last executing test programs: 1.371907489s ago: executing program 0 (id=8201): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x7b00, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.369173645s ago: executing program 0 (id=8204): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x100000, 0x220, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)={0x38, 0x0, 0x1, 0x0, 0x1, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}}, 0x24004080) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x80, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x60, 0x6, "d4ececbf56af4494732ed6aa9608a69fb2948cbf3f35a1fc592a816dc6fda72d8f241313d04c8beb810a175c606dcd95b7eb9a75a9cc2306740be2d8a71b784fb42bd9d6cd05fb1548e111aa7f1e0968fc76a4966ec98c6d627c0bc2"}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0xa0, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x74, 0x3, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x64, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x184}}, 0x0) 1.364588629s ago: executing program 0 (id=8206): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f0000000280)="96fa2c0bff", 0x5) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x0, 0x9, 0x2, 0x1, 0x19128, r0, 0x3, '\x00', 0x0, r0, 0x4, 0x3, 0x0, 0x0, @value=r1, @void, @value=r0}, 0x50) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @loopback}}, 0x0, 0x40, 0x0, 0x0, 0xbacabbefe60a32c1}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3400000011000500000000000300000007000000", @ANYRES32=r5], 0x34}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000080000000000009500000000000000000000000000000013835661c2b771142af9cb0000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r6, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x100, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r6}, @IFLA_XDP_FLAGS={0x8}]}]}, 0x34}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x9, 0xf9}) write$cgroup_int(r7, &(0x7f0000000200)=0xf, 0x12) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r7, 0x15, 0x1, 0x0, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0}, 0x40) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@o_path={&(0x7f0000000500)='./file0\x00', 0x0, 0x4000, r4}, 0x18) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@map=r9, r7, 0x2d, 0x18, 0x0, @void, @value=r6, @void, @void, r8}, 0x20) r10 = socket(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e800000019000f002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aa"], 0xe8}}, 0x1000) r12 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r12, 0x89eb, &(0x7f0000005180)="fa81df10cb1c84af3b") r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000240)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r14, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0x7, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@ifindex=r14, r1, 0xa, 0x202c, 0x0, @void, @void, @value=r15, @void, r8}, 0x20) close(r0) close(r1) 1.178344333s ago: executing program 0 (id=8213): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000050100000200000000000013080000000061612e00"], 0x0, 0x29, 0x0, 0x1, 0x9b2987a6}, 0x28) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'erspan0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r2, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002300)={&(0x7f00000022c0)={0x34, 0x1, 0x4, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x1}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2002fdb}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x200040c4}, 0x4000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x26008884}, 0x4054) 1.123633456s ago: executing program 2 (id=8215): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fbdbdf2505000000200001800d0001007564783a73797a32000040000c00028008000400ebda00001c18e8fc17e995182aea3f8008ea85e4a285b9f9218a343e07838395da4896"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) (async, rerun: 32) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0x1, &(0x7f00000001c0)="375dfa6d195fb0b393f28686ef1e0181530c61b7d305eaf8ea6485143a30741d1e3da9bcfc0301f58da0322126e0e6d5", &(0x7f0000000300)=""/94}, 0x20) (rerun: 32) pipe(&(0x7f0000000200)) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x1618d1d7) (async) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) (async) sendmsg$NFT_MSG_GETSET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="200000000a0a01020000000000000000020000000900010073"], 0x20}}, 0x4000000) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000900)=[@in={0x2, 0x4ea1, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000200), 0x4) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0x5, 0x1, 0xfffe}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}]}, &(0x7f0000000640)=0x10) setsockopt$inet6_int(r6, 0x29, 0x2, 0x0, 0x0) (async, rerun: 32) listen(r3, 0xfff) (async, rerun: 32) accept4(r3, &(0x7f0000000240)=@x25, 0x0, 0x800) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x4, [@typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x61, 0x61]}}, &(0x7f00000000c0)=""/209, 0x3c, 0xd1, 0x1, 0xffff8d7d}, 0x28) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r8 = socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="00200000ffffffffffffbbbbbbbbbbbb08004500003d0000000000389078ac1e0101e00000010300000000294678020000000059b200ebc7a1e0ff5bef0500bc66e400d7e83306de422b4a81099bda"], 0x4f) 1.051749126s ago: executing program 1 (id=8216): r0 = socket$inet6(0xa, 0x3, 0x7) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="2400000000ffe0002900000032"], 0x28}}], 0x1, 0x0) 949.298725ms ago: executing program 1 (id=8219): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xfc51}}, 0x4000000) 887.629849ms ago: executing program 2 (id=8220): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711217000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000000000006040098"], &(0x7f0000000f40)=""/4088, 0x3e, 0xff8, 0x1}, 0x28) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) recvmmsg(r3, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2102, &(0x7f00000042c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x20000400) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x400448c9, 0x0) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, &(0x7f0000000800)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ec3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dfff01a9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cabc206c944317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea093680ffffff802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e2cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97107339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b787bdb26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac39b204a814f5ece5961621358e36f8a2cf7196c76959824bbb475a7cad8f57853fe05f59f341b5207cc9bb8d686982c2f158e0d8f5c7ec6cbfd500000000", 0x5a3, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x9, @mcast2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r10, 0x0, 0x0) recvmsg$unix(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/79, 0xbdef}], 0x300, 0x0, 0x4a}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x16000000, 0x0, 0x20000000}, 0x20008004) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) getpid() sendmsg$NL80211_CMD_GET_SURVEY(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001768a7ddcb850682ee89f1f5679a998cd69f92d5742bbec26cb5a25000b43024329fac8150ab7698171eb06c469c", @ANYRES16=r2, @ANYBLOB="10002bbd7000ffdbdf253200000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4c005}, 0x2000c040) 884.818354ms ago: executing program 0 (id=8221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000214011a80400002803c000180080021000000000008001800000000000800030000000000080009000000000008000c0000000000080012000000000008001f00000000006c000a80140007"], 0x134}}, 0x0) 871.722849ms ago: executing program 1 (id=8222): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)=@delrng={0x10, 0x14, 0xf3534e25ab1a87d1, 0x70bd26, 0x25dfdbfc}, 0x10}}, 0x40000) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000005c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x46}, {0x0, 0xa00}], 0x2, 0xa, 0x6c8) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x3a, 0x10, 0x4, @void, @value=r2}, 0x20) unshare(0x20000400) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x1, 0x50, &(0x7f0000000500), 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0x6}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x18, 0x2e, 0x9, 0x70bd27, 0x3, {0x4}, [@typed={0x4, 0x1f}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 807.671971ms ago: executing program 3 (id=8223): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r5}, 0xc) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x1}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) recvmmsg$unix(r6, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000780)={0x1638, 0x3a, 0x1, 0x70bd27, 0x25dfdbff, {0x1b}, [@generic="7b330c3fc28176b53c7787e7db3cbdcd3163fc65d594a04d0b68975ee1f7168ad76f2f0c2076589c4873ff009a82ce6b9e8dbe7f8b74c666563a7942bbadb137d4d1568a634dcb03e4fa2469e14dfbe678939aac0a2965b1eed01048b52fd7e4fd655908d7e7ee0f641cf3cee6290b9d9fcff127d04d6939fdf52c1d11c430015672767393828e15b54416af78f6936405e5d82548e1d2eccefcf50b5872ee2fca51ab7c8f39709f1c27d763ad04bb18ecca75", @typed={0x8, 0x7a, 0x0, 0x0, @fd=r1}, @nested={0x27e, 0x28, 0x0, 0x1, [@generic="cd0ab8b7e3a5e3b8ef4bf30415fcf34decf5f1be5d", @generic="07e2af6698c46a4d2ec92686ecfaec8fe1d9238efeb0a6a3876199769e5492f8ac28920c55c06de11c68dd7b3a138e8ce98d9a056d08378fabb8dc79038fb820883368c399a0ae2f02c662e1ce4d456bb516b0549679ef15e07d6028ada096cb5306a0af9543b384e108282c312a8b235f703c635b37c5ae1b82e982ac32460297b8d2f37e5d3bc40ae422a1bdc2fc8681f6ec11e9cee1c2ae5c8c90b522f65fc4893cd68620f7b815dcd1cc0beff2adaed184c6161a29212b535a", @nested={0x4, 0x25}, @typed={0x9, 0xc3, 0x0, 0x0, @str='(%{%\x00'}, @generic="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", @generic="5b466af2a15f34be98d5b243f55a3d718b21287cc0c7fd8c5b13e5051089c9a281a2940abaae29d4842b4a55e8c201bd35998910a46a52299855873cfa5a75d8587acb16a22dd4aa27af8a6d3337f658bf03b34d9e722a0bfc6a0f86ba53c277c0d4ae2b37fe4bd9a6f94709c23d2d92aec2a7559182ca4a802a7424581d7690a786051cb479e9fed2091ae04bdd4e7d71918d57fad92efb3dc21f6a"]}, @nested={0x8c, 0x10d, 0x0, 0x1, [@generic="59b814e187fa5c0ddb1ac7e202b9336ab938387157f8d3e63fc5c18635d526e8cf6b4eece15695a1ede7cb3679b6d92d3b42d5d136cc71492333335e0d7c0d0987abae3fa55b0ab6c860494c64c47627b876a5e8fdda9babc555b03ce2d3efab8c0ad9f9e7d61f1497bef847d4ac3863ec12524e5ced346bb374ac5ddfd9fc20", @typed={0x8, 0x52, 0x0, 0x0, @u32=0x1}]}, @typed={0x8, 0xfe, 0x0, 0x0, @uid=r3}, @generic="b68e780be8344b77fb3ec3eabc70860f8d6ccb8af3da402ec84b8c85f6718b9343bc24b86ab6ac66ff7ee0aa82072ef2ddaa276d1408720c638af4cca0198c8eb0d9d86bbea5177f7c45d39700b798a88d7992850b9699261289fdd9ddbb6b507a95d46e966c5ccb9699b8a110842d0338aa4d68d00dd1dedf6265a4879ecbf00216de4b8e0f22ec22d3f69be17058b026de7aaa869e3672b0562f97237e04f577f93ee62ecf7f5d636bbbed96d4f5b734da32cd51b34418fb8b08e1e92d3b8cc897ff8cbe34f658b621f28e7a84433fa046c510b09bf9b3f666cd545f429d7f10c2820ee9", @nested={0x10ff, 0xf1, 0x0, 0x1, [@nested={0x4, 0x9a}, @typed={0xb, 0x14, 0x0, 0x0, @str='TIPCv2\x00'}, @nested={0x4, 0xd6}, @typed={0x7, 0x119, 0x0, 0x0, @str='}{\x00'}, @generic="db9c41ebfee416969adcdebddc11abf56411213e58f8abc02434029d0559b2db483f6864238ea71a3e8bb699ac44e8f278f8d9f73d1981c338b5e3813373da8eced4c7b9c14ca52e6e3d359afbc04892ee89d35b3e1fbebdc4fd16020ab368481cea205b51f4f3fc8278faec3fd9feb564d54cc9724193a09fa2cc00b724c76307f7ee8792de29f3305a1ebc5afcf81a9888b896d5c2b4c17d14ba78ba1007f33a82af66e86d5f778b1b2258ff11b566eb6f382e8857bfffc4a87773ff54421eba23a461350b285f160bfdc85c26478411074132731d443fcd026dbb5146dd", @generic="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"]}, @generic="91fa0bc0266af730df1d6a1de840a43ad9dfc8ee5f8f838f4847d021de26ad9a3c5a17db078cabb3319dec9d0034f6e8d6583b0bb0348f2695dfc6bcb9d9d0eecff270e0f7d44ee40da6b33b38945aef024825e4f1a11871074f01c99d7478e06f", @nested={0xc, 0x20, 0x0, 0x1, [@generic="2591109d", @nested={0x4, 0x102}]}]}, 0x1638}, 0x1, 0x0, 0x0, 0x8000}, 0x20008024) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$unix(0x1, 0x2, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x48, r10, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x10001, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r7, &(0x7f0000002b00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002ac0)={&(0x7f0000001ec0)={0xbf8, r10, 0x400, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x29c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x5, 0x9}, {0x3, 0x3}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0x4}, {}, {0x3, 0x8}, {0x6, 0x4}, {0x0, 0x7}, {0x7}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x8}, {0x3, 0x1}, {0x6}, {0x6, 0x9}, {0x4, 0x5}, {0x1, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x9}, {0x1}, {0x6, 0x2}, {0x6, 0x7}, {0x2, 0x9}, {0x6, 0x6}, {0x4, 0x6}, {0x1, 0x5}, {0x1, 0xa}, {0x5, 0x1}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x9}, {0x2, 0x5}, {0x1}, {0x5, 0x3}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1d, 0x1, [0x36, 0x30, 0x18, 0x3, 0x12, 0x9, 0x6c, 0xb, 0x4, 0x18, 0x9, 0x9, 0x60, 0x9, 0x36, 0x3, 0x60, 0x2, 0x24, 0x12, 0x48, 0x27, 0x18, 0x30, 0x12]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xbef, 0x4, 0x7, 0x6, 0xc6, 0x9, 0x4]}}]}, @NL80211_BAND_2GHZ={0xe8, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x16, 0x63, 0x4, 0x0, 0x1, 0x12, 0x2, 