last executing test programs: 3.152298916s ago: executing program 3 (id=19467): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x1) r1 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) write(r1, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000580)={r3, &(0x7f0000000400), 0x0}, 0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000a80)={r2, 0x0, "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"}, &(0x7f0000000180)=0xfebd) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r5, 0x800448d3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x302, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xbd2d97843a49dd58}, 0x48000) 2.206948927s ago: executing program 3 (id=19484): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x24, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 1.955812744s ago: executing program 4 (id=19488): r0 = socket$kcm(0x11, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003e8a6938dcf19a47cf29950f9e9149b9d13877476c8ef803280969e39099325b52b179513bbf961dc18d193a535da29fb90c6655caf34c0d5a3cb71ece51"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, r1, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={r1, &(0x7f0000000000)='\x00', 0x400300, &(0x7f0000000080)={@_ha_fsid={[0xba8, 0x4]}, {0x4, 0x3, 0x1a, 0x9}}, 0xc9, &(0x7f0000000100), &(0x7f0000000240)=0x9}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x408, 0x1f0, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x370, 0x370, 0x370, 0x370, 0x370, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x29}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @rand_addr=0x64010101, 0x0, 0x0, 'pimreg1\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0xa}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x6, 0x4}, {0x2, 0x4, 0x6}}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp1\x00', {}, {}, 0x73}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x5}}}}, {{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x1}, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000040)=r2, 0xfffffffffffffff5) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f00000004c0)=@ieee802154={0x24, @short={0x2, 0x0, 0x1555d}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="27031c00160014000200", 0xa}, {&(0x7f0000000280)="7d3ed2ea1f2f23edbb324820e73b5f4b1100201a03df64a4853ed1b3", 0x1c}], 0x2}, 0x24000008) 1.954984903s ago: executing program 3 (id=19489): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000020000000000850000009800000095"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 1.785724539s ago: executing program 3 (id=19490): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001700)=""/4112, 0x1010}], 0x1, 0xffffffff, 0x1) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fd3f0000c9e0ccf60000000009e2ff0085000000750000008500000011000013b2848d0095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_xfrm(r2, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0xa, 0x3, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, r5, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 1.776127363s ago: executing program 4 (id=19491): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x5f) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0xcc, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x80, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x4}, {0x4}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x4, 0xe}, 0x2) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.727842193s ago: executing program 0 (id=19492): sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1880}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8884) r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001d00)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e1212f04090000ffe70bcf35ac837225dd355ad309a5ec6096633ba38e1ef5baf006020e5f45c993cb5680017c6720bea9b7c451516a8cff7f00000000000019f20b784b2336d43c8a0f7347801a596dfb0b078a967980ccec1d115c7a0000000000000000000000fed6260fdf140498f1274bc569d0d87656d0d18d903580f0ec0915e89bd286b2c25165043f6a001d53f84eaabf01cc310ff28c7c76867ce1a2c9c91b1db7295614e2a4f8711ec37ae999180cb5bbb9c5382120076e117539d423a2ec0f468db35960831f5f883472327697495b8e8ba8e2f3defbe93e1fc733b06dfc74890a3f63b154e9681d69cdd9894c914ee45c286462888ff84e401a6d8895ffda88a171b7359f815d7b6f7562fba1bbff4cba08f7a3f582d7c604013317281c5e9a8e88b66a4717b3c318f85aecbe8b5f3485f8d31bf5a57b9dd53b382ec017a33d1fabe09daf76b3b0"], 0x6b}, 0x0) 1.578494788s ago: executing program 0 (id=19495): r0 = socket$kcm(0x29, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="f828ce74abafd591ae216687c16b821e29633793eac0fe03a0ff2d44f060c566edcabb8e8f13454078089493275769baa086db1109a2f43c2c8dbc0ec07e50f16a7e5ad2063eb8beb84cce36240b", 0x4e}], 0x1}, 0x4c001) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x64, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x0, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) close(0x3) 1.411073541s ago: executing program 3 (id=19498): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e23, 0xdcf5, @empty, 0x9}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000150053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000007300000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000000)={r5, 0x29c}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) socket$netlink(0x10, 0x3, 0x15) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, &(0x7f0000000080)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000100)={r4, @in6={{0xa, 0x4e23, 0xdcf5, @empty, 0x9}}, 0x3, 0x6}, &(0x7f00000002c0)=0x90) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000150053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000007300000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) ioctl$XFS_IOC_ERROR_INJECTION(r1, 0x40085874, &(0x7f0000000000)={r5, 0x29c}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9a00000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.332520911s ago: executing program 0 (id=19500): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000040000000000850000009800000095"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 1.230690461s ago: executing program 0 (id=19502): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='dctcp', 0x5) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024580072f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 1.179905533s ago: executing program 1 (id=19503): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440100001000010028bd700000010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000020003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000007000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000090000000000000000000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005d07350081000000f4c9f3a56957fc1f396c71e41bc3b39a1f90c71260ac7041d39f77aa4f294e"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x4, &(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYRESOCT=r0, @ANYRESHEX=r0, @ANYRES8=0x0, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRES64=r1], &(0x7f00000001c0)='GPL\x00', 0x10002, 0x0, 0x0, 0x41000, 0x4c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x7f, &(0x7f0000000040)="020c0000098011e8", 0x8) (async, rerun: 32) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000200)=ANY=[@ANYBLOB="720800000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002004e24ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000002004e2064010100"/400], 0x190) (rerun: 32) 1.179662873s ago: executing program 3 (id=19504): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r2, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0xe, @private1, 0xa}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r1, 0x1, 0x1a, 0x0, &(0x7f0000000080)) accept4$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @private1}, &(0x7f00000001c0)=0x1c, 0x800) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) 1.17121864s ago: executing program 2 (id=19505): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) 1.068109988s ago: executing program 1 (id=19506): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) (async) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x50, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x20, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x4}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x7}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2004844}, 0x2) (async, rerun: 32) close(r2) (rerun: 32) socket$unix(0x1, 0x2, 0x0) (async, rerun: 64) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2b, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x881a, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0x4, 0x2, 0x6, 0x101, 0x97}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query, @call={0x85, 0x0, 0x0, 0x31}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xb72c}, @tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, &(0x7f00000000c0), 0x41100, 0x20, '\x00', r4, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x5, 0x9, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x3, 0x4, 0x3, 0x3}, {0x1, 0x4, 0x4, 0xc}, {0x4, 0x1, 0xa, 0x1}, {0x3, 0x2, 0x4}, {0x1, 0x4, 0xe}, {0x0, 0x1, 0x9, 0x6}, {0x1, 0x2, 0x2}], 0x10, 0x3ff}, 0x94) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, r4, 0x25, 0x6, @void}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r6 = socket$kcm(0x11, 0x3, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f14000e00003c0ff000000000ff840000000200000003125ce882cbf490d908f1523f000000002d9c", 0x2e}], 0x1}, 0x8bb3a321efc09a) 915.073704ms ago: executing program 2 (id=19507): unshare(0x26020480) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) socket(0x1, 0x5, 0x0) r1 = socket$kcm(0x10, 0x4, 0x10) recvmsg(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x10000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x86, &(0x7f0000000540)={@multicast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x8, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x1, 0x65, 0x0, 0x1, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xb}, @remote, {[@noop, @timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@local}, {@multicast2, 0xb00}, {@local}, {}, {@initdev={0xac, 0x1e, 0x41, 0x0}}, {@local}, {@rand_addr=0x64010101}, {@multicast1}]}]}}}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x25}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x58, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2c, 0x3, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x6}, @NFTA_SET_ELEM_EXPRESSIONS={0x1c, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)={0x44, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6}, @IPVS_SVC_ATTR_AF={0x6}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_ADDR={0x4, 0x3, @ipv6=@private1}]}]}, 0x44}}, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES8=r8], 0x20}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000163d0a6c2f6f80000000009", @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000"], 0x28}}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0x0, 0x6}, {0x13}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x20044810) socket$kcm(0x10, 0x2, 0x0) 824.780404ms ago: executing program 4 (id=19508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001700)=""/4112, 0x1010}], 0x1, 0xffffffff, 0x1) close(0x3) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, 0x0, 0x880) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fd3f0000c9e0ccf60000000009e2ff0085000000750000008500000011000013b2848d0095000000"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$nl_xfrm(r2, 0x0, 0x4c050) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket(0xa, 0x3, 0x3a) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r4], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000180)={0x11, 0x1, 0x0, 0x1, 0x12, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x14) 749.222469ms ago: executing program 1 (id=19509): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$rose(0xffffffffffffffff, &(0x7f0000000080)="0e09e5ebee5f01d6a736ef3adda93c53ff86f638a7f341eafdf83cdb0bd834e00aa3917a13a4dd6d75a135eb0aaf772cd9c61e7c9e7c50b1998c441703cb70becfb30eef486f0f75994560e5ab03dc7c84a616e72d9efb7f505e3f515d68e04d482bc2477f29a5ba1ed2f5b80700699930875b202d084b164cf7d1a502e6353db26e0dfbff2a8180e1d8a0b80783b61ad1873e109c40a76fd12bcbf8d901205ddad66b9218e405cd5fd29392fc61c4ade4ed3858bcc27622e83d700efcb5a202cdaee2ba844c7f2ade63c32d246750490962f2d5f5e06e69b348ed368981c7041b39e5b854bfdc", 0xe7, 0x20005000, &(0x7f0000000180)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) bind$rose(0xffffffffffffffff, &(0x7f00000001c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast]}, 0x40) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r3, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xe8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000380)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0xdc, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x90, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_FLOWTABLE_HOOK_DEVS={0x7c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xe}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0xa0, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x60, 0x6, "8b7bf902419dfb0a3415c92c563f3a925241feb3ede09cdb1a3fd3e85db1a50e5febcc938e37f15adb943783f21df5155ebdffc8d6d5387cd5f86852f3a397dcd92de0d8e65f3d44e0c694afa34bb06468e62a07ae3be2d25a3a4ec0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWCHAIN={0xa8, 0x3, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x7e, 0xc, "b2cc248934a89a3573bd727f3b8d3fccb27965f9173ac741096382f4bcd47db06e0cff33a2830ec4fc4d054574a6564a1ecf348c7027de4fa92b8531e63895c1993f29bb528f0a83f1e75980aa20648ab54c64c4326ac15917ee02986ba722445b77d3298cb2a39d61777b7fb202f8dbe8b6d1744744f62749aa"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x26c}, 0x1, 0x0, 0x0, 0x4000004}, 0x2400c044) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000800)={r5, &(0x7f0000000700)='wlan1\x00', 0x200, &(0x7f0000000740)={@align=0x7f5, {0x4, 0xfff, 0x5, 0x1b}}, 0xffffffc0, &(0x7f0000000780), &(0x7f00000007c0)=0x6120}) (rerun: 32) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000840)=0x80) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000880), &(0x7f00000008c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000900)={0x0, 0x27, "9339b095fc1dbbdf288b6468d5b2092a60fdaf6d4a92b8f9ba80e5f2c8f1236c62e474ad10b0f7"}, &(0x7f0000000940)=0x2f) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r7, 0x84, 0x1a, &(0x7f0000000980)={r9, 0x1000, "8e0db924584faeabed8408c1ba1925241dbac23b0fbbb54bf6c964d3d44ef4b72322a5d146a090d46dd4256c9b2f92ca28926b2699c7588e8b104f33470698a4f2af26ef3a2979a442261459dfa4d17291a8c9e2e101cc20e3ddf23a24f4b6120b8466bee7b0e10d2dcaec241a6e6272ff5fe180aabc68014148f36e3c0675c66ddeddc624e2902fe00e83808d8f5799947f1f868b082d5f1067456215d3338f1de9ca68a66401d4e7a79f3dbad6069040a713e3b5444d4a821157d4a3d07d9099f924b02ec5645ace3ea0ac55f91f4ded58445d63c34eb84c908de0bc860eb86a3ebf2ea7251ceda9fafe5ba52a6c08b0f282b265d54fea3258088005756c39bc723294a39dd15bfcae7451ba5a399818628a6993644fe24d7093ccbe071e6b99c4110c59dff041bb1ea7b37dffd3269d5cb8676a85ca4c26fcdea85e8289137548f7f5dbe52c1dc1f5d1a94a3609311099d26b4bb1fca331f4c9b2ba5620512494a1a5ca97d2416827d41a84cf636d1e4470113c845f81539fb59402a206ce4b6429d09bd0cc8ee1e00dddfdd4a5443cfdc767887b2bb1b8bdf424106126f52e6197f4fc6cb079ff0a8d852b4843dddb9cfe92ec01ecbe6120f57912f5e30b962c1b4c5a999080de334e96739405e09867b6b34cbb0d970421ea571d8e505a8cae4f9de777245195c87a596511c0252897966213d71e0e5b9602418a324dbaeb71652230dfd6dfb53a156b59948603327b4a362d9500e337722678fe24a8194b615fa29b86bddf59f8abe248175391007fb58633ed19a1d7b83b6293a68a388e730ec192cb8379b9718e97a219036e053d391a613dcaa0cad1a6c860ee91973ecabd2abafa5de92839b584cce07a3e0ce6d0b0617fe3c90accfba86878868790c316b6b1cd59cc55790b50c3956d2e61b68bc398f45f589e311354e3957998f463ed0190021f6dd7cc17d3c9e2d4b89ef74378f6c88c9357f244b279e25b4f62425be642cd0e1a894e450fe77568e26b78adc509c39bd1c8d2a28b9ce95a73bf762eda95dceaeea587a178e77527e5d9ac35dba515d635b8da2b902d99a1de0ef3003cc614ab06b5fad4bc1890c38e62ff551b677d2958f10d0fb93cd6251ffd562b79fb92f0cf22d71f7b721d72967290bfc366e93f0a6fe7d8686857d0bdd0c0ad5cab50dbc29cd514e18dffae3a2a11257496e1b5b5d2c2f2940d0e52c0e138d2ddb73399c74f3f2360239a86aafac933508f09dcaa5abc05738cea4b13021df22a9051c09ee7b28078a73c9e24e4482b813c7c197fc8342169d34ca8e27758ab66a9c411204e70da5e8bedc78a32c6ce38b38da65062a17ed12aea34f84d3f9d0d10c909f5ba2b0cc981dd507994d253976aa14f62ba3ee248b2ed43b34795494996d6517cb1d6af9f60422d967086ddb756c18ea3ac9aacb2da0d6b564670a03148568ed63f466056d870767c7a0c85ec3db3d20d27aa73e6b2fb9b5abb7d4bafb5f7fe088c40a3834d41b7be86b30978340929f4f00d2f3c0ac378fe44c22ea63a8b3bd5d2ea403e7a297cf9556623c134ca5e36599e179e13dbba9aac903355536cc16af0e72e4b299311853b2b6e0072b817d13976b72185cbb4d20c596cced74de936a2069e4e8bdf7c4c93b8a42617a9f398572314131e31742c97f209bd4cbff5d3f157cbc382d6bbae20b1730da47365dcf1f4393b4c1d840654f0f189321077ce8917254ab1a42940de1df0fe8df39213c1b5d375410865e03daa890564c46ea4dbc58ea6de1f1ca469d258e13df52ef0adc52a9335d9da22fa5d876eb9752f656fc36e7695aec5094d89e996f9d5e9e5c884f9da3933c0d9bfd5f2c7ba4cce5c5c6dba5b5b1bde07d26943557250c8c6da2ecb3f6ca8b47634b58e9f551ff7cf7b928516b232a851aa799dd4bb11c1f4b0fe7a6ed71b078aec55a3ead5e0d014302d5b2f2ed6691c9901ac9ad37dc5b277ffa16a224eb20fdb67a46a92628739a958f1293ff7622662cb1dd3b81657581d7b6e06a55c9c4d0d41145076f36c8f6d6b04a212cd6c9f3ebc67a09f0275c795e3ecd9d1d5979ce6f28e2b413e3ab41b14555dd6d2c77ecf884181930fbad28b8f8bb235fdb82c5dd14780504d927ac6412e7bb1e02c4929682bc5817d4337d9fd2f62f3870293fd153801a54e157d608823b581fc640ce8c8963bfb5fc69107ee959860c9a61248eb97fa6003caa411d54d7ab889ac54ab126d5d6909af889a3fb56c499fcf259c1cb2d92bc4cd7a9c8ace2c829a3f25fc126ce460e3c2a46928455f241d88eec24babe62a4ae7003a105452df4e9881977242e19ea8edf8bea4140e2bca31259ae5b16192d28652f21b83efacd90c39c3e5e0d873bc577846d895fcedb7f6a6e99171585ef4eb2a425eb9e82f2155f1b33002491ad529c52e850a187dcd67192f7112ba0d606c65afc42f156ce35ad2c755f201e3580f742bd336da298aa4d3d83c5618ce7c455dd829de1791b24a4ce402f85f2a43e5ea9dda554dad260dc43c332678857750358ea5c0b238ae3522447023dd750b2a07729ac470d30503b8fdda52c94b732e50a92d39463c8909853038e924eef2178c59e44a8e831d6ae9ff3517d121d7ad8a4e29e5948c654439f7f4fdefcf5ab47a40c71e03065cbc39838480255a8f493168d89eda0de926d678ace2a5bb142faf8433eb8e869f275757893afc2d6c054a6579ff702909d1038edd3a24b25a986180be5bef97615041ef518435f76b8bd30bcbef472e9509a02087652d6920e89c28bdcc910437ac4147571bd829ebe95af38ab439efe6e9001adb0ce638d212e465512f51641ff2363a6cbf85646b91b8cd1dfd75d28bb1079ef60f0f2f26d563d8473083732eff578df8526f5296d35356a27c671a19c54b81a3d3c57afa3fe6197a7e9287cf4b1c14d29b641bb0bf461bc7f79a429a84d3403e5ce5d80645b9e035df6e44f5b6675677b93972806dddce885ffc6fb06794522afa994f650e86877d8bd91b8ef8414e30f6a33de4d71503647d9f006a69a5021abf7c8521215020fd70ffa4b4fc6fc10fa642a885b84185d2aea31732f3d369c4e7a305ddf59f891be54810f82f6e2040b766e87fd535eb4eeadd89d6864c535b36e519ba10f5fb502b1365b784cbeccb6d9077502023ac7d0fabe09cb943b48938b98117e4a8fe0898e003200b83e5cc3d9eb8be240500e840db2b7159b51b1a453342bbe3d8916219ea2cc8329a99104e6e031b5118c1923060a5c820b38890416d447c5c01d860baf9348233f5bd935ee026e760efab4890eb75e2a2127207d47fbc2b24ea1952a22024e76e5d0f97562a621e631de3be4c70218e419a694ed7e47d576b0bb823d50c227c74a3c778a38010a09b9d2b482fc48851b03cb2720e6cae68eb49afc7d450a50323667f55e30befb371ca7e5944ad89ad392da7ab339435c0111225cf6132c1821cf3098196097bb36743c86faf72ad543127631d3086c19dfa15fd0a52f03a451009d1d481917463