0x5b/0x330 [ 857.511143][T22772] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 857.511163][T22772] ? lock_release+0x4b/0x3c0 [ 857.511187][T22772] ? rcu_is_watching+0x15/0xb0 [ 857.511204][T22772] ? lock_release+0x4b/0x3c0 [ 857.511224][T22772] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 857.511248][T22772] ? __fget_files+0x2a/0x420 [ 857.511267][T22772] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 857.511290][T22772] bpf_prog_test_run+0x2c5/0x340 [ 857.511314][T22772] __sys_bpf+0x643/0x950 [ 857.511335][T22772] ? __pfx___sys_bpf+0x10/0x10 [ 857.511359][T22772] ? ksys_write+0x242/0x270 [ 857.511380][T22772] ? __pfx_ksys_write+0x10/0x10 [ 857.511402][T22772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.511418][T22772] __x64_sys_bpf+0x7c/0x90 [ 857.511437][T22772] do_syscall_64+0x174/0x580 [ 857.511457][T22772] ? trace_irq_disable+0x3b/0x140 [ 857.511477][T22772] ? clear_bhb_loop+0x40/0x90 [ 857.511495][T22772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.511511][T22772] RIP: 0033:0x7f514c19ce59 [ 857.511526][T22772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.511540][T22772] RSP: 002b:00007f514d041028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 857.511559][T22772] RAX: ffffffffffffffda RBX: 00007f514c415fa0 RCX: 00007f514c19ce59 [ 857.511570][T22772] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 857.511581][T22772] RBP: 00007f514d041090 R08: 0000000000000000 R09: 0000000000000000 [ 857.511592][T22772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 857.511600][T22772] R13: 00007f514c416038 R14: 00007f514c415fa0 R15: 00007ffd4f5a5888 [ 857.511619][T22772] [ 858.008500][T22784] FAULT_INJECTION: forcing a failure. [ 858.008500][T22784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 858.038331][T22786] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 858.058140][T22786] mac80211_hwsim hwsim44 syzkaller0: Caught tx_queue_len zero misconfig [ 858.074837][T22784] CPU: 0 UID: 0 PID: 22784 Comm: syz.3.19412 Not tainted syzkaller #0 PREEMPT(full) [ 858.074861][T22784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 858.074871][T22784] Call Trace: [ 858.074879][T22784] [ 858.074886][T22784] dump_stack_lvl+0xe8/0x150 [ 858.074909][T22784] should_fail_ex+0x40c/0x560 [ 858.074929][T22784] _copy_from_user+0x2d/0xb0 [ 858.074951][T22784] ___sys_recvmsg+0x173/0x5a0 [ 858.074976][T22784] ? __pfx____sys_recvmsg+0x10/0x10 [ 858.075000][T22784] ? __fget_files+0x2a/0x420 [ 858.075018][T22784] ? rcu_is_watching+0x15/0xb0 [ 858.075041][T22784] ? __fget_files+0x3a2/0x420 [ 858.075063][T22784] do_recvmmsg+0x31a/0x7f0 [ 858.075088][T22784] ? __pfx_do_recvmmsg+0x10/0x10 [ 858.075115][T22784] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 858.075138][T22784] ? __fget_files+0x3a2/0x420 [ 858.075159][T22784] __x64_sys_recvmmsg+0x198/0x250 [ 858.075183][T22784] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 858.075207][T22784] ? rcu_is_watching+0x15/0xb0 [ 858.075224][T22784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.075241][T22784] do_syscall_64+0x174/0x580 [ 858.075261][T22784] ? trace_irq_disable+0x3b/0x140 [ 858.075282][T22784] ? clear_bhb_loop+0x40/0x90 [ 858.075301][T22784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.075316][T22784] RIP: 0033:0x7f6a06f9ce59 [ 858.075331][T22784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.075345][T22784] RSP: 002b:00007f6a07f34028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 858.075364][T22784] RAX: ffffffffffffffda RBX: 00007f6a07215fa0 RCX: 00007f6a06f9ce59 [ 858.075376][T22784] RDX: 0000000000000003 RSI: 0000200000000d80 RDI: 0000000000000003 [ 858.075387][T22784] RBP: 00007f6a07f34090 R08: 0000000000000000 R09: 0000000000000000 [ 858.075397][T22784] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000001 [ 858.075407][T22784] R13: 00007f6a07216038 R14: 00007f6a07215fa0 R15: 00007ffd1da0a6e8 [ 858.075426][T22784] [ 858.524176][T22796] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.595588][T22804] netlink: 'syz.6.19418': attribute type 1 has an invalid length. [ 858.605550][T22796] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.656392][T22796] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.733921][T22796] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 858.864736][ T1063] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.922110][T28228] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 858.960791][ T76] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.017170][T28228] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.045254][T22837] syzkaller1: left promiscuous mode [ 859.172538][T22843] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 859.495614][T22867] netlink: 'syz.5.19441': attribute type 14 has an invalid length. [ 859.819690][T22889] netlink: 'syz.1.19451': attribute type 1 has an invalid length. [ 859.872238][T22889] bond28: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 859.913505][T22889] bond28 (unregistering): Released all slaves [ 860.037128][T22900] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 860.230216][T22925] smc: ib device syz0 ibport 1 erased user defined pnetid SYZ2 [ 860.246331][T22921] __nla_validate_parse: 10 callbacks suppressed [ 860.246355][T22921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19461'. [ 860.285332][T22921] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19461'. [ 860.313357][T22932] netlink: 45 bytes leftover after parsing attributes in process `syz.5.19465'. [ 860.321370][T22921] vlan0: entered promiscuous mode [ 860.368484][T22935] netlink: 'syz.3.19466': attribute type 1 has an invalid length. [ 860.752126][T22961] FAULT_INJECTION: forcing a failure. [ 860.752126][T22961] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.784832][T22961] CPU: 0 UID: 0 PID: 22961 Comm: syz.6.19476 Not tainted syzkaller #0 PREEMPT(full) [ 860.784857][T22961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 860.784867][T22961] Call Trace: [ 860.784895][T22961] [ 860.784919][T22961] dump_stack_lvl+0xe8/0x150 [ 860.784943][T22961] should_fail_ex+0x40c/0x560 [ 860.784963][T22961] _copy_from_user+0x2d/0xb0 [ 860.784984][T22961] ___sys_recvmsg+0x173/0x5a0 [ 860.785010][T22961] ? __pfx____sys_recvmsg+0x10/0x10 [ 860.785034][T22961] ? __fget_files+0x2a/0x420 [ 860.785050][T22961] ? rcu_is_watching+0x15/0xb0 [ 860.785074][T22961] ? rcu_is_watching+0x15/0xb0 [ 860.785090][T22961] ? lock_release+0x4b/0x3c0 [ 860.785112][T22961] ? __might_fault+0xcb/0x130 [ 860.785131][T22961] do_recvmmsg+0x31a/0x7f0 [ 860.785157][T22961] ? __pfx_do_recvmmsg+0x10/0x10 [ 860.785183][T22961] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 860.785205][T22961] ? __fget_files+0x3a2/0x420 [ 860.785226][T22961] __x64_sys_recvmmsg+0x198/0x250 [ 860.785242][T22961] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 860.785266][T22961] ? rcu_is_watching+0x15/0xb0 [ 860.785283][T22961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.785300][T22961] do_syscall_64+0x174/0x580 [ 860.785319][T22961] ? trace_irq_disable+0x3b/0x140 [ 860.785340][T22961] ? clear_bhb_loop+0x40/0x90 [ 860.785364][T22961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.785378][T22961] RIP: 0033:0x7f482219ce59 [ 860.785392][T22961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.785405][T22961] RSP: 002b:00007f482302e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 860.785424][T22961] RAX: ffffffffffffffda RBX: 00007f4822415fa0 RCX: 00007f482219ce59 [ 860.785435][T22961] RDX: 0000000000000f02 RSI: 00002000000004c0 RDI: 0000000000000004 [ 860.785446][T22961] RBP: 00007f482302e090 R08: 0000000000000000 R09: 0000000000000000 [ 860.785455][T22961] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002 [ 860.785464][T22961] R13: 00007f4822416038 R14: 00007f4822415fa0 R15: 00007fff74c11fa8 [ 860.785481][T22961] [ 860.997744][T22969] netlink: 45 bytes leftover after parsing attributes in process `syz.1.19478'. [ 861.161815][T22976] netlink: 92 bytes leftover after parsing attributes in process `syz.3.19480'. [ 861.282219][T22982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19483'. [ 861.356871][T22980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19481'. [ 861.369662][T22989] openvswitch: netlink: VXLAN extension 78 out of range max 1 [ 861.481007][T22995] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19486'. [ 861.555728][T22999] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 861.638592][T23007] netlink: 68 bytes leftover after parsing attributes in process `syz.6.19489'. [ 861.648633][T23006] bridge9: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 861.664645][T23007] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19489'. [ 861.837648][T23027] FAULT_INJECTION: forcing a failure. [ 861.837648][T23027] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 861.863212][T23027] CPU: 0 UID: 0 PID: 23027 Comm: syz.5.19498 Not tainted syzkaller #0 PREEMPT(full) [ 861.863243][T23027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 861.863252][T23027] Call Trace: [ 861.863259][T23027] [ 861.863266][T23027] dump_stack_lvl+0xe8/0x150 [ 861.863291][T23027] should_fail_ex+0x40c/0x560 [ 861.863312][T23027] prepare_alloc_pages+0x230/0x650 [ 861.863338][T23027] __alloc_frozen_pages_noprof+0x12f/0x380 [ 861.863362][T23027] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 861.863386][T23027] ? __pfx_policy_nodemask+0x10/0x10 [ 861.863406][T23027] ? rcu_is_watching+0x15/0xb0 [ 861.863424][T23027] ? rcu_is_watching+0x15/0xb0 [ 861.863440][T23027] alloc_pages_mpol+0x212/0x380 [ 861.863464][T23027] folio_alloc_mpol_noprof+0x39/0x160 [ 861.863486][T23027] vma_alloc_folio_noprof+0xe1/0x1e0 [ 861.863510][T23027] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 861.863531][T23027] ? __pte_offset_map+0x29/0x240 [ 861.863549][T23027] ? lock_acquire+0x5f/0x350 [ 861.863572][T23027] do_pte_missing+0x1750/0x3540 [ 861.863603][T23027] handle_mm_fault+0x1b36/0x3080 [ 861.863627][T23027] ? handle_mm_fault+0xec/0x3080 [ 861.863647][T23027] ? __pfx_handle_mm_fault+0x10/0x10 [ 861.863671][T23027] ? __pfx___up_read+0x10/0x10 [ 861.863687][T23027] ? lock_release+0x4b/0x3c0 [ 861.863707][T23027] ? lock_mm_and_find_vma+0xa7/0x340 [ 861.863728][T23027] do_user_addr_fault+0x744/0x1340 [ 861.863751][T23027] exc_page_fault+0x6a/0xc0 [ 861.863772][T23027] asm_exc_page_fault+0x26/0x30 [ 861.863788][T23027] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 861.863805][T23027] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 861.863819][T23027] RSP: 0018:ffffc900038ff4f8 EFLAGS: 00050202 [ 861.863834][T23027] RAX: ffff888028400001 RBX: ffff88802840004c RCX: 000000000000006c [ 861.863846][T23027] RDX: 0000000000000000 RSI: ffff888028400e0c RDI: 0000200000005000 [ 861.863857][T23027] RBP: ffffc900038ff670 R08: ffff888028400e77 R09: 1ffff110050801ce [ 861.863869][T23027] R10: dffffc0000000000 R11: ffffed10050801cf R12: dffffc0000000000 [ 861.863881][T23027] R13: 0000000000000e2c R14: 000020000000506c R15: 00007ffffffff000 [ 861.863901][T23027] _copy_to_iter+0x619/0x1810 [ 861.863935][T23027] ? __pfx__copy_to_iter+0x10/0x10 [ 861.863952][T23027] ? rcu_is_watching+0x15/0xb0 [ 861.863969][T23027] ? trace_irq_enable+0x3b/0x140 [ 861.863990][T23027] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 861.864009][T23027] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 861.864034][T23027] __skb_datagram_iter+0xf8/0x980 [ 861.864049][T23027] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 861.864067][T23027] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 861.864086][T23027] skb_copy_datagram_iter+0xb5/0x240 [ 861.864103][T23027] netlink_recvmsg+0x2b9/0xa50 [ 861.864122][T23027] ? __pfx_netlink_recvmsg+0x10/0x10 [ 861.864136][T23027] ? unwind_next_frame+0x8f/0x2550 [ 861.864154][T23027] ? rcu_is_watching+0x15/0xb0 [ 861.864172][T23027] ? aa_sock_msg_perm+0xf1/0x1b0 [ 861.864188][T23027] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 861.864208][T23027] ? security_socket_recvmsg+0x7e/0x2c0 [ 861.864227][T23027] ? __pfx_netlink_recvmsg+0x10/0x10 [ 861.864243][T23027] sock_recvmsg+0x172/0x1b0 [ 861.864262][T23027] ____sys_recvmsg+0x1e6/0x4a0 [ 861.864288][T23027] ? __pfx_____sys_recvmsg+0x10/0x10 [ 861.864316][T23027] ? import_iovec+0x73/0xa0 [ 861.864337][T23027] ___sys_recvmsg+0x213/0x5a0 [ 861.864361][T23027] ? __pfx____sys_recvmsg+0x10/0x10 [ 861.864385][T23027] ? __fget_files+0x2a/0x420 [ 861.864403][T23027] ? rcu_is_watching+0x15/0xb0 [ 861.864424][T23027] ? __fget_files+0x3a2/0x420 [ 861.864445][T23027] do_recvmmsg+0x31a/0x7f0 [ 861.864469][T23027] ? __pfx_do_recvmmsg+0x10/0x10 [ 861.864496][T23027] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 861.864517][T23027] ? __fget_files+0x3a2/0x420 [ 