0x30, 0x24, 0x9, 0x0, 0x6, 0x6c, 0x16, 0x6c, 0x16, 0x24, 0x9, 0x5, 0x6c, 0x36, 0x30, 0x36, 0x6c, 0x2, 0x1b, 0x0, 0x1b]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x9, 0x6, 0xe53, 0x3, 0x400, 0xf]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x3, 0x9}, {0x3, 0x4}, {0x1, 0xe}, {0x6, 0x6}, {0x2, 0x5}, {0x1, 0x1}, {0x3, 0xa}, {0x7, 0x3}, {0x2, 0x6}, {0x3, 0x5}, {0x2, 0x9}, {0x1, 0x1}, {0x7, 0x2}, {0x3, 0x8}, {0x0, 0x4}, {0x0, 0x5}, {0x5, 0xa}, {0x1, 0x1}, {0x5, 0x2}, {0x7, 0xa}, {0x6, 0x7}, {0x1, 0x3}, {0x7, 0xa}, {0x1}, {0x0, 0xa}, {0x1, 0x6}, {0x1, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x2c, 0x9, 0x9, 0x200, 0x6, 0x89]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x7, 0x4}, {0x7, 0x7}, {0x7, 0x8}, {0x4, 0x6}, {0x2, 0x6}, {0x7, 0x4}, {0x1, 0x5}, {0x6, 0x9}, {0x6, 0x3}, {0x3, 0x7}, {0x4, 0x8}, {0x6, 0x1}, {0x4, 0x9}, {0x7, 0x6}, {0x7, 0x4}, {0x0, 0x5}, {0x3, 0x7}, {0x4, 0x7}, {0x4, 0x8}, {0x6, 0xa}, {0x4, 0x8}, {0x1, 0x2}, {0x1, 0x9}, {0x5, 0x3}, {0x1, 0x6}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x9}, {0x7}, {0x6, 0x2}, {0x6, 0x9}, {0x0, 0x9}, {0x7, 0x4}, {0x4, 0x7}, {0x1, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x3, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x7, 0x8}, {0x4}, {0x7, 0x2}, {0x2, 0x8}, {0x5, 0x5}, {0x0, 0x4}, {0x1, 0x2}, {0x1, 0x9}, {0x0, 0x9}, {0x7, 0x6}, {0x1, 0xa}, {0x6, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x4, 0x7}, {0x6, 0x1}, {0x1, 0x5}, {0x7, 0x4}, {0x6, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x7}, {0x6, 0x6}, {0x4, 0x3}, {0x3, 0xa}, {0x3, 0x2}, {0x6, 0x8}, {0x0, 0x9}, {0x2}, {0x0, 0x7}, {0x7, 0x2}, {0x3, 0x6}, {0x2, 0x1}, {0x5, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x128, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x2, 0x3}, {0x6, 0x7}, {0x7}, {0x4, 0x3}, {0x7, 0xa}, {0x3, 0x2}, {0x4, 0x3}, {0x7, 0x1}, {0x3, 0x3}, {0x2, 0x2}, {0x6, 0x2}, {0x3, 0xa}, {0x1, 0x6}, {0x0, 0x2}, {0x7, 0x1}, {0x4, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x0, 0x3}, {0x7, 0x5}, {0x4, 0x2}, {0x6, 0x4}, {0x0, 0x6}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x3}, {0x1, 0x3}, {0x7, 0xa}, {0x1, 0x3}, {0x0, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x2}, {0x3, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x0, 0x6}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x6}, {0x2, 0x2}, {0x5, 0x9}, {0x3}, {0x4, 0x3}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x5, 0x3}, {0x6, 0x5}, {0x3, 0x7}, {0x6}, {0x1, 0x9}, {0x2, 0x8}, {0x1, 0x3}, {0x5, 0xa}, {0x3, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x3, 0x1}, {0x1, 0x8}, {0x0, 0x6}, {0x0, 0x6}, {0x5, 0x1}, {0x4, 0x2}, {0x2, 0x2}, {0x4}, {0x2, 0x8}, {0x2, 0x8}, {0x5, 0x7}, {0x2, 0x2}, {0x0, 0xa}, {0x3, 0x6}, {0x4, 0x6}, {0x6, 0x4}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x2, 0x18, 0x60, 0x6, 0x48, 0x1b, 0xc, 0x18, 0x2, 0x3, 0x48, 0x1b, 0xc, 0x16, 0x6, 0x24, 0x3, 0x3, 0x4, 0x16, 0x1b, 0x3, 0x16, 0x1b, 0x48, 0x74, 0x2]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x5, 0x3}, {0x1, 0x8}, {0x0, 0x4}, {0x7, 0x2}, {0x7, 0x3}, {0x1, 0xa}, {0x2, 0x7}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x6, 0x9}, {}, {0x7, 0xa}, {0x4, 0x5}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0xa}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x3}, {0x6, 0xa}, {0x0, 0x6}, {0x2, 0x8}, {0x1, 0x5}, {0x4}, {0x0, 0x4}, {0x4, 0x8}, {0x7, 0x1}, {0x7, 0xa}, {0x2, 0x3}, {0x6, 0x8}, {0x1, 0xa}, {0x5, 0x6}, {0x0, 0x5}, {0x3, 0x8}, {0x6, 0x6}, {0x0, 0x9}, {0x1, 0x5}, {0x2, 0xa}, {0x7, 0x9}, {0x3, 0x5}, {0x7, 0x9}, {0x1, 0x5}, {0x0, 0x7}, {0x0, 0x8}, {0x1, 0x6}, {0x3}, {0x4, 0xa}, {0x1, 0x2}, {0x5, 0x6}, {0x2, 0x1}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x5}, {0x4, 0x7}, {0x0, 0x9}, {0x3, 0x7}, {0x5, 0x4}, {0x5, 0x1}, {0x1, 0x5}, {0x5, 0x1}, {0x1, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x3, 0x2}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x8}, {0x2, 0x5}, {0x7, 0x9}, {0x2, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x40, 0xe, 0x0, 0xf8a9, 0x7ff, 0x5, 0x7]}}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x1, 0x5}, {0x1, 0xa}, {0x5, 0x4}, {0x2, 0x9}, {0x1, 0x3}, {0x7, 0x8}, {0x2, 0x5}, {0x2, 0x8}, {0x0, 0x9}, {0x2, 0x5}, {0x6, 0x4}, {0x2, 0xa}, {0x2}, {0x0, 0x7}, {0x1}, {0x1}, {0x1, 0x5}, {0x5, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x6, 0x6}, {0x0, 0x4}, {0x7, 0x2}, {0x2, 0xa}, {0x2, 0x4}, {0x2, 0x1}, {0x6, 0x7}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x3}, {0x7, 0x4}, {0x2, 0x4}, {0x1, 0x2}, {0x4, 0x2}, {0x0, 0xa}, {0x5, 0x2}, {0x2, 0x5}, {0x2, 0x8}, {0x6, 0x9}, {0x6, 0x7}, {0x7, 0x1e}, {0x0, 0x4}, {0x5, 0x6}, {0x7, 0x1}, {0x4}, {0x4, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x0, 0x1}, {}]}]}]}, @NL80211_ATTR_TX_RATES={0x264, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x2e, 0x4, 0x3, 0x6, 0x60, 0x4, 0x1b, 0x60, 0x6, 0x30, 0x9, 0x12, 0xb, 0x0, 0x16, 0x9, 0x6, 0x1b, 0x48, 0x5, 0xc, 0x36, 0x16, 0xb, 0x5, 0x18, 0x1b, 0x18, 0x36, 0x12, 0x6c, 0x0]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfffc, 0x3, 0x2, 0x8e58, 0x730, 0x8, 0xff80]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4f, 0x0, 0x2, 0x5, 0x2, 0x4, 0x401, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x4, 0xb, 0x24, 0x24, 0x12, 0x30, 0x30, 0x67, 0x16, 0xb, 0x2, 0x48, 0x3, 0x48, 0xc, 0x12, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x100, 0x4, 0x1, 0x101, 0x937, 0x1, 0x9]}}]}, @NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x12, 0x1, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6, 0x5, 0x18, 0x1b, 0x16, 0x18, 0x0, 0x48, 0xc, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x91, 0x2, 0x0, 0x4, 0x10, 0x1, 0x1ff, 0x3]}}]}, @NL80211_BAND_2GHZ={0xbc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x2}, {0x1, 0x9}, {0x4, 0x4}, {0x6, 0x8}, {0x5, 0x4}, {0x1}, {0x0, 0x4}, {0x6, 0x5}, {0x0, 0x9}, {0x2, 0x2}, {0x4, 0x6}, {0x5, 0x7}, {0x4, 0x5}, {0x6, 0x9}, {0x5}, {0x4, 0x1}, {0x7, 0x5}, {0x0, 0x9}, {0x3, 0x9}, {0x1, 0x6}, {0x5}, {0x0, 0x3}, {0x6, 0xa}, {0x7, 0x1}, {0x5, 0x8}, {0x6, 0x7}, {0x1, 0x6}, {0x1, 0xa}, {0x1, 0x8}, {0x4, 0x8}, {0x4, 0xa}, {0x3, 0x2}, {0x2, 0x1}, {0x2, 0x3}, {0x4, 0x2}, {0x5, 0x3}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0x1}, {0x0, 0x3}, {0x4, 0xa}, {0x1, 0xa}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x1, 0x5}, {0x5, 0xa}, {0x1, 0x1}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x7}, {0x3, 0x2}, {0x0, 0x3}, {0x0, 0x5}, {0x2, 0x5}, {0x0, 0x3}, {0x5, 0x4}, {0x7, 0x1}, {0x2, 0x4}, {0x6}, {0x6, 0x7}, {0x1}, {0x3, 0x9}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0x1}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x2, 0x4}, {0x2, 0x2}, {0x3}, {0x4, 0xa}, {0x1, 0xa}, {0x0, 0x1}, {0x3, 0x9}, {0x1, 0x4}, {0x5, 0x4}, {0x3, 0x8}, {}, {0x6, 0x9}, {0x0, 0x3}, {0x0, 0x9}, {0x1, 0x1}, {0x6, 0x6}, {0x7}, {0x4, 0x6}, {0x2, 0xd}, {0x5}, {0x0, 0x4}, {0x5, 0x4}, {0x5, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0x2}, {0x4}, {0x2, 0x3}, {0x1, 0x9}, {0x1, 0x3}, {0x1, 0x2}, {0x4, 0x4}, {0x3, 0x4}, {0x1, 0x9}]}, @NL80211_TXRATE_HT={0x3d, 0x2, [{0x7, 0x9}, {0x4, 0x3}, {0x2, 0xa}, {0x6, 0x5}, {0x7, 0x2}, {0x1, 0x1}, {0x7, 0x9}, {0x4, 0x5}, {0x7, 0x5}, {}, {0x5, 0x6}, {0x2, 0x8}, {0x1, 0x7}, {0x7, 0x6}, {0x0, 0x6}, {0x0, 0x9}, {0x3, 0x4}, {0x1}, {0x7, 0x3}, {0x5, 0x1}, {0x0, 0x7}, {0x2, 0x4}, {0x6, 0x9}, {0x7}, {}, {0x0, 0x7}, {0x3, 0x2}, {0x1, 0x6}, {0x7, 0x1}, {0x4, 0x7}, {0x6, 0x3}, {0x3, 0x4}, {0x6, 0x9}, {0x1}, {0x0, 0x6}, {0x2, 0x1}, {0x1, 0xa}, {0x5, 0x9}, {0x7, 0x9}, {0x4, 0x1}, {0x1}, {0x5, 0x6}, {0x2, 0x4}, {0x1, 0x5}, {0x1, 0x3}, {0x7, 0x1d}, {0x3, 0x9}, {0x0, 0x5}, {0x0, 0x4}, {0x6, 0x2}, {0x2, 0xa}, {0x1, 0x6}, {0x4, 0x5}, {0x5, 0x6}, {}, {0x6, 0x2}, {0x1, 0x8}]}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_5GHZ={0x74, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x8}, {0x3, 0x8}, {0x1, 0x8}, {0x6, 0x5}, {0x0, 0x4}, {0x5, 0xa}, {0x1, 0x2}, {}, {0x4, 0x9}, {0x4, 0x5}, {0x5, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x36, 0x60, 0x6c, 0x2, 0x16, 0x0, 0x36, 0x9, 0x1, 0x6c, 0x6c, 0x7e, 0x5, 0x1, 0x1, 0xc, 0x5, 0x0, 0x36, 0x60, 0x22, 0x9, 0x4, 0x22, 0x1b, 0x4, 0x9, 0xb, 0x30, 0x9]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xe09a, 0x0, 0x8, 0x1, 0x8, 0x3, 0xf37b]}}]}, @NL80211_BAND_2GHZ={0x6c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x3, 0x1622a97b7de08176, 0x9, 0x36, 0x5, 0x6c, 0x6c, 0x12, 0x60]}, @NL80211_TXRATE_HT={0x4e, 0x2, [{0x6, 0x8}, {0x1, 0xa}, {0x1, 0x8}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x4}, {0x7, 0x1}, {0x5, 0x5}, {0x4, 0x6}, {0x3, 0x8}, {0x0, 0x7}, {0x3, 0x4}, {0x1, 0x2}, {0x4, 0x3}, {0x7, 0xa}, {0x1, 0x4}, {0x7, 0x9}, {0x1, 0x6}, {0x7, 0xa}, {0x1, 0x7}, {0x0, 0x7}, {0x6, 0x9}, {0x0, 0x8}, {0x7, 0x5}, {0x4}, {0x0, 0x3}, {0x7, 0x5}, {0x2, 0x6}, {0x1, 0x5}, {0x0, 0x3}, {0x3, 0x8}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0x9}, {0x5}, {0x4, 0x6}, {0x7, 0x2}, {0x4, 0x8}, {0x4, 0x8}, {0x7, 0x2}, {0x1, 0x8}, {0x6}, {0x6, 0xa}, {0x7, 0x2}, {0x3}, {0x6, 0xa}, {0x3, 0x5}, {0x1, 0xa}, {0x6, 0x5}, {0x6, 0x2}, {0x7, 0xa}, {0x6, 0x9}, {0x3}, {0x0, 0x6}, {0x1, 0x9}, {0x5, 0x7}, {0x6, 0x6}, {0x1, 0x8}, {0x3, 0x1}, {0x0, 0x9}, {0x6, 0x5}, {0x1, 0x6}, {0x0, 0x1}, {0x2, 0x9}, {0x0, 0x4}, {0x0, 0x8}, {}, {0x2, 0x2}, {0x0, 0x6}, {}, {0x6, 0x4}, {0x1, 0x8}, {0x4, 0x7}]}]}]}, @NL80211_ATTR_TX_RATES={0x20c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x38, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x6, 0x1, [0x9, 0x60]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x2, 0xcd, 0xff, 0x223, 0x9, 0x9, 0x9]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x8, 0x0, 0x1ff, 0x0, 0x101, 0x5e]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x401, 0x7, 0x65, 0x400, 0xb311, 0x3, 0x1, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x922, 0xfffc, 0x5, 0x4, 0x3, 0xc, 0x1]}}]}, @NL80211_BAND_2GHZ={0xa4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x30, 0x2, [{0x1, 0x1}, {0x2, 0x4}, {0x5, 0x3}, {0x1, 0x5}, {0x5, 0x6}, {0x7}, {0x0, 0x4}, {0x3, 0x7}, {0x7, 0x9}, {0x4, 0x3}, {0x0, 0x8}, {0x2, 0x2}, {}, {0x0, 0x9}, {}, {0x1, 0x2}, {0x4, 0x7}, {0x2, 0xa}, {0x1, 0xa}, {0x4, 0x5}, {0x5, 0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x4, 0x7}, {0x2, 0x1}, {0x7}, {0x0, 0x6}, {0x4, 0x3}, {0x0, 0x1}, {0x1, 0x6}, {0x1, 0xa}, {0x6, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x4, 0x9}, {0x0, 0x3}, {0x0, 0xa}, {0x5, 0x1}, {0x0, 0xa}, {0x6, 0x1}, {0x1, 0x2}, {0x4, 0x3}, {0x3, 0x9}, {0x3, 0x7}]}, @NL80211_TXRATE_LEGACY={0x6, 0x1, [0x3, 0x60]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x7b, 0x1b, 0x5, 0x48, 0x5, 0x6, 0x16, 0x6c, 0x48, 0x16, 0x48, 0x2, 0x5, 0x9, 0x2, 0x2, 0xb, 0x6c, 0x16, 0x24, 0x0, 0x9, 0x5, 0x30, 0x4, 0x1b, 0x9]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x401, 0xe, 0x7, 0x4, 0xffff, 0x7f, 0x5, 0x81]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x7, 0x3}, {0x7, 0x6}, {0x4, 0x4}, {0x3, 0x3}, {0x1, 0x5}, {0x3, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0xfffa, 0x1, 0x7, 0xfff, 0x687a, 0x8001, 0xfff8]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x50, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0xfffe, 0x3ff, 0x7, 0x4, 0xc90e, 0x1, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x8, 0x33, 0x101, 0x6, 0xfff7, 0x7, 0x81]}}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0xc, 0x6c, 0x18, 0xc, 0x2f, 0x3, 0x4, 0x48, 0x1b, 0x60, 0x48, 0x18, 0x0, 0x9, 0x4b, 0x1, 0x48, 0x10, 0xc, 0xc, 0x36, 0x3, 0x16, 0x9, 0x48, 0x6, 0x12, 0x6, 0x1, 0x1b]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x18, 0x48, 0x3, 0x6, 0x4, 0x12, 0x18, 0x48, 0x3, 0xc, 0x9, 0x5, 0x6c, 0x9, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xae5, 0x5, 0x2, 0x9, 0xfffe, 0xe, 0x5, 0x7]}}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0xc, 0x67, 0x24, 0xb, 0x17, 0x3, 0x24, 0x16, 0x4, 0xc, 0x4, 0x6c, 0x12, 0xb, 0xc, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x2, 0xffff, 0x58d, 0x10, 0x4, 0x6, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x1c0, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x34, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x3, 0x8}, {0x6, 0x8}, {0x4, 0x8}, {0x2, 0x1}, {}, {0x7, 0x2}, {0x3, 0x5}, {0x1, 0x4}, {0x5, 0x2}, {0x3, 0x9}, {0x1, 0xa}, {0x3, 0x4}, {0x1, 0x3}, {0x6}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x6}, {0x1, 0x5}, {0x0, 0x7}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x2, 0x2}, {0x1, 0x7}, {0x1, 0xa}, {0x7, 0x4}, {0x6, 0x9}, {0x0, 0x1}, {0x7, 0x7}, {0x5, 0xa}, {0x1, 0x4}, {0x2, 0xa}, {0x6}, {0x6, 0x2}, {0x5, 0x2}, {0x0, 0x6}, {0x5, 0x2}, {0x7, 0x7}, {0x7}, {0x4, 0x8}, {0x6, 0x2}, {0x1, 0x5}, {0x0, 0x3}]}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x1}, {0x0, 0x4}, {0x0, 0x2}, {0x6, 0x6}, {0x3, 0x6}, {0x4, 0xa}, {0x6, 0x2}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0x4}, {0x1, 0x8}, {0x7, 0xa}, {0x3, 0x9}, {0x2, 0x6}, {0x0, 0x2}, {0x1}, {}, {0x1, 0x1}, {0x5, 0x2}, {0x3, 0x3}, {0x4, 0x6}, {0x7}, {0x6, 0xa}, {0x5, 0x8}, {0x2, 0x9}, {0x5, 0x1}, {0x3, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x401, 0x1000, 0x7, 0xe84, 0x0, 0x1, 0x6]}}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x2, 0x9}, {0x7, 0x9}, {0x6, 0xa}, {0x7, 0x6}, {0x1, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0x7, 0x4}, {0x7}, {0x7, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x0, 0x7}, {0x2, 0x4}, {0x2, 0x5}, {0x7, 0x8}, {0x0, 0x5}, {0x3, 0x2}, {0x1, 0xa}, {0x6}, {0x2, 0xa}, {0x0, 0x2}, {0x3, 0x1}, {0x4, 0x9}, {0x0, 0x2}, {0x5, 0x6}, {0x6, 0x6}, {0x6}, {0x6, 0x6}, {0x3, 