eb78cd9a2b39fd8b8dfc78ce7028a4a700a557980c964a08f311cdee85662686614921fe79c1e9d5249a6120f1eff9511fa5c35bd8d83c7bb24807a0503d9fcd8feea480aa487f35695221ff3db78eecb77ad58d233498510a670aa3686b592dd74f8c8d99a9e01e834ed0c97a96b339ccc540da99f40b6818dc7f328d38ea4ee4f10716c774abd6ef0c531fa7865138813c641442bf9f21e6cf93bcbd297b50abc1ad358bf026e8c7f6469b3e1d7a5087b418aadab793d36dc50f4ed62a1c6eae0711a66216eb29d664a4db3abc12346d51ff5dc888a23f148fa461e4a515a29de09a85ccd0e228166e1e031ae56e8a39efc15348cb00a696805859c16e6a98b2fd7a7baa525aa4eb1224905106b295b30c753e99cfedfafa4f0b1f1019ad5de88677063b24c83edc5cd6b4918b431b26ea65074689ba194344db1886d96fce870bf4ad3861afc3c806a43e8569f7afc38a3fcf9410ff0301551e8e8fb508af0f64f8e53904d05195bef1435cea833dd6d558246d9dc9eca2691a0d683355d73eccae81b5c566651e34f7c465cff4ce2675542100f43dde70881da18daba1a35042ce9475e888bfd46f5fd52902a6d7528422682fc0725add848aa47b6404db3f32fca895509936e5e0cde3cd92554059c75ab4c787fe5986e5fcfb069ddb765150104ccee917e4d97ede7c4562fd80ae56036f92ee4c57cbdee7c1842b8609276537f117d01cb1e248f266c570d656e261c54ecb4f557d0a6a67079c40ba24603265b9eb227c2627a2fa3fb345d9bf6f0e55d938fca6e531e5dd6cbd0d3eab5eee591479f4ddec40a6620b9e477769e48416469e72a7bfcc99db25cff9cce32791246a09919b8d0079238fb7345c095566fc047b840cc36262ac76a98371e487f7d4d1e65772ed87038a0bfd6184747d0227865af24119ad26d44701049d83bdcaf6ff697f2aa73092885b591c97591d25d0f2c80d3a9326df12c84082307d27de11bc110fdef6a8ad4e043b2e9ed0a0800d969da0b9b21365125a1cb8e1393261de2128735ded66da04a38258d55cb2b664520c6d0afeb36c3a9ca6c1b2a8425c8b8e60b9d7144d117925deff7b0dbe401012a8aba38977f296c891e2de855ef4082865b6792be2af46a2c4ae752775608f2d428e6191b6cc04dfe4c9e8779f0a9422a91a24bd544fe9f8522c97789a2042a2df7a9a736c9800237909e029675effc098f81692d2f02a2c2c828f80ef9dcfbd39f68c96dd0b9934a86592458fcd6d372944c3e92038163e01ed9e97cfecff1a5aa070b631621b11e56c300b8071af5fe709b50920516459b1f9b3600dfc9a8a1069832bfc4f21181162cca7bd160b0af7995ecf5118236fb2c3c006537f037f59dbfc8060c2bbb6379006dc9c4e01c35b0405d7e70a29782a108607af8783de166651cd76837b924e23fb269f814bda3a942ddf6d1241649f4c98052d64c4ba4ed313b499d7b6f48ae3daba3fbae9a56342e2896944d6645be623384db8a8cfaf630f0010deab4d40a025c77886ac5d175a723a1095484a41e14a96cda3792611f672ef9b3b116d23d836bfddd2115a72fb2b7dbc5effc6935060c38a2daccb10ed7621fd3af8c76de6a6f0b25556badfb61db339d74a4c7982240153e5a6a534cf29f4cefea4d44c4098fd862900780f388cb05c936dba585cd6148f96b74dd28fc982a3fb7733537edcdbf13267a31cacf783a520ded84c6d6c210eb91a868e035cc031fe8fccf224a847fe2751e9d6ccc88384eaceb918bb0584dec4d45bb59c1db3fdbb522b7cc79344d2a587ec5e400d8160fedfd5afe67d194c707413e7742854bf80da82e7cfcac0e43e20d5ca2dc9bb62e7dbf12328b47a3a4c5087461cf4f5ee7c9ff21c3c2056992bdad1420c5175da15812da516fcd87dddd8b8cb225825a74b32ee0bf48a8cf25931dae0e80bbf011461ef6c9ee5f4ffede4b9061685a26f522790a872d6bfb893551281891858d144ddbd76e20e1c50428399484148d47f3eb62f1661fac40be70750c0588d7d44b7f6f700e3b8321dc9cce0f2a9acf9495db7e7c439853d738f575046e9219c73ce28a3b5e3ffcc78c1f0a09aa842d48f3e55863ddfb3fbee7bf143ca51ed7df9483d90ba91bb7833fd42ab8a4782fae5a0fbb32648c786f58e24bc656aa63d05621503243028a1406c2f9756e26b0ad18116f0377b8d3a2f577a6bac4543796ce2f08d45a7d51e40e7be7ab1c7ad297e1e"}, &(0x7f00000019c0)=0x1008) (async, rerun: 32) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000001a00)={0x0, 0xdf7, 0x7}) (rerun: 32) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000001a40)={r9, 0x7f, "adf49ca497b809ecd2465925afe89347fce89fefe745b78377ccaa237860620475918a29367d911e5d9ba986a2fca09af3bb7b586ac889f81160f8c767850e1946324829b9552519cf37a395042e233edc1e27685849244b3824fd106b205a683dbd0b1fd76c9595895cd3b121cf7bd057b75b7cabda8bce0962e006e19420"}, &(0x7f0000001b00)=0x87) (async, rerun: 32) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000001b40)={0x1b, 0x104, 0x9, 0x4523, 0x2}) (async, rerun: 32) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000001b80)={0x6, 'macsec0\x00', {0x7ba}, 0xffff}) (async) r10 = accept$ax25(r7, &(0x7f0000001bc0)={{0x3, @null}, [@null, @null, @null, @null, @remote, @remote, @bcast]}, &(0x7f0000001c40)=0x48) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000001c80)={0x0, 'team0\x00', {0x3}}) (async) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000001cc0)={0x1, 0x4, 0x81, 0x8, @vifc_lcl_ifindex=r2, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async, rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELCHAIN={0x28, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14}}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x20000) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x40, 0x1402, 0x20, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x5) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001f40)=0x0) (rerun: 32) syz_open_procfs$namespace(r11, &(0x7f0000001f80)='ns/ipc\x00') (async) ioctl$NILFS_IOCTL_GET_SUINFO(0xffffffffffffffff, 0x80186e84, &(0x7f0000002000)={&(0x7f0000001fc0)=[{0x101, 0x5}, {0x6, 0x1}, {0x1, 0x6, 0x2}, {0x43a, 0x7f, 0x1}], 0x4, 0x10, 0x2, 0x3}) 555.359307ms ago: executing program 1 (id=19510): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41}, 0x94) 507.375011ms ago: executing program 2 (id=19511): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800002102004000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0040000000000000b702000014000000b70300000000000085000000c2000000bf090000000000005509010000000000950000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff030000850000000600000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b702000000000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x1001, &(0x7f0000001cc0)=""/4097, 0x41100, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 445.889173ms ago: executing program 1 (id=19512): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'team0\x00', @remote}) socket$inet_icmp_raw(0x2, 0x3, 0x1) unshare(0x2c060000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000001"], 0x50) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="02032000190000000000000000000000040003"], 0xc8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000040000701feffffff00000000017c0000040042800c0001008000000000000025f0506fe37ecc63f0d34c0ae6f87a1769d12ed1e7f52748e6eed8a43ecfd22ac4195284e1c82113a2a7fc67f3ced65ab0faf6294a4e71bc98e93e61bfc6b088dee5d1985d73", @ANYRES32, @ANYBLOB="04000280"], 0x28}, 0x1, 0x0, 0x0, 0x4c815}, 0xc000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f00000002c0), &(0x7f0000000240)=r5}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000300)={'ip6tnl0\x00', @random="7d5b84e55fdd"}) 319.938336ms ago: executing program 2 (id=19513): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x30}}, 0x10) connect$inet(r0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000140)={0x6, 0x8000, 0xffffffff}, 0xc) 319.577875ms ago: executing program 4 (id=19514): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000400040000000000850000009800000095"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) 271.265402ms ago: executing program 0 (id=19515): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f00000000c0)=ANY=[@ANYBLOB="726177000000000000000000000000000000000000000000000000000000052617000000a829a2d82832ec3830a48e8e7b3cd65242d50f75c00dcb"], &(0x7f0000000100)=0x3b) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdafe, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x1, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0xa, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfff, 0x9, 0xcd5f, 0x30, 0x9, 0x7, 0x3, 0xffffbba5, 0x81}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c0e1}, 0x4008000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}, 0x0) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) sendmmsg(r9, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008094) recvmsg(r1, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2000c004, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) 150.619302ms ago: executing program 2 (id=19516): sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)={0x174, 0xb, 0x6, 0x101, 0x0, 0x0, {0xd, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}]}, @IPSET_ATTR_ADT={0x90, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xfff}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0x33}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x973}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x14, 0x1a, 'veth1_virt_wifi\x00'}}]}, @IPSET_ATTR_ADT={0x7c, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'ip6gretap0\x00'}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}]}, 0x174}, 0x1, 0x0, 0x0, 0x20000014}, 0x800) 150.389778ms ago: executing program 4 (id=19517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x1300, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x9c}}, 0x0) 11.7823ms ago: executing program 1 (id=19518): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r3, 0x29, 0x49, 0x0, 0x5f) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)={0x184, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0xbc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}}, @WGPEER_A_ALLOWEDIPS={0x48, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8bd007d966a3d547635e65e1c5ffead3e7e55a1434a726cc00"}]}, {0x4}, {0x44, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x4}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000000)={0x4, 0xe}, 0x2) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 11.30676ms ago: executing program 0 (id=19519): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) accept(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18e30000000023b7cc3c19d0d23de4df08f7d008855b8cf62555f19b62035cdf74acd1725b956e8b2b0e4098690eba65d3a5fe70506c891f08c1d216b0ea52ace398d2514c7d23202898edebd69baaa39dcdb7b3efb708cbee4258e3f15fbd6a2de7d53f36104275", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x3390d9166fb455c1, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffff9}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000007bc0)={0x0, 0x0, &(0x7f0000007b80)={&(0x7f0000007b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="6ed58e01002bbd7000fedbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000280)={'dvmrp0\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010026bd70000400000005000000080009000200000008000c000300000008000b00000000000600010007"], 0x40}}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r9) sendmsg$L2TP_CMD_TUNNEL_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYRES64=r7, @ANYBLOB="8bb06883b10b0015d00265e53a64e73eae03485bbbe8dd6101862a29955368a5f75ac0719009a474ee26174d5e40029894fcbd2e1bd9fba0bd57e9806c11337a8250dc747b63f809f4f7359b3926ca1d7f0ea30a282eb375abe0164d397dca55ba6b250fd80f98d2bcacefaf6d75427e8ef586cf1513374b2284986c2002f8bca085a5962237bd6f5710db3aa4ec5febfdd0cdf61d2cd7a6544a", @ANYBLOB="2503000400000000000008000000"], 0x14}}, 0x4800) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001800010324fd7002fadbcf250f0000009917ab46"], 0x14}}, 0x0) 4.052624ms ago: executing program 2 (id=19520): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000005d40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18}], 0x30, 0x40001}], 0x1, 0x8004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x5, 0x30000009, 0xa5f, 0x8}, @private=0xa010100, @loopback, 0xff000000, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 0s ago: executing program 4 (id=19521): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f0000000300)="f901f1d321ce9dafa7fda7da", 0xc}, {0x0}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f0000000a00)="78553180", 0x4}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000000500)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc1ef79cd38a279d05", 0x9}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000005c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b03502aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010101}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x58}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}], 0x2}}], 0x3, 0x4040040) kernel console output (not intermixed with test programs): yzkaller0: entered allmulticast mode [ 1710.411288][T31660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1710.444045][T31660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1710.475382][T25988] Bluetooth: hci4: command tx timeout [ 1710.510015][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.519798][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.535592][T31797] xt_bpf: check failed: parse error [ 1710.550750][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.577376][ T1086] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1710.760603][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.772905][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1710.795199][T31804] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1710.822847][T31804] netlink: 'syz.2.18311': attribute type 1 has an invalid length. [ 1710.832091][T31804] netlink: 'syz.2.18311': attribute type 2 has an invalid length. [ 1710.905614][ T6032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1710.950019][ T6032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1711.249759][T31826] netlink: 'syz.4.18317': attribute type 13 has an invalid length. [ 1711.584966][T31838] warn_alloc: 3 callbacks suppressed [ 1711.584984][T31838] syz.3.18319: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1711.620806][T31827] syzkaller0: entered promiscuous mode [ 1711.642360][T31838] [ 1711.644771][T31838] CPU: 1 UID: 0 PID: 31838 Comm: syz.3.18319 Not tainted syzkaller #0 PREEMPT(full) [ 1711.644799][T31838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1711.644812][T31838] Call Trace: [ 1711.644822][T31838] [ 1711.644831][T31838] dump_stack_lvl+0xe8/0x150 [ 1711.644868][T31838] warn_alloc+0x249/0x340 [ 1711.644896][T31838] ? stack_trace_save+0xa9/0x100 [ 1711.644922][T31838] ? __pfx_warn_alloc+0x10/0x10 [ 1711.644954][T31838] ? kasan_save_track+0x4f/0x80 [ 1711.644976][T31838] ? kasan_save_track+0x3e/0x80 [ 1711.644996][T31838] ? __kasan_kmalloc+0x93/0xb0 [ 1711.645018][T31838] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1711.645041][T31838] ? xskq_create+0x56/0x170 [ 1711.645069][T31838] ? xsk_setsockopt+0x54c/0x990 [ 1711.645093][T31838] ? do_sock_setsockopt+0x17c/0x1b0 [ 1711.645124][T31838] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1711.645155][T31838] ? do_syscall_64+0x14d/0xf80 [ 1711.645190][T31838] __vmalloc_node_range_noprof+0x132/0x1730 [ 1711.645246][T31838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1711.645277][T31838] ? __kasan_kmalloc+0x93/0xb0 [ 1711.645307][T31838] vmalloc_user_noprof+0xad/0xe0 [ 1711.645349][T31838] ? xskq_create+0xbf/0x170 [ 1711.645378][T31838] xskq_create+0xbf/0x170 [ 1711.645418][T31838] xsk_init_queue+0x8a/0xe0 [ 1711.645450][T31838] xsk_setsockopt+0x54c/0x990 [ 1711.645481][T31838] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1711.645510][T31838] ? __pfx_aa_sk_perm+0x10/0x10 [ 1711.645543][T31838] ? aa_sock_opt_perm+0xff/0x1a0 [ 1711.645576][T31838] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1711.645600][T31838] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1711.645630][T31838] do_sock_setsockopt+0x17c/0x1b0 [ 1711.645669][T31838] __x64_sys_setsockopt+0x13d/0x1b0 [ 1711.645710][T31838] do_syscall_64+0x14d/0xf80 [ 1711.645742][T31838] ? trace_irq_disable+0x3b/0x150 [ 1711.645782][T31838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.645807][T31838] ? clear_bhb_loop+0x40/0x90 [ 1711.645835][T31838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.645858][T31838] RIP: 0033:0x7fd7e2d9c799 [ 1711.645880][T31838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.645901][T31838] RSP: 002b:00007fd7e3c5b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1711.645927][T31838] RAX: ffffffffffffffda RBX: 00007fd7e3015fa0 RCX: 00007fd7e2d9c799 [ 1711.645944][T31838] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1711.645956][T31838] RBP: 00007fd7e2e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 1711.645971][T31838] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1711.645984][T31838] R13: 00007fd7e3016038 R14: 00007fd7e3015fa0 R15: 00007ffd17c2bb78 [ 1711.646025][T31838] [ 1711.646036][T31838] Mem-Info: [ 1711.658349][T31827] syzkaller0: entered allmulticast mode [ 1711.803016][T31839] netlink: 'syz.3.18319': attribute type 1 has an invalid length. [ 1711.830378][T31838] active_anon:10055 inactive_anon:0 isolated_anon:0 [ 1711.830378][T31838] active_file:3051 inactive_file:41597 isolated_file:0 [ 1711.830378][T31838] unevictable:768 dirty:258 writeback:0 [ 1711.830378][T31838] slab_reclaimable:15102 slab_unreclaimable:153462 [ 1711.830378][T31838] mapped:36347 shmem:1533 pagetables:1722 [ 1711.830378][T31838] sec_pagetables:0 bounce:0 [ 1711.830378][T31838] kernel_misc_reclaimable:0 [ 1711.830378][T31838] free:1161126 free_pcp:25559 free_cma:0 [ 1711.889306][T31839] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18319'. [ 1711.995785][T31838] Node 0 active_anon:40220kB inactive_anon:0kB active_file:12204kB inactive_file:166180kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:22508kB dirty:1032kB writeback:0kB shmem:4596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18296kB pagetables:6704kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1712.098029][T31838] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122880kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1712.190520][T31838] Node 0 DMA free:11168kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:40kB free_cma:0kB [ 1712.226892][T31838] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1712.244771][T31838] Node 0 DMA32 free:1211556kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40220kB inactive_anon:0kB active_file:12204kB inactive_file:166180kB unevictable:1536kB writepending:1032kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:43348kB local_pcp:21476kB free_cma:0kB [ 1712.368683][T31838] lowmem_reserve[]: 0 0 0 0 0 [ 1712.390154][T31838] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1712.493027][T31848] xt_bpf: check failed: parse error [ 1712.498339][T31838] lowmem_reserve[]: 0 0 0 0 0 [ 1712.507825][T31838] Node 1 Normal free:3439304kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:67072kB local_pcp:32652kB free_cma:0kB [ 1712.549523][T25988] Bluetooth: hci4: command tx timeout [ 1712.569027][T31838] lowmem_reserve[]: 0 0 0 0 0 [ 1712.574651][T31838] Node 0 DMA: 0*4kB 2*8kB (U) 1*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11168kB [ 1712.590242][T31838] Node 0 DMA32: 4723*4kB (UME) 9965*8kB (UME) 7434*16kB (UME) 1384*32kB (UME) 420*64kB (UME) 244*128kB (UME) 462*256kB (UME) 380*512kB (UME) 351*1024kB (UME) 114*2048kB (UM) 0*4096kB = 1225684kB [ 1712.610125][T31838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1712.622073][T31851] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18322'. [ 1712.693575][T31852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18323'. [ 1712.711188][T31838] Node 1 Normal: 10*4kB (U) 13*8kB (UM) 6*16kB (UM) 8*32kB (UM) 25*64kB (UM) 17*128kB (UM) 19*256kB (UM) 20*512kB (UM) 16*1024kB (UM) 15*2048kB (U) 829*4096kB (UM) = 3462064kB [ 1712.732250][T31852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18323'. [ 1712.764760][T31853] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1712.772065][T31838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.791527][T31853] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 