861.864538][T23027] __x64_sys_recvmmsg+0x198/0x250 [ 861.864554][T23027] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 861.864578][T23027] ? rcu_is_watching+0x15/0xb0 [ 861.864594][T23027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.864611][T23027] do_syscall_64+0x174/0x580 [ 861.864631][T23027] ? trace_irq_disable+0x3b/0x140 [ 861.864650][T23027] ? clear_bhb_loop+0x40/0x90 [ 861.864666][T23027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.864681][T23027] RIP: 0033:0x7fdaf439ce59 [ 861.864695][T23027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 861.864708][T23027] RSP: 002b:00007fdaf52dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 861.864724][T23027] RAX: ffffffffffffffda RBX: 00007fdaf4615fa0 RCX: 00007fdaf439ce59 [ 861.864735][T23027] RDX: 0000000000000003 RSI: 0000200000000d80 RDI: 0000000000000003 [ 861.864746][T23027] RBP: 00007fdaf52dc090 R08: 0000000000000000 R09: 0000000000000000 [ 861.864756][T23027] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000001 [ 861.864767][T23027] R13: 00007fdaf4616038 R14: 00007fdaf4615fa0 R15: 00007ffcc092e5d8 [ 861.864785][T23027] [ 862.811143][T23047] syzkaller0: entered promiscuous mode [ 862.826132][T23047] syzkaller0: entered allmulticast mode [ 862.871486][T23050] gtp3: entered promiscuous mode [ 862.917412][T23050] gtp3: entered allmulticast mode [ 863.163048][T23073] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 863.235308][T10031] block nbd6: Receive control failed (result -32) [ 863.321608][T23085] mac80211_hwsim hwsim83 syzkaller0: left promiscuous mode [ 863.330145][T23085] mac80211_hwsim hwsim83 syzkaller0: left allmulticast mode [ 863.489628][T23100] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 863.656391][T23119] netlink: 'syz.3.19523': attribute type 2 has an invalid length. [ 863.686429][T23119] netlink: 'syz.3.19523': attribute type 2 has an invalid length. [ 863.833277][T23128] bond28 (unregistering): Released all slaves [ 863.884522][T23138] x_tables: unsorted entry at hook 3 [ 864.505320][T23182] netlink: 'syz.5.19543': attribute type 1 has an invalid length. [ 864.952992][T23213] batman_adv: batadv0: Adding interface: wlan0 [ 864.975407][T23213] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.028338][T23213] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 865.112252][T23219] netlink: 'syz.3.19559': attribute type 10 has an invalid length. [ 865.124932][T23219] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 865.449983][T23243] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 865.488193][T23244] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 865.555657][T23249] netlink: 'syz.1.19570': attribute type 1 has an invalid length. [ 865.556187][T23247] __nla_validate_parse: 12 callbacks suppressed [ 865.556201][T23247] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19569'. [ 865.578537][T23249] netlink: 'syz.1.19570': attribute type 1 has an invalid length. [ 865.606624][T23250] netlink: 56 bytes leftover after parsing attributes in process `syz.2.19565'. [ 865.876100][T23267] netlink: 108 bytes leftover after parsing attributes in process `syz.3.19573'. [ 866.018692][T23286] netlink: zone id is out of range [ 866.048707][T23286] netlink: zone id is out of range [ 866.084650][T23286] netlink: zone id is out of range [ 866.121662][T23286] netlink: zone id is out of range [ 866.148609][T23300] netlink: 212360 bytes leftover after parsing attributes in process `syz.6.19582'. [ 866.162802][T23297] bond28: (slave gre0): Device is not bonding slave [ 866.173718][T23297] bond28: option active_slave: invalid value (gre0) [ 866.188357][T23286] netlink: zone id is out of range [ 866.201441][T23297] bond28 (unregistering): Released all slaves [ 866.214796][T23286] netlink: zone id is out of range [ 866.250942][T23286] netlink: zone id is out of range [ 866.256322][T23286] netlink: zone id is out of range [ 866.279970][T23306] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19584'. [ 866.627350][T23336] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19596'. [ 866.805392][T23348] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19594'. [ 866.875334][T23353] xt_bpf: check failed: parse error [ 867.030601][T23367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19605'. [ 867.117583][T23374] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19608'. [ 867.195825][T23377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19609'. [ 867.197185][T23381] FAULT_INJECTION: forcing a failure. [ 867.197185][T23381] name failslab, interval 1, probability 0, space 0, times 0 [ 867.256150][T23381] CPU: 1 UID: 0 PID: 23381 Comm: syz.6.19610 Not tainted syzkaller #0 PREEMPT(full) [ 867.256176][T23381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.256186][T23381] Call Trace: [ 867.256193][T23381] [ 867.256201][T23381] dump_stack_lvl+0xe8/0x150 [ 867.256225][T23381] should_fail_ex+0x40c/0x560 [ 867.256250][T23381] should_failslab+0xa8/0x100 [ 867.256273][T23381] ? skb_clone+0x212/0x3a0 [ 867.256289][T23381] kmem_cache_alloc_noprof+0x87/0x650 [ 867.256309][T23381] ? lock_release+0x4b/0x3c0 [ 867.256334][T23381] skb_clone+0x212/0x3a0 [ 867.256350][T23381] __netlink_deliver_tap+0x413/0x860 [ 867.256378][T23381] ? netlink_deliver_tap+0x2e/0x1b0 [ 867.256399][T23381] netlink_deliver_tap+0x19c/0x1b0 [ 867.256421][T23381] netlink_dump+0x95b/0xee0 [ 867.256447][T23381] ? __pfx_netlink_dump+0x10/0x10 [ 867.256472][T23381] ? netlink_recvmsg+0x5bf/0xa50 [ 867.256486][T23381] ? kmem_cache_free+0x182/0x650 [ 867.256509][T23381] netlink_recvmsg+0x683/0xa50 [ 867.256528][T23381] ? __pfx_netlink_recvmsg+0x10/0x10 [ 867.256541][T23381] ? unwind_next_frame+0x8f/0x2550 [ 867.256559][T23381] ? rcu_is_watching+0x15/0xb0 [ 867.256578][T23381] ? aa_sock_msg_perm+0xf1/0x1b0 [ 867.256595][T23381] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 867.256614][T23381] ? security_socket_recvmsg+0x7e/0x2c0 [ 867.256634][T23381] ? __pfx_netlink_recvmsg+0x10/0x10 [ 867.256649][T23381] sock_recvmsg_nosec+0x10c/0x140 [ 867.256670][T23381] ____sys_recvmsg+0x3e3/0x4a0 [ 867.256695][T23381] ? __pfx_____sys_recvmsg+0x10/0x10 [ 867.256723][T23381] ? import_iovec+0x73/0xa0 [ 867.256744][T23381] ___sys_recvmsg+0x213/0x5a0 [ 867.256768][T23381] ? __pfx____sys_recvmsg+0x10/0x10 [ 867.256791][T23381] ? __fget_files+0x2a/0x420 [ 867.256807][T23381] ? rcu_is_watching+0x15/0xb0 [ 867.256829][T23381] ? rcu_is_watching+0x15/0xb0 [ 867.256845][T23381] ? lock_release+0x4b/0x3c0 [ 867.256866][T23381] ? __might_fault+0xcb/0x130 [ 867.256884][T23381] do_recvmmsg+0x31a/0x7f0 [ 867.256915][T23381] ? __pfx_do_recvmmsg+0x10/0x10 [ 867.256939][T23381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 867.256961][T23381] ? __fget_files+0x3a2/0x420 [ 867.256982][T23381] __x64_sys_recvmmsg+0x198/0x250 [ 867.256998][T23381] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 867.257022][T23381] ? rcu_is_watching+0x15/0xb0 [ 867.257037][T23381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.257054][T23381] do_syscall_64+0x174/0x580 [ 867.257076][T23381] ? trace_irq_disable+0x3b/0x140 [ 867.257097][T23381] ? clear_bhb_loop+0x40/0x90 [ 867.257112][T23381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.257127][T23381] RIP: 0033:0x7f482219ce59 [ 867.257142][T23381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.257154][T23381] RSP: 002b:00007f482302e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 867.257172][T23381] RAX: ffffffffffffffda RBX: 00007f4822415fa0 RCX: 00007f482219ce59 [ 867.257185][T23381] RDX: 0000000000000003 RSI: 0000200000000d80 RDI: 0000000000000003 [ 867.257196][T23381] RBP: 00007f482302e090 R08: 0000000000000000 R09: 0000000000000000 [ 867.257205][T23381] R10: 0000000000002030 R11: 0000000000000246 R12: 0000000000000002 [ 867.257216][T23381] R13: 00007f4822416038 R14: 00007f4822415fa0 R15: 00007fff74c11fa8 [ 867.257236][T23381] [ 867.913802][T23404] netlink: 'syz.5.19616': attribute type 2 has an invalid length. [ 867.955424][T23404] netlink: 'syz.5.19616': attribute type 2 has an invalid length. [ 868.036455][T23409] macvtap1: entered promiscuous mode [ 868.047437][T23409] macvtap1: entered allmulticast mode [ 868.096817][T23409] veth1_vlan: entered allmulticast mode [ 868.415500][T23439] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 868.754836][T23471] block nbd7: Unsupported socket: should be TCP or UNIX. [ 868.757430][T23474] netlink: 'syz.2.19642': attribute type 5 has an invalid length. [ 868.806827][T23479] netlink: 'syz.3.19644': attribute type 3 has an invalid length. [ 868.925964][T23487] FAULT_INJECTION: forcing a failure. [ 868.925964][T23487] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 868.943981][T23486] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20004 [ 868.960348][T23487] CPU: 1 UID: 0 PID: 23487 Comm: syz.3.19647 Not tainted syzkaller #0 PREEMPT(full) [ 868.960373][T23487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 868.960383][T23487] Call Trace: [ 868.960390][T23487] [ 868.960398][T23487] dump_stack_lvl+0xe8/0x150 [ 868.960421][T23487] should_fail_ex+0x40c/0x560 [ 868.960441][T23487] _copy_from_user+0x2d/0xb0 [ 868.960463][T23487] kstrtouint_from_user+0xd6/0x180 [ 868.960480][T23487] ? __might_fault+0xaf/0x130 [ 868.960500][T23487] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 868.960519][T23487] ? __mutex_trylock_common+0x15f/0x270 [ 868.960539][T23487] ? vfs_write+0x22b/0xba0 [ 868.960557][T23487] ? rcu_is_watching+0x15/0xb0 [ 868.960574][T23487] proc_fail_nth_write+0x8e/0x210 [ 868.960594][T23487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 868.960615][T23487] ? preempt_count_add+0x91/0x190 [ 868.960638][T23487] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 868.960657][T23487] vfs_write+0x296/0xba0 [ 868.960679][T23487] ? __pfx_vfs_write+0x10/0x10 [ 868.960702][T23487] ? __fget_files+0x3a2/0x420 [ 868.960718][T23487] ? __fget_files+0x2a/0x420 [ 868.960735][T23487] ksys_write+0x150/0x270 [ 868.960755][T23487] ? __pfx_ksys_write+0x10/0x10 [ 868.960775][T23487] ? rcu_is_watching+0x15/0xb0 [ 868.960791][T23487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.960806][T23487] do_syscall_64+0x174/0x580 [ 868.960827][T23487] ? trace_irq_disable+0x3b/0x140 [ 868.960846][T23487] ? clear_bhb_loop+0x40/0x90 [ 868.960863][T23487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.960877][T23487] RIP: 0033:0x7f6a06f5d68e [ 868.960893][T23487] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 868.960906][T23487] RSP: 002b:00007f6a07f33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 868.960923][T23487] RAX: ffffffffffffffda RBX: 00007f6a07f346c0 RCX: 00007f6a06f5d68e [ 868.960935][T23487] RDX: 0000000000000001 RSI: 00007f6a07f340a0 RDI: 0000000000000004 [ 868.960946][T23487] RBP: 00007f6a07f34090 R08: 0000000000000000 R09: 0000000000000000 [ 868.960956][T23487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 868.960965][T23487] R13: 00007f6a07216038 R14: 00007f6a07215fa0 R15: 00007ffd1da0a6e8 [ 868.960985][T23487] [ 869.248898][T24093] page_pool_release_retry() stalled pool shutdown: id 377, 1 inflight 60 sec [ 869.423156][T23511] ipt_ECN: cannot use operation on non-tcp rule [ 869.654402][T23531] netlink: 'syz.1.19664': attribute type 11 has an invalid length. [ 869.871203][T23547] tun0: tun_chr_ioctl cmd 1074025675 [ 869.879892][T23547] tun0: persist enabled [ 870.076343][T23569] macvlan0: entered promiscuous mode [ 870.326422][T23589] sctp: [Deprecated]: syz.6.19683 (pid 23589) Use of int in max_burst socket option deprecated. [ 870.326422][T23589] Use struct sctp_assoc_value instead [ 870.589928][T23608] __nla_validate_parse: 13 callbacks suppressed [ 870.589956][T23608] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19688'. [ 871.061609][T23652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19700'. [ 871.148548][T23658] ipt_ECN: cannot use operation on non-tcp rule [ 871.277684][T23669] netlink: 'syz.1.19707': attribute type 7 has an invalid length. [ 871.309952][T13768] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.310045][T23669] netlink: 'syz.1.19707': attribute type 7 has an invalid length. [ 871.337323][T13768] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.367249][T13768] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.408230][T13768] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 871.457578][T23673] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 871.487106][T23673] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 871.675487][T23695] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 871.696214][T23692] netlink: 'syz.5.19715': attribute type 1 has an invalid length. [ 871.723313][T23692] netlink: 'syz.5.19715': attribute type 1 has an invalid length. [ 