0x5}, {0x5, 0x9}, {0x3, 0x9}, {0x2, 0x8}, {0x2, 0x1}, {0x7, 0xa}, {0x4, 0x8}, {0x4}, {0x7, 0x1}, {0x0, 0x7}, {0x6, 0x7}, {0x1, 0x5}, {0x6, 0x3}, {0x5, 0x3}, {0x6}, {0x3, 0x3}, {0x5, 0x5}, {0x6, 0xa}, {0x7, 0x3}, {0x6, 0x5}, {0x4, 0x3}, {0x1}, {0x0, 0x3}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x2, 0x4, 0xc01, 0x7, 0x17f, 0x8, 0x4]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x0, 0x7, 0xf, 0x4e90, 0x7, 0x7, 0x2f]}}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0x5, 0x48, 0x48, 0x4, 0x9, 0x12, 0x497a2531a81f9824, 0xbdd8df11b5f35c02, 0x5, 0x5, 0x48, 0x16, 0x16, 0x9, 0x24, 0xc, 0x12]}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x4, 0xa}, {0x7, 0x4}, {0x1, 0xa}, {0x5, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x0, 0x6, 0x4a, 0x6c, 0x1, 0x4, 0x30, 0x30, 0x6c, 0x6, 0x6, 0x48, 0x12, 0x1b, 0xb, 0x36, 0x24, 0x4, 0x60, 0xc, 0x18]}]}, @NL80211_BAND_5GHZ={0x64, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xfff8, 0xa17, 0xf000, 0x5, 0xc, 0xffff, 0x2]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0xc, 0xb471, 0x8001, 0xed, 0x1000, 0x8000, 0xf00c]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x1, 0x48, 0x60, 0x1, 0x30, 0x0, 0x3, 0x1, 0x12, 0x1, 0x24, 0x44, 0x1, 0x60, 0x5, 0x30, 0x1b, 0x3, 0x1, 0x48, 0x2, 0x48, 0x3, 0x48, 0x60, 0x30]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_TX_RATES={0x2b8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x24, 0x18, 0x18, 0x56, 0x5, 0x6c, 0x24, 0x44, 0x36, 0x60, 0x12, 0x5, 0x28, 0x3, 0x30, 0x9, 0xc, 0x60, 0x24, 0x6c, 0x6, 0x60, 0x0, 0x24, 0x6, 0x2, 0x6c, 0xc, 0x4, 0x3]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x2, 0xbb, 0x6, 0x9050, 0x2, 0x3, 0x9]}}]}, @NL80211_BAND_60GHZ={0xa8, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x18, 0x18, 0xc, 0xc, 0x30, 0x12, 0x2, 0x45, 0x30, 0x16, 0x18, 0x18, 0x16, 0x36, 0x16, 0x4, 0x1b, 0x36, 0x3]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x8001, 0x5, 0x7fff, 0x0, 0x5, 0x2, 0x4]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x3}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x10, 0x4, 0x5, 0xcf8, 0x8, 0x91, 0x3]}}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x7, 0x4}, {0x6, 0x7}, {0x3, 0x9}, {0x4, 0x8}, {0x4, 0x3}, {0x0, 0x2}, {0x6, 0x9}, {0x4, 0x2}, {0x7, 0x1}, {}, {0x0, 0x7}, {0x2, 0x2}, {0x6, 0x4}, {0x7, 0x1}, {0x7, 0x5}, {0x5, 0xa}, {0x3, 0x5}, {0x2}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x8}, {0x5, 0x8}, {0x4, 0x4}, {0x3, 0x9}, {0x1, 0x3}, {0x1}, {0x3, 0x8}, {0x6}, {0x7, 0x7}, {0x5, 0x6}, {0x7, 0x5}, {0x2, 0x4}, {0x1, 0x4}, {0x0, 0x1}, {0x0, 0x3}, {0x6, 0x8}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x2}, {0x2, 0x6}, {0x6, 0x7}, {0x6, 0x1}, {0x5, 0x3}, {0x0, 0x6}, {0x5, 0x6}, {0x0, 0x2}, {0x2, 0x5}, {0x1, 0x1}, {0x1, 0x4}, {0x2, 0x8}, {0x1, 0x9}, {0x6, 0x6}, {}, {0x1, 0x4}, {0x5, 0x3}, {0x3, 0x6}, {0x0, 0xa}, {0x6, 0x6}, {0x5}, {0x3, 0x5}, {0x1, 0xa}, {0x0, 0x3}, {0x4, 0x7}, {0x1, 0x2}, {0x6, 0x8}, {0x3, 0x7}, {0x5, 0x7}, {0x4, 0xa}, {0x4, 0x5}, {0x2, 0x5}]}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x426b, 0x146, 0x5, 0x0, 0x9, 0x5, 0xfff7, 0x5]}}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4e, 0x2, [{0x3, 0x4}, {0x4, 0x2}, {0x3, 0x8}, {0x6, 0x9}, {0x1, 0x7}, {0x7, 0x1}, {0x1, 0x6}, {0x2, 0x8}, {0x7, 0x7}, {0x0, 0x6}, {0x2, 0x3}, {0x6, 0x6}, {0x1, 0x7}, {0x0, 0x4}, {0x6, 0x5}, {0x3, 0x5}, {0x3, 0x5}, {0x4, 0x8}, {0x6, 0x2}, {0x7, 0x3}, {0x6, 0x7}, {0x7, 0x3}, {0x6}, {0x1, 0x9}, {0x7}, {0x1, 0x2}, {0x6}, {0x7, 0x2}, {0x5}, {0x1, 0x5}, {0x0, 0x7}, {0x1, 0x3}, {0x5, 0x4}, {0x4, 0x9}, {0x3, 0x3}, {0x1, 0x9}, {0x6, 0x2}, {0x4, 0x1}, {0x1}, {0x2, 0x7}, {0x0, 0x4}, {0x0, 0x7}, {0x2, 0x2}, {0x5, 0x4}, {0x4, 0x5}, {0x4, 0x8}, {0x4, 0x5}, {0x0, 0x5}, {0x2, 0x2}, {0x4, 0x5}, {0x7, 0xa}, {0x6, 0x4}, {0x3, 0x1}, {0x3}, {0x4, 0x6}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x0, 0x9}, {0x0, 0x5}, {0x6, 0x5}, {0x4, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x7}, {0x2, 0x8}, {0x6, 0x4}, {0x3}, {0x0, 0x7}, {0x7, 0x7}, {0x4, 0x8}, {0x0, 0x3}, {0x5, 0xa}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x8, 0x2, [{0x3, 0x1}, {0x6, 0x6}, {0x2, 0x3}, {0x3, 0x5}]}]}, @NL80211_BAND_6GHZ={0x24, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9c, 0x7f, 0x101, 0x81, 0x7, 0x8, 0x7]}}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8001, 0x10, 0x5, 0x8000, 0x7, 0xfff8, 0x5, 0x1cc0]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x2, 0x4, 0x36, 0x3, 0x12, 0x36, 0x1b, 0x24, 0x3, 0xc, 0x16, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x4}]}, @NL80211_BAND_60GHZ={0x50, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x2, 0x9, 0x800, 0x3dd, 0x8, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x33f, 0x7, 0x3, 0xb1, 0x4, 0xffff, 0x3, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x8, 0x7f, 0x40, 0x0, 0x9, 0x200]}}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x6, 0xfaf2, 0x9, 0x2, 0xa, 0x1, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x7a0, 0x74, 0x101, 0xe, 0x3, 0xb76, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0xf9, 0x8, 0x4c, 0x6, 0xd, 0x3]}}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x3, 0x9}, {0x3, 0x1}, {0x1, 0x6}, {0x0, 0x8}, {0x4, 0x9}, {0x0, 0x5}, {0x5, 0x9}, {0x5, 0xa}, {0x3, 0x9}, {0x4, 0x5}, {0x1}, {0x5}, {0x0, 0x4}, {0x3, 0x8}, {0x1, 0x2}, {0x4, 0x4}, {0x5, 0x3}, {0x3}, {0x4, 0x5}, {0x2, 0xa}, {0x2, 0x2}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5b5b, 0x0, 0x6, 0x5, 0x3, 0x7, 0x7, 0x4]}}]}]}, @NL80211_ATTR_TX_RATES={0x60, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x60, 0x18, 0x36, 0x18, 0x4, 0x60, 0x77, 0x1b, 0x9, 0x5]}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x9, 0x2, 0x3, 0x1, 0x5, 0x3, 0x48, 0x18, 0x3]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x81, 0x0, 0xe, 0xfffb, 0x6, 0xf77, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}]}, 0xbf8}}, 0x4008004) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002111c0000001f000000060001000700000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a0001"], 0x64}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r2, 0x325}, 0x14}}, 0x0) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_QUOTA_CTL(r13, 0xc0109428, &(0x7f0000000440)={0x1, 0x2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fe007c05e8fe55a10a000700110000000a600e41b0000900ac00060411000000160012000a0003fe0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) socket(0x2b, 0x1, 0x1) syz_emit_ethernet(0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6100272400383aff20010000000000000000000000000000ff0200000000000000000000000000010200907804000000663a794500023a00fe80000000000000000000000000001eff0200000000000000000000000000018029335287b7a081"], 0x0) 708.425422ms ago: executing program 1 (id=8224): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) shutdown(r1, 0x1) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) poll(&(0x7f0000000140)=[{r1, 0xa0}], 0x1, 0x8) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x20}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x88, 0x30, 0xb, 0x5, 0x0, {}, [{0x74, 0x1, [@m_ct={0x70, 0x1, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @private1}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x8000}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8890}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c0000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x15, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query, @generic={0x5, 0xd, 0x3, 0x5, 0x80}, @ldst={0x2, 0x2, 0x6, 0x0, 0x1, 0xfffffffffffffff4, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf}, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}, @generic={0x8, 0x9, 0x8, 0x2, 0xb22}, @map_fd={0x18, 0x7}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}]}, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x62, &(0x7f0000000300)=""/98, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x8, 0x7ff, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x3, 0x3, 0x4}], 0x10, 0x81}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r3, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x1, 0x0, 0x1, 0x0, &(0x7f0000000180)='\x00', 0x0, 0x0, 0x0, 0x7e}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000500)=0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000240), &(0x7f0000000140)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000008c00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000180)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) close(0x3) 677.544118ms ago: executing program 4 (id=8225): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000000380)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0xa}}, 0x14}}, 0x20004890) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)='7\x00\x00\b', 0x4}], 0x10000000000000d7) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x800452d2, &(0x7f0000000100)) 668.684794ms ago: executing program 3 (id=8226): bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f00000000c0)=0x40) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0x0, 0x2}, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V'], 0xfe33) socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@empty, @in=@loopback, 0x4e21, 0x400, 0x4e21, 0x4, 0xa, 0x40, 0xa0, 0x2f, r6}, {0x7, 0x0, 0x4, 0x9, 0xfffffffffffffff8, 0x7, 0x3, 0x1}, {0x60, 0x2, 0x5, 0x4}, 0x7, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x4d5, 0x32}, 0x2, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x34ff, 0x1, 0x2, 0x40, 0x0, 0x2, 0x525}}, 0xe8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={r4}, &(0x7f0000000240)=0x8) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c001680080001", @ANYRESOCT=r7, @ANYRES64=r7], 0x30}}, 0x4008041) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000000b0101000000000000000000000002080003e9f6940dedfde2dda8bff54000000000"], 0x1c}}, 0x44815) 571.152994ms ago: executing program 0 (id=8227): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x81}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b100", 0x10) listen(r0, 0x7866) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000880)={&(0x7f0000000080)={0xa, 0x4e21, 0x2, @mcast2, 0x49}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000040)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002\x00\x00\x00', @ANYRESOCT=r1], 0x28}, 0x400c000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) shutdown(r2, 0x0) 570.727778ms ago: executing program 2 (id=8228): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x21000000, 0xe, 0x0, &(0x7f00000002c0)="00001a000000002ac7b04b1b980f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 528.363926ms ago: executing program 3 (id=8229): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x500, 0x41}, 0x0) 495.728715ms ago: executing program 4 (id=8230): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0xc921d000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit={0x95, 0x0, 0x300}, @call={0x85, 0x0, 0x0, 0xb0}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x9c, &(0x7f0000001300)=""/156, 0x40f00, 0x40}, 0x94) 407.166816ms ago: executing program 2 (id=8231): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7fffe00006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af9219a1e18c488e827c1bbec", 0x89}], 0x1}, 0x0) 406.004339ms ago: executing program 4 (id=8232): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0xfc51}}, 0x4000000) 405.836312ms ago: executing program 3 (id=8233): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0xe4ff, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) 366.020103ms ago: executing program 4 (id=8234): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd29, 0x25dddbfe, {0x20, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r0}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0xc090) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0xdb97e000) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x9) unshare(0x6020400) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b1b, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001000010400000000feffffff00000000", @ANYRES32=0x0, @ANYBLOB="070d008c7f638f0014000300776c616e3100000000dfff00fff600000a0001"], 0x40}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x68) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x4a, 0x0, &(0x7f0000000180)) socket(0x28, 0x5, 0x0) socket(0x28, 0x805, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 280.896917ms ago: executing program 1 (id=8235): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r4, &(0x7f00000000c0), &(0x7f0000004880)=@udp=r3}, 0x20) unshare(0x2c020400) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r5, &(0x7f00000005c0)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000240)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x2}, 0xe) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x9, 0x3032, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x5005}) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000400)={0x18, 0x0, {0x4, @link_local, 'lo\x00'}}, 0x1e) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x803}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x9, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x6}}}, 0x94}}, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r9, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1a, 0x4}, 0x48) read$alg(r0, &(0x7f0000000b80)=""/237, 0xed) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000040)=0x18040, 0x4) 234.338249ms ago: executing program 2 (id=8236): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xd) sendmsg$NL80211_CMD_SET_WDS_PEER(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x0, 0x306, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x4044004) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) listen(r3, 0x0) recvfrom(r3, 0x0, 0x0, 0x42, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d0400000000000000000a000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 233.938715ms ago: executing program 3 (id=8237): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xa4}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x8004, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 152.960235ms ago: executing program 4 (id=8238): socket$qrtr(0x2a, 0x2, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$inet(0x2, 0x80001, 0x84) (async) socket$netlink(0x10, 0x3, 0x4) (async) r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket(0x10, 0x3, 0x4) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket(0x10, 0x80002, 0x0) r4 = epoll_create(0x7ff) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, &(0x7f0000000080)) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x2000}, 0x4) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}}, 0x2000800) 145.753276ms ago: executing program 3 (id=8239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x0, 0x3c}, 0x2, @in=@local, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006c000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008c00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x44, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {0xc}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0xd, 0x1, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x480d8}, 0x4008000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="b702000006000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808b80200000000000000334d83239d1d2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cefd07e002cab5ebfcaad34732181feb215139f15eadddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a580900000000000000b4f22cdf550ef091a78098534f0d973058594119d06d5ea9a8d085734000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca39059787790017b0689a1f3db9c24db65c1e00015c1d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86e0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8e34fc7eac9e8af3904ea0f3698cd9492794b82649b50d726bff873339c4cad4ead1348474250eda2c8067ab730c1d85969b95a2a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c02000000000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860a44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cddcb24ebb6eddb9e87c9ece87a42c0000abdfc6ea55887dfa18d0aea1b6eca5a883702b0bf3aeebb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3e0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5bf55b98d926d3c27e7945b2999600000000f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac23c3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa17bc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984aea1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a57094616020f72f1c55ee3d325c7496a7c2f10cfea516ae436751227378f00ca0f1f6c1dcf879700dd90b96a330f92bff736c83ca53e7f02b734d1a9292896f5d7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cdeac995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb7961c07b47521973cf0bb6f5530f6216b447b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d413e7b2a9e2f87f7b44949fe14c00000000000047030c09f62d444b4981db81799776eeb444000000009705fa8b56779bc876ad4f8d8c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dee145ff221159aed2768edc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982e3ddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bf4d30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c208f4032e93408000000000000e96db049b92fc32ee34fe7a3419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab84213bf50000000000000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba375dfa55a49b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be573f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bc850f8035040ad9e562be58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc0555d4bfcfd057980136d6e9000003b24fa300ef90bfe4ad364256937796f941c2faad94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808f109b5e36fc7fdd41def361427b6b9c118e5c9a0a1d5ca24886e33a7f81b2188ec75a5fc9302e3695bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124ba263e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3010975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df74d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf3010100007e206a758a3f02816b4e097cfa3d46e45e7949c5b10691d49b9693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000000000000000019a4e9a9c2cbc906f97fd6eb71b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea12023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6088630d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac6398c1b28bdd33b69b4b86d7c5f30cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a9f9355aea34fe55fd0d3011cb83ac03268dc66dd108a4e9944241e1d4ba69212ee0e7526e72c19346d08d3c3c82cb987f1bd2fd9ce2c88082ea23abbf23c6bd43fc9f9f8ea7656e25d3d73cd056b1f782de1fe349fc33546558366ed99940c0fda039272d277a3576d4e0469779d711e10b6bf040f7274fd9577c1c33326d2e60ee611ae226ef00e2944fb727832dc8dad36a6072aacfc4bcefb808ab7b3b95e0f60616320b2a9e1f8fac812daac9983639b35184803b7d192ce1f226e97fa23c37df95d067a54a8b412644cad9ecc251fbe418a81aaf00cc8d15758ff0eb885a40630396ba76b8fadc09e62ef70c8a0121e7e8322cb8bc0f50ad33a17143a29c14ecadd1b6244e31b888d8f3fa03208d3e9a4826a98f31995509015ebdc89f2f3106e54d5898d3758b9bfc9e4924e9cedf7f8fd584e7185703cc5f23741ffb480b5a87cd7efcceb409d354bdab211ebd50ab12b13c1b8ce93093a59a0f952153c2efd10e72ec9ee5fa2a00f9637851ddb81d059f9a363c4ada68dd25f19ee9e4841acee7c1b35ad6f9d54cf4939ce78a55a04e655d7746a3989c6f33b02f8497aacb6bfca7456111900000000000000000048d35af24acb66fdd4d1fb150138f0ee6abfc7049c94346868ed76d3a5df7335184386a5c532d425f1a098ff93efd05e5dd8b765121fbdfe5ef44f6472b939c31883f45889142e82086c2448da60d7a40774d71c2da2e7f6d4fe5d36923213cc7b7d71a1c90006e8f8d84953f284b0eb4366beff5df5595827dcd736e8cfab28cfa416e83c06213ca7fd21af56e3de1d80e77060447e20a8b317a4c06e24e99239824d08abf670a685bc46c8168bee4cfc30cc6d0dc030a592925bad3e0f805f0d4b2b600dc3f0c4c6f75bb4e49982f4198ac90ab77c5572c956d415858bad5ee117b3e5f1507bbd0d7a30388865deb11106a93225a81feb08f5"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r8, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000002f00135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$alg(r2, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, &(0x7f0000000400)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40000}], 0x1, 0xc0) recvmmsg(r2, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e65742c706f7274"], 0x60}}, 0x20000895) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000400000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 59.065856ms ago: executing program 2 (id=8240): r0 = socket$kcm(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000200)) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x55, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb90402200800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370401a8001600200001401c00010003580461c1d67f6f94007134cf6ef68000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3b8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6f4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) r1 = accept$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, &(0x7f0000000280)=0x1c) ioctl$OCFS2_IOC_GROUP_ADD(r0, 0x40186f02, &(0x7f0000000400)={0xf72, 0x8000, 0x7ff, 0x3}) setsockopt$inet6_group_source_req(r1, 0x29, 0x2c, &(0x7f00000002c0)={0x0, {{0xa, 0x4e21, 0x8000, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7f}}, {{0xa, 0xf, 0xffffffc0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffff8df}}}, 0x108) 57.68353ms ago: executing program 4 (id=8241): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f000000a280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=@newtaction={0x14, 0x5a, 0x301, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00020b, 0xd, 0x0, &(0x7f00000007c0)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7d15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) bind$alg(r5, &(0x7f00000005c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="85100000040000009500000000000000180000000000000000000000000000009500deff0000000085100000fcffffdd0000000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x78) close(0x3) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) (async) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) r7 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000002440)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="57cd4e", 0x3}, {&(0x7f0000000580)="3222f0476ed4765dc271a2c4fc02", 0xe}], 0x2, &(0x7f0000001a40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4000801}], 0x1, 0x40) recvmmsg(r7, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x1, 0x2101, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="880000000314230c2abd7000ffdbdf250900020073797a300000000008004100727865001400330073797a5f74756e0000000000000000000900020073797a300000000008004100727865001400330064756d6d7930000000000000000000000900020073797a31000000000800410073697700140033007665744c305f746f5f626f6e64000000"], 0x88}, 0x1, 0x0, 0x0, 0x48845}, 0xc000) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xb, 0x63, &(0x7f0000000080)="5fab413d270cec0465f5fc", &(0x7f00000003c0)=""/99, 0x5, 0x0, 0xd4, 0x84, &(0x7f0000000440)="5ae2bb912e49a234ba239fc69950ee7c06cf06fcdffe9a605d42aad4404830fd4ce0fe4bc5499f59528b69eaf04fa334fbe5e0beb95e2fd2b3c199eace71e075a9d5184c34c2f7a7b3a1ece9a4568f9b72cb8e0f4a65a1f0cdfe77586d32064da9e3185148d9431b610b558c094f28185e3187660483528fdcb5a8ae90534537aa1037a34730e02afc2c2c455978ecb0ad06f87fec2b214184ff07c9500cca477061d86a1431c6e5f307d8aeee58cf5928a8fb218d805435663ed681d39f98f7a9dae2def68ad04c413d12e5bd06bf81198841f0", &(0x7f0000000540)="2f4c3e58e889f32f1bb7278987b83562bd5903f37c2239c15ed8c4b48e9d8e6f43efd6306dabbb596e328aa06632c43a7b9e05d89f32957c47bb97f7cfbf4f5cef3c78b318856f1ce78466e4376ace142367efa489f0c8d1ef00cbae898d81cd2e01b9da31a420fb74045e18ff6476e2f6136982a9c59bbadc53b5628cc656f62abfa14f", 0x0, 0x0, 0x7f}, 0x50) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) 0s ago: executing program 1 (id=8242): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e23, @empty}}, 0x0, 0x0, 0x4a, 0x0, "94713ce1a606754bab1cb61212bb07a2d70004000000000000071f0d1aadd97b9640d9a0cd7ba71a5e9aec7f03d4406a7710c4a1264cf8960d7669bcd7589d209bc45b4064028eb3faff7fb125736e00"}, 0xd8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000190001090000180024000000021800400002fd010000000008000100ac14140008"], 0x44}}, 0x0) kernel console output (not intermixed with test programs): pfx_genl_rcv_msg+0x10/0x10 [ 702.739556][T28196] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 702.739579][T28196] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 702.739618][T28196] netlink_rcv_skb+0x232/0x4b0 [ 702.739640][T28196] ? __pfx_genl_rcv_msg+0x10/0x10 [ 702.739665][T28196] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 702.739701][T28196] ? down_read+0x270/0x2e0 [ 702.739721][T28196] ? genl_rcv+0xd/0x40 [ 702.739747][T28196] genl_rcv+0x28/0x40 [ 702.739779][T28196] netlink_unicast+0x75c/0x8e0 [ 702.739810][T28196] netlink_sendmsg+0x813/0xb40 [ 702.739841][T28196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 702.739865][T28196] ? aa_sock_msg_perm+0xf1/0x1b0 [ 702.739893][T28196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 702.739921][T28196] ____sys_sendmsg+0x972/0x9f0 [ 702.739943][T28196] ? __might_fault+0xaf/0x130 [ 702.739974][T28196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 702.740005][T28196] ? import_iovec+0x73/0xa0 [ 702.740036][T28196] ___sys_sendmsg+0x2a5/0x360 [ 702.740055][T28196] ? __lock_acquire+0x6b5/0x2cf0 [ 702.740079][T28196] ? __pfx____sys_sendmsg+0x10/0x10 [ 702.740138][T28196] ? __fget_files+0x2a/0x420 [ 702.740159][T28196] ? __fget_files+0x3a0/0x420 [ 702.740192][T28196] __x64_sys_sendmsg+0x1bd/0x2a0 [ 702.740215][T28196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 702.740244][T28196] ? __pfx_ksys_write+0x10/0x10 [ 702.740278][T28196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.740298][T28196] do_syscall_64+0x15f/0xf80 [ 702.740316][T28196] ? trace_irq_disable+0x3b/0x140 [ 702.740342][T28196] ? clear_bhb_loop+0x40/0x90 [ 702.740363][T28196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.740379][T28196] RIP: 0033:0x7faf5bd9ce59 [ 702.740395][T28196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.740409][T28196] RSP: 002b:00007faf5cc87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 702.740429][T28196] RAX: ffffffffffffffda RBX: 00007faf5c015fa0 RCX: 00007faf5bd9ce59 [ 702.740442][T28196] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 702.740454][T28196] RBP: 00007faf5cc87090 R08: 0000000000000000 R09: 0000000000000000 [ 702.740464][T28196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 702.740474][T28196] R13: 00007faf5c016038 R14: 00007faf5c015fa0 R15: 00007ffed87bd2b8 [ 702.740512][T28196] [ 702.748289][T28198] netlink: 136 bytes leftover after parsing attributes in process `syz.1.7122'. [ 703.113576][T28198] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 703.308880][T28219] tipc: Resetting bearer [ 703.478287][T28219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 703.490296][T28219] 8021q: adding VLAN 0 to HW filter on device team0 [ 