1712.806340][T31838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1712.840125][T31838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1712.865333][T31853] team6: left promiscuous mode [ 1712.874779][T31838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1712.875965][T31853] team6: left allmulticast mode [ 1712.914815][T31860] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1712.924167][T31838] 46176 total pagecache pages [ 1712.935381][T31838] 0 pages in swap cache [ 1712.941840][T31853] team7: left promiscuous mode [ 1712.948044][T31838] Free swap = 124996kB [ 1712.953435][T31853] team7: left allmulticast mode [ 1712.962790][T31838] Total swap = 124996kB [ 1712.967264][T31853] team8: left promiscuous mode [ 1712.971992][T31838] 2097051 pages RAM [ 1712.980427][T31838] 0 pages HighMem/MovableOnly [ 1712.985332][T31853] team8: left allmulticast mode [ 1712.996767][T31853] bond4: left promiscuous mode [ 1713.000431][T31838] 427072 pages reserved [ 1713.008131][T31838] 0 pages cma reserved [ 1713.012526][T31853] wireguard0: left promiscuous mode [ 1713.054876][T31853] team9: left promiscuous mode [ 1713.060933][T31853] team9: left allmulticast mode [ 1713.067318][T31853] team10: left promiscuous mode [ 1713.075201][T31853] team10: left allmulticast mode [ 1713.105182][T31853] team11: left promiscuous mode [ 1713.122611][T31853] team11: left allmulticast mode [ 1713.140768][T31853] team12: left promiscuous mode [ 1713.145700][T31853] team12: left allmulticast mode [ 1713.174514][T31853] vlan0: left promiscuous mode [ 1713.180437][T31853] vlan0: left allmulticast mode [ 1713.195543][T31853] hsr_slave_1: left allmulticast mode [ 1713.210979][T31853] team13: left promiscuous mode [ 1713.220409][T31853] team13: left allmulticast mode [ 1713.240613][T31853] team14: left promiscuous mode [ 1713.245611][T31853] team14: left allmulticast mode [ 1713.260441][T31853] team15: left promiscuous mode [ 1713.265363][T31853] team15: left allmulticast mode [ 1713.291606][T31853] team16: left promiscuous mode [ 1713.300458][T31853] team16: left allmulticast mode [ 1713.334616][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1713.365699][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1713.397466][T31865] team_slave_0: entered promiscuous mode [ 1713.403233][T31865] team_slave_1: entered promiscuous mode [ 1713.410314][T31865] macsec1: entered promiscuous mode [ 1713.415830][T31865] team0: entered promiscuous mode [ 1713.423692][T31865] team0: Device macsec1 is already an upper device of the team interface [ 1713.442061][T31865] team0: left promiscuous mode [ 1713.451001][T31865] team_slave_0: left promiscuous mode [ 1713.456438][T31865] team_slave_1: left promiscuous mode [ 1713.476720][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1713.486815][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1713.964578][T31885] netlink: 'syz.1.18335': attribute type 1 has an invalid length. [ 1714.087892][T31889] syzkaller0: entered promiscuous mode [ 1714.095497][T31889] syzkaller0: entered allmulticast mode [ 1714.293225][T31894] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1714.629663][T25988] Bluetooth: hci4: command tx timeout [ 1714.715509][T31904] __nla_validate_parse: 4 callbacks suppressed [ 1714.715532][T31904] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18342'. [ 1714.739110][T31904] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18342'. [ 1715.037531][T31915] netlink: 164 bytes leftover after parsing attributes in process `syz.2.18344'. [ 1715.115561][T31920] netlink: 'syz.0.18347': attribute type 1 has an invalid length. [ 1715.125054][T31920] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18347'. [ 1715.138426][T31920] netlink: 56 bytes leftover after parsing attributes in process `syz.0.18347'. [ 1715.242093][T31926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18349'. [ 1715.298803][T31925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18350'. [ 1715.658852][T31947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18355'. [ 1715.683680][T31947] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18355'. [ 1715.695696][T31947] netlink: 'syz.0.18355': attribute type 5 has an invalid length. [ 1715.705663][T31949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1716.247516][T31977] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1716.364919][T31982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18362'. [ 1716.709168][T25988] Bluetooth: hci4: command tx timeout [ 1716.872065][T28959] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1716.886226][T28959] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1716.902418][T28959] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1716.920003][T28959] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1716.927709][T28959] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1717.051798][T32002] wg1 speed is unknown, defaulting to 1000 [ 1717.345084][T32020] netlink: 'syz.1.18375': attribute type 1 has an invalid length. [ 1717.443064][T32002] chnl_net:caif_netlink_parms(): no params data found [ 1717.812850][T32002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1717.820419][T32002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.827873][T32002] bridge_slave_0: entered allmulticast mode [ 1717.836570][T32002] bridge_slave_0: entered promiscuous mode [ 1717.846091][T32002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1717.853722][T32002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.862428][T32002] bridge_slave_1: entered allmulticast mode [ 1717.873178][T32002] bridge_slave_1: entered promiscuous mode [ 1717.915958][T32002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1717.931426][T32002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1718.014654][T32002] team0: Port device team_slave_0 added [ 1718.031814][T32002] team0: Port device team_slave_1 added [ 1718.073878][T32002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1718.083036][T32002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.115008][T32002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1718.143144][T32002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1718.153095][T32002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1718.206212][T32002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1718.307861][T32002] hsr_slave_0: entered promiscuous mode [ 1718.315848][T32002] hsr_slave_1: entered promiscuous mode [ 1718.323847][T32002] debugfs: 'hsr0' already exists in 'hsr' [ 1718.341443][T32002] Cannot create hsr debugfs directory [ 1718.773098][T32066] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1718.913030][T32082] syzkaller0: entered promiscuous mode [ 1718.918674][T32082] syzkaller0: entered allmulticast mode [ 1719.033466][T25988] Bluetooth: hci0: command tx timeout [ 1719.166108][T32093] sctp: [Deprecated]: syz.4.18403 (pid 32093) Use of int in max_burst socket option deprecated. [ 1719.166108][T32093] Use struct sctp_assoc_value instead [ 1719.234268][T32093] team0: entered promiscuous mode [ 1719.241077][T32093] team0: entered allmulticast mode [ 1719.246678][T32093] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.278533][T32096] team3: entered promiscuous mode [ 1719.284104][T32096] team3: entered allmulticast mode [ 1719.290407][T32096] 8021q: adding VLAN 0 to HW filter on device team3 [ 1719.418778][T32002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1719.431864][T32002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1719.443549][T32002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1719.454083][T32002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1719.525356][T32107] netlink: 'syz.4.18405': attribute type 1 has an invalid length. [ 1719.561539][T32107] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1719.585525][T32107] bond1: (slave dummy0): making interface the new active one [ 1719.601256][T32107] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 1719.615368][T32002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1719.639753][T32002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1719.654284][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.661539][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.710719][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.717941][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.754937][T32110] __nla_validate_parse: 11 callbacks suppressed [ 1719.754960][T32110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18406'. [ 1720.228563][T32002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1720.376879][T32002] veth0_vlan: entered promiscuous mode [ 1720.416376][T32002] veth1_vlan: entered promiscuous mode [ 1720.453623][T32136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18413'. [ 1720.481128][T32137] netlink: 11 bytes leftover after parsing attributes in process `syz.4.18414'. [ 1720.513209][T32137] syzkaller0: entered promiscuous mode [ 1720.542180][T32137] syzkaller0: entered allmulticast mode [ 1720.567091][T32136] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1720.640330][T32002] veth0_macvtap: entered promiscuous mode [ 1720.666868][T32002] veth1_macvtap: entered promiscuous mode [ 1720.772250][T32002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1720.808374][T32002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1720.848122][ T1086] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.862002][ T1086] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.878113][ T1086] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.890080][T32151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18419'. [ 1720.901729][ T1086] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1720.920846][T32151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18419'. [ 1721.052080][T32159] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1721.111282][T28959] Bluetooth: hci0: command tx timeout [ 1721.213090][ T6032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.241680][ T6032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.296655][T32163] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18423'. [ 1721.382900][T32165] bond1: Removing last arp target with arp_interval on [ 1721.412969][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1721.445572][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.897339][T32191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18433'. [ 1721.998681][T32187] wg1 speed is unknown, defaulting to 1000 [ 1722.011870][T32196] xt_bpf: check failed: parse error [ 1722.251405][T32207] warn_alloc: 2 callbacks suppressed [ 1722.251428][T32207] syz.0.18441: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 1722.263705][T32204] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1722.308446][T32207] ,cpuset=/,mems_allowed=0-1 [ 1722.309243][T32209] netlink: 'syz.0.18441': attribute type 1 has an invalid length. [ 1722.321174][T32204] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 1722.330133][T32207] CPU: 0 UID: 0 PID: 32207 Comm: syz.0.18441 Not tainted syzkaller #0 PREEMPT(full) [ 1722.330161][T32207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1722.330176][T32207] Call Trace: [ 1722.330185][T32207] [ 1722.330196][T32207] dump_stack_lvl+0xe8/0x150 [ 1722.330234][T32207] warn_alloc+0x249/0x340 [ 1722.330263][T32207] ? stack_trace_save+0xa9/0x100 [ 1722.330291][T32207] ? __pfx_warn_alloc+0x10/0x10 [ 1722.330325][T32207] ? kasan_save_track+0x4f/0x80 [ 1722.330348][T32207] ? kasan_save_track+0x3e/0x80 [ 1722.330370][T32207] ? __kasan_kmalloc+0x93/0xb0 [ 1722.330393][T32207] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1722.330418][T32207] ? xskq_create+0x56/0x170 [ 1722.330447][T32207] ? xsk_setsockopt+0x54c/0x990 [ 1722.330472][T32207] ? do_sock_setsockopt+0x17c/0x1b0 [ 1722.330515][T32207] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1722.330549][T32207] ? do_syscall_64+0x14d/0xf80 [ 1722.330587][T32207] __vmalloc_node_range_noprof+0x132/0x1730 [ 1722.330648][T32207] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1722.330682][T32207] ? __kasan_kmalloc+0x93/0xb0 [ 1722.330714][T32207] vmalloc_user_noprof+0xad/0xe0 [ 1722.330739][T32207] ? xskq_create+0xbf/0x170 [ 1722.330769][T32207] xskq_create+0xbf/0x170 [ 1722.330802][T32207] xsk_init_queue+0x8a/0xe0 [ 1722.330840][T32207] xsk_setsockopt+0x54c/0x990 [ 1722.330871][T32207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1722.330900][T32207] ? __pfx_aa_sk_perm+0x10/0x10 [ 1722.330932][T32207] ? aa_sock_opt_perm+0xff/0x1a0 [ 1722.330966][T32207] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1722.330991][T32207] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1722.331020][T32207] do_sock_setsockopt+0x17c/0x1b0 [ 1722.331059][T32207] __x64_sys_setsockopt+0x13d/0x1b0 [ 1722.331101][T32207] do_syscall_64+0x14d/0xf80 [ 1722.331133][T32207] ? trace_irq_disable+0x3b/0x150 [ 1722.331166][T32207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.331191][T32207] ? clear_bhb_loop+0x40/0x90 [ 1722.331219][T32207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.331242][T32207] RIP: 0033:0x7f1a1819c799 [ 1722.331265][T32207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.331285][T32207] RSP: 002b:00007f1a18f93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1722.331310][T32207] RAX: ffffffffffffffda RBX: 00007f1a18415fa0 RCX: 00007f1a1819c799 [ 1722.331328][T32207] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1722.331343][T32207] RBP: 00007f1a18232c99 R08: 0000000000000004 R09: 0000000000000000 [ 1722.331358][T32207] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1722.331372][T32207] R13: 00007f1a18416038 R14: 00007f1a18415fa0 R15: 00007fffc02e4258 [ 1722.331409][T32207] [ 1722.361791][T32209] netlink: 224 bytes leftover after parsing attributes in process `syz.0.18441'. [ 1722.413289][T32207] Mem-Info: [ 1722.413309][T32207] active_anon:10831 inactive_anon:0 isolated_anon:0 [ 1722.413309][T32207] active_file:3051 inactive_file:41603 isolated_file:0 [ 1722.413309][T32207] unevictable:768 dirty:277 writeback:0 [ 1722.413309][T32207] slab_reclaimable:15116 slab_unreclaimable:156779 [ 1722.413309][T32207] mapped:31245 shmem:2732 pagetables:1622 [ 1722.413309][T32207] sec_pagetables:0 bounce:0 [ 1722.413309][T32207] kernel_misc_reclaimable:0 [ 1722.413309][T32207] free:1231221 free_pcp:24548 free_cma:0 [ 1722.413372][T32207] Node 0 active_anon:43324kB inactive_anon:0kB active_file:12204kB inactive_file:166204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:22580kB dirty:1104kB writeback:0kB shmem:9392kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18056kB pagetables:6304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1722.413432][T32207] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102400kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1722.763772][T32213] netlink: 'syz.1.18443': attribute type 1 has an invalid length. [ 1722.808644][T32212] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1722.869510][T32207] Node 0 DMA free:15256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:40kB free_cma:0kB [ 1722.972624][T32207] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1722.978645][T32207] Node 0 DMA32 free:1228536kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46696kB inactive_anon:0kB active_file:12204kB inactive_file:166204kB unevictable:1536kB writepending:1196kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:34128kB local_pcp:13076kB free_cma:0kB [ 1723.096149][T32207] lowmem_reserve[]: 0 0 0 0 0 [ 1723.111619][T32227] netlink: 11 bytes leftover after parsing attributes in process `syz.3.18446'. [ 1723.141198][T32227] syzkaller0: entered promiscuous mode [ 1723.146734][T32227] syzkaller0: entered allmulticast mode [ 1723.158982][T32207] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1723.191664][T28959] Bluetooth: hci0: command tx timeout [ 1723.207806][T32207] lowmem_reserve[]: 0 0 0 0 0 [ 1723.213167][T32207] Node 1 Normal free:3680308kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60228kB local_pcp:29852kB free_cma:0kB [ 1723.248471][T32207] lowmem_reserve[]: 0 0 0 0 0 [ 1723.255245][T32207] Node 0 DMA: 0*4kB 1*8kB (U) 1*16kB (U) 0*32kB 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15256kB [ 1723.272351][T32207] Node 0 DMA32: 7785*4kB (UME) 10224*8kB (UME) 7646*16kB (UM) 1016*32kB (UME) 415*64kB (UME) 241*128kB (UME) 463*256kB (UME) 377*512kB (UME) 351*1024kB (UME) 113*2048kB (UM) 0*4096kB = 1227588kB [ 1723.339127][T32207] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1723.352635][T32207] Node 1 Normal: 9*4kB (U) 11*8kB (UM) 6*16kB (UM) 8*32kB (UM) 23*64kB (UM) 18*128kB (UM) 16*256kB (UM) 18*512kB (UM) 15*1024kB (UM) 15*2048kB (U) 883*4096kB (UM) = 3680412kB [ 1723.401218][T32207] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.453405][T32207] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1723.482228][T32207] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.537610][T32207] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1723.547448][T32207] 49027 total pagecache pages [ 1723.553254][T32207] 0 pages in swap cache [ 1723.557538][T32207] Free swap = 124996kB [ 1723.562960][T32207] Total swap = 124996kB [ 1723.567161][T32207] 2097051 pages RAM [ 1723.572105][T32207] 0 pages HighMem/MovableOnly [ 1723.576865][T32207] 427072 pages reserved [ 1723.599848][T32207] 0 pages cma reserved [ 1723.615349][T32187] syzkaller1: entered promiscuous mode [ 1723.621655][T32187] syzkaller1: entered allmulticast mode [ 1723.654736][T32245] sctp: [Deprecated]: syz.3.18451 (pid 32245) Use of int in max_burst socket option deprecated. [ 1723.654736][T32245] Use struct sctp_assoc_value instead [ 1723.675910][T24718] IPVS: starting estimator thread 0... [ 1723.740938][T32243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18452'. [ 1723.789162][T32247] IPVS: using max 28 ests per chain, 67200 per kthread [ 1723.804686][T32245] team3: entered promiscuous mode [ 1723.810765][T32245] team3: entered allmulticast mode [ 1723.817481][T32245] 8021q: adding VLAN 0 to HW filter on device team3 [ 1724.032777][T32245] team4: entered promiscuous mode [ 1724.048389][T32245] team4: entered allmulticast mode [ 1724.102947][T32245] 8021q: adding VLAN 0 to HW filter on device team4 [ 1724.535080][T32272] syzkaller0: entered promiscuous mode [ 1724.540952][T32272] syzkaller0: entered allmulticast mode [ 1724.607198][T32271] FAULT_INJECTION: forcing a failure. [ 1724.607198][T32271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1724.641854][T32271] CPU: 1 UID: 0 PID: 32271 Comm: syz.4.18458 Not tainted syzkaller #0 PREEMPT(full) [ 1724.641896][T32271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1724.641910][T32271] Call Trace: [ 1724.641920][T32271] [ 1724.641930][T32271] dump_stack_lvl+0xe8/0x150 [ 1724.641968][T32271] should_fail_ex+0x412/0x560 [ 1724.642002][T32271] _copy_from_user+0x2d/0xb0 [ 1724.642036][T32271] ____sys_sendmsg+0x308/0x9f0 [ 1724.642068][T32271] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1724.642099][T32271] ? import_iovec+0x73/0xa0 [ 1724.642135][T32271] ___sys_sendmsg+0x2a5/0x360 [ 1724.642163][T32271] ? __pfx____sys_sendmsg+0x10/0x10 [ 1724.642222][T32271] ? __fget_files+0x2a/0x420 [ 1724.642253][T32271] ? __fget_files+0x3a0/0x420 [ 1724.642296][T32271] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1724.642321][T32271] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1724.642352][T32271] ? __pfx_ksys_write+0x10/0x10 [ 1724.642387][T32271] do_syscall_64+0x14d/0xf80 [ 