872.213820][T23734] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19734'. [ 872.237418][T23732] netlink: 45 bytes leftover after parsing attributes in process `syz.5.19733'. [ 872.260538][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 872.362947][T23747] ipt_ECN: cannot use operation on non-tcp rule [ 872.384679][T23749] netlink: 'syz.3.19738': attribute type 15 has an invalid length. [ 872.493254][T23756] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 872.513286][T23756] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 872.604216][T23761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19743'. [ 872.831947][T23777] ipt_ECN: cannot use operation on non-tcp rule [ 872.851979][T23779] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 872.893783][T23783] FAULT_INJECTION: forcing a failure. [ 872.893783][T23783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 872.939931][T23783] CPU: 1 UID: 0 PID: 23783 Comm: syz.3.19751 Not tainted syzkaller #0 PREEMPT(full) [ 872.939956][T23783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.939965][T23783] Call Trace: [ 872.939972][T23783] [ 872.939979][T23783] dump_stack_lvl+0xe8/0x150 [ 872.940001][T23783] should_fail_ex+0x40c/0x560 [ 872.940020][T23783] _copy_from_iter+0x1d3/0x1660 [ 872.940039][T23783] ? process_measurement+0x14fb/0x1c10 [ 872.940059][T23783] ? trace_irq_enable+0x3b/0x140 [ 872.940080][T23783] ? __pfx__copy_from_iter+0x10/0x10 [ 872.940098][T23783] ? __pfx_process_measurement+0x10/0x10 [ 872.940121][T23783] tun_get_user+0x269/0x4350 [ 872.940147][T23783] ? is_bpf_text_address+0x26/0x2b0 [ 872.940170][T23783] ? __pfx_tun_get_user+0x10/0x10 [ 872.940187][T23783] ? aa_file_perm+0x18b/0x15f0 [ 872.940203][T23783] ? rcu_is_watching+0x15/0xb0 [ 872.940220][T23783] ? rcu_is_watching+0x15/0xb0 [ 872.940234][T23783] ? lock_release+0x4b/0x3c0 [ 872.940255][T23783] ? aa_file_perm+0x18b/0x15f0 [ 872.940271][T23783] ? ref_tracker_alloc+0x341/0x4b0 [ 872.940289][T23783] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 872.940311][T23783] ? tun_get+0x1c/0x2f0 [ 872.940328][T23783] ? tun_get+0x1c/0x2f0 [ 872.940345][T23783] ? rcu_is_watching+0x15/0xb0 [ 872.940360][T23783] ? tun_get+0x1c/0x2f0 [ 872.940377][T23783] ? lock_release+0x4b/0x3c0 [ 872.940396][T23783] ? __pfx_aa_file_perm+0x10/0x10 [ 872.940413][T23783] ? tun_get+0x1c/0x2f0 [ 872.940431][T23783] tun_chr_write_iter+0x113/0x200 [ 872.940450][T23783] do_iter_readv_writev+0x612/0x8c0 [ 872.940472][T23783] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 872.940494][T23783] ? bpf_lsm_file_permission+0x9/0x20 [ 872.940514][T23783] ? security_file_permission+0x75/0x260 [ 872.940533][T23783] ? rw_verify_area+0x203/0x4c0 [ 872.940553][T23783] vfs_writev+0x343/0x990 [ 872.940571][T23783] ? __pfx_vfs_writev+0x10/0x10 [ 872.940590][T23783] ? lock_release+0x4b/0x3c0 [ 872.940613][T23783] ? __fget_files+0x3a2/0x420 [ 872.940630][T23783] ? __fget_files+0x2a/0x420 [ 872.940650][T23783] do_writev+0x154/0x2e0 [ 872.940667][T23783] ? __pfx_do_writev+0x10/0x10 [ 872.940685][T23783] ? rcu_is_watching+0x15/0xb0 [ 872.940702][T23783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.940718][T23783] do_syscall_64+0x174/0x580 [ 872.940739][T23783] ? trace_irq_disable+0x3b/0x140 [ 872.940759][T23783] ? clear_bhb_loop+0x40/0x90 [ 872.940784][T23783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.940800][T23783] RIP: 0033:0x7f6a06f9ce59 [ 872.940815][T23783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.940829][T23783] RSP: 002b:00007f6a07f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 872.940848][T23783] RAX: ffffffffffffffda RBX: 00007f6a07215fa0 RCX: 00007f6a06f9ce59 [ 872.940860][T23783] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000003 [ 872.940871][T23783] RBP: 00007f6a07f34090 R08: 0000000000000000 R09: 0000000000000000 [ 872.940880][T23783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 872.940889][T23783] R13: 00007f6a07216038 R14: 00007f6a07215fa0 R15: 00007ffd1da0a6e8 [ 872.940906][T23783] [ 873.744838][T23813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19765'. [ 873.772345][T23813] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.19765'. [ 873.797553][T23813] net_ratelimit: 24 callbacks suppressed [ 873.797573][T23813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.088583][T23843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 874.101102][ T14] nci: nci_rsp_packet: unknown rsp opcode 0x90c [ 874.143577][T23846] veth1_to_bond: entered allmulticast mode [ 874.152326][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19776'. [ 874.216411][T23846] veth1_to_bond (unregistering): left allmulticast mode [ 876.995316][T23831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.016919][T23850] netlink: 'syz.6.19777': attribute type 1 has an invalid length. [ 877.058091][T23850] netlink: 228 bytes leftover after parsing attributes in process `syz.6.19777'. [ 877.123691][T23876] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19780'. [ 877.237624][T23885] netlink: 'syz.5.19786': attribute type 9 has an invalid length. [ 877.399773][T23901] netlink: 4 bytes leftover after parsing attributes in process `syz.5.19791'. [ 877.433611][T23901] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19791'. [ 877.651387][T23923] netlink: 60 bytes leftover after parsing attributes in process `syz.5.19799'. [ 877.674071][T23924] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19802'. [ 877.685089][T23926] netlink: 112 bytes leftover after parsing attributes in process `syz.1.19803'. [ 877.687796][T23924] netlink: 'syz.3.19802': attribute type 7 has an invalid length. [ 877.704534][T23924] netlink: 'syz.3.19802': attribute type 8 has an invalid length. [ 877.712973][T23924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19802'. [ 877.883832][T23939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19806'. [ 877.911981][T23939] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19806'. [ 878.025492][T23945] 8021q: adding VLAN 0 to HW filter on device bond21 [ 878.062026][T23951] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 878.084230][T23952] bridge21: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 878.402854][T23975] netlink: 'syz.3.19817': attribute type 2 has an invalid length. [ 878.524201][T23986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 878.560804][T23986] netlink: 'syz.5.19820': attribute type 1 has an invalid length. [ 878.631449][T23994] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 878.651897][T23994] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 878.882577][T24093] IPVS: starting estimator thread 0... [ 878.938233][T24021] netlink: 'syz.3.19835': attribute type 12 has an invalid length. [ 878.979704][T24018] IPVS: using max 46 ests per chain, 110400 per kthread [ 879.025067][T24021] bond27: option primary_reselect: invalid value (255) [ 879.035170][T24021] bond27 (unregistering): Released all slaves [ 879.054108][T24031] netlink: 'syz.2.19836': attribute type 83 has an invalid length. [ 879.647222][T24064] netlink: 'syz.1.19847': attribute type 11 has an invalid length. [ 879.811931][T24084] tipc: Failed to remove unknown binding: 66,0,0/1814454702:3686230129/3686230131 [ 879.850989][T24084] tipc: Failed to remove unknown binding: 66,0,0/1814454702:3686230129/3686230130 [ 879.883657][T24086] netlink: 'syz.2.19853': attribute type 6 has an invalid length. [ 879.896829][T24084] tipc: Failed to remove unknown binding: 66,0,0/1814454702:3686230129/3686230131 [ 879.907769][T24084] tipc: Failed to remove unknown binding: 66,0,0/1814454702:3686230129/3686230130 [ 879.994805][T24100] veth1_virt_wifi: entered promiscuous mode [ 880.020303][T24100] veth1_virt_wifi: entered allmulticast mode [ 880.064049][T24106] bond0: Caught tx_queue_len zero misconfig [ 880.107873][T24106] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 880.302147][T24130] ipt_ECN: cannot use operation on non-tcp rule [ 881.327194][T24204] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 881.796577][T24234] IPVS: set_ctl: invalid protocol: 22 100.1.1.2:20000 [ 882.117801][T24251] vlan2: entered promiscuous mode [ 882.132159][T24251] vlan2: entered allmulticast mode [ 882.143330][T24251] veth1_macvtap: entered allmulticast mode [ 882.474366][T24275] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 882.597609][T24286] __nla_validate_parse: 14 callbacks suppressed [ 882.597639][T24286] netlink: 104 bytes leftover after parsing attributes in process `syz.6.19911'. [ 882.623130][T24291] mac80211_hwsim hwsim83 syzkaller0: entered promiscuous mode [ 882.637289][T24291] mac80211_hwsim hwsim83 syzkaller0: entered allmulticast mode [ 882.867447][T24308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19920'. [ 883.281567][T24340] IPVS: sh: FWM 3 0x00000003 - no destination available [ 883.293823][T24340] IPVS: sh: FWM 3 0x00000003 - no destination available [ 883.365644][T24335] validate_nla: 1 callbacks suppressed [ 883.365665][T24335] netlink: 'syz.1.19930': attribute type 39 has an invalid length. [ 883.573843][T24354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.825602][T24380] FAULT_INJECTION: forcing a failure. [ 883.825602][T24380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.854610][T24380] CPU: 0 UID: 0 PID: 24380 Comm: syz.2.19944 Not tainted syzkaller #0 PREEMPT(full) [ 883.854635][T24380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 883.854645][T24380] Call Trace: [ 883.854653][T24380] [ 883.854665][T24380] dump_stack_lvl+0xe8/0x150 [ 883.854688][T24380] should_fail_ex+0x40c/0x560 [ 883.854710][T24380] _copy_from_user+0x2d/0xb0 [ 883.854732][T24380] __sys_sendto+0x28d/0x6c0 [ 883.854756][T24380] ? __pfx___sys_sendto+0x10/0x10 [ 883.854789][T24380] ? do_user_addr_fault+0xc4a/0x1340 [ 883.854815][T24380] __x64_sys_sendto+0xde/0x100 [ 883.854835][T24380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.854855][T24380] do_syscall_64+0x174/0x580 [ 883.854879][T24380] ? trace_irq_disable+0x3b/0x140 [ 883.854900][T24380] ? clear_bhb_loop+0x40/0x90 [ 883.854918][T24380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.854934][T24380] RIP: 0033:0x7f514c15d68e [ 883.854949][T24380] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 883.854963][T24380] RSP: 002b:00007f514d03fe88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 883.854982][T24380] RAX: ffffffffffffffda RBX: 00007f514d0416c0 RCX: 00007f514c15d68e [ 883.854993][T24380] RDX: 0000000000000020 RSI: 00007f514d040000 RDI: 0000000000000003 [ 883.855004][T24380] RBP: 0000000000000000 R08: 00007f514d03ff04 R09: 000000000000000c [ 883.855014][T24380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 883.855023][T24380] R13: 00007f514d03ff58 R14: 00007f514d040000 R15: 0000000000000000 [ 883.855043][T24380] [ 884.356407][T24389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.19947'. [ 884.379425][T24389] netlink: 12 bytes leftover after parsing attributes in process `syz.5.19947'. [ 884.406099][T24403] ip6gre1: entered allmulticast mode [ 884.430587][T24389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.19947'. [ 884.511116][T24412] FAULT_INJECTION: forcing a failure. [ 884.511116][T24412] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 884.546996][T24412] CPU: 0 UID: 0 PID: 24412 Comm: syz.3.19956 Not tainted syzkaller #0 PREEMPT(full) [ 884.547019][T24412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 884.547029][T24412] Call Trace: [ 884.547036][T24412] [ 884.547043][T24412] dump_stack_lvl+0xe8/0x150 [ 884.547066][T24412] should_fail_ex+0x40c/0x560 [ 884.547086][T24412] prepare_alloc_pages+0x230/0x650 [ 884.547112][T24412] __alloc_frozen_pages_noprof+0x12f/0x380 [ 884.547134][T24412] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 884.547157][T24412] ? __pfx_policy_nodemask+0x10/0x10 [ 884.547178][T24412] ? rcu_is_watching+0x15/0xb0 [ 884.547194][T24412] ? trace_irq_enable+0x3b/0x140 [ 884.547214][T24412] alloc_pages_mpol+0x212/0x380 [ 884.547238][T24412] folio_alloc_mpol_noprof+0x39/0x160 [ 884.547260][T24412] vma_alloc_folio_noprof+0xe1/0x1e0 [ 884.547282][T24412] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 884.547304][T24412] ? lock_release+0x4b/0x3c0 [ 884.547330][T24412] do_wp_page+0x1163/0x4c70 [ 884.547356][T24412] ? __pfx_do_wp_page+0x10/0x10 [ 884.547371][T24412] ? do_raw_spin_lock+0x12b/0x2f0 [ 884.547391][T24412] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 884.547408][T24412] ? __pte_offset_map+0x45/0x240 [ 884.547430][T24412] handle_mm_fault+0x1490/0x3080 [ 884.547466][T24412] ? handle_mm_fault+0xec/0x3080 [ 884.547487][T24412] ? __pfx_handle_mm_fault+0x10/0x10 [ 884.547504][T24412] ? lock_vma_under_rcu+0x45a/0x500 [ 884.547531][T24412] ? rcu_is_watching+0x15/0xb0 [ 884.547549][T24412] do_user_addr_fault+0xa4d/0x1340 [ 884.547570][T24412] ? trace_page_fault_user+0x84/0x1e0 [ 884.547587][T24412] exc_page_fault+0x6a/0xc0 [ 884.547608][T24412] asm_exc_page_fault+0x26/0x30 [ 884.547624][T24412] RIP: 0033:0x7f6a06f5cc45 [ 884.547639][T24412] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 884.547653][T24412] RSP: 002b:00007f6a07f32de0 EFLAGS: 00010293 [ 884.547669][T24412] RAX: 0000000000000008 RBX: 00007f6a07d47e20 RCX: 0000000000000000 [ 884.547681][T24412] RDX: 0000000000000000 RSI: 00007f6a07050279 RDI: 00007f6a07d47e20 [ 884.547692][T24412] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 884.547702][T24412] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f6a0704fee6 [ 884.547713][T24412] R13: ffffffffffffffe8 R14: 0000000000000020 R15: 00007f6a07050279 [ 884.547734][T24412] [ 884.547765][T24412] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 884.854988][T24418] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19957'. [ 884.878502][T24418] netlink: 'syz.1.19957': attribute type 3 has an invalid length. [ 884.957682][T24425] netlink: 'syz.3.19960': attribute type 5 has an invalid length. [ 885.045796][T24430] netlink: 576 bytes leftover after parsing attributes in process `syz.6.19961'. [ 885.176445][T24438] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19963'. [ 885.342756][T24450] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.19967'. [ 885.431020][T24460] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 885.577105][T24469] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 885.578281][T24468] openvswitch: netlink: IPv4 tun info is not correct [ 885.607409][T24467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.642914][T24468] netlink: 'syz.5.19975': attribute type 4 has an invalid length. [ 885.688687][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19979'. [ 885.707215][T24468] .