703.517118][T28219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.596426][T28237] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7128'. [ 703.660186][T28219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.691773][T28219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.708802][T28219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 703.720857][T28219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 703.756193][T28219] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 703.789203][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.796447][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 703.816822][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.824023][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 703.894385][ T6539] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.916012][ T6539] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.938551][ T48] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.956544][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.115202][T28261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7140'. [ 704.290693][T28271] IPVS: Unknown mcast interface: veth0_to_bond [ 704.341884][T28277] validate_nla: 6 callbacks suppressed [ 704.341904][T28277] netlink: 'syz.2.7144': attribute type 7 has an invalid length. [ 704.432444][T28285] FAULT_INJECTION: forcing a failure. [ 704.432444][T28285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.447922][T28285] CPU: 1 UID: 0 PID: 28285 Comm: syz.0.7150 Not tainted syzkaller #0 PREEMPT(full) [ 704.447946][T28285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.447957][T28285] Call Trace: [ 704.447963][T28285] [ 704.447971][T28285] dump_stack_lvl+0xe8/0x150 [ 704.447994][T28285] should_fail_ex+0x412/0x560 [ 704.448017][T28285] _copy_from_user+0x2d/0xb0 [ 704.448041][T28285] ___sys_sendmsg+0x1c6/0x360 [ 704.448061][T28285] ? __lock_acquire+0x6b5/0x2cf0 [ 704.448087][T28285] ? __pfx____sys_sendmsg+0x10/0x10 [ 704.448137][T28285] ? __fget_files+0x2a/0x420 [ 704.448157][T28285] ? __fget_files+0x3a0/0x420 [ 704.448187][T28285] __x64_sys_sendmsg+0x1bd/0x2a0 [ 704.448209][T28285] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 704.448237][T28285] ? __pfx_ksys_write+0x10/0x10 [ 704.448271][T28285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.448290][T28285] do_syscall_64+0x15f/0xf80 [ 704.448307][T28285] ? trace_irq_disable+0x3b/0x140 [ 704.448343][T28285] ? clear_bhb_loop+0x40/0x90 [ 704.448366][T28285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.448383][T28285] RIP: 0033:0x7f2f29d9ce59 [ 704.448400][T28285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.448415][T28285] RSP: 002b:00007f2f2abec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 704.448435][T28285] RAX: ffffffffffffffda RBX: 00007f2f2a015fa0 RCX: 00007f2f29d9ce59 [ 704.448446][T28285] RDX: 0000000000004000 RSI: 0000200000000080 RDI: 0000000000000008 [ 704.448459][T28285] RBP: 00007f2f2abec090 R08: 0000000000000000 R09: 0000000000000000 [ 704.448469][T28285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 704.448480][T28285] R13: 00007f2f2a016038 R14: 00007f2f2a015fa0 R15: 00007ffc6270ef38 [ 704.448507][T28285] [ 704.743822][T28294] netlink: 'syz.3.7152': attribute type 1 has an invalid length. [ 705.099482][T28311] syzkaller0: entered promiscuous mode [ 705.105634][T28311] syzkaller0: entered allmulticast mode [ 705.152873][T28318] FAULT_INJECTION: forcing a failure. [ 705.152873][T28318] name failslab, interval 1, probability 0, space 0, times 0 [ 705.166273][T28318] CPU: 0 UID: 0 PID: 28318 Comm: syz.4.7161 Not tainted syzkaller #0 PREEMPT(full) [ 705.166297][T28318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.166309][T28318] Call Trace: [ 705.166316][T28318] [ 705.166324][T28318] dump_stack_lvl+0xe8/0x150 [ 705.166351][T28318] should_fail_ex+0x412/0x560 [ 705.166381][T28318] should_failslab+0xa8/0x100 [ 705.166410][T28318] __kmalloc_cache_noprof+0x88/0x660 [ 705.166435][T28318] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 705.166462][T28318] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 705.166486][T28318] ? genl_start+0x1c9/0x6c0 [ 705.166524][T28318] genl_start+0x1c9/0x6c0 [ 705.166548][T28318] ? netlink_lookup+0x30/0x200 [ 705.166569][T28318] __netlink_dump_start+0x469/0x7e0 [ 705.166598][T28318] genl_family_rcv_msg_dumpit+0x213/0x310 [ 705.166627][T28318] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 705.166650][T28318] ? genl_get_cmd+0x6cb/0x960 [ 705.166676][T28318] ? __pfx___mutex_lock+0x10/0x10 [ 705.166697][T28318] ? __pfx_genl_start+0x10/0x10 [ 705.166719][T28318] ? __pfx_genl_dumpit+0x10/0x10 [ 705.166740][T28318] ? __pfx_genl_done+0x10/0x10 [ 705.166765][T28318] ? __lock_acquire+0x6b5/0x2cf0 [ 705.166796][T28318] genl_rcv_msg+0x5e8/0x7a0 [ 705.166825][T28318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.166852][T28318] ? __pfx_nl802154_dump_wpan_phy+0x10/0x10 [ 705.166876][T28318] ? __pfx_nl802154_dump_wpan_phy_done+0x10/0x10 [ 705.166916][T28318] netlink_rcv_skb+0x232/0x4b0 [ 705.166938][T28318] ? __pfx_genl_rcv_msg+0x10/0x10 [ 705.166963][T28318] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 705.167002][T28318] ? down_read+0x270/0x2e0 [ 705.167020][T28318] ? genl_rcv+0xd/0x40 [ 705.167046][T28318] genl_rcv+0x28/0x40 [ 705.167069][T28318] netlink_unicast+0x75c/0x8e0 [ 705.167098][T28318] netlink_sendmsg+0x813/0xb40 [ 705.167131][T28318] ? __pfx_netlink_sendmsg+0x10/0x10 [ 705.167155][T28318] ? aa_sock_msg_perm+0xf1/0x1b0 [ 705.167182][T28318] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 705.167212][T28318] ____sys_sendmsg+0x972/0x9f0 [ 705.167234][T28318] ? __might_fault+0xaf/0x130 [ 705.167265][T28318] ? __pfx_____sys_sendmsg+0x10/0x10 [ 705.167296][T28318] ? import_iovec+0x73/0xa0 [ 705.167326][T28318] ___sys_sendmsg+0x2a5/0x360 [ 705.167346][T28318] ? __lock_acquire+0x6b5/0x2cf0 [ 705.167372][T28318] ? __pfx____sys_sendmsg+0x10/0x10 [ 705.167432][T28318] ? __fget_files+0x2a/0x420 [ 705.167454][T28318] ? __fget_files+0x3a0/0x420 [ 705.167486][T28318] __x64_sys_sendmsg+0x1bd/0x2a0 [ 705.167505][T28318] ? irqentry_exit+0x218/0x760 [ 705.167534][T28318] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 705.167566][T28318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.167598][T28318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.167619][T28318] do_syscall_64+0x15f/0xf80 [ 705.167636][T28318] ? trace_irq_disable+0x3b/0x140 [ 705.167664][T28318] ? clear_bhb_loop+0x40/0x90 [ 705.167687][T28318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.167707][T28318] RIP: 0033:0x7fdbde59ce59 [ 705.167726][T28318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 705.167743][T28318] RSP: 002b:00007fdbdf476028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 705.167762][T28318] RAX: ffffffffffffffda RBX: 00007fdbde815fa0 RCX: 00007fdbde59ce59 [ 705.167775][T28318] RDX: 0000000000004000 RSI: 0000200000000180 RDI: 0000000000000004 [ 705.167787][T28318] RBP: 00007fdbdf476090 R08: 0000000000000000 R09: 0000000000000000 [ 705.167797][T28318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 705.167807][T28318] R13: 00007fdbde816038 R14: 00007fdbde815fa0 R15: 00007ffcb74f1aa8 [ 705.167836][T28318] [ 707.502741][T28326] bond0: Device is already in use. [ 707.767127][T28346] netlink: 'syz.3.7167': attribute type 13 has an invalid length. [ 707.787016][T28346] netlink: 'syz.3.7167': attribute type 17 has an invalid length. [ 707.846588][T28337] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 707.862342][T28337] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 707.946705][ T5713] lo speed is unknown, defaulting to 1000 [ 707.971848][ T5713] syz2: Port: 1 Link DOWN [ 708.098538][T28364] __nla_validate_parse: 6 callbacks suppressed [ 708.098558][T28364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7175'. [ 708.113245][T28346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 708.137560][T28363] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7174'. [ 708.269342][T28337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7167'. [ 708.282233][T28370] netlink: 'syz.1.7177': attribute type 1 has an invalid length. [ 708.295032][T28346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 708.306974][T28346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.331265][T28346] veth1_vlan: left promiscuous mode [ 708.338206][T28346] veth0_vlan: left promiscuous mode [ 708.347042][T28346] veth0_vlan: entered promiscuous mode [ 708.363586][T28346] veth1_vlan: entered promiscuous mode [ 708.383163][T28346] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 708.399895][ T5713] lo speed is unknown, defaulting to 1000 [ 708.411678][ T5713] syz2: Port: 1 Link ACTIVE [ 708.610732][T28375] syzkaller0: entered promiscuous mode [ 708.621063][T28375] syzkaller0: entered allmulticast mode [ 708.661547][ T12] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 708.683093][T28391] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 708.894370][T28401] netlink: 'syz.1.7184': attribute type 1 has an invalid length. [ 710.799034][T28391] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 710.832966][T28392] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7183'. [ 710.955126][T28409] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7186'. [ 710.986470][T28409] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7186'. [ 711.011452][T28416] netlink: 64 bytes leftover after parsing attributes in process `syz.3.7186'. [ 711.024664][T28409] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 711.068935][ T48] bond0: (slave bond_slave_0): interface is now down [ 711.080453][T28418] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7190'. [ 711.116574][ T48] bond0: now running without any active interface! [ 711.178350][T28427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7191'. [ 711.221046][T28429] netlink: 136 bytes leftover after parsing attributes in process `syz.2.7193'. [ 711.242612][T28429] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 711.267442][T28424] netlink: 'syz.1.7187': attribute type 7 has an invalid length. [ 711.342646][T28437] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1508 [ 711.379037][T28437] netlink: 'syz.2.7197': attribute type 1 has an invalid length. [ 711.662388][T28450] xt_addrtype: ipv6 does not support BROADCAST matching [ 711.772487][T28442] lo speed is unknown, defaulting to 1000 [ 711.779470][T28442] lo speed is unknown, defaulting to 1000 [ 711.908755][T28460] xt_hashlimit: overflow, rate too high: 0 [ 711.954711][T28465] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 712.252724][T28481] FAULT_INJECTION: forcing a failure. [ 712.252724][T28481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 712.275347][T28481] CPU: 0 UID: 0 PID: 28481 Comm: syz.0.7210 Not tainted syzkaller #0 PREEMPT(full) [ 712.275372][T28481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 712.275384][T28481] Call Trace: [ 712.275391][T28481] [ 712.275399][T28481] dump_stack_lvl+0xe8/0x150 [ 712.275424][T28481] should_fail_ex+0x412/0x560 [ 712.275452][T28481] _copy_from_user+0x2d/0xb0 [ 712.275476][T28481] ___sys_recvmsg+0x175/0x590 [ 712.275503][T28481] ? __pfx____sys_recvmsg+0x10/0x10 [ 712.275527][T28481] ? __fget_files+0x2a/0x420 [ 712.275573][T28481] do_recvmmsg+0x334/0x800 [ 712.275599][T28481] ? __pfx_do_recvmmsg+0x10/0x10 [ 712.275629][T28481] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 712.275665][T28481] __x64_sys_recvmmsg+0x198/0x250 [ 712.275689][T28481] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 712.275718][T28481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.275738][T28481] do_syscall_64+0x15f/0xf80 [ 712.275755][T28481] ? trace_irq_disable+0x3b/0x140 [ 712.275782][T28481] ? clear_bhb_loop+0x40/0x90 [ 712.275805][T28481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.275832][T28481] RIP: 0033:0x7f2f29d9ce59 [ 712.275848][T28481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.275863][T28481] RSP: 002b:00007f2f2abec028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 712.275882][T28481] RAX: ffffffffffffffda RBX: 00007f2f2a015fa0 RCX: 00007f2f29d9ce59 [ 712.275896][T28481] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 712.275907][T28481] RBP: 00007f2f2abec090 R08: 0000000000000000 R09: 0000000000000000 [ 712.275918][T28481] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 712.275928][T28481] R13: 00007f2f2a016038 R14: 00007f2f2a015fa0 R15: 00007ffc6270ef38 [ 712.275954][T28481] [ 712.393983][T28484] netlink: 'syz.4.7209': attribute type 1 has an invalid length. [ 712.521087][T28477] syzkaller0: entered promiscuous mode [ 712.528551][T28477] syzkaller0: entered allmulticast mode [ 712.535415][T28477] tipc: Resetting bearer [ 712.904741][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 713.068870][T28498] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.175934][T28498] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.256111][T28498] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.347584][T28498] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 713.462053][ T6540] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.513584][ T725] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.553414][ T725] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.590872][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.009470][T28535] __nla_validate_parse: 1 callbacks suppressed [ 714.009490][T28535] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7227'. [ 714.031166][T28520] lo