1724.642418][T32271] ? trace_irq_disable+0x3b/0x150 [ 1724.642449][T32271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.642471][T32271] ? clear_bhb_loop+0x40/0x90 [ 1724.642505][T32271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1724.642528][T32271] RIP: 0033:0x7fd92c79c799 [ 1724.642550][T32271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1724.642569][T32271] RSP: 002b:00007fd92d73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1724.642592][T32271] RAX: ffffffffffffffda RBX: 00007fd92ca15fa0 RCX: 00007fd92c79c799 [ 1724.642609][T32271] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000007 [ 1724.642623][T32271] RBP: 00007fd92d73c090 R08: 0000000000000000 R09: 0000000000000000 [ 1724.642637][T32271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1724.642650][T32271] R13: 00007fd92ca16038 R14: 00007fd92ca15fa0 R15: 00007fff5b1ed018 [ 1724.642683][T32271] [ 1724.851734][T32274] __nla_validate_parse: 3 callbacks suppressed [ 1724.851756][T32274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18458'. [ 1725.014759][T32280] netlink: 'syz.3.18463': attribute type 1 has an invalid length. [ 1725.089375][T32280] netlink: 224 bytes leftover after parsing attributes in process `syz.3.18463'. [ 1725.119311][T32285] netlink: 56 bytes leftover after parsing attributes in process `syz.3.18463'. [ 1725.218717][T32294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18464'. [ 1725.249361][T32294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18464'. [ 1725.277665][T28959] Bluetooth: hci0: command tx timeout [ 1725.316823][T32294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18464'. [ 1725.398846][T32306] FAULT_INJECTION: forcing a failure. [ 1725.398846][T32306] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.413198][T32306] CPU: 0 UID: 0 PID: 32306 Comm: syz.4.18470 Not tainted syzkaller #0 PREEMPT(full) [ 1725.413239][T32306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1725.413254][T32306] Call Trace: [ 1725.413264][T32306] [ 1725.413274][T32306] dump_stack_lvl+0xe8/0x150 [ 1725.413311][T32306] should_fail_ex+0x412/0x560 [ 1725.413345][T32306] _copy_from_user+0x2d/0xb0 [ 1725.413379][T32306] ___sys_sendmsg+0x1c6/0x360 [ 1725.413409][T32306] ? __pfx____sys_sendmsg+0x10/0x10 [ 1725.413469][T32306] ? __fget_files+0x2a/0x420 [ 1725.413500][T32306] ? __fget_files+0x3a0/0x420 [ 1725.413543][T32306] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1725.413568][T32306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1725.413601][T32306] ? __pfx_ksys_write+0x10/0x10 [ 1725.413638][T32306] do_syscall_64+0x14d/0xf80 [ 1725.413669][T32306] ? trace_irq_disable+0x3b/0x150 [ 1725.413701][T32306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.413723][T32306] ? clear_bhb_loop+0x40/0x90 [ 1725.413752][T32306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.413774][T32306] RIP: 0033:0x7fd92c79c799 [ 1725.413795][T32306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1725.413815][T32306] RSP: 002b:00007fd92d73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1725.413839][T32306] RAX: ffffffffffffffda RBX: 00007fd92ca15fa0 RCX: 00007fd92c79c799 [ 1725.413856][T32306] RDX: 0000000000040050 RSI: 0000200000000740 RDI: 0000000000000003 [ 1725.413871][T32306] RBP: 00007fd92d73c090 R08: 0000000000000000 R09: 0000000000000000 [ 1725.413884][T32306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1725.413898][T32306] R13: 00007fd92ca16038 R14: 00007fd92ca15fa0 R15: 00007fff5b1ed018 [ 1725.413933][T32306] [ 1725.968756][T32322] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18477'. [ 1725.995241][T32322] syzkaller0: entered promiscuous mode [ 1726.008188][T32322] syzkaller0: entered allmulticast mode [ 1726.187648][T32335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18484'. [ 1726.271985][T32335] wg1 speed is unknown, defaulting to 1000 [ 1726.325370][T32337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18485'. [ 1726.412522][T32345] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18487'. [ 1726.449565][T32349] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1727.021776][T32372] syzkaller0: entered promiscuous mode [ 1727.027326][T32372] syzkaller0: entered allmulticast mode [ 1727.084289][T32376] bond0: entered promiscuous mode [ 1727.104355][T32376] bond_slave_0: entered promiscuous mode [ 1727.120065][T32376] bond_slave_1: entered promiscuous mode [ 1727.153135][T32376] batadv_slave_0: entered promiscuous mode [ 1727.162410][T32379] netlink: 'syz.0.18493': attribute type 21 has an invalid length. [ 1727.176919][T32376] batadv_slave_0: left promiscuous mode [ 1727.252897][T32386] netlink: 'syz.0.18493': attribute type 11 has an invalid length. [ 1727.325349][T32376] bond0: left promiscuous mode [ 1727.337855][T32376] bond_slave_0: left promiscuous mode [ 1727.349918][T32376] bond_slave_1: left promiscuous mode [ 1727.668624][T32382] gretap0: entered promiscuous mode [ 1727.788673][T32383] syzkaller1: entered promiscuous mode [ 1727.799236][T32383] syzkaller1: entered allmulticast mode [ 1727.915795][T32390] caif0: entered allmulticast mode [ 1728.382459][T32410] IPVS: set_ctl: invalid protocol: 103 224.0.0.2:20004 [ 1728.813489][T32425] netlink: 'syz.2.18507': attribute type 3 has an invalid length. [ 1728.833597][T32426] FAULT_INJECTION: forcing a failure. [ 1728.833597][T32426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1728.852827][T32426] CPU: 0 UID: 0 PID: 32426 Comm: syz.3.18509 Not tainted syzkaller #0 PREEMPT(full) [ 1728.852859][T32426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1728.852872][T32426] Call Trace: [ 1728.852881][T32426] [ 1728.852890][T32426] dump_stack_lvl+0xe8/0x150 [ 1728.852927][T32426] should_fail_ex+0x412/0x560 [ 1728.852970][T32426] _copy_from_iter+0x1d3/0x1670 [ 1728.853010][T32426] ? rcu_is_watching+0x15/0xb0 [ 1728.853047][T32426] ? __pfx__copy_from_iter+0x10/0x10 [ 1728.853090][T32426] ? netlink_sendmsg+0x650/0xb40 [ 1728.853126][T32426] ? skb_put+0x11b/0x210 [ 1728.853166][T32426] netlink_sendmsg+0x6c0/0xb40 [ 1728.853215][T32426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1728.853249][T32426] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1728.853289][T32426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1728.853324][T32426] ____sys_sendmsg+0x972/0x9f0 [ 1728.853356][T32426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1728.853387][T32426] ? import_iovec+0x73/0xa0 [ 1728.853421][T32426] ___sys_sendmsg+0x2a5/0x360 [ 1728.853446][T32426] ? __pfx____sys_sendmsg+0x10/0x10 [ 1728.853501][T32426] ? __fget_files+0x2a/0x420 [ 1728.853534][T32426] ? __fget_files+0x3a0/0x420 [ 1728.853576][T32426] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1728.853601][T32426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1728.853633][T32426] ? rcu_is_watching+0x15/0xb0 [ 1728.853677][T32426] do_syscall_64+0x14d/0xf80 [ 1728.853709][T32426] ? trace_irq_disable+0x3b/0x150 [ 1728.853739][T32426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.853762][T32426] ? clear_bhb_loop+0x40/0x90 [ 1728.853790][T32426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1728.853812][T32426] RIP: 0033:0x7fd7e2d9c799 [ 1728.853832][T32426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1728.853849][T32426] RSP: 002b:00007fd7e3c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1728.853874][T32426] RAX: ffffffffffffffda RBX: 00007fd7e3015fa0 RCX: 00007fd7e2d9c799 [ 1728.853890][T32426] RDX: 0000000000040050 RSI: 0000200000000740 RDI: 0000000000000003 [ 1728.853903][T32426] RBP: 00007fd7e3c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1728.853916][T32426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1728.853929][T32426] R13: 00007fd7e3016038 R14: 00007fd7e3015fa0 R15: 00007ffd17c2bb78 [ 1728.854004][T32426] [ 1729.282329][T32436] netlink: 'syz.4.18510': attribute type 1 has an invalid length. [ 1729.704769][T32454] macsec1: entered promiscuous mode [ 1729.710428][T32454] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 1729.865647][T32463] ip6gre1: entered promiscuous mode [ 1729.884485][T32463] ip6gre1: entered allmulticast mode [ 1729.941277][T32474] __nla_validate_parse: 12 callbacks suppressed [ 1729.941305][T32474] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18526'. [ 1730.087403][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1730.090101][T32476] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18527'. [ 1730.141576][T32476] syzkaller0: entered promiscuous mode [ 1730.147219][T32476] syzkaller0: entered allmulticast mode [ 1730.266295][T32493] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18531'. [ 1730.339374][T32498] netlink: 'syz.1.18531': attribute type 11 has an invalid length. [ 1730.348685][T32498] netlink: 'syz.1.18531': attribute type 23 has an invalid length. [ 1730.358278][T32498] netlink: 224 bytes leftover after parsing attributes in process `syz.1.18531'. [ 1730.386189][T32493] bridge0: left promiscuous mode [ 1730.399045][T32493] bridge0: left allmulticast mode [ 1730.484118][T32504] sctp: [Deprecated]: syz.0.18534 (pid 32504) Use of int in max_burst socket option deprecated. [ 1730.484118][T32504] Use struct sctp_assoc_value instead [ 1730.523061][T32504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18534'. [ 1730.576668][T32483] wg1: entered promiscuous mode [ 1730.582049][T32483] wg1: entered allmulticast mode [ 1730.588315][T32507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18534'. [ 1730.692219][T32504] team5: entered promiscuous mode [ 1730.702389][T32504] team5: entered allmulticast mode [ 1730.708143][T32504] 8021q: adding VLAN 0 to HW filter on device team5 [ 1730.752622][T32510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18535'. [ 1730.766814][T32506] syzkaller0: entered promiscuous mode [ 1730.772842][T32506] syzkaller0: entered allmulticast mode [ 1730.842076][T32507] team6: entered promiscuous mode [ 1730.851953][T32507] team6: entered allmulticast mode [ 1730.857763][T32507] 8021q: adding VLAN 0 to HW filter on device team6 [ 1731.250252][T32532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1731.996690][T32556] sctp: [Deprecated]: syz.1.18553 (pid 32556) Use of int in max_burst socket option deprecated. [ 1731.996690][T32556] Use struct sctp_assoc_value instead [ 1732.016024][T32556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18553'. [ 1732.072132][T32559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18553'. [ 1732.986759][T32571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18557'. [ 1734.440277][T32556] team1: entered promiscuous mode [ 1734.445478][T32556] team1: entered allmulticast mode [ 1734.451442][T32556] 8021q: adding VLAN 0 to HW filter on device team1 [ 1734.477700][T32559] team2: entered promiscuous mode [ 1734.483181][T32559] team2: entered allmulticast mode [ 1734.493559][T32559] 8021q: adding VLAN 0 to HW filter on device team2 [ 1734.715865][T32582] syzkaller0: entered promiscuous mode [ 1734.739386][T32582] syzkaller0: entered allmulticast mode [ 1734.861899][T23318] IPVS: starting estimator thread 0... [ 1734.971479][T32607] IPVS: using max 30 ests per chain, 72000 per kthread [ 1735.669040][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5580 ms [ 1735.677191][ C0] lec:lec_tx_timeout: lec0 [ 1737.023915][T30369] lec:lec_start_xmit: lec0:No lecd attached [ 1737.248335][T32625] __nla_validate_parse: 2 callbacks suppressed [ 1737.248360][T32625] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18571'. [ 1737.271862][T32622] netlink: 11 bytes leftover after parsing attributes in process `syz.3.18570'. [ 1737.313379][T32622] syzkaller0: entered promiscuous mode [ 1737.330939][T32622] syzkaller0: entered allmulticast mode [ 1737.564956][T32642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18573'. [ 1738.056290][T32660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18578'. [ 1738.066272][T32660] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18578'. [ 1738.142832][T32662] netlink: 'syz.3.18578': attribute type 1 has an invalid length. [ 1738.260047][T32668] sctp: [Deprecated]: syz.1.18581 (pid 32668) Use of int in max_burst socket option deprecated. [ 1738.260047][T32668] Use struct sctp_assoc_value instead [ 1738.301666][T32668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18581'. [ 1738.315679][T32666] netlink: 11 bytes leftover after parsing attributes in process `syz.4.18580'. [ 1738.327242][T32666] syzkaller0: entered promiscuous mode [ 1738.333331][T32666] syzkaller0: entered allmulticast mode [ 1738.360321][T32673] netlink: 4 bytes leftover after parsing attributes in process `syz.1.18581'. [ 1738.465674][T32679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18582'. [ 1738.487459][T32668] team3: entered promiscuous mode [ 1738.492923][T32668] team3: entered allmulticast mode [ 1738.510380][T32668] 8021q: adding VLAN 0 to HW filter on device team3 [ 1738.572854][T32673] team4: entered promiscuous mode [ 1738.578212][T32673] team4: entered allmulticast mode [ 1738.590863][T32673] 8021q: adding VLAN 0 to HW filter on device team4 [ 1738.686151][T32686] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1738.895074][T32696] netlink: 11 bytes leftover after parsing attributes in process `syz.4.18587'. [ 1738.915658][T32696] syzkaller0: entered promiscuous mode [ 1738.921935][T32696] syzkaller0: entered allmulticast mode [ 1739.583654][T32737] sctp: [Deprecated]: syz.4.18603 (pid 32737) Use of int in max_burst socket option deprecated. [ 1739.583654][T32737] Use struct sctp_assoc_value instead [ 1739.655665][T32734] wg1 speed is unknown, defaulting to 1000 [ 1739.757565][T32737] team4: entered promiscuous mode [ 1739.766010][T32737] team4: entered allmulticast mode [ 1739.796868][T32737] 8021q: adding VLAN 0 to HW filter on device team4 [ 1739.888141][T32745] team5: entered promiscuous mode [ 1739.894233][T32745] team5: entered allmulticast mode [ 1739.900211][T32745] 8021q: adding VLAN 0 to HW filter on device team5 [ 1739.993055][T32744] syzkaller0: entered promiscuous mode [ 1739.998851][T32744] syzkaller0: entered allmulticast mode [ 1742.631895][T32754] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1742.709011][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5680 ms [ 1742.717128][ C0] lec:lec_tx_timeout: lec0 [ 1742.839147][ T317] __nla_validate_parse: 4 callbacks suppressed [ 1742.839171][ T317] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18617'. [ 1742.896723][ T318] xt_bpf: check failed: parse error [ 1742.963342][ T325] sctp: [Deprecated]: syz.4.18621 (pid 325) Use of int in max_burst socket option deprecated. [ 1742.963342][ T325] Use struct sctp_assoc_value instead [ 1743.012964][ T325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18621'. [ 1743.081948][ T331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18621'. [ 1743.131244][ T325] team6: entered promiscuous mode [ 1743.146637][ T325] team6: entered allmulticast mode [ 1743.160446][ T325] 8021q: adding VLAN 0 to HW filter on device team6 [ 1743.281439][ T330] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.391948][ T331] team7: entered promiscuous mode [ 1743.419449][ T331] team7: entered allmulticast mode [ 1743.425349][ T331] 8021q: adding VLAN 0 to HW filter on device team7 [ 1743.552977][ T330] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.631963][ T352] syzkaller0: entered promiscuous mode [ 1743.637679][ T352] syzkaller0: entered allmulticast mode [ 1743.671466][ T363] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18630'. [ 1743.713048][ T330] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.891762][ T368] syz.2.18632: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1743.911417][ T368] CPU: 1 UID: 0 PID: 368 Comm: syz.2.18632 Not tainted syzkaller #0 PREEMPT(full) [ 1743.911446][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1743.911459][ T368] Call Trace: [ 1743.911469][ T368] [ 1743.911479][ T368] dump_stack_lvl+0xe8/0x150 [ 1743.911513][ T368] warn_alloc+0x249/0x340 [ 1743.911539][ T368] ? stack_trace_save+0xa9/0x100 [ 1743.911563][ T368] ? __pfx_warn_alloc+0x10/0x10 [ 1743.911592][ T368] ? kasan_save_track+0x4f/0x80 [ 1743.911612][ T368] ? kasan_save_track+0x3e/0x80 [ 1743.911631][ T368] ? __kasan_kmalloc+0x93/0xb0 [ 1743.911652][ T368] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1743.911685][ T368] ? xskq_create+0x56/0x170 [ 1743.911710][ T368] ? xsk_setsockopt+0x54c/0x990 [ 1743.911733][ T368] ? do_sock_setsockopt+0x17c/0x1b0 [ 1743.911762][ T368] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1743.911790][ T368] ? do_syscall_64+0x14d/0xf80 [ 1743.911821][ T368] __vmalloc_node_range_noprof+0x132/0x1730 [ 1743.911875][ T368] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1743.911904][ T368] ? __kasan_kmalloc+0x93/0xb0 [ 1743.911932][ T368] vmalloc_user_noprof+0xad/0xe0 [ 1743.911954][ T368] ? xskq_create+0xbf/0x170 [ 1743.911982][ T368] xskq_create+0xbf/0x170 [ 1743.912010][ T368] xsk_init_queue+0x8a/0xe0 [ 1743.912039][ T368] xsk_setsockopt+0x54c/0x990 [ 1743.912066][ T368] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1743.912090][ T368] ? __pfx_aa_sk_perm+0x10/0x10 [ 1743.912121][ T368] ? aa_sock_opt_perm+0xff/0x1a0 [ 1743.912150][ T368] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1743.912177][ T368] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1743.912203][ T368] do_sock_setsockopt+0x17c/0x1b0 [ 1743.912239][ T368] __x64_sys_setsockopt+0x13d/0x1b0 [ 1743.912274][ T368] do_syscall_64+0x14d/0xf80 [ 1743.912303][ T368] ? trace_irq_disable+0x3b/0x150 [ 1743.912336][ T368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.912357][ T368] ? clear_bhb_loop+0x40/0x90 [ 1743.912383][ T368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.912404][ T368] RIP: 0033:0x7f3f57d9c799 [ 1743.912425][ T368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1743.912444][ T368] RSP: 002b:00007f3f58c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1743.912468][ T368] RAX: ffffffffffffffda RBX: 00007f3f58015fa0 RCX: 00007f3f57d9c799 [ 1743.912483][ T368] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1743.912497][ T368] RBP: 00007f3f57e32c99 R08: 0000000000000004 R09: 0000000000000000 [ 1743.912516][ T368] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1743.912529][ T368] R13: 00007f3f58016038 R14: 00007f3f58015fa0 R15: 00007ffd2eba29e8 [ 1743.912563][ T368] [ 1743.912645][ T368] Mem-Info: [ 1744.204698][ T368] active_anon:9646 inactive_anon:0 isolated_anon:0 [ 1744.204698][ T368] active_file:3051 inactive_file:41611 isolated_file:0 [ 1744.204698][ T368] unevictable:768 dirty:533 writeback:0 [ 1744.204698][ T368] slab_reclaimable:15227 slab_unreclaimable:164563 [ 1744.204698][ T368] mapped:31189 shmem:1534 pagetables:1622 [ 1744.204698][ T368] sec_pagetables:0 bounce:0 [ 1744.204698][ T368] kernel_misc_reclaimable:0 [ 1744.204698][ T368] free:1225134 free_pcp:24649 free_cma:0 [ 1744.322732][ T370] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18632'. [ 1744.334609][ T368] Node 0 active_anon:38484kB inactive_anon:0kB active_file:12204kB inactive_file:166236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:18260kB dirty:2128kB writeback:0kB shmem:4600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18268kB pagetables:6304kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1744.407880][ T368] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114596kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:184kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1744.455918][ T368] Node 0 DMA free:15248kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:72kB free_cma:0kB [ 1744.487960][ T368] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1744.512511][ T368] Node 0 DMA32 free:1201652kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38484kB inactive_anon:0kB active_file:12204kB inactive_file:166236kB unevictable:1536kB writepending:2128kB zspages:0kB present:3129332kB managed:2552572kB mlocked:0kB bounce:0kB free_pcp:42248kB local_pcp:20852kB free_cma:0kB [ 1744.558025][ T368] lowmem_reserve[]: 0 0 0 0 0 [ 1744.563625][ T368] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1744.593564][ T368] lowmem_reserve[]: 0 0 0 0 0 [ 1744.600164][ T368] Node 1 Normal free:3683508kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:57080kB local_pcp:28468kB free_cma:0kB [ 1744.637987][ T368] lowmem_reserve[]: 0 0 0 0 0 [ 1744.643946][ T368] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15248kB [ 1744.660147][ T368] Node 0 DMA32: 7476*4kB (UME) 10505*8kB (UME) 7781*16kB (UME) 256*32kB (UME) 439*64kB (UME) 227*128kB (UME) 463*256kB (UME) 368*512kB (UME) 351*1024kB (UME) 113*2048kB (UM) 0*4096kB = 1201576kB [ 1744.681710][ T368] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1744.703293][ T368] Node 1 Normal: 8*4kB (U) 9*8kB (UM) 6*16kB (UM) 7*32kB (UM) 23*64kB (UM) 17*128kB (UM) 19*256kB (UM) 17*512kB (UM) 16*1024kB (UM) 14*2048kB (U) 884*4096kB (UM) = 3683560kB [ 1744.729884][ T368] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.742259][ T368] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1744.755329][ T368] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1744.765876][ T368] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1744.785870][ T368] 46192 total pagecache pages [ 1744.798737][ T368] 0 pages in swap cache [ 1744.803281][ T368] Free swap = 124996kB [ 1744.807615][ T368] Total swap = 124996kB [ 1744.811862][ T368] 2097051 pages RAM [ 1744.816616][ T368] 0 pages HighMem/MovableOnly [ 1744.822709][ T368] 427072 pages reserved [ 1744.827090][ T368] 0 pages cma reserved [ 1746.566659][ T330] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1746.597882][ T369] netlink: 'syz.2.18632': attribute type 1 has an invalid length. [ 1746.606743][ T369] netlink: 224 bytes leftover after parsing attributes in process `syz.2.18632'. [ 1746.767029][ T6013] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.827720][ T6013] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.848071][ T392] xt_bpf: check failed: parse error [ 1746.929401][ T6013] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1746.937659][ T6013] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1747.070996][ T400] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18641'. [ 1747.123812][ T400] syzkaller0: entered promiscuous mode [ 1747.137035][ T400] syzkaller0: entered allmulticast mode [ 1747.236413][ T408] netlink: 'syz.4.18647': attribute type 1 has an invalid length. [ 1747.253345][ T408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18647'. [ 1747.451275][ T415] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18649'. [ 1747.481606][ T415] syzkaller0: entered promiscuous mode [ 1747.494458][ T415] syzkaller0: entered allmulticast mode [ 1747.655107][ T427] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18654'. [ 1747.997494][ T435] netlink: 11 bytes leftover after parsing attributes in process `syz.3.18659'. [ 1748.040541][ T435] syzkaller0: entered promiscuous mode [ 1748.046080][ T435] syzkaller0: entered allmulticast mode [ 1748.065612][ T438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18660'. [ 1748.173551][ T445] wg1 speed is unknown, defaulting to 1000 [ 1748.349806][ T451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18663'. [ 1748.390611][ T460] netlink: 'syz.4.18667': attribute type 1 has an invalid length. [ 1748.398784][ T460] netlink: 96 bytes leftover after parsing attributes in process `syz.4.18667'. [ 1748.399666][ T451] netlink: 'syz.0.18663': attribute type 2 has an invalid length. [ 1748.417123][ T460] netlink: 1 bytes leftover after parsing attributes in process `syz.4.18667'. [ 1748.426240][ T460] netlink: 'syz.4.18667': attribute type 1 has an invalid length. [ 1748.434415][ T460] netlink: 'syz.4.18667': attribute type 8 has an invalid length. [ 1748.444030][ T460] netlink: 582 bytes leftover after parsing attributes in process `syz.4.18667'. [ 1748.518125][ T457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.527590][ T457] batadv_slave_0: entered promiscuous mode [ 1748.545313][ T457] batadv_slave_0: entered allmulticast mode [ 1748.811909][ T458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1748.819764][ T458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.835396][ T479] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18670'. [ 1749.042384][ T485] xt_CT: No such helper "pptp" [ 1749.063696][ T458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1749.087763][ T485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18674'. [ 1749.106637][ T458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1749.265765][ T474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18671'. [ 1749.289989][ T36] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.313858][ T36] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.421186][ T36] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.445674][ T36] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1749.710641][ T4711] IPVS: starting estimator thread 0... [ 1749.799101][ T517] IPVS: using max 37 ests per chain, 88800 per kthread [ 1751.334567][ T454] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1751.551226][ T546] sctp: [Deprecated]: syz.4.18689 (pid 546) Use of int in max_burst socket option deprecated. [ 1751.551226][ T546] Use struct sctp_assoc_value instead [ 1751.609593][ T550] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18689'. [ 1751.686285][ T550] team8: entered promiscuous mode [ 1751.710085][ T550] team8: entered allmulticast mode [ 1751.717587][ T550] 8021q: adding VLAN 0 to HW filter on device team8 [ 1751.803211][ T546] team9: entered promiscuous mode [ 1751.808329][ T546] team9: entered allmulticast mode [ 1751.815217][ T561] netlink: 'syz.0.18691': attribute type 10 has an invalid length. [ 1751.850947][ T546] 8021q: adding VLAN 0 to HW filter on device team9 [ 1751.867114][ T558] netlink: 'syz.0.18691': attribute type 10 has an invalid length. [ 1751.876296][ T561] team0: Port device dummy0 added [ 1751.889603][ T563] netlink: 'syz.2.18694': attribute type 1 has an invalid length. [ 1751.901149][ T558] team0: Port device dummy0 removed [ 1751.957975][ T558] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1752.190912][ T565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.198688][ T565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.354986][ T565] wg1: left promiscuous mode [ 1752.362447][ T565] wg1: left allmulticast mode [ 1752.409429][ T565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1752.422067][ T565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1752.501241][ T565] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 1752.509585][ T565] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 1752.547460][ T565] team1: left promiscuous mode [ 1752.552988][ T565] team1: left allmulticast mode [ 1752.559781][ T565] team2: left promiscuous mode [ 1752.564614][ T565] team2: left allmulticast mode [ 1752.574543][ T565] team3: left promiscuous mode [ 1752.581533][ T565] team3: left allmulticast mode [ 1752.587998][ T565] team4: left promiscuous mode [ 1752.593545][ T565] team4: left allmulticast mode [ 1752.613186][ T565] ip6gre1: left promiscuous mode [ 1752.618262][ T565] ip6gre1: left allmulticast mode [ 1752.636918][ T6013] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.648438][ T6013] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.658621][ T6013] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.667834][ T6013] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1752.964849][ T598] netlink: 'syz.1.18701': attribute type 10 has an invalid length. [ 1753.013652][ T602] __nla_validate_parse: 8 callbacks suppressed [ 1753.013675][ T602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18703'. [ 1753.032073][ T602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18703'. [ 1753.043907][ T598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1753.056700][ T598] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1753.066329][ T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1753.077472][ T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1753.087797][ T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1753.102280][ T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1753.138632][ T599] wg1 speed is unknown, defaulting to 1000 [ 1753.928078][ T617] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18708'. [ 1753.950537][ T617] syzkaller0: entered promiscuous mode [ 1753.956073][ T617] syzkaller0: entered allmulticast mode [ 1754.100823][ T622] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18709'. [ 1755.117571][ T574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1755.130751][ T605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18704'. [ 1755.255303][ T620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18707'. [ 1755.336809][ T634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18713'. [ 1755.501453][ T645] FAULT_INJECTION: forcing a failure. [ 1755.501453][ T645] name failslab, interval 1, probability 0, space 0, times 0 [ 1755.545640][ T645] CPU: 0 UID: 0 PID: 645 Comm: syz.4.18718 Not tainted syzkaller #0 PREEMPT(full) [ 1755.545673][ T645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1755.545688][ T645] Call Trace: [ 1755.545698][ T645] [ 1755.545709][ T645] dump_stack_lvl+0xe8/0x150 [ 1755.545746][ T645] should_fail_ex+0x412/0x560 [ 1755.545782][ T645] should_failslab+0xa8/0x100 [ 1755.545814][ T645] __kvmalloc_node_noprof+0x178/0x8a0 [ 1755.545840][ T645] ? nla_strdup+0xb8/0x140 [ 1755.545871][ T645] ? nf_tables_newchain+0x1c7a/0x2890 [ 1755.545904][ T645] nf_tables_newchain+0x1c7a/0x2890 [ 1755.545945][ T645] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1755.545995][ T645] ? nft_trans_table_add+0x230/0x430 [ 1755.546028][ T645] ? nfnl_pernet+0x23/0x240 [ 1755.546066][ T645] ? __nla_parse+0x40/0x60 [ 1755.546103][ T645] nfnetlink_rcv+0x1240/0x27b0 [ 1755.546169][ T645] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1755.546215][ T645] ? ref_tracker_free+0x693/0x840 [ 1755.546275][ T645] ? __netlink_deliver_tap+0x807/0x850 [ 1755.546307][ T645] ? netlink_deliver_tap+0x2e/0x1b0 [ 1755.546356][ T645] netlink_unicast+0x80f/0x9b0 [ 1755.546394][ T645] ? __pfx_netlink_unicast+0x10/0x10 [ 1755.546424][ T645] ? netlink_sendmsg+0x650/0xb40 [ 1755.546454][ T645] ? skb_put+0x11b/0x210 [ 1755.546490][ T645] netlink_sendmsg+0x813/0xb40 [ 1755.546532][ T645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1755.546576][ T645] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1755.546608][ T645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1755.546636][ T645] ____sys_sendmsg+0x972/0x9f0 [ 1755.546670][ T645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1755.546702][ T645] ? import_iovec+0x73/0xa0 [ 1755.546741][ T645] ___sys_sendmsg+0x2a5/0x360 [ 1755.546770][ T645] ? __pfx____sys_sendmsg+0x10/0x10 [ 1755.546833][ T645] ? __fget_files+0x2a/0x420 [ 1755.546864][ T645] ? __fget_files+0x3a0/0x420 [ 1755.546908][ T645] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1755.546935][ T645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1755.546969][ T645] ? __pfx_ksys_write+0x10/0x10 [ 1755.547007][ T645] do_syscall_64+0x14d/0xf80 [ 1755.547039][ T645] ? trace_irq_disable+0x3b/0x150 [ 1755.547070][ T645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.547092][ T645] ? clear_bhb_loop+0x40/0x90 [ 1755.547119][ T645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.547140][ T645] RIP: 0033:0x7fd92c79c799 [ 1755.547160][ T645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1755.547179][ T645] RSP: 002b:00007fd92d73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1755.547203][ T645] RAX: ffffffffffffffda RBX: 00007fd92ca15fa0 RCX: 00007fd92c79c799 [ 1755.547219][ T645] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1755.547234][ T645] RBP: 00007fd92d73c090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.547248][ T645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1755.547261][ T645] R13: 00007fd92ca16038 R14: 00007fd92ca15fa0 R15: 00007fff5b1ed018 [ 1755.547295][ T645] [ 1755.929722][ T651] netlink: 11 bytes leftover after parsing attributes in process `syz.1.18722'. [ 1755.940658][ T651] syzkaller0: entered promiscuous mode [ 1755.946182][ T651] syzkaller0: entered allmulticast mode [ 1756.044937][ T658] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18724'. [ 1756.287161][ T665] syzkaller0: entered promiscuous mode [ 1756.301470][ T665] syzkaller0: entered allmulticast mode [ 1756.353051][ T677] Cannot find del_set index 1 as target [ 1756.361589][ T665] tipc: Started in network mode [ 1756.366681][ T665] tipc: Node identity 2e7972e62cdb, cluster identity 4711 [ 1756.378498][ T665] tipc: Enabled bearer , priority 0 [ 1756.438239][ T673] syzkaller0: entered promiscuous mode [ 1756.444096][ T673] syzkaller0: entered allmulticast mode [ 1756.457880][ T662] tipc: Resetting bearer [ 1756.490032][ T662] tipc: Disabling bearer [ 1758.688822][ T705] netlink: 'syz.1.18739': attribute type 1 has an invalid length. [ 1758.699126][ T705] netlink: 'syz.1.18739': attribute type 1 has an invalid length. [ 1758.777043][ T707] netlink: 80 bytes leftover after parsing attributes in process `syz.4.18740'. [ 1758.820401][ T707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18740'. [ 1758.843826][ T705] wg1 speed is unknown, defaulting to 1000 [ 1758.998352][ T722] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18744'. [ 1759.175306][ T727] netlink: 'syz.4.18745': attribute type 32 has an invalid length. [ 1759.196899][ T727] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18745'. [ 1759.290472][ T727] bond2: option coupled_control: invalid value (12) [ 1759.324124][ T727] bond2 (unregistering): Released all slaves [ 1759.554553][ T744] xt_addrtype: ipv6 does not support BROADCAST matching [ 1759.579147][ T742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18750'. [ 1759.623518][ T743] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18748'. [ 1759.890431][ T754] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18751'. [ 1759.990731][ T758] netlink: 'syz.3.18751': attribute type 21 has an invalid length. [ 1759.998814][ T758] netlink: 156 bytes leftover after parsing attributes in process `syz.3.18751'. [ 1760.055207][ T757] bridge0: entered promiscuous mode [ 1760.064971][ T757] vlan2: entered promiscuous mode [ 1760.172742][ T755] wg1 speed is unknown, defaulting to 1000 [ 1760.196595][ T760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18755'. [ 1760.206093][ T760] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18755'. [ 1760.526922][ T772] x_tables: duplicate underflow at hook 1 [ 1760.636528][ T772] netlink: 'syz.1.18760': attribute type 1 has an invalid length. [ 1760.646949][ T772] netlink: 'syz.1.18760': attribute type 2 has an invalid length. [ 1761.229854][ T798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1761.237863][ T798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1761.329615][ T815] netlink: 'syz.3.18772': attribute type 13 has an invalid length. [ 1761.375749][ T821] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1761.546232][ T822] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1761.557442][ T798] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1761.578587][ T798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1761.642993][ T798] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1761.652066][ T798] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1761.672228][ T798] team1: left promiscuous mode [ 1761.677036][ T798] team1: left allmulticast mode [ 1761.683490][ T798] team2: left promiscuous mode [ 1761.688278][ T798] team2: left allmulticast mode [ 1761.694681][ T798] team3: left promiscuous mode [ 1761.700559][ T798] team3: left allmulticast mode [ 1761.706829][ T798] team4: left promiscuous mode [ 1761.712589][ T798] team4: left allmulticast mode [ 1761.718866][ T798] team5: left promiscuous mode [ 1761.725365][ T798] team5: left allmulticast mode [ 1761.732164][ T798] team6: left promiscuous mode [ 1761.736956][ T798] team6: left allmulticast mode [ 1761.746416][ T798] vlan2: left promiscuous mode [ 1762.133199][ T800] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.140912][ T800] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.226564][ T800] caif0: left allmulticast mode [ 1762.411079][ T800] batadv_slave_0: left promiscuous mode [ 1762.417066][ T800] batadv_slave_0: left allmulticast mode [ 1762.427847][ T800] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1762.495160][ T800] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1762.505392][ T800] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1762.655464][ T800] veth3: left promiscuous mode [ 1762.692840][ T800] team1: left promiscuous mode [ 1762.697810][ T800] team1: left allmulticast mode [ 1762.704621][ T800] team2: left promiscuous mode [ 1762.710117][ T800] team2: left allmulticast mode [ 1762.721546][ T800] team0: left promiscuous mode [ 1762.727010][ T800] team0: left allmulticast mode [ 1762.747479][ T800] team3: left promiscuous mode [ 1762.752931][ T800] team3: left allmulticast mode [ 1762.763052][ T800] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 1762.770603][ T800] macsec1: left promiscuous mode [ 1762.778105][ T800] team4: left promiscuous mode [ 1762.783554][ T800] team4: left allmulticast mode [ 1762.790655][ T800] team5: left promiscuous mode [ 1762.795669][ T800] team5: left allmulticast mode [ 1762.802418][ T800] team6: left promiscuous mode [ 1762.807455][ T800] team6: left allmulticast mode [ 1762.815320][ T800] team7: left promiscuous mode [ 1762.820710][ T800] team7: left allmulticast mode [ 1762.828090][ T800] team8: left promiscuous mode [ 1762.833641][ T800] team8: left allmulticast mode [ 1762.840196][ T800] team9: left promiscuous mode [ 1762.845222][ T800] team9: left allmulticast mode [ 1762.908436][ T803] netlink: 'syz.1.18770': attribute type 19 has an invalid length. [ 1762.917308][ T36] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.947699][ T36] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.050216][ T803] netlink: 'syz.1.18770': attribute type 19 has an invalid length. [ 1763.059406][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.079795][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.100246][ T36] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1763.140976][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.155306][T28959] Bluetooth: hci0: link tx timeout [ 1763.166334][T28959] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1763.183291][ T36] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1763.239147][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.312350][T28959] Bluetooth: hci0: link tx timeout [ 1763.317579][T28959] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1763.325745][T28959] Bluetooth: hci0: link tx timeout [ 