`: renamed from bond0 [ 885.795354][T24486] netlink: 'syz.3.19982': attribute type 5 has an invalid length. [ 885.827928][T24482] syzkaller0: entered promiscuous mode [ 885.836315][T24482] syzkaller0: entered allmulticast mode [ 885.863918][T24482] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 886.097295][T24508] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 886.564201][T24538] FAULT_INJECTION: forcing a failure. [ 886.564201][T24538] name failslab, interval 1, probability 0, space 0, times 0 [ 886.624810][T24538] CPU: 1 UID: 0 PID: 24538 Comm: syz.1.19997 Not tainted syzkaller #0 PREEMPT(full) [ 886.624835][T24538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 886.624843][T24538] Call Trace: [ 886.624850][T24538] [ 886.624857][T24538] dump_stack_lvl+0xe8/0x150 [ 886.624879][T24538] should_fail_ex+0x40c/0x560 [ 886.624899][T24538] should_failslab+0xa8/0x100 [ 886.624921][T24538] __kmalloc_noprof+0xe8/0x750 [ 886.624940][T24538] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 886.624963][T24538] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 886.624982][T24538] genl_family_rcv_msg_doit+0xda/0x340 [ 886.625003][T24538] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 886.625024][T24538] ? apparmor_capable+0x126/0x170 [ 886.625045][T24538] ? bpf_lsm_capable+0x9/0x20 [ 886.625060][T24538] ? security_capable+0x7e/0x2c0 [ 886.625086][T24538] genl_rcv_msg+0x614/0x7a0 [ 886.625105][T24538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.625121][T24538] ? ref_tracker_free+0x689/0x830 [ 886.625140][T24538] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 886.625158][T24538] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 886.625174][T24538] ? __pfx_nl80211_post_doit+0x10/0x10 [ 886.625190][T24538] ? __pfx_ref_tracker_free+0x10/0x10 [ 886.625211][T24538] netlink_rcv_skb+0x226/0x4a0 [ 886.625234][T24538] ? __pfx_genl_rcv_msg+0x10/0x10 [ 886.625326][T24538] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 886.625366][T24538] ? down_read+0x2be/0x330 [ 886.625391][T24538] genl_rcv+0x28/0x40 [ 886.625408][T24538] netlink_unicast+0x7bb/0x940 [ 886.625433][T24538] netlink_sendmsg+0x813/0xb40 [ 886.625451][T24538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.625484][T24538] ? aa_sock_msg_perm+0xf1/0x1b0 [ 886.625501][T24538] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 886.625520][T24538] ? __pfx_netlink_sendmsg+0x10/0x10 [ 886.625540][T24538] ____sys_sendmsg+0x9b9/0xa20 [ 886.625566][T24538] ? __pfx_____sys_sendmsg+0x10/0x10 [ 886.625586][T24538] ? lock_release+0x4b/0x3c0 [ 886.625608][T24538] ? import_iovec+0x73/0xa0 [ 886.625628][T24538] ___sys_sendmsg+0x2a5/0x360 [ 886.625646][T24538] ? rcu_is_watching+0x15/0xb0 [ 886.625662][T24538] ? get_pid_task+0x20/0x1f0 [ 886.625678][T24538] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.625700][T24538] ? rcu_is_watching+0x15/0xb0 [ 886.625726][T24538] ? __fget_files+0x2a/0x420 [ 886.625742][T24538] ? __fget_files+0x3a2/0x420 [ 886.625762][T24538] __x64_sys_sendmsg+0x1b1/0x290 [ 886.625782][T24538] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.625808][T24538] ? rcu_is_watching+0x15/0xb0 [ 886.625823][T24538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.625838][T24538] do_syscall_64+0x174/0x580 [ 886.625858][T24538] ? trace_irq_disable+0x3b/0x140 [ 886.625885][T24538] ? clear_bhb_loop+0x40/0x90 [ 886.625906][T24538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.625920][T24538] RIP: 0033:0x7f475419ce59 [ 886.625933][T24538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.625947][T24538] RSP: 002b:00007f475501c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.625963][T24538] RAX: ffffffffffffffda RBX: 00007f4754415fa0 RCX: 00007f475419ce59 [ 886.625975][T24538] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 886.625985][T24538] RBP: 00007f475501c090 R08: 0000000000000000 R09: 0000000000000000 [ 886.625995][T24538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.626005][T24538] R13: 00007f4754416038 R14: 00007f4754415fa0 R15: 00007ffca41e6508 [ 886.626023][T24538] [ 887.127313][T24555] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 887.159738][T24543] netlink: 'syz.2.19999': attribute type 12 has an invalid length. [ 887.498093][T24576] openvswitch: netlink: IPv4 tunnel dst address is zero [ 887.566889][T24576] netlink: 'syz.5.20011': attribute type 9 has an invalid length. [ 887.604019][T24576] netlink: 'syz.5.20011': attribute type 2 has an invalid length. [ 887.619815][T24576] __nla_validate_parse: 3 callbacks suppressed [ 887.619834][T24576] netlink: 244 bytes leftover after parsing attributes in process `syz.5.20011'. [ 887.784285][T24596] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 887.800831][T24598] netlink: 'syz.5.20018': attribute type 21 has an invalid length. [ 887.849466][T24598] netlink: 156 bytes leftover after parsing attributes in process `syz.5.20018'. [ 887.904231][T24607] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20021'. [ 887.937025][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.1.20023'. [ 888.274732][T24642] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 888.365983][T24637] syzkaller0: entered promiscuous mode [ 888.390007][T24650] IPVS: set_ctl: invalid protocol: 98 10.1.1.0:20003 [ 888.633466][T24663] tipc: Enabling of bearer rejected, already enabled [ 888.667074][T24663] sch_tbf: burst 255 is lower than device syzkaller0 mtu (313) ! [ 888.691879][T24669] netlink: 332 bytes leftover after parsing attributes in process `syz.2.20040'. [ 888.708453][T24671] xt_ecn: cannot match TCP bits for non-tcp packets [ 888.730126][T24669] netlink: 'syz.2.20040': attribute type 1 has an invalid length. [ 888.749437][T24671] xt_l2tp: invalid flags combination: 8 [ 888.825975][T24669] bond22: entered promiscuous mode [ 888.840143][T24669] 8021q: adding VLAN 0 to HW filter on device bond22 [ 888.857940][T24678] netlink: 256 bytes leftover after parsing attributes in process `syz.3.20043'. [ 888.860872][T24673] netlink: 'syz.5.20041': attribute type 1 has an invalid length. [ 888.877640][T24678] netlink: 256 bytes leftover after parsing attributes in process `syz.3.20043'. [ 888.923459][T24686] netlink: 'syz.3.20043': attribute type 1 has an invalid length. [ 888.955404][T24686] netlink: 96 bytes leftover after parsing attributes in process `syz.3.20043'. [ 889.006826][T24673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 889.018652][T24686] netlink: 1 bytes leftover after parsing attributes in process `syz.3.20043'. [ 889.077411][T24686] netlink: 'syz.3.20043': attribute type 1 has an invalid length. [ 889.105413][T24689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20044'. [ 889.430715][T24718] netlink: 'syz.2.20052': attribute type 1 has an invalid length. [ 889.457911][T24713] bond7: Removing last arp target with arp_interval on [ 889.466897][T24718] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 889.617896][T24731] x_tables: duplicate underflow at hook 1 [ 889.667816][T24731] openvswitch: netlink: IP tunnel dst address not specified [ 889.715497][T24738] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 890.055596][T24765] syzkaller0: entered promiscuous mode [ 890.066091][T24765] syzkaller0: entered allmulticast mode [ 890.590713][T24811] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 890.704809][T24818] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 890.795535][T24825] veth0: entered promiscuous mode [ 890.863678][T24824] veth0: left promiscuous mode [ 891.046832][T24839] netlink: 'syz.3.20092': attribute type 3 has an invalid length. [ 891.097500][T24845] netlink: 'syz.5.20094': attribute type 4 has an invalid length. [ 891.538621][T24871] netlink: 'syz.1.20102': attribute type 29 has an invalid length. [ 891.697340][T24882] xt_policy: neither incoming nor outgoing policy selected [ 891.716304][T24883] netlink: 'syz.1.20106': attribute type 1 has an invalid length. [ 891.725109][T24883] netlink: 'syz.1.20106': attribute type 1 has an invalid length. [ 891.787891][T24887] openvswitch: netlink: Message has 4 unknown bytes. [ 891.813434][T24888] syzkaller1: entered promiscuous mode [ 891.830870][T24888] syzkaller1: entered allmulticast mode [ 892.101476][T24913] lo: entered allmulticast mode [ 892.113737][T24913] tunl0: entered allmulticast mode [ 892.128706][T24913] gre0: entered allmulticast mode [ 892.160993][T24913] erspan0: entered allmulticast mode [ 892.172664][T24913] ip_vti0: entered allmulticast mode [ 892.181021][T24913] ip6_vti0: entered allmulticast mode [ 892.195999][T24913] sit0: entered allmulticast mode [ 892.219885][T24913] ip6tnl0: entered allmulticast mode [ 892.230941][T24913] ip6gre0: entered allmulticast mode [ 892.635296][T24940] __nla_validate_parse: 23 callbacks suppressed [ 892.635316][T24940] netlink: 32 bytes leftover after parsing attributes in process `syz.3.20128'. [ 892.663788][T24943] policy can only be matched on NF_INET_PRE_ROUTING [ 892.663813][T24943] unable to load match [ 893.085039][T24975] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20140'. [ 893.240028][T24990] xt_hashlimit: size too large, truncated to 1048576 [ 893.342700][T24999] IPVS: set_ctl: invalid protocol: 22 0.0.0.0:20004 [ 893.353083][T24998] netlink: 96 bytes leftover after parsing attributes in process `syz.2.20147'. [ 893.411494][T25001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20147'. [ 893.444119][T24999] bond28: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 893.493804][T24999] bond28 (unregistering): Released all slaves [ 893.578990][T24998] vlan0: entered allmulticast mode [ 893.591819][T24998] erspan0: entered allmulticast mode [ 893.677855][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20151'. [ 893.770897][T25015] block nbd0: Unsupported socket: should be TCP or UNIX. [ 893.782057][T25017] sctp: [Deprecated]: syz.3.20155 (pid 25017) Use of int in maxseg socket option. [ 893.782057][T25017] Use struct sctp_assoc_value instead [ 893.834144][T25019] syzkaller0: entered promiscuous mode [ 893.870004][T25019] syzkaller0: entered allmulticast mode [ 893.956952][T25027] netlink: 'syz.3.20159': attribute type 5 has an invalid length. [ 894.013354][T25031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20162'. [ 894.133290][T25028] netlink: zone id is out of range [ 894.156712][T25028] netlink: zone id is out of range [ 894.174430][T25028] netlink: zone id is out of range [ 894.180944][T25028] netlink: zone id is out of range [ 894.186133][T25028] netlink: zone id is out of range [ 894.194912][T25028] netlink: zone id is out of range [ 894.378446][T25057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20168'. [ 894.397486][T25059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20169'. [ 894.434884][T25066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20168'. [ 894.446645][T25061] netlink: 24 bytes leftover after parsing attributes