speed is unknown, defaulting to 1000 [ 714.039318][T28535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7227'. [ 714.057732][T28520] lo speed is unknown, defaulting to 1000 [ 714.064910][T28539] netlink: 276 bytes leftover after parsing attributes in process `syz.4.7227'. [ 714.314544][T28546] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7231'. [ 714.649047][T28552] netlink: 'syz.0.7233': attribute type 7 has an invalid length. [ 714.710744][T28556] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7235'. [ 714.719797][T28515] lo speed is unknown, defaulting to 1000 [ 714.772896][T28515] lo speed is unknown, defaulting to 1000 [ 715.327627][T28573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7242'. [ 715.355082][T28573] netlink: 'syz.2.7242': attribute type 13 has an invalid length. [ 715.381219][T28573] netlink: 'syz.2.7242': attribute type 17 has an invalid length. [ 715.567036][T28573] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 715.593555][T28587] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7242'. [ 715.995813][T28597] netlink: 'syz.4.7246': attribute type 7 has an invalid length. [ 716.100304][T28607] IPVS: stopping backup sync thread 7136 ... [ 716.200105][T28607] batman_adv: batadv0: Adding interface: macvtap0 [ 716.217181][T28607] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 716.274971][T28607] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 716.276485][T28613] netlink: 'syz.0.7250': attribute type 13 has an invalid length. [ 716.308640][T28613] netlink: 'syz.0.7250': attribute type 17 has an invalid length. [ 716.330837][T28612] netlink: 'syz.4.7249': attribute type 7 has an invalid length. [ 716.399484][T28593] lo speed is unknown, defaulting to 1000 [ 716.445120][T28593] lo speed is unknown, defaulting to 1000 [ 717.040719][T28642] netlink: 'syz.2.7259': attribute type 7 has an invalid length. [ 717.120606][T28647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7260'. [ 717.282796][T28651] openvswitch: netlink: Unknown key attributes 2 [ 717.981009][T28678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.011897][T28674] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.147058][T28674] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.305886][T28674] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.365768][T28674] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.477083][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.536438][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.569429][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.597491][ T725] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 718.768913][T28696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7271'. [ 718.872621][T28701] netlink: 'syz.3.7275': attribute type 7 has an invalid length. [ 719.368807][T28729] netlink: 'syz.4.7287': attribute type 7 has an invalid length. [ 719.594162][T28739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7288'. [ 719.636155][T28722] lo speed is unknown, defaulting to 1000 [ 719.655809][T28722] lo speed is unknown, defaulting to 1000 [ 720.511722][T28767] netlink: 'syz.0.7291': attribute type 2 has an invalid length. [ 720.753665][T28780] netlink: 'syz.1.7297': attribute type 2 has an invalid length. [ 720.932405][T28785] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7299'. [ 720.962369][T28789] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7302'. [ 721.020862][T28795] netlink: 'syz.0.7300': attribute type 7 has an invalid length. [ 721.079801][T28800] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 721.156269][T28793] netlink: 136 bytes leftover after parsing attributes in process `syz.3.7303'. [ 721.195929][T28793] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 721.387906][T28797] sctp: [Deprecated]: syz.1.7302 (pid 28797) Use of struct sctp_assoc_value in delayed_ack socket option. [ 721.387906][T28797] Use struct sctp_sack_info instead [ 721.522776][T28810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7305'. [ 721.545073][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 721.566112][T28810] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7305'. [ 721.588011][T28816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7305'. [ 721.609451][T28816] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7305'. [ 721.729326][T28826] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 721.781241][T28829] netlink: 41 bytes leftover after parsing attributes in process `syz.1.7311'. [ 721.806970][T28829] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7311'. [ 721.983201][T28842] netlink: 'syz.1.7315': attribute type 7 has an invalid length. [ 721.984899][T28845] vlan2: entered promiscuous mode [ 722.000866][T28845] bond_slave_1: entered promiscuous mode [ 722.244668][T28860] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 722.666133][T28881] bridge_slave_1: invalid flags given to default FDB implementation [ 722.705851][T28886] netlink: 'syz.0.7331': attribute type 7 has an invalid length. [ 722.957671][T28904] netlink: 'syz.1.7335': attribute type 49 has an invalid length. [ 723.253805][T28921] ipvlan2: entered promiscuous mode [ 723.333120][T28928] syzkaller0: entered promiscuous mode [ 723.340427][T28928] syzkaller0: entered allmulticast mode [ 723.347242][T28928] tipc: Resetting bearer [ 723.818252][T28956] netlink: 'syz.2.7350': attribute type 1 has an invalid length. [ 723.839303][T28956] netlink: 'syz.2.7350': attribute type 1 has an invalid length. [ 723.921984][T28946] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 724.226313][T28969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 724.651474][T28994] netlink: 'syz.3.7363': attribute type 1 has an invalid length. [ 724.734221][T28998] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.776691][T28994] veth15: entered allmulticast mode [ 724.790466][T28994] bond8: (slave veth15): Enslaving as a backup interface with a down link [ 724.810803][T28998] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.871629][T28998] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.970335][T28998] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.026515][T29015] __nla_validate_parse: 13 callbacks suppressed [ 725.026532][T29015] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7372'. [ 725.042885][T29016] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 2, id = 0 [ 725.140026][ T725] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.173779][ T35] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.192300][T29020] vlan0: entered promiscuous mode [ 725.226304][ T725] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.264367][T29025] batman_adv: batadv0: Adding interface: macvtap0 [ 725.277190][T29030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7378'. [ 725.277278][T29025] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 725.315702][T29030] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7378'. [ 725.347895][ T6540] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.376915][T29034] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7379'. [ 725.424809][T29038] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7381'. [ 725.443892][T29036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'. [ 725.545501][T29044] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7383'. [ 725.677752][T29054] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7388'. [ 725.745958][T29060] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7389'. [ 725.828285][T29062] syzkaller1: entered promiscuous mode [ 725.837530][T29066] netlink: 'syz.4.7390': attribute type 1 has an invalid length. [ 725.845990][T29062] syzkaller1: entered allmulticast mode [ 725.854705][T29066] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7390'. [ 726.396300][T29096] netlink: 'syz.2.7402': attribute type 7 has an invalid length. [ 726.533078][T29102] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 726.614806][T29107] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 726.642321][T29102] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 726.796607][T29117] netlink: 'syz.2.7408': attribute type 13 has an invalid length. [ 726.823022][T29117] netlink: 'syz.2.7408': attribute type 17 has an invalid length. [ 727.029660][T29125] netlink: 'syz.2.7413': attribute type 7 has an invalid length. [ 727.346530][T29134] bond0: entered promiscuous mode [ 727.373178][T29134] bond0: left promiscuous mode [ 727.438643][T29138] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 727.636473][T29147] FAULT_INJECTION: forcing a failure. [ 727.636473][T29147] name failslab, interval 1, probability 0, space 0, times 0 [ 727.649438][T29147] CPU: 0 UID: 0 PID: 29147 Comm: syz.1.7423 Not tainted syzkaller #0 PREEMPT(full) [ 727.649464][T29147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 727.649475][T29147] Call Trace: [ 727.649483][T29147] [ 727.649491][T29147] dump_stack_lvl+0xe8/0x150 [ 727.649516][T29147] should_fail_ex+0x412/0x560 [ 727.649539][T29147] should_failslab+0xa8/0x100 [ 727.649564][T29147] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 727.649586][T29147] ? __alloc_skb+0x186/0x7d0 [ 727.649600][T29147] ? __alloc_skb+0x1d0/0x7d0 [ 727.649611][T29147] ? __local_bh_enable_ip+0xd0/0x130 [ 727.649630][T29147] __alloc_skb+0x1d0/0x7d0 [ 727.649643][T29147] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 727.649667][T29147] netlink_sendmsg+0x5d4/0xb40 [ 727.649693][T29147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 727.649712][T29147] ? aa_sock_msg_perm+0xf1/0x1b0 [ 727.649733][T29147] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 727.649756][T29147] ____sys_sendmsg+0x972/0x9f0 [ 727.649774][T29147] ? __might_fault+0xaf/0x130 [ 727.649799][T29147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 727.649826][T29147] ? import_iovec+0x73/0xa0 [ 727.649849][T29147] ___sys_sendmsg+0x2a5/0x360 [ 727.649863][T29147] ? __lock_acquire+0x6b5/0x2cf0 [ 727.649882][T29147] ? __pfx____sys_sendmsg+0x10/0x10 [ 727.649924][T29147] ? __fget_files+0x2a/0x420 [ 727.649940][T29147] ? __fget_files+0x3a0/0x420 [ 727.649964][T29147] __x64_sys_sendmsg+0x1bd/0x2a0 [ 727.649982][T29147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 727.650004][T29147] ? __pfx_ksys_write+0x10/0x10 [ 727.650032][T29147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.650048][T29147] do_syscall_64+0x15f/0xf80 [ 727.650062][T29147] ? trace_irq_disable+0x3b/0x140 [ 727.650084][T29147] ? clear_bhb_loop+0x40/0x90 [ 727.650103][T29147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.650118][T29147] RIP: 0033:0x7f9ab6d9ce59 [ 727.650133][T29147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.650147][T29147] RSP: 002b:00007f9ab7cb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 727.650164][T29147] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9ce59 [ 727.650177][T29147] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 727.650186][T29147] RBP: 00007f9ab7cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 727.650195][T29147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 727.650205][T29147] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffd2ecd2a38 [ 727.650231][T29147] [ 727.689391][T29152] netlink: 'syz.2.7425': attribute type 7 has an invalid length. [ 727.985863][T29165] netlink: 'syz.1.7428': attribute type 1 has an invalid length. [ 728.197777][T29178] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 728.298306][T29149] lo speed is unknown, defaulting to 1000 [ 728.316963][T29149] lo speed is unknown, defaulting to 1000 [ 728.490461][T29189] netlink: 'syz.1.7437': attribute type 7 has an invalid length. [ 728.506699][T29193] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.593872][T29193] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.680436][T29201] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 728.708599][T29193] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.771049][T29203] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 728.827669][T29193] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.999680][T29216] IPVS: Unknown mcast interface: veth0_to_bond [ 729.086278][ T35] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.172211][ T35] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.339771][T29230] netlink: 'syz.1.7454': attribute type 1 has an invalid length. [ 729.488870][ T35] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.681485][T29230] bond12: entered promiscuous mode [ 729.687276][T29230] 8021q: adding VLAN 0 to HW filter on device bond12 [ 729.737866][ T3341] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 729.836712][T29243] netlink: 'syz.0.7459': attribute type 21 has an invalid length. [ 729.844907][T29243] netlink: 'syz.0.7459': attribute type 1 has an invalid length. [ 729.852854][T29243] FAULT_INJECTION: forcing a failure. [ 729.852854][T29243] name failslab, interval 1, probability 0, space 0, times 0 [ 729.869364][T29243] CPU: 0 UID: 0 PID: 29243 Comm: syz.0.7459 Not tainted syzkaller #0 PREEMPT(full) [ 729.869388][T29243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 729.869398][T29243] Call Trace: [ 729.869406][T29243] [ 729.869414][T29243] dump_stack_lvl+0xe8/0x150 [ 729.869441][T29243] should_fail_ex+0x412/0x560 [ 729.869471][T29243] should_failslab+0xa8/0x100 [ 729.869497][T29243] ? skb_clone+0x212/0x3a0 [ 729.869518][T29243] kmem_cache_alloc_noprof+0x87/0x650 [ 729.869551][T29243] skb_clone+0x212/0x3a0 [ 729.869580][T29243] __netlink_deliver_tap+0x404/0x850 [ 