1763.331333][T28959] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1763.360137][ T36] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1763.409606][ T36] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.418728][ T36] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1763.428308][ T36] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.440435][ T36] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1763.448691][ T36] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1763.457663][ T36] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1763.466345][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1763.532032][ T855] wg1 speed is unknown, defaulting to 1000 [ 1763.640941][ T871] gretap0: entered promiscuous mode [ 1763.924974][ T882] __nla_validate_parse: 6 callbacks suppressed [ 1763.924997][ T882] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18789'. [ 1763.941946][ T882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18789'. [ 1763.961840][ T882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18789'. [ 1763.992246][ T880] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1764.061613][ T855] syzkaller1: entered promiscuous mode [ 1764.080271][ T855] syzkaller1: entered allmulticast mode [ 1764.118602][ T858] FAULT_INJECTION: forcing a failure. [ 1764.118602][ T858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1764.186014][ T858] CPU: 0 UID: 0 PID: 858 Comm: syz.0.18777 Not tainted syzkaller #0 PREEMPT(full) [ 1764.186046][ T858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1764.186061][ T858] Call Trace: [ 1764.186071][ T858] [ 1764.186081][ T858] dump_stack_lvl+0xe8/0x150 [ 1764.186120][ T858] should_fail_ex+0x412/0x560 [ 1764.186155][ T858] _copy_from_iter+0x1d3/0x1670 [ 1764.186187][ T858] ? unwind_next_frame+0xa5/0x23c0 [ 1764.186229][ T858] ? __lock_acquire+0x6b5/0x2cf0 [ 1764.186257][ T858] ? __pfx__copy_from_iter+0x10/0x10 [ 1764.186304][ T858] tun_get_user+0x516/0x3dd0 [ 1764.186352][ T858] ? aa_file_perm+0x192/0x15e0 [ 1764.186388][ T858] ? aa_file_perm+0x50e/0x15e0 [ 1764.186418][ T858] ? __pfx_tun_get_user+0x10/0x10 [ 1764.186448][ T858] ? aa_file_perm+0x192/0x15e0 [ 1764.186484][ T858] ? __lock_acquire+0x6b5/0x2cf0 [ 1764.186523][ T858] ? ref_tracker_alloc+0x35c/0x4c0 [ 1764.186557][ T858] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1764.186593][ T858] ? tun_get+0x1c/0x2f0 [ 1764.186630][ T858] ? tun_get+0x1c/0x2f0 [ 1764.186660][ T858] ? tun_get+0x1c/0x2f0 [ 1764.186696][ T858] tun_chr_write_iter+0x113/0x200 [ 1764.186731][ T858] vfs_write+0x61d/0xb90 [ 1764.186770][ T858] ? __pfx_vfs_write+0x10/0x10 [ 1764.186805][ T858] ? __fget_files+0x2a/0x420 [ 1764.186847][ T858] ksys_write+0x150/0x270 [ 1764.186874][ T858] ? __pfx_ksys_write+0x10/0x10 [ 1764.186914][ T858] do_syscall_64+0x14d/0xf80 [ 1764.186947][ T858] ? trace_irq_disable+0x3b/0x150 [ 1764.186979][ T858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.187003][ T858] ? clear_bhb_loop+0x40/0x90 [ 1764.187030][ T858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1764.187052][ T858] RIP: 0033:0x7f1a1819c799 [ 1764.187074][ T858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1764.187094][ T858] RSP: 002b:00007f1a18f72028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1764.187118][ T858] RAX: ffffffffffffffda RBX: 00007f1a18416090 RCX: 00007f1a1819c799 [ 1764.187135][ T858] RDX: 0000000000000052 RSI: 00002000000012c0 RDI: 0000000000000005 [ 1764.187150][ T858] RBP: 00007f1a18f72090 R08: 0000000000000000 R09: 0000000000000000 [ 1764.187164][ T858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1764.187177][ T858] R13: 00007f1a18416128 R14: 00007f1a18416090 R15: 00007fffc02e4258 [ 1764.187211][ T858] [ 1764.225744][ T899] netlink: 'syz.4.18794': attribute type 3 has an invalid length. [ 1764.367467][ T902] netlink: 'syz.4.18794': attribute type 1 has an invalid length. [ 1764.447285][T28959] Bluetooth: hci0: link tx timeout [ 1764.452696][T28959] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1764.525586][ T907] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18797'. [ 1764.541356][ T902] bond2: entered promiscuous mode [ 1764.546754][ T902] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1764.580543][ T907] vlan2: entered allmulticast mode [ 1764.585952][ T907] bond0: entered allmulticast mode [ 1764.591831][ T907] bond_slave_0: entered allmulticast mode [ 1764.597832][ T907] bond_slave_1: entered allmulticast mode [ 1764.696420][ T911] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.18796'. [ 1764.697409][ T907] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18797'. [ 1765.202333][T28959] Bluetooth: hci0: command 0x0406 tx timeout [ 1765.251302][ T934] netlink: 44 bytes leftover after parsing attributes in process `syz.0.18804'. [ 1765.411800][ T939] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1765.765223][ T958] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18811'. [ 1765.770395][ T955] netlink: 'syz.0.18810': attribute type 1 has an invalid length. [ 1765.782480][ T955] netlink: 244 bytes leftover after parsing attributes in process `syz.0.18810'. [ 1765.795856][ T955] NCSI netlink: No device for ifindex 0 [ 1766.034697][ T975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.057871][ T975] team0: Port device bond0 added [ 1766.432283][ T981] wg1 speed is unknown, defaulting to 1000 [ 1766.854079][ T992] netlink: 'syz.0.18822': attribute type 1 has an invalid length. [ 1766.889041][ T989] can: request_module (can-proto-0) failed. [ 1766.906790][ T989] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18822'. [ 1766.962025][ T992] bond1: entered promiscuous mode [ 1766.967576][ T992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1767.137715][ T999] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1767.374182][ T982] syzkaller1: entered promiscuous mode [ 1767.380324][ T982] syzkaller1: entered allmulticast mode [ 1767.408509][ T1010] wg1 speed is unknown, defaulting to 1000 [ 1767.704013][ T1014] wg1 speed is unknown, defaulting to 1000 [ 1767.914690][T25988] Bluetooth: hci0: command 0x0406 tx timeout [ 1768.301475][ T1036] wg1 speed is unknown, defaulting to 1000 [ 1768.607713][ T1035] wg1 speed is unknown, defaulting to 1000 [ 1768.799897][ T1041] wg1 speed is unknown, defaulting to 1000 [ 1769.686168][ T1068] __nla_validate_parse: 4 callbacks suppressed [ 1769.686192][ T1068] netlink: 36 bytes leftover after parsing attributes in process `syz.4.18838'. [ 1770.000288][ T1074] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1770.298069][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.309518][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.311873][ T1082] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18843'. [ 1770.318365][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.340447][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.406919][ T1085] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18844'. [ 1770.416825][ T1080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18842'. [ 1770.417658][ T1087] netlink: 332 bytes leftover after parsing attributes in process `syz.1.18843'. [ 1770.435339][ T1080] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18842'. [ 1770.457460][ T1085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18844'. [ 1770.458721][ T1087] netlink: 'syz.1.18843': attribute type 9 has an invalid length. [ 1770.479790][ T1087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.18843'. [ 1770.489600][ T1087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.18843'. [ 1770.498804][ T1085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18844'. [ 1770.711420][ T1099] rdma_rxe: rxe_newlink: failed to add lo [ 1770.954979][ T1106] wg1 speed is unknown, defaulting to 1000 [ 1771.381709][ T1121] bond2: option primary_reselect: invalid value (4) [ 1771.395073][ T1121] bond2 (unregistering): Released all slaves [ 1771.499861][ T1106] syzkaller1: entered promiscuous mode [ 1771.505572][ T1106] syzkaller1: entered allmulticast mode [ 1771.584886][ T1126] sctp: [Deprecated]: syz.2.18857 (pid 1126) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1771.584886][ T1126] Use struct sctp_sack_info instead [ 1772.077544][ T1144] macvlan2: entered promiscuous mode [ 1772.085212][ T1144] macvlan2: entered allmulticast mode [ 1772.091693][ T1144] veth1_to_batadv: entered allmulticast mode [ 1772.109914][ T1147] bridge0: port 3(syz_tun) entered blocking state [ 1772.125380][ T1147] bridge0: port 3(syz_tun) entered disabled state [ 1772.132519][ T1147] syz_tun: entered allmulticast mode [ 1772.140521][ T1147] syz_tun: entered promiscuous mode [ 1772.224693][ T1154] syzkaller0: entered promiscuous mode [ 1772.233324][ T1154] syzkaller0: entered allmulticast mode [ 1772.379047][ T1160] syzkaller1: entered promiscuous mode [ 1772.384835][ T1160] syzkaller1: entered allmulticast mode [ 1773.778210][ T1216] wg1 speed is unknown, defaulting to 1000 [ 1773.839073][ T1223] netlink: 'syz.1.18891': attribute type 9 has an invalid length. [ 1773.967643][T25988] block nbd4: Receive control failed (result -32) [ 1774.207017][ T1236] xt_recent: Unsupported userspace flags (000000b1) [ 1774.235057][ T1236] netlink: 'syz.0.18896': attribute type 4 has an invalid length. [ 1774.260138][ T1230] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1774.477587][ T1253] netlink: 'syz.4.18902': attribute type 1 has an invalid length. [ 1774.502922][ T1241] bond0: (slave batadv0): Releasing backup interface [ 1774.563011][ T1241] bridge_slave_0: left allmulticast mode [ 1774.584623][ T1241] bridge_slave_0: left promiscuous mode [ 1774.602567][ T1241] bridge0: port 1(bridge_slave_0) entered disabled state [ 1774.631428][ T1241] bridge_slave_1: left allmulticast mode [ 1774.639234][ T1241] bridge_slave_1: left promiscuous mode [ 1774.655364][ T1241] bridge0: port 2(bridge_slave_1) entered disabled state [ 1774.683144][ T1241] bond0: (slave bond_slave_0): Releasing backup interface [ 1774.710846][ T1241] bond0: (slave bond_slave_1): Releasing backup interface [ 1774.739928][ T1241] team0: Port device team_slave_0 removed [ 1774.774834][ T1241] team0: Port device team_slave_1 removed [ 1774.787947][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1774.796448][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1774.833062][ T1241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1774.846216][ T1241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1774.880668][ T1279] __nla_validate_parse: 21 callbacks suppressed [ 1774.880691][ T1279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18908'. [ 1774.898231][ T1241] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1774.917172][ T1253] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1775.045508][ T1267] team0: Port device team_slave_0 removed [ 1775.147569][ T1276] wg1 speed is unknown, defaulting to 1000 [ 1775.401466][ T1305] tun0: tun_chr_ioctl cmd 1074025672 [ 1775.417282][ T1305] tun0: ignored: set checksum disabled [ 1775.484679][ T1305] bond0: (slave gre0): Error: Device can not be enslaved while up [ 1775.529063][ T1313] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1775.551676][ T1310] netlink: 60 bytes leftover after parsing attributes in process `syz.1.18917'. [ 1775.619595][ T1315] netlink: 11 bytes leftover after parsing attributes in process `syz.3.18918'. [ 1775.633593][ T1315] syzkaller0: entered promiscuous mode [ 1775.642575][ T1315] syzkaller0: entered allmulticast mode [ 1775.660941][ T1315] FAULT_INJECTION: forcing a failure. [ 1775.660941][ T1315] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1775.675168][ T1315] CPU: 1 UID: 0 PID: 1315 Comm: syz.3.18918 Not tainted syzkaller #0 PREEMPT(full) [ 1775.675199][ T1315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1775.675213][ T1315] Call Trace: [ 1775.675222][ T1315] [ 1775.675232][ T1315] dump_stack_lvl+0xe8/0x150 [ 1775.675269][ T1315] should_fail_ex+0x412/0x560 [ 1775.675303][ T1315] _copy_from_user+0x2d/0xb0 [ 1775.675347][ T1315] ___sys_sendmsg+0x1c6/0x360 [ 1775.675378][ T1315] ? __pfx____sys_sendmsg+0x10/0x10 [ 1775.675437][ T1315] ? __fget_files+0x2a/0x420 [ 1775.675468][ T1315] ? __fget_files+0x3a0/0x420 [ 1775.675529][ T1315] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1775.675554][ T1315] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1775.675587][ T1315] ? __pfx_ksys_write+0x10/0x10 [ 1775.675623][ T1315] do_syscall_64+0x14d/0xf80 [ 1775.675656][ T1315] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.675678][ T1315] ? clear_bhb_loop+0x40/0x90 [ 1775.675705][ T1315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.675726][ T1315] RIP: 0033:0x7fd7e2d9c799 [ 1775.675748][ T1315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1775.675767][ T1315] RSP: 002b:00007fd7e3c5b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1775.675791][ T1315] RAX: ffffffffffffffda RBX: 00007fd7e3015fa0 RCX: 00007fd7e2d9c799 [ 1775.675808][ T1315] RDX: 0000000000004005 RSI: 0000200000000280 RDI: 0000000000000005 [ 1775.675822][ T1315] RBP: 00007fd7e3c5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.675837][ T1315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.675850][ T1315] R13: 00007fd7e3016038 R14: 00007fd7e3015fa0 R15: 00007ffd17c2bb78 [ 1775.675884][ T1315] [ 1775.874709][ T1318] sctp: [Deprecated]: syz.4.18920 (pid 1318) Use of int in max_burst socket option deprecated. [ 1775.874709][ T1318] Use struct sctp_assoc_value instead [ 1775.892017][ T1318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18920'. [ 1775.921034][ T1318] team10: entered promiscuous mode [ 1775.926237][ T1318] team10: entered allmulticast mode [ 1775.932280][ T1318] 8021q: adding VLAN 0 to HW filter on device team10 [ 1775.943194][ T1318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18920'. [ 1776.068499][ T1318] team11: entered promiscuous mode [ 1776.077098][ T1318] team11: entered allmulticast mode [ 1776.083925][ T1318] 8021q: adding VLAN 0 to HW filter on device team11 [ 1776.214363][ T1322] syzkaller0: entered promiscuous mode [ 1776.228677][ T1322] syzkaller0: entered allmulticast mode [ 1776.435501][ T1341] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18927'. [ 1776.445674][ T1345] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1778.521813][ T1362] batadv_slave_1: Caught tx_queue_len zero misconfig [ 1778.528622][ T1362] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18933'. [ 1778.564127][ T1345] wg1 speed is unknown, defaulting to 1000 [ 1778.721188][ T1367] netlink: 11 bytes leftover after parsing attributes in process `syz.2.18935'. [ 1778.745341][ T1373] netlink: 88 bytes leftover after parsing attributes in process `syz.4.18936'. [ 1778.905483][ T1374] syzkaller0: entered promiscuous mode [ 1778.911225][ T1374] syzkaller0: entered allmulticast mode [ 1778.933478][ T1365] wg1 speed is unknown, defaulting to 1000 [ 1779.185176][ T1382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18940'. [ 1779.758646][ T1402] syzkaller0: entered promiscuous mode [ 1779.767733][ T1402] syzkaller0: entered allmulticast mode [ 1779.893906][ T1407] syzkaller0: entered promiscuous mode [ 1779.899835][ T1407] syzkaller0: entered allmulticast mode [ 1780.034698][ T1415] __nla_validate_parse: 3 callbacks suppressed [ 1780.034721][ T1415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18955'. [ 1780.065714][ T1419] sctp: [Deprecated]: syz.2.18954 (pid 1419) Use of int in max_burst socket option deprecated. [ 1780.065714][ T1419] Use struct sctp_assoc_value instead [ 1780.131360][ T1419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18954'. [ 1780.158306][ T1415] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1780.187380][ T1424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18954'. [ 1780.223681][ T1419] team1: entered promiscuous mode [ 1780.237327][ T1419] team1: entered allmulticast mode [ 1780.246456][ T1419] 8021q: adding VLAN 0 to HW filter on device team1 [ 1780.278089][ T1418] wg1 speed is unknown, defaulting to 1000 [ 1780.324987][ T1424] team2: entered promiscuous mode [ 1780.339935][ T1424] team2: entered allmulticast mode [ 1780.348165][ T1424] 8021q: adding VLAN 0 to HW filter on device team2 [ 1780.504755][ T1430] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1781.040165][ T1449] wg1 speed is unknown, defaulting to 1000 [ 1781.290867][ T1460] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18968'. [ 1781.436675][ T1465] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.18968'. [ 1781.458181][ T1465] netlink: Unknown conntrack attr (0) [ 1781.560758][ T1473] netlink: 264 bytes leftover after parsing attributes in process `syz.3.18964'. [ 1781.561818][ T1460] bond0: entered promiscuous mode [ 1781.578966][ T1460] bond_slave_0: entered promiscuous mode [ 1781.620314][ T1460] bond_slave_1: entered promiscuous mode [ 1781.676219][ T1460] bond0: left promiscuous mode [ 1781.683412][ T1460] bond_slave_0: left promiscuous mode [ 1781.712044][ T1460] bond_slave_1: left promiscuous mode [ 1781.906103][ T1472] wg1 speed is unknown, defaulting to 1000 [ 1782.344074][ T1506] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18977'. [ 1782.382865][ T1506] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18977'. [ 1782.413839][ T1512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.18979'. [ 1782.432500][ T1506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1782.557019][ T1511] wg1 speed is unknown, defaulting to 1000 [ 1782.622458][ T1520] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18981'. [ 1782.771208][ T1525] netlink: 'syz.3.18983': attribute type 39 has an invalid length. [ 1782.822488][ T1523] netlink: 'syz.3.18983': attribute type 5 has an invalid length. [ 1782.887623][ T1523] vlan3: entered allmulticast mode [ 1782.940779][ T1529] syzkaller1: entered promiscuous mode [ 1782.946437][ T1529] syzkaller1: entered allmulticast mode [ 1783.701412][ T1574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1783.883979][ T1586] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1784.072613][ T1557] team1: left promiscuous mode [ 1784.077544][ T1557] team1: left allmulticast mode [ 1784.086363][ T1557] team2: left promiscuous mode [ 1784.091824][ T1557] team2: left allmulticast mode [ 1784.098105][ T1557] team3: left promiscuous mode [ 1784.106951][ T1557] team3: left allmulticast mode [ 1784.113401][ T1557] team4: left promiscuous mode [ 1784.118232][ T1557] team4: left allmulticast mode [ 1784.185182][ T1580] bridge_slave_0 (unregistering): left allmulticast mode [ 1784.204972][ T1580] bridge_slave_0 (unregistering): left promiscuous mode [ 1784.223742][ T1580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1784.260972][ T6013] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1784.289707][ T6013] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.318551][ T6013] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1784.334104][ T6013] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.483870][ T6013] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1784.505084][ T6013] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.533810][ T6013] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1784.560200][ T6013] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1784.635380][ T1603] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1784.894072][ T1619] syzkaller0: entered promiscuous mode [ 1784.908746][ T1619] syzkaller0: entered allmulticast mode [ 1785.152979][ T1624] wg1 speed is unknown, defaulting to 1000 [ 1785.221821][ T1629] wg1 speed is unknown, defaulting to 1000 [ 1785.410647][ T1636] wg1 speed is unknown, defaulting to 1000 [ 1785.904226][ T1662] wg1 speed is unknown, defaulting to 1000 [ 1786.099765][ T1664] wg1 speed is unknown, defaulting to 1000 [ 1786.768495][ T1624] syzkaller1: entered promiscuous mode [ 1786.786117][ T1624] syzkaller1: entered allmulticast mode [ 1786.994877][ T1702] netlink: 'syz.3.19035': attribute type 15 has an invalid length. [ 1787.011373][ T1702] __nla_validate_parse: 11 callbacks suppressed [ 1787.011395][ T1702] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19035'. [ 1787.662177][ T1733] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19044'. [ 1787.848642][ T1746] netlink: 'syz.1.19047': attribute type 12 has an invalid length. [ 1788.023046][ T1755] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1788.454331][ T1776] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19063'. [ 1788.571899][ T1778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19064'. [ 1788.923966][ T1810] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19070'. [ 1788.972786][ T1809] syzkaller0: entered promiscuous mode [ 1788.978491][ T1809] syzkaller0: entered allmulticast mode [ 1789.055818][ T1817] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19077'. [ 1789.108786][ T1821] netlink: 'syz.0.19079': attribute type 13 has an invalid length. [ 1789.128495][ T1821] netlink: 'syz.0.19079': attribute type 17 has an invalid length. [ 1789.197796][ T1826] netlink: 'syz.0.19079': attribute type 10 has an invalid length. [ 1789.206602][ T1826] netlink: 228 bytes leftover after parsing attributes in process `syz.0.19079'. [ 1789.246356][ T1821] bridge0: left promiscuous mode [ 1789.254427][ T1821] bridge0: entered promiscuous mode [ 1789.270086][ T1821] 8021q: adding VLAN 0 to HW filter on device team0 [ 1789.293218][ T1821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1789.472593][ T1837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19085'. [ 1789.518156][ T1838] syzkaller0: entered promiscuous mode [ 1789.524678][ T1838] syzkaller0: entered allmulticast mode [ 1789.548392][ T1841] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1789.617466][ T1843] netlink: 'syz.4.19088': attribute type 2 has an invalid length. [ 1789.894745][ T1848] netlink: 'syz.1.19090': attribute type 4 has an invalid length. [ 1789.907561][ T1848] netlink: 'syz.1.19090': attribute type 4 has an invalid length. [ 1790.033248][ T1855] nftables ruleset with unbound chain [ 1790.069681][ T1855] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1790.082368][ T1855] bond2 (unregistering): Released all slaves [ 1790.134949][ T1857] netlink: 'syz.3.19093': attribute type 2 has an invalid length. [ 1790.143607][ T1862] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 1790.158214][ T1861] wg1 speed is unknown, defaulting to 1000 [ 1790.172842][ T1857] netlink: 'syz.3.19093': attribute type 1 has an invalid length. [ 1790.231552][ T1857] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19093'. [ 1790.453257][ T1877] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19097'. [ 1791.193776][ T1861] syzkaller1: entered promiscuous mode [ 1791.206405][ T1861] syzkaller1: entered allmulticast mode [ 1791.373927][ T1905] netlink: 'syz.2.19109': attribute type 25 has an invalid length. [ 1791.403206][ T632] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1791.421489][ T632] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1791.446103][ T632] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1791.475149][ T632] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1791.521353][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1791.622102][ T1910] syzkaller0: entered promiscuous mode [ 1791.635923][ T1910] syzkaller0: entered allmulticast mode [ 1791.691425][ T1917] FAULT_INJECTION: forcing a failure. [ 1791.691425][ T1917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1791.751271][ T1917] CPU: 1 UID: 0 PID: 1917 Comm: syz.0.19113 Not tainted syzkaller #0 PREEMPT(full) [ 1791.751309][ T1917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1791.751323][ T1917] Call Trace: [ 1791.751332][ T1917] [ 1791.751343][ T1917] dump_stack_lvl+0xe8/0x150 [ 1791.751382][ T1917] should_fail_ex+0x412/0x560 [ 1791.751418][ T1917] _copy_from_user+0x2d/0xb0 [ 1791.751453][ T1917] ___sys_sendmsg+0x1c6/0x360 [ 1791.751512][ T1917] ? __pfx____sys_sendmsg+0x10/0x10 [ 1791.751572][ T1917] ? __fget_files+0x2a/0x420 [ 1791.751605][ T1917] ? __fget_files+0x3a0/0x420 [ 1791.751648][ T1917] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1791.751673][ T1917] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1791.751706][ T1917] ? __pfx_ksys_write+0x10/0x10 [ 1791.751741][ T1917] do_syscall_64+0x14d/0xf80 [ 1791.751772][ T1917] ? trace_irq_disable+0x3b/0x150 [ 1791.751804][ T1917] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.751827][ T1917] ? clear_bhb_loop+0x40/0x90 [ 1791.751855][ T1917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1791.751876][ T1917] RIP: 0033:0x7f1a1819c799 [ 1791.751898][ T1917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1791.751917][ T1917] RSP: 002b:00007f1a18f93028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1791.751940][ T1917] RAX: ffffffffffffffda RBX: 00007f1a18415fa0 RCX: 00007f1a1819c799 [ 1791.751957][ T1917] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1791.751971][ T1917] RBP: 00007f1a18f93090 R08: 0000000000000000 R09: 0000000000000000 [ 1791.751984][ T1917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1791.751998][ T1917] R13: 00007f1a18416038 R14: 00007f1a18415fa0 R15: 00007fffc02e4258 [ 1791.752045][ T1917] [ 1792.041382][ T1928] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1792.275918][ T1086] bridge_slave_1: left allmulticast mode [ 1792.289612][ T1086] bridge_slave_1: left promiscuous mode [ 1792.295484][ T1086] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.353100][ T1086] bridge_slave_0: left allmulticast mode [ 1792.366211][ T1086] bridge_slave_0: left promiscuous mode [ 1792.379696][ T1086] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.431571][ T1086] dvmrp0: left allmulticast mode [ 1792.580046][ T1960] __nla_validate_parse: 8 callbacks suppressed [ 1792.580072][ T1960] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19124'. [ 1792.653757][ T1966] FAULT_INJECTION: forcing a failure. [ 1792.653757][ T1966] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.688458][ T1966] CPU: 0 UID: 0 PID: 1966 Comm: syz.4.19129 Not tainted syzkaller #0 PREEMPT(full) [ 1792.688490][ T1966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1792.688505][ T1966] Call Trace: [ 1792.688514][ T1966] [ 1792.688524][ T1966] dump_stack_lvl+0xe8/0x150 [ 1792.688562][ T1966] should_fail_ex+0x412/0x560 [ 1792.688596][ T1966] should_failslab+0xa8/0x100 [ 1792.688628][ T1966] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1792.688652][ T1966] ? __alloc_skb+0x186/0x7d0 [ 1792.688684][ T1966] ? __alloc_skb+0x1d0/0x7d0 [ 1792.688714][ T1966] ? __local_bh_enable_ip+0xd0/0x130 [ 1792.688749][ T1966] __alloc_skb+0x1d0/0x7d0 [ 1792.688787][ T1966] netlink_sendmsg+0x5d4/0xb40 [ 1792.688831][ T1966] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1792.688881][ T1966] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1792.688915][ T1966] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1792.688945][ T1966] ____sys_sendmsg+0x972/0x9f0 [ 1792.688978][ T1966] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1792.689010][ T1966] ? import_iovec+0x73/0xa0 [ 1792.689049][ T1966] ___sys_sendmsg+0x2a5/0x360 [ 1792.689079][ T1966] ? __pfx____sys_sendmsg+0x10/0x10 [ 1792.689140][ T1966] ? __fget_files+0x2a/0x420 [ 1792.689172][ T1966] ? __fget_files+0x3a0/0x420 [ 1792.689214][ T1966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1792.689240][ T1966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1792.689271][ T1966] ? __pfx_ksys_write+0x10/0x10 [ 1792.689308][ T1966] do_syscall_64+0x14d/0xf80 [ 1792.689339][ T1966] ? trace_irq_disable+0x3b/0x150 [ 1792.689370][ T1966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.689393][ T1966] ? clear_bhb_loop+0x40/0x90 [ 1792.689420][ T1966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.689442][ T1966] RIP: 0033:0x7fd92c79c799 [ 1792.689463][ T1966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1792.689482][ T1966] RSP: 002b:00007fd92d73c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1792.689506][ T1966] RAX: ffffffffffffffda RBX: 00007fd92ca15fa0 RCX: 00007fd92c79c799 [ 1792.689523][ T1966] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1792.689537][ T1966] RBP: 00007fd92d73c090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.689552][ T1966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1792.689565][ T1966] R13: 00007fd92ca16038 R14: 00007fd92ca15fa0 R15: 00007fff5b1ed018 [ 1792.689600][ T1966] [ 1792.989425][ T1086] bond2 (unregistering): (slave gretap1): Releasing active interface [ 1793.010633][ T1972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.19131'. [ 1793.021026][ T1972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19131'. [ 1793.051197][ T1972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19131'. [ 1793.070473][ T1972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19131'. [ 1793.083380][ T1972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19131'. [ 1793.222670][ T1977] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1793.316211][ T1086] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1793.327012][ T1086] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1793.371833][ T1086] bond0 (unregistering): Released all slaves [ 1793.391508][ T1086] bond1 (unregistering): Released all slaves [ 1793.423425][ T1086] bond2 (unregistering): Released all slaves [ 1793.445429][ T1086] bond3 (unregistering): Released all slaves [ 1793.465795][ T1086] bond4 (unregistering): Released all slaves [ 1793.502664][ T1086] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 1793.523929][ T1086] bond5 (unregistering): Released all slaves [ 1793.717899][ T1983] netlink: 272 bytes leftover after parsing attributes in process `syz.1.19132'. [ 1793.784477][ T1989] validate_nla: 1 callbacks suppressed [ 1793.784500][ T1989] netlink: 'syz.1.19132': attribute type 3 has an invalid length. [ 1793.799428][ T1989] netlink: 3 bytes leftover after parsing attributes in process `syz.1.19132'. [ 1794.155306][ T1970] bond1: left promiscuous mode [ 1794.168545][ T1970] macvlan2: left promiscuous mode [ 1794.179319][ T1970] macvlan2: left allmulticast mode [ 1794.211872][ T1086] tipc: Left network mode [ 1794.481953][ T2009] netlink: 11 bytes leftover after parsing attributes in process `syz.1.19142'. [ 1794.520466][ T2009] syzkaller0: entered promiscuous mode [ 1794.526012][ T2009] syzkaller0: entered allmulticast mode [ 1794.630624][ T2014] netlink: 'syz.3.19145': attribute type 4 has an invalid length. [ 1794.638577][ T2014] netlink: 'syz.3.19145': attribute type 8 has an invalid length. [ 1794.667405][ T2014] netlink: 212 bytes leftover after parsing attributes in process `syz.3.19145'. [ 1795.212844][ T2036] wg1 speed is unknown, defaulting to 1000 [ 1795.388802][ T2050] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 3 [ 1795.604618][ T2059] sctp: [Deprecated]: syz.1.19161 (pid 2059) Use of int in max_burst socket option deprecated. [ 1795.604618][ T2059] Use struct sctp_assoc_value instead [ 1795.693673][ T2059] team5: entered promiscuous mode [ 1795.701525][ T2059] team5: entered allmulticast mode [ 1795.707269][ T2059] 8021q: adding VLAN 0 to HW filter on device team5 [ 1795.752512][ T2060] team6: entered promiscuous mode [ 1795.758034][ T2060] team6: entered allmulticast mode [ 1795.779115][ T2060] 8021q: adding VLAN 0 to HW filter on device team6 [ 1795.961750][ T1086] hsr_slave_1: left promiscuous mode [ 1795.974947][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1795.994427][ T1086] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1796.676558][ T2074] wg1 speed is unknown, defaulting to 1000 [ 1796.692167][ T2066] wg1 speed is unknown, defaulting to 1000 [ 1796.708973][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 1796.717075][ C0] lec:lec_tx_timeout: lec0 [ 1796.732885][ T2084] wg1 speed is unknown, defaulting to 1000 [ 1796.766812][ T2087] vlan2: left allmulticast mode [ 1796.780794][ T2087] bond0: left allmulticast mode [ 1796.796576][ T2087] bond_slave_0: left allmulticast mode [ 1796.821305][ T2087] bond_slave_1: left allmulticast mode [ 1796.851140][ T2089] team1: left promiscuous mode [ 1796.858857][ T2089] team1: left allmulticast mode [ 1796.872500][ T2089] team2: left promiscuous mode [ 1796.885263][ T2089] team2: left allmulticast mode [ 1796.903460][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1796.959537][ T2094] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1797.009072][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.022662][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.117433][ T2092] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1797.135982][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1797.439430][ T2103] wg1 speed is unknown, defaulting to 1000 [ 1797.601313][ T2102] wg1 speed is unknown, defaulting to 1000 [ 1797.681123][ T1086] IPVS: stop unused estimator thread 0... [ 1797.936127][ T2123] sctp: [Deprecated]: syz.4.19179 (pid 2123) Use of int in max_burst socket option deprecated. [ 1797.936127][ T2123] Use struct sctp_assoc_value instead [ 1798.052440][ T2123] __nla_validate_parse: 13 callbacks suppressed [ 1798.052463][ T2123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19179'. [ 1798.159999][ T2126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19179'. [ 1798.193409][ T2132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19182'. [ 1798.258389][ T2123] team12: entered promiscuous mode [ 1798.264391][ T2123] team12: entered allmulticast mode [ 1798.274698][ T2123] 8021q: adding VLAN 0 to HW filter on device team12 [ 1798.370830][ T2126] team13: entered promiscuous mode [ 1798.383310][ T2126] team13: entered allmulticast mode [ 1798.425623][ T2126] 8021q: adding VLAN 0 to HW filter on device team13 [ 1798.523815][ T2149] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1798.591246][ T2146] syzkaller0: entered promiscuous mode [ 1798.596873][ T2146] syzkaller0: entered allmulticast mode [ 1798.604987][ T2148] netlink: 44 bytes leftover after parsing attributes in process `syz.2.19185'. [ 1799.062894][ T2171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19192'. [ 1799.079358][ T2171] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19192'. [ 1800.471655][T30369] lec:lec_start_xmit: lec0:No lecd attached [ 1801.127223][ T2164] wg1 speed is unknown, defaulting to 1000 [ 1801.164187][ T2171] wg1 speed is unknown, defaulting to 1000 [ 1801.441030][ T2188] netlink: 144 bytes leftover after parsing attributes in process `syz.3.19197'. [ 1801.455847][ T2188] netlink: 'syz.3.19197': attribute type 1 has an invalid length. [ 1801.585287][ T2187] Cannot find set identified by id 0 to match [ 1801.905079][ T2198] x_tables: duplicate underflow at hook 1 [ 1802.404551][ T2212] bond2: left promiscuous mode [ 1802.420237][ T2210] netlink: 3 bytes leftover after parsing attributes in process `syz.1.19204'. [ 1802.441570][ T2210] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19204'. [ 1802.479437][ T2210] netlink: 3 bytes leftover after parsing attributes in process `syz.1.19204'. [ 1802.546849][ T2212] team10: left promiscuous mode [ 1802.559113][ T2212] team10: left allmulticast mode [ 1802.585635][ T2212] team11: left promiscuous mode [ 1802.599372][ T2212] team11: left allmulticast mode [ 1802.623442][ T2227] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1802.690297][ T2212] team12: left promiscuous mode [ 1802.695242][ T2212] team12: left allmulticast mode [ 1802.770466][ T2212] team13: left promiscuous mode [ 1802.788297][ T2212] team13: left allmulticast mode [ 1802.827918][ T12] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.866249][ T12] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.947304][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1802.958037][ T12] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1803.361739][ T2257] __nla_validate_parse: 2 callbacks suppressed [ 1803.361762][ T2257] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19215'. [ 1803.436264][ T2260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19217'. [ 1803.454839][ T2260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19217'. [ 1803.493123][ T2258] wg1 speed is unknown, defaulting to 1000 [ 1803.585308][ T2264] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1803.596142][ T2265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19219'. [ 1804.468725][ T2295] tipc: Enabling of bearer rejected, failed to enable media [ 1805.027392][ T2329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19237'. [ 1805.045381][ T2329] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19237'. [ 1805.184217][ T2333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19238'. [ 1805.207470][ T2333] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19238'. [ 1805.235181][ T2333] netlink: 'syz.1.19238': attribute type 20 has an invalid length. [ 1805.344466][ T2342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19238'. [ 1805.517408][ T2319] wg1 speed is unknown, defaulting to 1000 [ 1805.525140][ T2330] batman_adv: batadv0: Adding interface: dummy0 [ 1805.532049][ T2330] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1805.557961][ T2330] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 1805.642220][ T2340] wg1 speed is unknown, defaulting to 1000 [ 1805.668930][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1805.677038][ C0] lec:lec_tx_timeout: lec0 [ 1805.728031][ T2329] wg1 speed is unknown, defaulting to 1000 [ 1806.081050][ T2354] syzkaller0: entered promiscuous mode [ 1806.092510][ T2354] syzkaller0: entered allmulticast mode [ 1806.367832][ T2357] team5: left promiscuous mode [ 1806.377902][ T2357] team5: left allmulticast mode [ 1806.397077][ T2357] team6: left promiscuous mode [ 1806.428135][ T2357] team6: left allmulticast mode [ 1806.490151][ T2357] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1806.536549][ T2360] veth0_to_bridge: Caught tx_queue_len zero misconfig [ 1806.630816][ T2364] netlink: 'syz.2.19245': attribute type 11 has an invalid length. [ 1807.428433][ T2399] wg1 speed is unknown, defaulting to 1000 [ 1807.572871][ T2402] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1807.622511][ T2404] netlink: 'syz.2.19258': attribute type 1 has an invalid length. [ 1807.724478][ T2409] wg1 speed is unknown, defaulting to 1000 [ 1807.822056][ T2411] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19260'. [ 1807.916236][ T2420] netlink: 'syz.0.19260': attribute type 12 has an invalid length. [ 1808.114323][ T2422] syzkaller0: entered promiscuous mode [ 1808.121330][ T2422] syzkaller0: entered allmulticast mode [ 1808.289456][ T2440] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1808.586338][ T2451] __nla_validate_parse: 3 callbacks suppressed [ 1808.586360][ T2451] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19268'. [ 1808.665586][ T2452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19268'. [ 1808.676821][ T2452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19268'. [ 