in process `syz.5.20170'. [ 894.575739][T25071] netlink: 'syz.1.20172': attribute type 5 has an invalid length. [ 894.729502][T25082] net_ratelimit: 48 callbacks suppressed [ 894.729523][T25082] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 895.152670][T25122] mac80211_hwsim hwsim83 syzkaller0: left promiscuous mode [ 895.184721][T25122] mac80211_hwsim hwsim83 syzkaller0: left allmulticast mode [ 895.185778][T25128] xt_connbytes: Forcing CT accounting to be enabled [ 895.217927][T25128] xt_bpf: check failed: parse error [ 895.384232][T25136] netlink: 'syz.3.20193': attribute type 1 has an invalid length. [ 895.585663][T25151] netlink: 'syz.3.20197': attribute type 5 has an invalid length. [ 897.161229][T25265] netlink: 'syz.6.20235': attribute type 5 has an invalid length. [ 897.684119][T25298] __nla_validate_parse: 12 callbacks suppressed [ 897.684144][T25298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20242'. [ 897.732886][T25307] netlink: 12 bytes leftover after parsing attributes in process `syz.5.20246'. [ 897.778510][T25311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.20247'. [ 897.798307][T25314] netlink: 'syz.3.20247': attribute type 1 has an invalid length. [ 897.815569][T25314] netlink: 2108 bytes leftover after parsing attributes in process `syz.3.20247'. [ 897.844762][T25318] netlink: 'syz.2.20249': attribute type 5 has an invalid length. [ 897.875015][T25311] 8021q: adding VLAN 0 to HW filter on device bond27 [ 898.077364][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20258'. [ 898.096825][T25340] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 898.113030][T25340] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 898.205364][T25355] netlink: 'syz.6.20263': attribute type 5 has an invalid length. [ 898.481027][T25384] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20274'. [ 898.585674][T25395] netlink: 'syz.6.20276': attribute type 5 has an invalid length. [ 898.723448][T25399] : (slave bond_slave_0): Releasing backup interface [ 898.773798][T25403] syzkaller0: entered promiscuous mode [ 898.785790][T25403] syzkaller0: entered allmulticast mode [ 899.143857][T25429] syzkaller0: entered promiscuous mode [ 899.156217][T25429] syzkaller0: entered allmulticast mode [ 899.170398][T25432] netlink: 1 bytes leftover after parsing attributes in process `syz.5.20288'. [ 899.200002][T25432] xt_policy: neither incoming nor outgoing policy selected [ 899.221426][T25436] netlink: 'syz.5.20288': attribute type 11 has an invalid length. [ 899.251660][T25435] xt_CT: You must specify a L4 protocol and not use inversions on it [ 899.331599][T25432] 8021q: adding VLAN 0 to HW filter on device .` [ 899.350291][T25432] 8021q: adding VLAN 0 to HW filter on device team0 [ 899.357429][T25445] netlink: 24 bytes leftover after parsing attributes in process `syz.3.20292'. [ 899.375702][T25432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.409764][T25447] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20292'. [ 899.414656][T25432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 899.430786][T25432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 899.448345][T25448] netlink: 512 bytes leftover after parsing attributes in process `syz.5.20288'. [ 899.461379][T25432] A link change request failed with some changes committed already. Interface ÿÿÿÿÿÿ may have been left with an inconsistent configuration, please check. [ 899.886790][T25474] nbd: couldn't find device at index 2958377 [ 899.911146][T25474] netlink: 'syz.5.20302': attribute type 2 has an invalid length. [ 900.028292][T25476] bond28: Removing last ns target with arp_interval on [ 900.422426][T25511] netlink: 'syz.3.20312': attribute type 1 has an invalid length. [ 900.448557][T10031] Bluetooth: hci6: link tx timeout [ 900.454674][T10031] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 900.464151][ T50] Bluetooth: hci6: link tx timeout [ 900.472240][ T50] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 900.562037][T25511] 8021q: adding VLAN 0 to HW filter on device bond29 [ 900.603976][T25522] gretap6: entered promiscuous mode [ 900.618725][T25522] bond29: (slave gretap6): making interface the new active one [ 900.635139][T25522] bond29: (slave gretap6): Enslaving as an active interface with an up link [ 900.653756][T25511] macvlan4: entered promiscuous mode [ 900.665659][T25511] macvlan4: entered allmulticast mode [ 900.672090][T25511] bond29: entered promiscuous mode [ 900.678267][T25511] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 900.689274][T25511] bond29: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 900.706565][T25511] bond29: left promiscuous mode [ 901.337101][T25572] xt_hashlimit: overflow, try lower: 3/0 [ 901.371371][T25574] mac80211_hwsim hwsim83 syzkaller0: entered promiscuous mode [ 901.410708][T25574] mac80211_hwsim hwsim83 syzkaller0: entered allmulticast mode [ 901.780539][T25601] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 902.120585][T25628] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 902.135682][T25620] syzkaller1: entered promiscuous mode [ 902.161935][T25620] syzkaller1: entered allmulticast mode [ 902.246924][T25634] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 902.260796][T25634] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 902.472390][T25651] netlink: 'syz.6.20364': attribute type 1 has an invalid length. [ 902.503332][ T50] Bluetooth: hci6: command 0x0405 tx timeout [ 902.512258][T25662] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 902.925569][T25691] netlink: 'syz.6.20377': attribute type 13 has an invalid length. [ 903.026643][T25705] netlink: 'syz.2.20382': attribute type 3 has an invalid length. [ 903.035536][T25705] netlink: 'syz.2.20382': attribute type 1 has an invalid length. [ 903.043679][T25705] __nla_validate_parse: 16 callbacks suppressed [ 903.043694][T25705] netlink: 204 bytes leftover after parsing attributes in process `syz.2.20382'. [ 903.116649][T25708] xt_TCPMSS: Only works on TCP SYN packets [ 903.135336][T25708] netlink: 'syz.2.20383': attribute type 10 has an invalid length. [ 903.170022][T25702] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20380'. [ 903.195496][T25702] netlink: 164 bytes leftover after parsing attributes in process `syz.1.20380'. [ 903.211202][T25702] netlink: 60 bytes leftover after parsing attributes in process `syz.1.20380'. [ 903.495492][T25731] tc_dump_action: action bad kind [ 903.533910][T25733] lo speed is unknown, defaulting to 1000 [ 903.557992][T25733] lo speed is unknown, defaulting to 1000 [ 903.562384][T25738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20396'. [ 903.574478][T25737] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 903.599548][T25738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20396'. [ 903.621523][T25733] lo speed is unknown, defaulting to 1000 [ 903.640104][T25739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20397'. [ 903.652760][T25733] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 903.684773][T25733] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 903.711756][T25741] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20398'. [ 903.743068][T25733] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 903.763354][T25747] FAULT_INJECTION: forcing a failure. [ 903.763354][T25747] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.791705][T25747] CPU: 0 UID: 0 PID: 25747 Comm: syz.6.20398 Not tainted syzkaller #0 PREEMPT(full) [ 903.791730][T25747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 903.791740][T25747] Call Trace: [ 903.791747][T25747] [ 903.791755][T25747] dump_stack_lvl+0xe8/0x150 [ 903.791776][T25747] should_fail_ex+0x40c/0x560 [ 903.791797][T25747] _copy_from_iter+0x1d3/0x1660 [ 903.791816][T25747] ? process_measurement+0x14fb/0x1c10 [ 903.791837][T25747] ? trace_irq_enable+0x3b/0x140 [ 903.791862][T25747] ? __pfx__copy_from_iter+0x10/0x10 [ 903.791880][T25747] ? __pfx_process_measurement+0x10/0x10 [ 903.791903][T25747] tun_get_user+0x269/0x4350 [ 903.791932][T25747] ? is_bpf_text_address+0x26/0x2b0 [ 903.791956][T25747] ? __pfx_tun_get_user+0x10/0x10 [ 903.791974][T25747] ? aa_file_perm+0x18b/0x15f0 [ 903.791990][T25747] ? rcu_is_watching+0x15/0xb0 [ 903.792008][T25747] ? rcu_is_watching+0x15/0xb0 [ 903.792023][T25747] ? lock_release+0x4b/0x3c0 [ 903.792045][T25747] ? aa_file_perm+0x18b/0x15f0 [ 903.792063][T25747] ? ref_tracker_alloc+0x341/0x4b0 [ 903.792082][T25747] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 903.792100][T25747] ? tun_get+0x1c/0x2f0 [ 903.792118][T25747] ? tun_get+0x1c/0x2f0 [ 903.792135][T25747] ? rcu_is_watching+0x15/0xb0 [ 903.792150][T25747] ? tun_get+0x1c/0x2f0 [ 903.792167][T25747] ? lock_release+0x4b/0x3c0 [ 903.792186][T25747] ? __pfx_aa_file_perm+0x10/0x10 [ 903.792204][T25747] ? tun_get+0x1c/0x2f0 [ 903.792224][T25747] tun_chr_write_iter+0x113/0x200 [ 903.792244][T25747] do_iter_readv_writev+0x612/0x8c0 [ 903.792267][T25747] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 903.792291][T25747] ? bpf_lsm_file_permission+0x9/0x20 [ 903.792311][T25747] ? security_file_permission+0x75/0x260 [ 903.792332][T25747] ? rw_verify_area+0x203/0x4c0 [ 903.792353][T25747] vfs_writev+0x343/0x990 [ 903.792373][T25747] ? __pfx_vfs_writev+0x10/0x10 [ 903.792393][T25747] ? lock_release+0x4b/0x3c0 [ 903.792417][T25747] ? __fget_files+0x3a2/0x420 [ 903.792434][T25747] ? __fget_files+0x2a/0x420 [ 903.792454][T25747] do_writev+0x154/0x2e0 [ 903.792471][T25747] ? __pfx_do_writev+0x10/0x10 [ 903.792485][T25747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.792504][T25747] ? rcu_is_watching+0x15/0xb0 [ 903.792521][T25747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.792537][T25747] do_syscall_64+0x174/0x580 [ 903.792558][T25747] ? trace_irq_disable+0x3b/0x140 [ 903.792578][T25747] ? clear_bhb_loop+0x40/0x90 [ 903.792595][T25747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.792610][T25747] RIP: 0033:0x7f482219ce59 [ 903.792626][T25747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.792641][T25747] RSP: 002b:00007f482300d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 903.792659][T25747] RAX: ffffffffffffffda RBX: 00007f4822416090 RCX: 00007f482219ce59 [ 903.792678][T25747] RDX: 0000000000000001 RSI: 0000200000001640 RDI: 0000000000000003 [ 903.792689][T25747] RBP: 00007f482300d090 R08: 0000000000000000 R09: 0000000000000000 [ 903.792700][T25747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.792710][T25747] R13: 00007f4822416128 R14: 00007f4822416090 R15: 00007fff74c11fa8 [ 903.792730][T25747] [ 903.796283][T25733] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 903.812568][T25749] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20401'. [ 904.053772][T25733] lo speed is unknown, defaulting to 1000 [ 904.174410][T25751] FAULT_INJECTION: forcing a failure. [ 904.174410][T25751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.189679][T25733] lo speed is unknown, defaulting to 1000 [ 904.196074][T25751] CPU: 1 UID: 0 PID: 25751 Comm: syz.5.20402 Not tainted syzkaller #0 PREEMPT(full) [ 904.196098][T25751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 904.196108][T25751] Call Trace: [ 904.196115][T25751] [ 904.196122][T25751] dump_stack_lvl+0xe8/0x150 [ 904.196145][T25751] should_fail_ex+0x40c/0x560 [ 904.196165][T25751] _copy_from_iter+0x1d3/0x1660 [ 904.196186][T25751] ? rcu_is_watching+0x15/0xb0 [ 904.196205][T25751] ? __pfx__copy_from_iter+0x10/0x10 [ 904.196222][T25751] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 904.196247][T25751] ? netlink_sendmsg+0x650/0xb40 [ 904.196262][T25751] ? skb_put+0x112/0x210 [ 904.196283][T25751] netlink_sendmsg+0x6c0/0xb40 [ 904.196301][T25751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.196336][T25751] ? aa_sock_msg_perm+0xf1/0x1b0 [ 904.196351][T25751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 904.196369][T25751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 904.196391][T25751] ____sys_sendmsg+0x9b9/0xa20 [ 904.196417][T25751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 904.196438][T25751] ? lock_release+0x4b/0x3c0 [ 904.196461][T25751] ? import_iovec+0x73/0xa0 [ 904.196481][T25751] ___sys_sendmsg+0x2a5/0x360 [ 904.196501][T25751] ? rcu_is_watching+0x15/0xb0 [ 904.196515][T25751] ? get_pid_task+0x20/0x1f0 [ 904.196531][T25751] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.196553][T25751] ? rcu_is_watching+0x15/0xb0 [ 904.196579][T25751] ? __fget_files+0x2a/0x420 [ 904.196601][T25751] ? __fget_files+0x3a2/0x420 [ 904.196622][T25751] __x64_sys_sendmsg+0x1b1/0x290 [ 904.196644][T25751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 904.196672][T25751] ? rcu_is_watching+0x15/0xb0 [ 904.196688][T25751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.196703][T25751] do_syscall_64+0x174/0x580 [ 904.196725][T25751] ? trace_irq_disable+0x3b/0x140 [ 904.196746][T25751] ? clear_bhb_loop+0x40/0x90 [ 904.196762][T25751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.196776][T25751] RIP: 0033:0x7fdaf439ce59 [ 904.196791][T25751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.196805][T25751] RSP: 002b:00007fdaf52dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.196822][T25751] RAX: ffffffffffffffda RBX: 00007fdaf4615fa0 RCX: 00007fdaf439ce59 [ 904.196834][T25751] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 904.196844][T25751] RBP: 00007fdaf52dc090 R08: 0000000000000000 R09: 0000000000000000 [ 904.196854][T25751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.196864][T25751] R13: 00007fdaf4616038 R14: 00007fdaf4615fa0 R15: 00007ffcc092e5d8 [ 904.196882][T25751] [ 904.465199][T25733] lo speed is unknown, defaulting to 1000 [ 904.472140][T25733] lo speed is unknown, defaulting to 1000 [ 904.479071][T25733] lo speed is unknown, defaulting to 1000 [ 904.485628][T25733] lo speed is unknown, defaulting to 1000 [ 904.493076][T25733] lo speed is unknown, defaulting to 1000 [ 904.656897][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.20404'. [ 904.765655][T25766] ip6tnl0: Caught tx_queue_len zero misconfig [ 904.952436][T25777] ip6gre0: Caught tx_queue_len zero misconfig [ 904.981218][T25777] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 905.094114][T25791] FAULT_INJECTION: forcing a failure. [ 905.094114][T25791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 905.109662][T25791] CPU: 0 UID: 0 PID: 25791 Comm: syz.1.20414 Not tainted syzkaller #0 PREEMPT(full) [ 905.109685][T25791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 905.109695][T25791] Call Trace: [ 905.109702][T25791] [ 905.109709][T25791] dump_stack_lvl+0xe8/0x150 [ 905.109732][T25791] should_fail_ex+0x40c/0x560 [ 905.109751][T25791] _copy_from_iter+0x1d3/0x1660 [ 905.109772][T25791] ? rcu_is_watching+0x15/0xb0 [ 905.109791][T25791] ? __pfx__copy_from_iter+0x10/0x10 [ 905.109807][T25791] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 905.109831][T25791] ? netlink_sendmsg+0x650/0xb40 [ 905.109847][T25791] ? skb_put+0x112/0x210 [ 905.109868][T25791] netlink_sendmsg+0x6c0/0xb40 [ 905.109887][T25791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.109910][T25791] ? aa_sock_msg_perm+0xf1/0x1b0 [ 905.109927][T25791] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 905.109946][T25791] ? __pfx_netlink_sendmsg+0x10/0x10 [ 905.109967][T25791] ____sys_sendmsg+0x9b9/0xa20 [ 905.109993][T25791] ? __pfx_____sys_sendmsg+0x10/0x10 [ 905.110014][T25791] ? lock_release+0x4b/0x3c0 [ 905.110036][T25791] ? import_iovec+0x73/0xa0 [ 905.110056][T25791] ___sys_sendmsg+0x2a5/0x360 [ 905.110079][T25791] ? rcu_is_watching+0x15/0xb0 [ 905.110092][T25791] ? get_pid_task+0x20/0x1f0 [ 905.110106][T25791] ? __pfx____sys_sendmsg+0x10/0x10 [ 905.110129][T25791] ? rcu_is_watching+0x15/0xb0 [ 905.110155][T25791] ? __fget_files+0x2a/0x420 [ 905.110171][T25791] ? __fget_files+0x3a2/0x420 [ 905.110191][T25791] __x64_sys_sendmsg+0x1b1/0x290 [ 905.110214][T25791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 905.110248][T25791] ? rcu_is_watching+0x15/0xb0 [ 905.110265][T25791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.110281][T25791] do_syscall_64+0x174/0x580 [ 905.110302][T25791] ? trace_irq_disable+0x3b/0x140 [ 905.110322][T25791] ? clear_bhb_loop+0x40/0x90 [ 905.110340][T25791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.110355][T25791] RIP: 0033:0x7f475419ce59 [ 905.110371][T25791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.110385][T25791] RSP: 002b:00007f475501c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 905.110403][T25791] RAX: ffffffffffffffda RBX: 00007f4754415fa0 RCX: 00007f475419ce59 [ 905.110414][T25791] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 905.110425][T25791] RBP: 00007f475501c090 R08: 0000000000000000 R09: 0000000000000000 [ 905.110435][T25791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 905.110445][T25791] R13: 00007f4754416038 R14: 00007f4754415fa0 R15: 00007ffca41e6508 [ 905.110463][T25791] [ 905.604443][T25806] ipt_ECN: cannot use operation on non-tcp rule [ 905.966608][T25822] xt_hashlimit: max too large, truncated to 1048576 [ 906.101342][T25828] syzkaller0: entered promiscuous mode [ 906.118564][T25828] syzkaller0: entered allmulticast mode [ 906.156679][T25836] netlink: 'syz.1.20432': attribute type 1 has an invalid length. [ 906.182208][T25836] bridge24: entered promiscuous mode [ 906.202189][T25836] veth0: entered promiscuous mode [ 906.214547][T25833] veth0: left promiscuous mode [ 906.228623][T25833] bridge24: left promiscuous mode [ 906.250204][T25844] syzkaller0: entered promiscuous mode [ 906.265534][T25844] syzkaller0: entered allmulticast mode [ 906.595758][T25868] netlink: 'syz.2.20444': attribute type 12 has an invalid length. [ 907.055650][T25902] syzkaller0: entered promiscuous mode [ 907.099030][T25902] syzkaller0: entered allmulticast mode [ 907.654104][T25912] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 907.995146][T25939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 908.115088][T25946] veth0: entered promiscuous mode [ 908.139824][T25946] veth0: left promiscuous mode [ 908.174245][T25951] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 908.217109][T25953] __nla_validate_parse: 9 callbacks suppressed [ 908.217126][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20469'. [ 908.255635][T25953] netlink: 4 bytes leftover after parsing attributes in process `syz.6.20469'. [ 908.522292][T25973] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20475'. [ 908.714996][T25987] netlink: 36 bytes leftover after parsing attributes in process `syz.5.20480'. [ 908.764355][T25992] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 909.110529][T26028] netlink: 'syz.3.20494': attribute type 5 has an invalid length. [ 909.308196][T26043] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20500'. [ 909.332600][T26043] netlink: 84 bytes leftover after parsing attributes in process `syz.1.20500'. [ 909.353736][T26047] netlink: 16 bytes leftover after parsing attributes in process `syz.1.20500'. [ 909.671473][T26077] netlink: 'syz.1.20511': attribute type 5 has an invalid length. [ 909.724947][T26079] bond30: option all_slaves_active: invalid value (222) [ 909.747879][T26079] bond30 (unregistering): Released all slaves [ 909.981014][T26098] SET target dimension over the limit! [ 912.046114][T26017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 912.187292][T26126] netlink: 'syz.1.20527': attribute type 5 has an invalid length. [ 912.218142][T26125] netlink: 152 bytes leftover after parsing attributes in process `syz.3.20525'. [ 912.235406][T26129] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.20529'. [ 912.313351][T26133] ipvlan2: entered promiscuous mode [ 912.452555][T26148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.20534'. [ 912.464184][T26146] bond0: Caught tx_queue_len zero misconfig [ 912.782423][T26170] mac80211_hwsim hwsim83 syzkaller0: left promiscuous mode [ 912.791429][T26170] mac80211_hwsim hwsim83 syzkaller0: left allmulticast mode [ 913.036007][T26188] sch_tbf: burst 19872 is lower than device lo mtu (65499) ! [ 915.557910][T26155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 915.571711][T26190] __nla_validate_parse: 1 callbacks suppressed [ 915.571730][T26190] netlink: 248 bytes leftover after parsing attributes in process `syz.5.20549'. [ 916.109331][T26241] xt_bpf: check failed: parse error [ 916.143210][T26237] netlink: 'syz.2.20565': attribute type 1 has an invalid length. [ 916.195162][T26244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20565'. [ 916.773131][T26289] erspan0: Device is already in use. [ 916.822500][T26289] netlink: 140 bytes leftover after parsing attributes in process `syz.1.20578'. [ 916.850539][T26295] netlink: 40 bytes leftover after parsing attributes in process `syz.6.20580'. [ 917.022491][T26307] netlink: 1196 bytes leftover after parsing attributes in process `syz.3.20585'. [ 917.110003][T26312] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20587'. [ 917.120347][T26314] FAULT_INJECTION: forcing a failure. [ 917.120347][T26314] name failslab, interval 1, probability 0, space 0, times 0 [ 917.132748][T26315] openvswitch: netlink: Message has -2 unknown bytes. [ 917.147808][T26314] CPU: 1 UID: 0 PID: 26314 Comm: syz.3.20589 Not tainted syzkaller #0 PREEMPT(full) [ 917.147837][T26314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 917.147846][T26314] Call Trace: [ 917.147852][T26314] [ 917.147858][T26314] dump_stack_lvl+0xe8/0x150 [ 917.147879][T26314] should_fail_ex+0x40c/0x560 [ 917.147896][T26314] should_failslab+0xa8/0x100 [ 917.147915][T26314] __kmalloc_noprof+0xe8/0x750 [ 917.147932][T26314] ? __pfx_dynamic_dname+0x10/0x10 [ 917.147946][T26314] ? tomoyo_encode+0x2ad/0x570 [ 917.147964][T26314] tomoyo_encode+0x2ad/0x570 [ 917.147980][T26314] tomoyo_realpath_from_path+0x5fa/0x640 [ 917.147999][T26314] ? tomoyo_path_number_perm+0x219/0x5f0 [ 917.148019][T26314] tomoyo_path_number_perm+0x246/0x5f0 [ 917.148038][T26314] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 917.148059][T26314] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 917.148075][T26314] ? preempt_count_add+0x91/0x190 [ 917.148096][T26314] ? rcu_is_watching+0x15/0xb0 [ 917.148121][T26314] ? hook_file_ioctl+0x1f0/0x5c0 [ 917.148146][T26314] ? lock_release+0x4b/0x3c0 [ 917.148166][T26314] ? __fget_files+0x2a/0x420 [ 917.148181][T26314] ? __fget_files+0x3a2/0x420 [ 917.148197][T26314] ? __fget_files+0x2a/0x420 [ 917.148214][T26314] security_file_ioctl+0xc3/0x2a0 [ 917.148235][T26314] __se_sys_ioctl+0x47/0x170 [ 917.148255][T26314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.148271][T26314] do_syscall_64+0x174/0x580 [ 917.148292][T26314] ? trace_irq_disable+0x3b/0x140 [ 917.148312][T26314] ? clear_bhb_loop+0x40/0x90 [ 917.148329][T26314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.148344][T26314] RIP: 0033:0x7f6a06f9ce59 [ 917.148360][T26314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 917.148372][T26314] RSP: 002b:00007f6a07f34028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 917.148390][T26314] RAX: ffffffffffffffda RBX: 00007f6a07215fa0 RCX: 00007f6a06f9ce59 [ 917.148402][T26314] RDX: 0000200000000100 RSI: 0000000000008b0b RDI: 0000000000000003 [ 917.148413][T26314] RBP: 00007f6a07f34090 R08: 0000000000000000 R09: 0000000000000000 [ 917.148423][T26314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.148433][T26314] R13: 00007f6a07216038 R14: 00007f6a07215fa0 R15: 00007ffd1da0a6e8 [ 917.148452][T26314] [ 917.148468][T26314] ERROR: Out of memory at tomoyo_realpath_from_path. [ 917.668151][T26339] netlink: 'syz.2.20598': attribute type 7 has an invalid length. [ 917.681168][T26340] netlink: 'syz.2.20598': attribute type 7 has an invalid length. [ 917.710442][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20598'. [ 917.714296][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20598'. [ 917.764078][T26340] netlink: 'syz.2.20598': attribute type 7 has an invalid length. [ 917.770132][T26339] netlink: 'syz.2.20598': attribute type 7 has an invalid length. [ 917.835684][T26339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20598'. [ 917.842176][T26340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20598'. [ 917.900351][T26360] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 917.929717][T26360] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 918.019178][T26371] policy can only be matched on NF_INET_PRE_ROUTING [ 918.019198][T26371] unable to load match [ 918.393280][T26406] netlink: 'syz.2.20619': attribute type 10 has an invalid length. [ 918.424093][T26405] netlink: 'syz.6.20621': attribute type 12 has an invalid length. [ 918.458577][T26405] netlink: 'syz.6.20621': attribute type 29 has an invalid length. [ 918.582301][T26417] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 918.620496][T26419] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 918.635013][T26419] bond8 (unregistering): Released all slaves [ 918.916983][T26439] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 918.924191][T26444] netlink: 'syz.6.20634': attribute type 83 has an invalid length. [ 919.037505][T26447] netlink: 'syz.6.20634': attribute type 83 has an invalid length. [ 919.275315][T26446] veth1_vlan (unregistering): left allmulticast mode [ 919.503905][T26461] ipt_ECN: cannot use operation on non-tcp rule [ 919.778974][T26475] 0ªX¹¦Dö»: renamed from gretap0 [ 919.797729][T26475] 0ªX¹¦Dö»: entered allmulticast mode [ 919.898487][T26481] netlink: 'syz.5.20648': attribute