1808.696900][ T2452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19268'. [ 1808.706453][ T2452] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19268'. [ 1810.368014][ T2438] wg1 speed is unknown, defaulting to 1000 [ 1811.134722][ T2481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19278'. [ 1811.369289][ T2495] netlink: 11 bytes leftover after parsing attributes in process `syz.4.19283'. [ 1811.379778][ T2495] syzkaller0: entered promiscuous mode [ 1811.385399][ T2495] syzkaller0: entered allmulticast mode [ 1811.573161][ T2505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19287'. [ 1811.584015][ T2497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19284'. [ 1811.587357][ T2505] netlink: 52 bytes leftover after parsing attributes in process `syz.1.19287'. [ 1811.710910][ T2507] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1812.131140][ T2529] netlink: 'syz.0.19294': attribute type 15 has an invalid length. [ 1812.481450][ T2506] lec:lec_atm_close: lec0: Shut down! [ 1812.962016][ T2582] netlink: 'syz.2.19309': attribute type 1 has an invalid length. [ 1813.545222][ T2612] openvswitch: netlink: IPv4 tunnel dst address is zero [ 1813.777911][ T2618] wg1 speed is unknown, defaulting to 1000 [ 1814.004910][ T2631] sctp: [Deprecated]: syz.1.19327 (pid 2631) Use of int in max_burst socket option deprecated. [ 1814.004910][ T2631] Use struct sctp_assoc_value instead [ 1814.040877][ T2631] __nla_validate_parse: 10 callbacks suppressed [ 1814.040900][ T2631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19327'. [ 1814.069699][ T2630] delete_channel: no stack [ 1814.162013][ T2640] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19327'. [ 1814.245910][ T2641] netlink: 'syz.4.19328': attribute type 2 has an invalid length. [ 1814.273973][ T2641] netlink: 'syz.4.19328': attribute type 2 has an invalid length. [ 1814.297745][ T2631] team7: entered promiscuous mode [ 1814.309335][ T2631] team7: entered allmulticast mode [ 1814.330042][ T2631] 8021q: adding VLAN 0 to HW filter on device team7 [ 1814.416731][ T2640] team8: entered promiscuous mode [ 1814.426124][ T2640] team8: entered allmulticast mode [ 1814.432843][ T2640] 8021q: adding VLAN 0 to HW filter on device team8 [ 1814.666706][ T2665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19335'. [ 1815.521039][ T2661] netlink: 'syz.0.19334': attribute type 5 has an invalid length. [ 1815.552585][ T2682] bond0: (slave sit0): Error: Device type is different from other slaves [ 1815.592094][ T2690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19339'. [ 1815.788311][ T2674] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19336'. [ 1815.798054][ T2674] netlink: zone id is out of range [ 1815.803841][ T2674] netlink: zone id is out of range [ 1815.819520][ T2674] netlink: zone id is out of range [ 1815.824752][ T2674] netlink: zone id is out of range [ 1815.851191][ T2674] netlink: zone id is out of range [ 1815.864940][ T2674] netlink: zone id is out of range [ 1815.877376][ T2674] netlink: zone id is out of range [ 1815.893858][ T2674] netlink: zone id is out of range [ 1816.086267][ T2708] wg1 speed is unknown, defaulting to 1000 [ 1816.124840][ T2711] netlink: 220 bytes leftover after parsing attributes in process `syz.0.19343'. [ 1816.356932][ T2715] wg1 speed is unknown, defaulting to 1000 [ 1816.782058][ T2720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19346'. [ 1816.833220][ T2744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19346'. [ 1816.845531][ T2730] wg1 speed is unknown, defaulting to 1000 [ 1817.173840][ T2763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19357'. [ 1817.249120][ T2763] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19357'. [ 1817.274753][ T2752] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1817.291999][ T2752] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1817.312407][ T2752] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1817.498702][ T2735] syzkaller1: entered promiscuous mode [ 1817.507729][ T2735] syzkaller1: entered allmulticast mode [ 1817.571846][ T2777] xt_bpf: check failed: parse error [ 1817.591727][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.597727][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.604793][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.623049][ T2777] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1817.652089][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.660155][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.667867][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.669159][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5190 ms [ 1817.680002][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.681763][ C0] lec:lec_tx_timeout: lec0 [ 1817.698117][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.707634][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.716903][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.725162][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.791395][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.800148][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.808264][ T2784] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1817.831204][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.867634][ T2777] lo speed is unknown, defaulting to 1000 [ 1817.988125][ T2784] wg1 speed is unknown, defaulting to 1000 [ 1817.995380][ T2777] lo speed is unknown, defaulting to 1000 [ 1818.004840][ T2777] lo speed is unknown, defaulting to 1000 [ 1818.900452][ T2819] syzkaller0: entered promiscuous mode [ 1818.914030][ T2819] syzkaller0: entered allmulticast mode [ 1819.644524][ T2866] __nla_validate_parse: 2 callbacks suppressed [ 1819.644550][ T2866] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19387'. [ 1819.651177][ T2868] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19388'. [ 1820.109784][ T2895] Bluetooth: MGMT ver 1.23 [ 1820.327237][ T2903] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19400'. [ 1820.478709][ T2912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.19403'. [ 1820.676853][ T2920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19405'. [ 1820.705264][ T2920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19405'. [ 1820.721043][ T2920] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19405'. [ 1820.737133][ T2922] wg1 speed is unknown, defaulting to 1000 [ 1820.754047][ T2922] lo speed is unknown, defaulting to 1000 [ 1821.187863][ T2933] syzkaller0: entered promiscuous mode [ 1821.210932][ T2933] syzkaller0: entered allmulticast mode [ 1821.416460][ T2946] netlink: 164 bytes leftover after parsing attributes in process `syz.1.19414'. [ 1821.492352][ T2943] netlink: 164 bytes leftover after parsing attributes in process `syz.4.19415'. [ 1822.188017][ T2954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.19417'. [ 1824.625607][ T2950] wg1 speed is unknown, defaulting to 1000 [ 1824.652171][ T2950] lo speed is unknown, defaulting to 1000 [ 1825.214908][ T2985] __nla_validate_parse: 1 callbacks suppressed [ 1825.214931][ T2985] netlink: 164 bytes leftover after parsing attributes in process `syz.0.19427'. [ 1825.303788][ T2990] netlink: 'syz.3.19429': attribute type 4 has an invalid length. [ 1825.336733][ T2990] netlink: 'syz.3.19429': attribute type 4 has an invalid length. [ 1825.389876][ T849] lo speed is unknown, defaulting to 1000 [ 1825.395960][ T849] syz2: Port: 1 Link ACTIVE [ 1826.085068][ T3017] sctp: [Deprecated]: syz.4.19437 (pid 3017) Use of int in max_burst socket option deprecated. [ 1826.085068][ T3017] Use struct sctp_assoc_value instead [ 1826.123589][ T3020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19441'. [ 1826.156555][ T3017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19437'. [ 1826.185889][ T3020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19441'. [ 1826.221141][ T3023] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19437'. [ 1826.259323][ T3021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19439'. [ 1826.293351][ T3017] team14: entered promiscuous mode [ 1826.312020][ T3017] team14: entered allmulticast mode [ 1826.323528][ T3017] 8021q: adding VLAN 0 to HW filter on device team14 [ 1826.354421][ T3019] wg1 speed is unknown, defaulting to 1000 [ 1826.394511][ T3023] team15: entered promiscuous mode [ 1826.400416][ T3023] team15: entered allmulticast mode [ 1826.408381][ T3023] 8021q: adding VLAN 0 to HW filter on device team15 [ 1826.452639][ T3019] lo speed is unknown, defaulting to 1000 [ 1826.651335][ T3039] syzkaller0: entered promiscuous mode [ 1826.658519][ T3039] syzkaller0: entered allmulticast mode [ 1827.220524][ T3060] net_ratelimit: 3 callbacks suppressed [ 1827.220546][ T3060] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1827.257795][ T3061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19451'. [ 1827.316493][ T3063] netlink: 'syz.0.19454': attribute type 1 has an invalid length. [ 1827.460388][ T3073] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1827.479676][ T3074] x_tables: ip6_tables: udplite match: only valid for protocol 136 [ 1827.492727][ T3075] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19454'. [ 1827.530870][ T3074] netlink: 40 bytes leftover after parsing attributes in process `syz.2.19455'. [ 1827.558218][ T3063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.19454'. [ 1827.658575][ T3071] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1827.707317][ T3071] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1827.788339][ T3075] bond2: (slave bridge3): Enslaving as an active interface with a down link [ 1827.844941][ T3063] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1828.257669][ T3109] macvtap1: entered promiscuous mode [ 1828.263832][ T3109] macvtap1: entered allmulticast mode [ 1828.270273][ T3109] veth1_vlan: entered allmulticast mode [ 1828.282664][ T3108] syzkaller0: entered promiscuous mode [ 1828.288322][ T3108] syzkaller0: entered allmulticast mode [ 1829.161784][ T3141] syzkaller1: entered promiscuous mode [ 1829.174518][ T3141] syzkaller1: entered allmulticast mode [ 1829.281801][ T3147] syzkaller0: entered promiscuous mode [ 1829.287354][ T3147] syzkaller0: entered allmulticast mode [ 1829.476312][ T3161] Cannot find add_set index 1 as target [ 1829.698669][ T3178] netlink: 'syz.1.19494': attribute type 9 has an invalid length. [ 1830.488714][ T3230] __nla_validate_parse: 13 callbacks suppressed [ 1830.488736][ T3230] netlink: 16 bytes leftover after parsing attributes in process `syz.2.19507'. [ 1830.627776][ T3230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19507'. [ 1830.640038][ T3230] hsr_slave_0: left promiscuous mode [ 1830.661768][ T3230] hsr_slave_1: left promiscuous mode [ 1830.957198][ T3247] team0: entered allmulticast mode [ 1831.062774][ T3253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19512'. [ 1831.089222][ T3253] openvswitch: netlink: Flow actions attr not present in new flow. [ 1831.423664][ T3266] [ 1831.426063][ T3266] ====================================================== [ 1831.433107][ T3266] WARNING: possible circular locking dependency detected [ 1831.440237][ T3266] syzkaller #0 Not tainted [ 1831.445035][ T3266] ------------------------------------------------------ [ 1831.452075][ T3266] syz.2.19520/3266 is trying to acquire lock: [ 1831.458166][ T3266] ffff8880560c7870 (&nr_node->node_lock){+...}-{3:3}, at: nr_rt_device_down+0x153/0x860 [ 1831.468153][ T3266] [ 1831.468153][ T3266] but task is already holding lock: [ 1831.475615][ T3266] ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 1831.485427][ T3266] [ 1831.485427][ T3266] which lock already depends on the new lock. [ 1831.485427][ T3266] [ 1831.495868][ T3266] [ 1831.495868][ T3266] the existing dependency chain (in reverse order) is: [ 1831.504921][ T3266] [ 1831.504921][ T3266] -> #2 (nr_node_list_lock){+...}-{3:3}: [ 1831.512910][ T3266] _raw_spin_lock_bh+0x36/0x50 [ 1831.518252][ T3266] nr_rt_device_down+0xbe/0x860 [ 1831.523672][ T3266] nr_device_event+0x137/0x150 [ 1831.529008][ T3266] notifier_call_chain+0x1be/0x400 [ 1831.534689][ T3266] netif_close_many+0x2ae/0x420 [ 1831.540117][ T3266] netif_close+0x160/0x220 [ 1831.545101][ T3266] dev_close+0x10a/0x220 [ 1831.549920][ T3266] bpq_device_event+0x377/0x6a0 [ 1831.555355][ T3266] notifier_call_chain+0x1be/0x400 [ 1831.561050][ T3266] __dev_notify_flags+0x16d/0x310 [ 1831.566657][ T3266] netif_change_flags+0xe8/0x1a0 [ 1831.572263][ T3266] dev_change_flags+0x130/0x260 [ 1831.577968][ T3266] dev_ioctl+0x7b4/0x1150 [ 1831.582879][ T3266] sock_do_ioctl+0x23e/0x320 [ 1831.588047][ T3266] sock_ioctl+0x5c6/0x7f0 [ 1831.592950][ T3266] __se_sys_ioctl+0xfc/0x170 [ 1831.598125][ T3266] do_syscall_64+0x14d/0xf80 [ 1831.603299][ T3266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.609788][ T3266] [ 1831.609788][ T3266] -> #1 (nr_neigh_list_lock){+.-.}-{3:3}: [ 1831.617774][ T3266] _raw_spin_lock_bh+0x36/0x50 [ 1831.623120][ T3266] nr_remove_neigh+0x25/0xe0 [ 1831.628304][ T3266] nr_add_node+0x1e41/0x2630 [ 1831.633463][ T3266] nr_rt_ioctl+0xe59/0xf90 [ 1831.638457][ T3266] sock_do_ioctl+0x101/0x320 [ 1831.643613][ T3266] sock_ioctl+0x5c6/0x7f0 [ 1831.648503][ T3266] __se_sys_ioctl+0xfc/0x170 [ 1831.653657][ T3266] do_syscall_64+0x14d/0xf80 [ 1831.658852][ T3266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.665311][ T3266] [ 1831.665311][ T3266] -> #0 (&nr_node->node_lock){+...}-{3:3}: [ 1831.673347][ T3266] __lock_acquire+0x15a5/0x2cf0 [ 1831.678755][ T3266] lock_acquire+0xf0/0x2e0 [ 1831.683751][ T3266] _raw_spin_lock_bh+0x36/0x50 [ 1831.689083][ T3266] nr_rt_device_down+0x153/0x860 [ 1831.694569][ T3266] nr_device_event+0x137/0x150 [ 1831.699879][ T3266] notifier_call_chain+0x1be/0x400 [ 1831.705537][ T3266] netif_close_many+0x2ae/0x420 [ 1831.710930][ T3266] netif_close+0x160/0x220 [ 1831.715889][ T3266] dev_close+0x10a/0x220 [ 1831.720678][ T3266] bpq_device_event+0x377/0x6a0 [ 1831.726173][ T3266] notifier_call_chain+0x1be/0x400 [ 1831.731852][ T3266] __dev_notify_flags+0x16d/0x310 [ 1831.737430][ T3266] netif_change_flags+0xe8/0x1a0 [ 1831.742924][ T3266] dev_change_flags+0x130/0x260 [ 1831.748355][ T3266] dev_ioctl+0x7b4/0x1150 [ 1831.753234][ T3266] sock_do_ioctl+0x23e/0x320 [ 1831.758375][ T3266] sock_ioctl+0x5c6/0x7f0 [ 1831.763249][ T3266] __se_sys_ioctl+0xfc/0x170 [ 1831.768403][ T3266] do_syscall_64+0x14d/0xf80 [ 1831.773551][ T3266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.779993][ T3266] [ 1831.779993][ T3266] other info that might help us debug this: [ 1831.779993][ T3266] [ 1831.790245][ T3266] Chain exists of: [ 1831.790245][ T3266] &nr_node->node_lock --> nr_neigh_list_lock --> nr_node_list_lock [ 1831.790245][ T3266] [ 1831.804092][ T3266] Possible unsafe locking scenario: [ 1831.804092][ T3266] [ 1831.811592][ T3266] CPU0 CPU1 [ 1831.816981][ T3266] ---- ---- [ 1831.822434][ T3266] lock(nr_node_list_lock); [ 1831.827135][ T3266] lock(nr_neigh_list_lock); [ 1831.834349][ T3266] lock(nr_node_list_lock); [ 1831.841489][ T3266] lock(&nr_node->node_lock); [ 1831.846279][ T3266] [ 1831.846279][ T3266] *** DEADLOCK *** [ 1831.846279][ T3266] [ 1831.854431][ T3266] 3 locks held by syz.2.19520/3266: [ 1831.859644][ T3266] #0: ffffffff8fbc7008 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1831.868487][ T3266] #1: ffffffff8fd42738 (nr_neigh_list_lock){+.-.}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1831.878704][ T3266] #2: ffffffff8fd42798 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 1831.888669][ T3266] [ 1831.888669][ T3266] stack backtrace: [ 1831.894579][ T3266] CPU: 0 UID: 0 PID: 3266 Comm: syz.2.19520 Not tainted syzkaller #0 PREEMPT(full) [ 1831.894604][ T3266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1831.894617][ T3266] Call Trace: [ 1831.894625][ T3266] [ 1831.894635][ T3266] dump_stack_lvl+0xe8/0x150 [ 1831.894665][ T3266] print_circular_bug+0x2e1/0x300 [ 1831.894697][ T3266] check_noncircular+0x12e/0x150 [ 1831.894728][ T3266] __lock_acquire+0x15a5/0x2cf0 [ 1831.894762][ T3266] lock_acquire+0xf0/0x2e0 [ 1831.894784][ T3266] ? nr_rt_device_down+0x153/0x860 [ 1831.894813][ T3266] ? nr_rt_device_down+0x153/0x860 [ 1831.894836][ T3266] _raw_spin_lock_bh+0x36/0x50 [ 1831.894859][ T3266] ? nr_rt_device_down+0x153/0x860 [ 1831.894882][ T3266] nr_rt_device_down+0x153/0x860 [ 1831.894906][ T3266] ? nr_device_event+0x12f/0x150 [ 1831.894933][ T3266] nr_device_event+0x137/0x150 [ 1831.894956][ T3266] notifier_call_chain+0x1be/0x400 [ 1831.894994][ T3266] netif_close_many+0x2ae/0x420 [ 1831.895019][ T3266] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1831.895045][ T3266] ? __pfx_netif_close_many+0x10/0x10 [ 1831.895068][ T3266] ? bond_netdev_event+0x231/0xfa0 [ 1831.895186][ T3266] ? __neigh_ifdown+0x7fd/0x8c0 [ 1831.895211][ T3266] netif_close+0x160/0x220 [ 1831.895234][ T3266] ? __pfx_netif_close+0x10/0x10 [ 1831.895257][ T3266] ? __asan_memset+0x22/0x50 [ 1831.895274][ T3266] ? macvtap_device_event+0xd1/0x400 [ 1831.895325][ T3266] dev_close+0x10a/0x220 [ 1831.895353][ T3266] bpq_device_event+0x377/0x6a0 [ 1831.895377][ T3266] notifier_call_chain+0x1be/0x400 [ 1831.895407][ T3266] __dev_notify_flags+0x16d/0x310 [ 1831.895437][ T3266] ? __pfx___dev_notify_flags+0x10/0x10 [ 1831.895463][ T3266] ? __dev_change_flags+0x4c6/0x690 [ 1831.895493][ T3266] ? kasan_quarantine_put+0xbb/0x1f0 [ 1831.895511][ T3266] ? __pfx___dev_change_flags+0x10/0x10 [ 1831.895539][ T3266] ? full_name_hash+0x92/0xe0 [ 1831.895567][ T3266] netif_change_flags+0xe8/0x1a0 [ 1831.895596][ T3266] dev_change_flags+0x130/0x260 [ 1831.895625][ T3266] dev_ioctl+0x7b4/0x1150 [ 1831.895651][ T3266] sock_do_ioctl+0x23e/0x320 [ 1831.895674][ T3266] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1831.895694][ T3266] ? do_futex+0x395/0x420 [ 1831.895722][ T3266] sock_ioctl+0x5c6/0x7f0 [ 1831.895743][ T3266] ? __pfx_sock_ioctl+0x10/0x10 [ 1831.895764][ T3266] ? __fget_files+0x2a/0x420 [ 1831.895793][ T3266] ? __fget_files+0x3a0/0x420 [ 1831.895820][ T3266] ? __fget_files+0x2a/0x420 [ 1831.895848][ T3266] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1831.895871][ T3266] ? __pfx_sock_ioctl+0x10/0x10 [ 1831.895892][ T3266] __se_sys_ioctl+0xfc/0x170 [ 1831.895913][ T3266] do_syscall_64+0x14d/0xf80 [ 1831.895940][ T3266] ? trace_irq_disable+0x3b/0x150 [ 1831.895972][ T3266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.895991][ T3266] ? clear_bhb_loop+0x40/0x90 [ 1831.896012][ T3266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1831.896029][ T3266] RIP: 0033:0x7f3f57d9c799 [ 1831.896049][ T3266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1831.896065][ T3266] RSP: 002b:00007f3f58c94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1831.896092][ T3266] RAX: ffffffffffffffda RBX: 00007f3f58015fa0 RCX: 00007f3f57d9c799 [ 1831.896106][ T3266] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000004 [ 1831.896119][ T3266] RBP: 00007f3f57e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1831.896131][ T3266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1831.896143][ T3266] R13: 00007f3f58016038 R14: 00007f3f58015fa0 R15: 00007ffd2eba29e8 [ 1831.896165][ T3266] [ 1832.276343][ T3261] wg1 speed is unknown, defaulting to 1000 [ 1832.283612][ T3261] lo speed is unknown, defaulting to 1000 [ 1832.324840][ T3274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19519'. [ 1839.669237][T28959] Bluetooth: hci4: command 0x0406 tx timeout