type 1 has an invalid length. [ 920.195251][T26496] workqueue: Failed to create a rescuer kthread for wq "bond24": -EINTR [ 920.513323][T26510] syzkaller0: entered promiscuous mode [ 920.558874][T26510] syzkaller0: entered allmulticast mode [ 921.030378][T26543] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 921.404522][T26558] __nla_validate_parse: 11 callbacks suppressed [ 921.404550][T26558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20672'. [ 921.459474][T26563] team0 (unregistering): Port device vlan0 removed [ 921.567806][T26567] netlink: 212304 bytes leftover after parsing attributes in process `syz.6.20677'. [ 921.620396][T26567] openvswitch: netlink: Message has 6 unknown bytes. [ 922.021583][T26594] netlink: 44 bytes leftover after parsing attributes in process `syz.3.20683'. [ 922.236510][T26604] netlink: 4 bytes leftover after parsing attributes in process `syz.2.20689'. [ 922.417419][T26611] netlink: 256 bytes leftover after parsing attributes in process `syz.6.20693'. [ 922.461393][T26611] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20693'. [ 922.536534][T26626] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 922.548584][T26620] mac80211_hwsim hwsim83 syzkaller0: entered promiscuous mode [ 922.600707][T26620] mac80211_hwsim hwsim83 syzkaller0: entered allmulticast mode [ 922.796376][T26639] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 922.828005][T26639] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 923.445702][T26675] syzkaller0: entered promiscuous mode [ 923.454755][T26675] syzkaller0: entered allmulticast mode [ 923.632671][T26688] netlink: 8 bytes leftover after parsing attributes in process `syz.1.20723'. [ 923.851097][T26713] netlink: 4 bytes leftover after parsing attributes in process `syz.5.20732'. [ 923.983090][T26713] macvtap1: entered promiscuous mode [ 923.988430][T26713] vlan0: entered promiscuous mode [ 923.997163][T26713] macvtap1: entered allmulticast mode [ 924.004563][T26713] vlan0: entered allmulticast mode [ 924.010281][T26713] veth0_vlan: entered allmulticast mode [ 924.025606][T26719] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 924.292542][T26756] netlink: 45 bytes leftover after parsing attributes in process `syz.3.20745'. [ 924.359910][T26760] validate_nla: 1 callbacks suppressed [ 924.359929][T26760] netlink: 'syz.6.20747': attribute type 8 has an invalid length. [ 924.544210][T26775] netlink: 'syz.1.20752': attribute type 1 has an invalid length. [ 924.623154][T26783] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.20754'. [ 924.696765][T26784] bond28: (slave gretap3): making interface the new active one [ 924.737156][T26784] bond28: (slave gretap3): Enslaving as an active interface with an up link [ 925.148456][T26818] FAULT_INJECTION: forcing a failure. [ 925.148456][T26818] name failslab, interval 1, probability 0, space 0, times 0 [ 925.189560][T26818] CPU: 1 UID: 0 PID: 26818 Comm: syz.5.20761 Not tainted syzkaller #0 PREEMPT(full) [ 925.189586][T26818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 925.189595][T26818] Call Trace: [ 925.189602][T26818] [ 925.189609][T26818] dump_stack_lvl+0xe8/0x150 [ 925.189632][T26818] should_fail_ex+0x40c/0x560 [ 925.189652][T26818] should_failslab+0xa8/0x100 [ 925.189672][T26818] ? skb_clone+0x212/0x3a0 [ 925.189686][T26818] kmem_cache_alloc_noprof+0x87/0x650 [ 925.189705][T26818] ? lock_release+0x4b/0x3c0 [ 925.189726][T26818] skb_clone+0x212/0x3a0 [ 925.189740][T26818] __netlink_deliver_tap+0x413/0x860 [ 925.189766][T26818] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.189786][T26818] netlink_deliver_tap+0x19c/0x1b0 [ 925.189804][T26818] netlink_dump+0x95b/0xee0 [ 925.189820][T26818] ? rcu_is_watching+0x15/0xb0 [ 925.189838][T26818] ? __pfx_netlink_dump+0x10/0x10 [ 925.189866][T26818] netlink_recvmsg+0x683/0xa50 [ 925.189881][T26818] ? __pfx_netlink_recvmsg+0x10/0x10 [ 925.189892][T26818] ? unwind_next_frame+0x8f/0x2550 [ 925.189907][T26818] ? rcu_is_watching+0x15/0xb0 [ 925.189922][T26818] ? aa_sock_msg_perm+0xf1/0x1b0 [ 925.189937][T26818] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 925.189954][T26818] ? security_socket_recvmsg+0x7e/0x2c0 [ 925.189970][T26818] ? __pfx_netlink_recvmsg+0x10/0x10 [ 925.189983][T26818] sock_recvmsg_nosec+0x10c/0x140 [ 925.190002][T26818] ____sys_recvmsg+0x3e3/0x4a0 [ 925.190026][T26818] ? __pfx_____sys_recvmsg+0x10/0x10 [ 925.190052][T26818] ? import_iovec+0x73/0xa0 [ 925.190072][T26818] ___sys_recvmsg+0x213/0x5a0 [ 925.190094][T26818] ? __pfx____sys_recvmsg+0x10/0x10 [ 925.190116][T26818] ? __fget_files+0x2a/0x420 [ 925.190132][T26818] ? rcu_is_watching+0x15/0xb0 [ 925.190152][T26818] ? rcu_is_watching+0x15/0xb0 [ 925.190166][T26818] ? lock_release+0x4b/0x3c0 [ 925.190187][T26818] ? __might_fault+0xcb/0x130 [ 925.190205][T26818] do_recvmmsg+0x31a/0x7f0 [ 925.190228][T26818] ? __pfx_do_recvmmsg+0x10/0x10 [ 925.190253][T26818] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 925.190275][T26818] ? __fget_files+0x3a2/0x420 [ 925.190294][T26818] __x64_sys_recvmmsg+0x198/0x250 [ 925.190309][T26818] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 925.190330][T26818] ? rcu_is_watching+0x15/0xb0 [ 925.190347][T26818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.190363][T26818] do_syscall_64+0x174/0x580 [ 925.190383][T26818] ? trace_irq_disable+0x3b/0x140 [ 925.190407][T26818] ? clear_bhb_loop+0x40/0x90 [ 925.190424][T26818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.190438][T26818] RIP: 0033:0x7fdaf439ce59 [ 925.190461][T26818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.190475][T26818] RSP: 002b:00007fdaf52bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 925.190493][T26818] RAX: ffffffffffffffda RBX: 00007fdaf4616090 RCX: 00007fdaf439ce59 [ 925.190505][T26818] RDX: 0000000000000002 RSI: 0000200000005f80 RDI: 0000000000000003 [ 925.190515][T26818] RBP: 00007fdaf52bb090 R08: 0000000000000000 R09: 0000000000000000 [ 925.190525][T26818] R10: 0000000000002002 R11: 0000000000000246 R12: 0000000000000002 [ 925.190536][T26818] R13: 00007fdaf4616128 R14: 00007fdaf4616090 R15: 00007ffcc092e5d8 [ 925.190555][T26818] [ 926.218265][T26861] gtp6: entered promiscuous mode [ 926.283452][T26861] gtp6: entered allmulticast mode [ 926.337511][T26870] FAULT_INJECTION: forcing a failure. [ 926.337511][T26870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.391149][T26870] CPU: 1 UID: 0 PID: 26870 Comm: syz.2.20775 Not tainted syzkaller #0 PREEMPT(full) [ 926.391175][T26870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 926.391185][T26870] Call Trace: [ 926.391192][T26870] [ 926.391199][T26870] dump_stack_lvl+0xe8/0x150 [ 926.391223][T26870] should_fail_ex+0x40c/0x560 [ 926.391244][T26870] _copy_to_user+0x31/0xb0 [ 926.391266][T26870] simple_read_from_buffer+0xe1/0x170 [ 926.391287][T26870] proc_fail_nth_read+0x1bb/0x230 [ 926.391309][T26870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 926.391330][T26870] ? rw_verify_area+0x24a/0x4c0 [ 926.391350][T26870] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 926.391377][T26870] vfs_read+0x213/0xa80 [ 926.391398][T26870] ? __pfx___mutex_lock+0x10/0x10 [ 926.391420][T26870] ? __pfx_vfs_read+0x10/0x10 [ 926.391442][T26870] ? __fget_files+0x3a2/0x420 [ 926.391459][T26870] ? __fget_files+0x2a/0x420 [ 926.391480][T26870] ksys_read+0x150/0x270 [ 926.391500][T26870] ? __pfx_ksys_read+0x10/0x10 [ 926.391520][T26870] ? rcu_is_watching+0x15/0xb0 [ 926.391539][T26870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.391556][T26870] do_syscall_64+0x174/0x580 [ 926.391576][T26870] ? trace_irq_disable+0x3b/0x140 [ 926.391596][T26870] ? clear_bhb_loop+0x40/0x90 [ 926.391614][T26870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.391630][T26870] RIP: 0033:0x7f514c15d68e [ 926.391646][T26870] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 926.391659][T26870] RSP: 002b:00007f514d01ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 926.391676][T26870] RAX: ffffffffffffffda RBX: 00007f514d0206c0 RCX: 00007f514c15d68e [ 926.391687][T26870] RDX: 000000000000000f RSI: 00007f514d0200a0 RDI: 0000000000000004 [ 926.391697][T26870] RBP: 00007f514d020090 R08: 0000000000000000 R09: 0000000000000000 [ 926.391707][T26870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 926.391716][T26870] R13: 00007f514c416128 R14: 00007f514c416090 R15: 00007ffd4f5a5888 [ 926.391734][T26870] [ 927.467981][T26872] vlan0: left allmulticast mode [ 927.477218][T26872] veth0_vlan: left allmulticast mode [ 927.483560][T26872] vlan0: left promiscuous mode [ 927.668563][T26910] bond30 (unregistering): Released all slaves [ 927.756784][T26920] __nla_validate_parse: 33 callbacks suppressed [ 927.756802][T26920] netlink: 104 bytes leftover after parsing attributes in process `syz.2.20787'. [ 927.792081][T26920] netlink: 48 bytes leftover after parsing attributes in process `syz.2.20787'. [ 928.275865][T26943] netlink: 24 bytes leftover after parsing attributes in process `syz.6.20794'. [ 928.303860][T26942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20795'. [ 928.325371][T26942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.20795'. [ 928.340636][T26947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20796'. [ 928.372349][T26942] erspan0: entered promiscuous mode [ 928.386925][T26942] erspan0: left promiscuous mode [ 928.430184][T26951] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20795'. [ 928.434080][T26958] netlink: 'syz.5.20800': attribute type 1 has an invalid length. [ 928.471089][T26951] netlink: 6 bytes leftover after parsing attributes in process `syz.3.20795'. [ 928.700944][T26968] 8021q: adding VLAN 0 to HW filter on device bond9 [ 928.734948][T26968] bond8: (slave bond9): making interface the new active one [ 928.769160][T26968] bond8: (slave bond9): Enslaving as an active interface with an up link [ 928.941878][T26999] wireguard3: entered promiscuous mode [ 928.953562][T26999] wireguard3: entered allmulticast mode [ 928.985204][T27003] : renamed from bond0 [ 929.132381][T27017] lo: left allmulticast mode [ 929.156146][T27017] tunl0: left allmulticast mode [ 929.175160][T27017] gre0: left allmulticast mode [ 929.201158][T27017] 0ªX¹¦Dö»: left allmulticast mode [ 929.220543][T27017] erspan0: left allmulticast mode [ 929.235841][T27019] netlink: 'syz.5.20821': attribute type 1 has an invalid length. [ 929.237551][T27017] ip_vti0: left allmulticast mode [ 929.255194][T27020] netlink: 'syz.5.20821': attribute type 1 has an invalid length. [ 929.285504][T27017] ip6_vti0: left allmulticast mode [ 929.309685][T27017] sit0: left allmulticast mode [ 929.330053][T27017] ip6tnl0: left allmulticast mode [ 929.343665][T27017] ip6gre0: left allmulticast mode [ 929.401749][T27017] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 929.449925][T27020] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 929.451821][T27033] mac80211_hwsim hwsim131 wlan0: entered promiscuous mode [ 929.676582][T27052] netlink: 256 bytes leftover after parsing attributes in process `syz.6.20828'. [ 929.861030][T27064] syzkaller0: entered promiscuous mode [ 929.880761][T27064] syzkaller0: entered allmulticast mode [ 929.907639][T27070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20834'. [ 930.128160][T27091] syzkaller0: entered promiscuous mode [ 930.143972][T27091] syzkaller0: entered allmulticast mode [ 930.706189][T27141] mac80211_hwsim hwsim83 syzkaller0: left promiscuous mode [ 930.730440][T27141] mac80211_hwsim hwsim83 syzkaller0: left allmulticast mode [ 930.793222][T27148] openvswitch: netlink: Missing key (keys=40, expected=100) [ 931.506745][T27214] batadv0: Caught tx_queue_len zero misconfig [ 931.934991][T27253] syzkaller0: entered promiscuous mode [ 931.949343][T27253] syzkaller0: entered allmulticast mode [ 932.590640][T27308] siw: device registration error -23 [ 932.629702][T27306] 8021q: adding VLAN 0 to HW filter on device bond3 [ 932.657142][T27306] bond0: (slave bond3): Enslaving as a backup interface with a down link [ 932.705955][T27320] FAULT_INJECTION: forcing a failure. [ 932.705955][T27320] name failslab, interval 1, probability 0, space 0, times 0 [ 932.760617][T27320] CPU: 1 UID: 0 PID: 27320 Comm: syz.3.20910 Not tainted syzkaller #0 PREEMPT(full) [ 932.760644][T27320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 932.760654][T27320] Call Trace: [ 932.760661][T27320] [ 932.760669][T27320] dump_stack_lvl+0xe8/0x150 [ 932.760691][T27320] should_fail_ex+0x40c/0x560 [ 932.760711][T27320] should_failslab+0xa8/0x100 [ 932.760733][T27320] ? skb_clone+0x212/0x3a0 [ 932.760748][T27320] kmem_cache_alloc_noprof+0x87/0x650 [ 932.760768][T27320] ? rcu_is_watching+0x15/0xb0 [ 932.760795][T27320] skb_clone+0x212/0x3a0 [ 932.760810][T27320] ? pfkey_broadcast_one+0x7d/0x360 [ 932.760832][T27320] pfkey_broadcast_one+0x9b/0x360 [ 932.760848][T27320] ? pfkey_broadcast+0x1fa/0x3e0 [ 932.760867][T27320] pfkey_broadcast+0x20a/0x3e0 [ 932.760885][T27320] ? pfkey_broadcast+0x48/0x3e0 [ 932.760904][T27320] pfkey_send_notify+0x785/0xde0 [ 932.760922][T27320] ? km_state_notify+0x25/0x1f0 [ 932.760943][T27320] ? __pfx_pfkey_send_notify+0x10/0x10 [ 932.760961][T27320] km_state_notify+0x110/0x1f0 [ 932.760982][T27320] pfkey_flush+0x227/0x360 [ 932.761003][T27320] ? __pfx_pfkey_flush+0x10/0x10 [ 932.761028][T27320] pfkey_sendmsg+0xceb/0x11d0 [ 932.761047][T27320] ? rcu_is_watching+0x15/0xb0 [ 932.761065][T27320] ? rcu_is_watching+0x15/0xb0 [ 932.761081][T27320] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 932.761109][T27320] ? rcu_is_watching+0x15/0xb0 [ 932.761124][T27320] ? aa_sock_msg_perm+0xf1/0x1b0 [ 932.761142][T27320] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 932.761161][T27320] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 932.761181][T27320] ____sys_sendmsg+0x9b9/0xa20 [ 932.761205][T27320] ? __pfx_____sys_sendmsg+0x10/0x10 [ 932.761227][T27320] ? lock_release+0x4b/0x3c0 [ 932.761250][T27320] ? import_iovec+0x73/0xa0 [ 932.761271][T27320] ___sys_sendmsg+0x2a5/0x360 [ 932.761290][T27320] ? rcu_is_watching+0x15/0xb0 [ 932.761301][T27320] ? get_pid_task+0x20/0x1f0 [ 932.761314][T27320] ? __pfx____sys_sendmsg+0x10/0x10 [ 932.761336][T27320] ? rcu_is_watching+0x15/0xb0 [ 932.761362][T27320] ? __fget_files+0x2a/0x420 [ 932.761379][T27320] ? __fget_files+0x3a2/0x420 [ 932.761400][T27320] __x64_sys_sendmsg+0x1b1/0x290 [ 932.761423][T27320] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 932.761450][T27320] ? rcu_is_watching+0x15/0xb0 [ 932.761467][T27320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.761484][T27320] do_syscall_64+0x174/0x580 [ 932.761507][T27320] ? trace_irq_disable+0x3b/0x140 [ 932.761527][T27320] ? clear_bhb_loop+0x40/0x90 [ 932.761545][T27320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.761561][T27320] RIP: 0033:0x7f6a06f9ce59 [ 932.761576][T27320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 932.761590][T27320] RSP: 002b:00007f6a07f34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 932.761608][T27320] RAX: ffffffffffffffda RBX: 00007f6a07215fa0 RCX: 00007f6a06f9ce59 [ 932.761620][T27320] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 932.761630][T27320] RBP: 00007f6a07f34090 R08: 0000000000000000 R09: 0000000000000000 [ 932.761641][T27320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 932.761651][T27320] R13: 00007f6a07216038 R14: 00007f6a07215fa0 R15: 00007ffd1da0a6e8 [ 932.761670][T27320] [ 933.262282][T27336] __nla_validate_parse: 13 callbacks suppressed [ 933.262300][T27336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.20915'. [ 933.542707][ T31] INFO: task syz.0.17767:17871 blocked for more than 143 seconds. [ 933.558222][ T31] Not tainted syzkaller #0 [ 933.564173][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 933.573258][ T31] task:syz.0.17767 state:D stack:27576 pid:17871 tgid:17870 ppid:5624 task_flags:0x400140 flags:0x00080002 [ 933.585484][ T31] Call Trace: [ 933.589688][ T31] [ 933.592757][ T31] __schedule+0x17d9/0x56c0 [ 933.597570][ T31] ? stack_trace_save+0xa9/0x100 [ 933.602636][ T31] ? __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 933.609565][ T31] ? netlink_rcv_skb+0x226/0x4a0 [ 933.614548][ T31] ? genl_rcv+0x28/0x40 [ 933.623084][ T31] ? __pfx___schedule+0x10/0x10 [ 933.627983][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.632894][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.637696][ T31] ? lock_release+0x4b/0x3c0 [ 933.642803][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.647616][ T31] schedule+0x164/0x360 [ 933.652659][ T31] schedule_preempt_disabled+0x13/0x30 [ 933.658262][ T31] __mutex_lock+0x7bf/0x1550 [ 933.665486][ T31] ? __mutex_lock+0x5d4/0x1550 [ 933.670657][ T31] ? nfsd_nl_threads_get_doit+0x1c0/0x790 [ 933.676727][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 933.683350][ T31] ? __nlmsg_put+0xef/0x1b0 [ 933.688139][ T31] ? genlmsg_put+0x137/0x2e0 [ 933.693208][ T31] nfsd_nl_threads_get_doit+0x1c0/0x790 [ 933.699093][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 933.704417][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.710215][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.715087][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 933.724838][ T31] ? __nla_parse+0x40/0x60 [ 933.729848][ T31] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 933.736271][ T31] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 933.743848][ T31] genl_family_rcv_msg_doit+0x233/0x340 [ 933.750208][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 933.756389][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 933.762290][ T31] genl_rcv_msg+0x614/0x7a0 [ 933.766997][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 933.773122][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 933.782803][ T31] ? __netlink_lookup+0xc6/0x8b0 [ 933.787931][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.793361][ T31] netlink_rcv_skb+0x226/0x4a0 [ 933.798307][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 933.804637][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 933.810683][ T31] ? down_read+0x2be/0x330 [ 933.815229][ T31] genl_rcv+0x28/0x40 [ 933.819868][ T31] netlink_unicast+0x7bb/0x940 [ 933.824875][ T31] netlink_sendmsg+0x813/0xb40 [ 933.831139][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.836626][ T31] ? aa_sock_msg_perm+0xf1/0x1b0 [ 933.842195][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 933.847678][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 933.853722][ T31] ____sys_sendmsg+0x9b9/0xa20 [ 933.858565][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 933.865674][ T31] ? lock_release+0x4b/0x3c0 [ 933.871369][ T31] ? import_iovec+0x73/0xa0 [ 933.876056][ T31] ___sys_sendmsg+0x2a5/0x360 [ 933.881300][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 933.886770][ T31] ? futex_wake+0x51b/0x5f0 [ 933.893060][ T31] ? __fget_files+0x2a/0x420 [ 933.897753][ T31] ? __fget_files+0x3a2/0x420 [ 933.908517][ T31] __x64_sys_sendmsg+0x1b1/0x290 [ 933.913875][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 933.920463][ T31] ? rcu_is_watching+0x15/0xb0 [ 933.925303][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.932370][ T31] do_syscall_64+0x174/0x580 [ 933.937038][ T31] ? clear_bhb_loop+0x40/0x90 [ 933.942043][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.948030][ T31] RIP: 0033:0x7f5554f9ce59 [ 933.953739][ T31] RSP: 002b:00007f55531f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 933.962463][ T31] RAX: ffffffffffffffda RBX: 00007f5555215fa0 RCX: 00007f5554f9ce59 [ 933.971289][ T31] RDX: 0000000004040090 RSI: 0000200000000000 RDI: 000000000000000b [ 933.986447][ T31] RBP: 00007f5555032e6f R08: 0000000000000000 R09: 0000000000000000 [ 933.995094][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 934.003804][ T31] R13: 00007f5555216038 R14: 00007f5555215fa0 R15: 00007ffd1ad24d58 [ 934.018351][ T31] [ 934.021755][ T31] INFO: lockdep is turned off. [ 934.026858][ T31] NMI backtrace for cpu 1 [ 934.026876][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 934.026894][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 934.026904][ T31] Call Trace: [ 934.026910][ T31] [ 934.026916][ T31] dump_stack_lvl+0xe8/0x150 [ 934.026937][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 934.027011][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 934.027042][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 934.027056][ T31] sys_info+0x135/0x170 [ 934.027068][ T31] watchdog+0xfd7/0x1030 [ 934.027087][ T31] ? watchdog+0x1c7/0x1030 [ 934.027106][ T31] kthread+0x388/0x470 [ 934.027118][ T31] ? __pfx_watchdog+0x10/0x10 [ 934.027132][ T31] ? __pfx_kthread+0x10/0x10 [ 934.027143][ T31] ret_from_fork+0x514/0xb70 [ 934.027158][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 934.027170][ T31] ? __switch_to+0xc89/0x1420 [ 934.027188][ T31] ? __pfx_kthread+0x10/0x10 [ 934.027199][ T31] ret_from_fork_asm+0x1a/0x30 [ 934.027218][ T31] [ 934.027229][ T31] Sending NMI from CPU 1 to CPUs 0: [ 934.144233][ C0] NMI backtrace for cpu 0 [ 934.144253][ C0] CPU: 0 UID: 0 PID: 4992 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 934.144272][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 934.144282][ C0] RIP: 0010:check_preemption_disabled+0xd/0xe0 [ 934.144313][ C0] Code: 1c 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 07 4e 92 07 <65> 8b 0d fc 4d 92 07 f7 c1 ff ff ff 7f 74 0c 5b 41 5e 41 5f 5d e9 [ 934.144328][ C0] RSP: 0018:ffffc90002e0fc48 EFLAGS: 00000083 [ 934.144343][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 934.144353][ C0] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 934.144364][ C0] RBP: ffffffff824a030f R08: 0000000000000001 R09: 0000000000000000 [ 934.144375][ C0] R10: dffffc0000000000 R11: fffffbfff206229f R12: 0000000000000002 [ 934.144386][ C0] R13: ffffffff8e6148c8 R14: 0000000000000000 R15: 0000000000000001 [ 934.144397][ C0] FS: 00007f0edbf43880(0000) GS:ffff88812527b000(0000) knlGS:0000000000000000 [ 934.144411][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 934.144422][ C0] CR2: 00007f742b8a64c0 CR3: 000000007c33a000 CR4: 00000000003526f0 [ 934.144437][ C0] Call Trace: [ 934.144444][ C0] [ 934.144451][ C0] ? d_lookup+0x1f/0xa0 [ 934.144473][ C0] rcu_is_watching+0x15/0xb0 [ 934.144490][ C0] lock_acquire+0x5f/0x350 [ 934.144514][ C0] ? mnt_get_write_access+0x66/0x280 [ 934.144535][ C0] ? rcu_is_watching+0x15/0xb0 [ 934.144551][ C0] ? rcu_is_watching+0x15/0xb0 [ 934.144566][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.144582][ C0] ? d_lookup+0x1f/0xa0 [ 934.144601][ C0] seqcount_lockdep_reader_access+0x95/0x100 [ 934.144619][ C0] ? d_lookup+0x1f/0xa0 [ 934.144635][ C0] d_lookup+0x1f/0xa0 [ 934.144655][ C0] lookup_one_qstr_excl+0x30/0x360 [ 934.144676][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.144692][ C0] filename_unlinkat+0x2ba/0x610 [ 934.144715][ C0] ? lock_release+0x4b/0x3c0 [ 934.144737][ C0] ? __might_fault+0xaf/0x130 [ 934.144757][ C0] ? __pfx_filename_unlinkat+0x10/0x10 [ 934.144783][ C0] ? do_getname+0x151/0x250 [ 934.144797][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.144813][ C0] __se_sys_unlink+0x2e/0x140 [ 934.144827][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.144843][ C0] do_syscall_64+0x174/0x580 [ 934.144864][ C0] ? clear_bhb_loop+0x40/0x90 [ 934.144882][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.144898][ C0] RIP: 0033:0x7f0edb915937 [ 934.144911][ C0] Code: 00 00 e9 a9 fd ff ff 66 2e 0f 1f 84 00 00 00 00 00 66 90 b8 5f 00 00 00 0f 05 c3 0f 1f 84 00 00 00 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 91 b4 0d 00 f7 d8 64 89 02 b8 [ 934.144924][ C0] RSP: 002b:00007ffef26eddc8 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 934.144940][ C0] RAX: ffffffffffffffda RBX: 0000000000000bb8 RCX: 00007f0edb915937 [ 934.144951][ C0] RDX: 0000000000000000 RSI: 0000000037abb580 RDI: 000055ca408d302e [ 934.144962][ C0] RBP: 0000000000000000 R08: 0000000037ac671e R09: 3fffffffffffffff [ 934.144973][ C0] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 934.144983][ C0] R13: 000055ca408ee100 R14: 0000000000000001 R15: 0000000000000000 [ 934.145001][ C0] [ 934.481911][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 934.489092][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 934.500149][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 934.510653][ T31] Call Trace: [ 934.514071][ T31] [ 934.517464][ T31] vpanic+0x56c/0xa60 [ 934.521584][ T31] ? __pfx___schedule+0x10/0x10 [ 934.528228][ T31] ? __pfx_vpanic+0x10/0x10 [ 934.533101][ T31] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 934.539557][ T31] panic+0xc5/0xd0 [ 934.543807][ T31] ? __pfx_panic+0x10/0x10 [ 934.548308][ T31] ? preempt_schedule_common+0x82/0xd0 [ 934.554307][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 934.561107][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 934.567504][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 934.574382][ T31] watchdog+0x1030/0x1030 [ 934.579163][ T31] ? watchdog+0x1c7/0x1030 [ 934.583611][ T31] kthread+0x388/0x470 [ 934.587713][ T31] ? __pfx_watchdog+0x10/0x10 [ 934.592402][ T31] ? __pfx_kthread+0x10/0x10 [ 934.597253][ T31] ret_from_fork+0x514/0xb70 [ 934.601842][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 934.607402][ T31] ? __switch_to+0xc89/0x1420 [ 934.612101][ T31] ? __pfx_kthread+0x10/0x10 [ 934.616782][ T31] ret_from_fork_asm+0x1a/0x30 [ 934.621725][ T31] [ 934.625092][ T31] Kernel Offset: disabled [ 934.629417][ T31] Rebooting in 86400 seconds..