729.869614][T29243] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.869637][T29243] netlink_deliver_tap+0x19c/0x1b0 [ 729.869659][T29243] netlink_sendskb+0x68/0x140 [ 729.869680][T29243] netlink_rcv_skb+0x2b6/0x4b0 [ 729.869703][T29243] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 729.869733][T29243] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 729.869768][T29243] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.869788][T29243] ? netlink_deliver_tap+0x2e/0x1b0 [ 729.869813][T29243] netlink_unicast+0x75c/0x8e0 [ 729.869843][T29243] netlink_sendmsg+0x813/0xb40 [ 729.869872][T29243] ? __pfx_netlink_sendmsg+0x10/0x10 [ 729.869895][T29243] ? aa_sock_msg_perm+0xf1/0x1b0 [ 729.869922][T29243] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 729.869948][T29243] ____sys_sendmsg+0x972/0x9f0 [ 729.869969][T29243] ? __might_fault+0xaf/0x130 [ 729.869998][T29243] ? __pfx_____sys_sendmsg+0x10/0x10 [ 729.870028][T29243] ? import_iovec+0x73/0xa0 [ 729.870057][T29243] ___sys_sendmsg+0x2a5/0x360 [ 729.870077][T29243] ? __lock_acquire+0x6b5/0x2cf0 [ 729.870102][T29243] ? __pfx____sys_sendmsg+0x10/0x10 [ 729.870158][T29243] ? __fget_files+0x2a/0x420 [ 729.870186][T29243] ? __fget_files+0x3a0/0x420 [ 729.870216][T29243] __x64_sys_sendmsg+0x1bd/0x2a0 [ 729.870239][T29243] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 729.870269][T29243] ? __pfx_ksys_write+0x10/0x10 [ 729.870304][T29243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.870324][T29243] do_syscall_64+0x15f/0xf80 [ 729.870342][T29243] ? trace_irq_disable+0x3b/0x140 [ 729.870370][T29243] ? clear_bhb_loop+0x40/0x90 [ 729.870394][T29243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.870414][T29243] RIP: 0033:0x7f2f29d9ce59 [ 729.870433][T29243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.870451][T29243] RSP: 002b:00007f2f2abec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 729.870471][T29243] RAX: ffffffffffffffda RBX: 00007f2f2a015fa0 RCX: 00007f2f29d9ce59 [ 729.870485][T29243] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 729.870502][T29243] RBP: 00007f2f2abec090 R08: 0000000000000000 R09: 0000000000000000 [ 729.870514][T29243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.870526][T29243] R13: 00007f2f2a016038 R14: 00007f2f2a015fa0 R15: 00007ffc6270ef38 [ 729.870557][T29243] [ 730.169191][T29248] __nla_validate_parse: 13 callbacks suppressed [ 730.169209][T29248] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7460'. [ 730.220889][T29248] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7460'. [ 730.245635][T29248] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 730.351758][T29253] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7461'. [ 730.433797][T29253] bond11: (slave dummy0): Releasing active interface [ 730.448024][T29263] netlink: 'syz.3.7467': attribute type 1 has an invalid length. [ 730.458319][T29253] bridge12: port 1(dummy0) entered blocking state [ 730.465906][T29253] bridge12: port 1(dummy0) entered disabled state [ 730.472580][T29253] dummy0: entered allmulticast mode [ 730.480479][T29253] dummy0: entered promiscuous mode [ 730.480635][T29264] netlink: 'syz.4.7461': attribute type 10 has an invalid length. [ 730.493694][T29264] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7461'. [ 730.548268][T29253] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7461'. [ 730.569724][T29263] bond9: entered promiscuous mode [ 730.576895][T29263] 8021q: adding VLAN 0 to HW filter on device bond9 [ 730.589462][T29264] bridge12: port 1(dummy0) entered blocking state [ 730.597395][T29264] bridge12: port 1(dummy0) entered forwarding state [ 730.607103][T29264] dummy0: left allmulticast mode [ 730.612884][T29264] bridge12: port 1(dummy0) entered disabled state [ 730.976959][T29290] syzkaller1: entered promiscuous mode [ 730.985522][T29290] syzkaller1: entered allmulticast mode [ 731.041239][T29295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7475'. [ 731.147851][T29286] lo speed is unknown, defaulting to 1000 [ 731.160512][T29286] lo speed is unknown, defaulting to 1000 [ 731.490229][T29309] block nbd1: server does not support multiple connections per device. [ 731.515245][T29309] block nbd1: shutting down sockets [ 731.706626][T29321] FAULT_INJECTION: forcing a failure. [ 731.706626][T29321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 731.720337][T29321] CPU: 0 UID: 0 PID: 29321 Comm: syz.4.7484 Not tainted syzkaller #0 PREEMPT(full) [ 731.720362][T29321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 731.720374][T29321] Call Trace: [ 731.720382][T29321] [ 731.720389][T29321] dump_stack_lvl+0xe8/0x150 [ 731.720416][T29321] should_fail_ex+0x412/0x560 [ 731.720446][T29321] _copy_from_user+0x2d/0xb0 [ 731.720473][T29321] ___sys_recvmsg+0x175/0x590 [ 731.720501][T29321] ? __pfx____sys_recvmsg+0x10/0x10 [ 731.720527][T29321] ? __fget_files+0x2a/0x420 [ 731.720577][T29321] do_recvmmsg+0x334/0x800 [ 731.720604][T29321] ? __pfx_do_recvmmsg+0x10/0x10 [ 731.720637][T29321] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 731.720673][T29321] __x64_sys_recvmmsg+0x198/0x250 [ 731.720698][T29321] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 731.720729][T29321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.720749][T29321] do_syscall_64+0x15f/0xf80 [ 731.720767][T29321] ? trace_irq_disable+0x3b/0x140 [ 731.720794][T29321] ? clear_bhb_loop+0x40/0x90 [ 731.720817][T29321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.720836][T29321] RIP: 0033:0x7fdbde59ce59 [ 731.720855][T29321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 731.720871][T29321] RSP: 002b:00007fdbdf476028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 731.720891][T29321] RAX: ffffffffffffffda RBX: 00007fdbde815fa0 RCX: 00007fdbde59ce59 [ 731.720905][T29321] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 731.720925][T29321] RBP: 00007fdbdf476090 R08: 0000000000000000 R09: 0000000000000000 [ 731.720937][T29321] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 731.720948][T29321] R13: 00007fdbde816038 R14: 00007fdbde815fa0 R15: 00007ffcb74f1aa8 [ 731.720980][T29321] [ 731.954896][T29317] netlink: 'syz.2.7482': attribute type 7 has an invalid length. [ 732.053093][T29329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7487'. [ 732.174315][T29329] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7487'. [ 732.488158][T29348] sctp: [Deprecated]: syz.1.7490 (pid 29348) Use of int in maxseg socket option. [ 732.488158][T29348] Use struct sctp_assoc_value instead [ 732.535758][T29348] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7490'. [ 732.540584][T29352] netlink: 'syz.2.7493': attribute type 1 has an invalid length. [ 732.912133][T29364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7496'. [ 733.163048][T29378] FAULT_INJECTION: forcing a failure. [ 733.163048][T29378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 733.180241][T29380] syzkaller0: entered promiscuous mode [ 733.188948][T29380] syzkaller0: entered allmulticast mode [ 733.190529][T29378] CPU: 0 UID: 0 PID: 29378 Comm: syz.4.7504 Not tainted syzkaller #0 PREEMPT(full) [ 733.190553][T29378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.190571][T29378] Call Trace: [ 733.190578][T29378] [ 733.190586][T29378] dump_stack_lvl+0xe8/0x150 [ 733.190612][T29378] should_fail_ex+0x412/0x560 [ 733.190642][T29378] _copy_from_iter+0x1d3/0x1670 [ 733.190670][T29378] ? rcu_is_watching+0x15/0xb0 [ 733.190698][T29378] ? __pfx__copy_from_iter+0x10/0x10 [ 733.190730][T29378] ? netlink_sendmsg+0x650/0xb40 [ 733.190749][T29378] ? skb_put+0x11b/0x210 [ 733.190771][T29378] netlink_sendmsg+0x6c0/0xb40 [ 733.190799][T29378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 733.190823][T29378] ? aa_sock_msg_perm+0xf1/0x1b0 [ 733.190848][T29378] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 733.190876][T29378] ____sys_sendmsg+0x972/0x9f0 [ 733.190896][T29378] ? __might_fault+0xaf/0x130 [ 733.190925][T29378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 733.190954][T29378] ? import_iovec+0x73/0xa0 [ 733.190983][T29378] ___sys_sendmsg+0x2a5/0x360 [ 733.191001][T29378] ? __lock_acquire+0x6b5/0x2cf0 [ 733.191026][T29378] ? __pfx____sys_sendmsg+0x10/0x10 [ 733.191079][T29378] ? __fget_files+0x2a/0x420 [ 733.191100][T29378] ? __fget_files+0x3a0/0x420 [ 733.191130][T29378] __x64_sys_sendmsg+0x1bd/0x2a0 [ 733.191153][T29378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 733.191183][T29378] ? __pfx_ksys_write+0x10/0x10 [ 733.191216][T29378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.191236][T29378] do_syscall_64+0x15f/0xf80 [ 733.191254][T29378] ? trace_irq_disable+0x3b/0x140 [ 733.191281][T29378] ? clear_bhb_loop+0x40/0x90 [ 733.191303][T29378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.191321][T29378] RIP: 0033:0x7fdbde59ce59 [ 733.191339][T29378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.191355][T29378] RSP: 002b:00007fdbdf476028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 733.191375][T29378] RAX: ffffffffffffffda RBX: 00007fdbde815fa0 RCX: 00007fdbde59ce59 [ 733.191389][T29378] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 733.191401][T29378] RBP: 00007fdbdf476090 R08: 0000000000000000 R09: 0000000000000000 [ 733.191413][T29378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 733.191424][T29378] R13: 00007fdbde816038 R14: 00007fdbde815fa0 R15: 00007ffcb74f1aa8 [ 733.191454][T29378] [ 733.212590][T29376] netlink: 'syz.0.7503': attribute type 7 has an invalid length. [ 733.220091][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.453858][ T3341] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.484728][T29389] gretap9: entered allmulticast mode [ 733.523338][T29390] netlink: 'syz.4.7508': attribute type 1 has an invalid length. [ 733.532806][T29384] netlink: 'syz.1.7506': attribute type 7 has an invalid length. [ 733.625344][T29390] 8021q: adding VLAN 0 to HW filter on device bond14 [ 733.931168][T29413] netlink: 'syz.3.7512': attribute type 3 has an invalid length. [ 734.077986][T29421] netlink: 'syz.1.7518': attribute type 27 has an invalid length. [ 734.104568][T29421] netlink: 'syz.1.7518': attribute type 4 has an invalid length. [ 734.381826][T29440] netlink: 'syz.0.7528': attribute type 1 has an invalid length. [ 734.729889][T29458] netlink: 'syz.2.7533': attribute type 3 has an invalid length. [ 734.937693][T29476] IPVS: stopping backup sync thread 18376 ... [ 735.061748][T29476] batman_adv: batadv0: Adding interface: macvtap0 [ 735.075595][T29476] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.132108][T29476] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 735.631376][T29495] __nla_validate_parse: 7 callbacks suppressed [ 735.631397][T29495] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7545'. [ 735.654390][T29495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.139961][T29510] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7548'. [ 736.395480][T29524] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap5 [ 736.414383][T29524] gretap5: entered allmulticast mode [ 736.448716][T29529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 736.498773][T29528] netlink: 136 bytes leftover after parsing attributes in process `syz.4.7556'. [ 736.540698][T29528] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 736.612803][T29537] netlink: 248 bytes leftover after parsing attributes in process `syz.0.7560'. [ 736.770679][T29550] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7564'. [ 736.790353][T29550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7564'. [ 737.083322][T29560] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7568'. [ 737.252841][T29571] netlink: 'syz.0.7571': attribute type 13 has an invalid length. [ 738.121570][T29628] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 738.152092][T29628] gretap3: entered allmulticast mode [ 738.184209][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 738.303225][T29638] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7600'. [ 738.324495][T29638] netlink: 84 bytes leftover after parsing attributes in process `syz.1.7600'. [ 738.420624][T29641] syzkaller0: entered promiscuous mode [ 738.446074][T29641] syzkaller0: entered allmulticast mode [ 738.699389][T29663] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7604'. [ 738.786208][T29665] validate_nla: 2 callbacks suppressed [ 738.786226][T29665] netlink: 'syz.2.7608': attribute type 21 has an invalid length. [ 738.859136][T29665] netlink: 'syz.2.7608': attribute type 1 has an invalid length. [ 739.000840][T29680] netlink: 'syz.2.7613': attribute type 21 has an invalid length. [ 739.054479][T29676] smc: adding net device veth1_to_team with user defined pnetid SYZ0 [ 739.083112][T29680] netlink: 'syz.2.7613': attribute type 1 has an invalid length. [ 739.401283][T29701] netlink: 'syz.1.7620': attribute type 1 has an invalid length. [ 739.778304][T29718] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 739.939495][T29729] batman_adv: batadv0: Adding interface: macvtap2 [ 739.946559][T29729] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 739.975686][T29729] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 739.992572][T29735] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 739.998525][T29731] batman_adv: batadv0: Adding interface: macvtap1 [ 740.013786][T29731] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.041393][T29731] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 740.223558][T29745] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap6 [ 740.245713][T29745] gretap6: entered allmulticast mode [ 740.478053][T29769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 740.951377][T29781] __nla_validate_parse: 14 callbacks suppressed [ 740.951396][T29781] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7651'. [ 741.170384][T29793] FAULT_INJECTION: forcing a failure. [ 741.170384][T29793] name failslab, interval 1, probability 0, space 0, times 0 [ 741.208701][T29793] CPU: 1 UID: 0 PID: 29793 Comm: syz.4.7654 Not tainted syzkaller #0 PREEMPT(full) [ 741.208725][T29793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.208738][T29793] Call Trace: [ 741.208746][T29793] [ 741.208754][T29793] dump_stack_lvl+0xe8/0x150 [ 741.208789][T29793] should_fail_ex+0x412/0x560 [ 741.208820][T29793] should_failslab+0xa8/0x100 [ 741.208850][T29793] __kvmalloc_node_noprof+0x178/0x8a0 [ 741.208875][T29793] ? is_bpf_text_address+0x26/0x2b0 [ 741.208895][T29793] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 741.208926][T29793] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 741.208946][T29793] ? arch_stack_walk+0xfb/0x150 [ 741.208984][T29793] ? __pfx_stack_trace_save+0x10/0x10 [ 741.209012][T29793] ? stack_depot_save_flags+0x33/0x810 [ 741.209044][T29793] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 741.209064][T29793] ? bpf_test_init+0x9f/0x150 [ 741.209080][T29793] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 741.209100][T29793] ? bpf_prog_test_run+0x2c7/0x340 [ 741.209116][T29793] ? __sys_bpf+0x643/0x950 [ 741.209139][T29793] ? __x64_sys_bpf+0x7c/0x90 [ 741.209191][T29793] ? __might_fault+0xaf/0x130 [ 741.209215][T29793] ? __might_fault+0xaf/0x130 [ 741.209243][T29793] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 741.209276][T29793] ? _copy_from_user+0x94/0xb0 [ 741.209303][T29793] ? bpf_test_init+0x113/0x150 [ 741.209321][T29793] ? xdp_convert_md_to_buff+0x5b/0x330 [ 741.209345][T29793] bpf_prog_test_run_xdp+0x81c/0x1160 [ 741.209386][T29793] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 741.209411][T29793] ? __fget_files+0x2a/0x420 [ 741.209439][T29793] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 741.209461][T29793] bpf_prog_test_run+0x2c7/0x340 [ 741.209484][T29793] __sys_bpf+0x643/0x950 [ 741.209512][T29793] ? __pfx___sys_bpf+0x10/0x10 [ 741.209554][T29793] ? ksys_write+0x242/0x270 [ 741.209581][T29793] ? __pfx_ksys_write+0x10/0x10 [ 741.209611][T29793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.209632][T29793] __x64_sys_bpf+0x7c/0x90 [ 741.209657][T29793] do_syscall_64+0x15f/0xf80 [ 741.209675][T29793] ? trace_irq_disable+0x3b/0x140 [ 741.209701][T29793] ? clear_bhb_loop+0x40/0x90 [ 741.209722][T29793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.209740][T29793] RIP: 0033:0x7fdbde59ce59 [ 741.209757][T29793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.209774][T29793] RSP: 002b:00007fdbdf476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 741.209799][T29793] RAX: ffffffffffffffda RBX: 00007fdbde815fa0 RCX: 00007fdbde59ce59 [ 741.209811][T29793] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 741.209823][T29793] RBP: 00007fdbdf476090 R08: 0000000000000000 R09: 0000000000000000 [ 741.209834][T29793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 741.209844][T29793] R13: 00007fdbde816038 R14: 00007fdbde815fa0 R15: 00007ffcb74f1aa8 [ 741.209874][T29793] [ 741.611204][T29801] netlink: 'syz.4.7658': attribute type 21 has an invalid length. [ 741.619434][T29801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7658'. [ 741.628752][T29801] netlink: 'syz.4.7658': attribute type 1 has an invalid length. [ 741.679227][T29805] netlink: 1 bytes leftover after parsing attributes in process `syz.0.7660'. [ 741.691278][T29805] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 741.891017][T29816] FAULT_INJECTION: forcing a failure. [ 741.891017][T29816] name failslab, interval 1, probability 0, space 0, times 0 [ 741.904023][T29816] CPU: 1 UID: 0 PID: 29816 Comm: syz.0.7664 Not tainted syzkaller #0 PREEMPT(full) [ 741.904049][T29816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 741.904061][T29816] Call Trace: [ 741.904068][T29816] [ 741.904077][T29816] dump_stack_lvl+0xe8/0x150 [ 741.904103][T29816] should_fail_ex+0x412/0x560 [ 741.904134][T29816] should_failslab+0xa8/0x100 [ 741.904164][T29816] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 741.904191][T29816] ? __alloc_skb+0x1d0/0x7d0 [ 741.904208][T29816] ? __local_bh_enable_ip+0xd0/0x130 [ 741.904233][T29816] __alloc_skb+0x1d0/0x7d0 [ 741.904257][T29816] netlink_dump+0x1d8/0xe10 [ 741.904279][T29816] ? lockdep_hardirqs_on+0x7a/0x110 [ 741.904298][T29816] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 741.904325][T29816] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 741.904350][T29816] ? __pfx_netlink_dump+0x10/0x10 [ 741.904393][T29816] netlink_recvmsg+0x690/0xa50 [ 741.904425][T29816] ? __pfx_netlink_recvmsg+0x10/0x10 [ 741.904451][T29816] ? __lock_acquire+0x6b5/0x2cf0 [ 741.904479][T29816] ? __pfx_netlink_recvmsg+0x10/0x10 [ 741.904501][T29816] sock_recvmsg_nosec+0x10c/0x140 [ 741.904528][T29816] ____sys_recvmsg+0x3e3/0x4a0 [ 741.904557][T29816] ? __pfx_____sys_recvmsg+0x10/0x10 [ 741.904593][T29816] ? import_iovec+0x73/0xa0 [ 741.904624][T29816] ___sys_recvmsg+0x215/0x590 [ 741.904651][T29816] ? __pfx____sys_recvmsg+0x10/0x10 [ 741.904677][T29816] ? __fget_files+0x2a/0x420 [ 741.904738][T29816] do_recvmmsg+0x334/0x800 [ 741.904769][T29816] ? __pfx_do_recvmmsg+0x10/0x10 [ 741.904804][T29816] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 741.904842][T29816] __x64_sys_recvmmsg+0x198/0x250 [ 741.904866][T29816] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 741.904896][T29816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.904915][T29816] do_syscall_64+0x15f/0xf80 [ 741.904933][T29816] ? trace_irq_disable+0x3b/0x140 [ 741.904962][T29816] ? clear_bhb_loop+0x40/0x90 [ 741.904986][T29816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.905004][T29816] RIP: 0033:0x7f2f29d9ce59 [ 741.905022][T29816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.905038][T29816] RSP: 002b:00007f2f2abec028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 741.905059][T29816] RAX: ffffffffffffffda RBX: 00007f2f2a015fa0 RCX: 00007f2f29d9ce59 [ 741.905073][T29816] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 741.905085][T29816] RBP: 00007f2f2abec090 R08: 0000000000000000 R09: 0000000000000000 [ 741.905097][T29816] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 741.905108][T29816] R13: 00007f2f2a016038 R14: 00007f2f2a015fa0 R15: 00007ffc6270ef38 [ 741.905140][T29816] [ 742.409054][T29831] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7670'. [ 742.520346][T29843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7671'. [ 742.668713][T29851] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7674'. [ 742.688392][T29851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 742.858679][T29866] FAULT_INJECTION: forcing a failure. [ 742.858679][T29866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.873083][T29866] CPU: 0 UID: 0 PID: 29866 Comm: syz.4.7682 Not tainted syzkaller #0 PREEMPT(full) [ 742.873106][T29866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.873118][T29866] Call Trace: [ 742.873125][T29866] [ 742.873133][T29866] dump_stack_lvl+0xe8/0x150 [ 742.873162][T29866] should_fail_ex+0x412/0x560 [ 742.873193][T29866] _copy_from_user+0x2d/0xb0 [ 742.873217][T29866] sctp_getsockopt_peer_addrs+0xef/0x6a0 [ 742.873246][T29866] ? do_raw_spin_lock+0x12b/0x2f0 [ 742.873268][T29866] ? lock_sock_nested+0x6a/0x100 [ 742.873296][T29866] ? __pfx_sctp_getsockopt_peer_addrs+0x10/0x10 [ 742.873334][T29866] ? __local_bh_enable_ip+0xd0/0x130 [ 742.873360][T29866] sctp_getsockopt+0x9be/0xb90 [ 742.873381][T29866] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 742.873408][T29866] do_sock_getsockopt+0x51d/0x7e0 [ 742.873435][T29866] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 742.873474][T29866] ? __fget_files+0x3a0/0x420 [ 742.873496][T29866] ? __fget_files+0x2a/0x420 [ 742.873524][T29866] __x64_sys_getsockopt+0x1a4/0x240 [ 742.873550][T29866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.873571][T29866] do_syscall_64+0x15f/0xf80 [ 742.873590][T29866] ? trace_irq_disable+0x3b/0x140 [ 742.873618][T29866] ? clear_bhb_loop+0x40/0x90 [ 742.873641][T29866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.873660][T29866] RIP: 0033:0x7fdbde59ce59 [ 742.873679][T29866] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.873696][T29866] RSP: 002b:00007fdbdf476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 742.873717][T29866] RAX: ffffffffffffffda RBX: 00007fdbde815fa0 RCX: 00007fdbde59ce59 [ 742.873732][T29866] RDX: 000000000000006c RSI: 0000000000000084 RDI: 0000000000000003 [ 742.873744][T29866] RBP: 00007fdbdf476090 R08: 0000200000000240 R09: 0000000000000000 [ 742.873757][T29866] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 742.873770][T29866] R13: 00007fdbde816038 R14: 00007fdbde815fa0 R15: 00007ffcb74f1aa8 [ 742.873804][T29866] [ 743.150411][T29872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7683'. [ 743.384337][T29881] netlink: 'syz.4.7689': attribute type 5 has an invalid length. [ 743.521802][T29890] FAULT_INJECTION: forcing a failure. [ 743.521802][T29890] name failslab, interval 1, probability 0, space 0, times 0 [ 743.557861][T29893] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 743.569349][T29890] CPU: 1 UID: 0 PID: 29890 Comm: syz.0.7691 Not tainted syzkaller #0 PREEMPT(full) [ 743.569376][T29890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 743.569388][T29890] Call Trace: [ 743.569396][T29890] [ 743.569404][T29890] dump_stack_lvl+0xe8/0x150 [ 743.569431][T29890] should_fail_ex+0x412/0x560 [ 743.569461][T29890] should_failslab+0xa8/0x100 [ 743.569489][T29890] __kvmalloc_node_noprof+0x178/0x8a0 [ 743.569514][T29890] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 743.569536][T29890] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 743.569565][T29890] bpf_test_run_xdp_live+0x223/0x1cf0 [ 743.569583][T29890] ? arch_stack_walk+0xfb/0x150 [ 743.569617][T29890] ? __pfx_stack_trace_save+0x10/0x10 [ 743.569644][T29890] ? stack_depot_save_flags+0x33/0x810 [ 743.569674][T29890] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 743.569693][T29890] ? bpf_test_init+0x9f/0x150 [ 743.569709][T29890] ? bpf_prog_test_run_xdp+0x529/0x1160 [ 743.569727][T29890] ? bpf_prog_test_run+0x2c7/0x340 [ 743.569743][T29890] ? __sys_bpf+0x643/0x950 [ 743.569764][T29890] ? __x64_sys_bpf+0x7c/0x90 [ 743.569823][T29890] ? __might_fault+0xaf/0x130 [ 743.569845][T29890] ? __might_fault+0xaf/0x130 [ 743.569872][T29890] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 743.569899][T29890] ? _copy_from_user+0x94/0xb0 [ 743.569923][T29890] ? bpf_test_init+0x113/0x150 [ 743.569939][T29890] ? xdp_convert_md_to_buff+0x5b/0x330 [ 743.569963][T29890] bpf_prog_test_run_xdp+0x81c/0x1160 [ 743.569998][T29890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 743.570024][T29890] ? __fget_files+0x2a/0x420 [ 743.570051][T29890] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 743.570073][T29890] bpf_prog_test_run+0x2c7/0x340 [ 743.570096][T29890] __sys_bpf+0x643/0x950 [ 743.570122][T29890] ? __pfx___sys_bpf+0x10/0x10 [ 743.570162][T29890] ? ksys_write+0x242/0x270 [ 743.570188][T29890] ? __pfx_ksys_write+0x10/0x10 [ 743.570218][T29890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.570239][T29890] __x64_sys_bpf+0x7c/0x90 [ 743.570266][T29890] do_syscall_64+0x15f/0xf80 [ 743.570284][T29890] ? trace_irq_disable+0x3b/0x140 [ 743.570310][T29890] ? clear_bhb_loop+0x40/0x90 [ 743.570332][T29890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.570351][T29890] RIP: 0033:0x7f2f29d9ce59 [ 743.570368][T29890] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 743.570384][T29890] RSP: 002b:00007f2f2abec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 743.570407][T29890] RAX: ffffffffffffffda RBX: 00007f2f2a015fa0 RCX: 00007f2f29d9ce59 [ 743.570420][T29890] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 743.570432][T29890] RBP: 00007f2f2abec090 R08: 0000000000000000 R09: 0000000000000000 [ 743.570443][T29890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.570454][T29890] R13: 00007f2f2a016038 R14: 00007f2f2a015fa0 R15: 00007ffc6270ef38 [ 743.570484][T29890] [ 744.065208][T29907] netlink: 'syz.3.7695': attribute type 7 has an invalid length. [ 744.137255][T29913] IPVS: stopping backup sync thread 7293 ... [ 744.159540][T29913] batman_adv: batadv0: Adding interface: macvtap0 [ 744.166095][T29913] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 744.197896][T29913] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 744.263515][T29918] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7701'. [ 744.737766][T29949] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.973320][T29966] FAULT_INJECTION: forcing a failure. [ 744.973320][T29966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 745.011387][T29966] CPU: 0 UID: 0 PID: 29966 Comm: syz.2.7716 Not tainted syzkaller #0 PREEMPT(full) [ 745.011422][T29966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 745.011435][T29966] Call Trace: [ 745.011443][T29966] [ 745.011452][T29966] dump_stack_lvl+0xe8/0x150 [ 745.011479][T29966] should_fail_ex+0x412/0x560 [ 745.011510][T29966] _copy_to_user+0x31/0xb0 [ 745.011540][T29966] simple_read_from_buffer+0xe1/0x170 [ 745.011569][T29966] proc_fail_nth_read+0x1bb/0x230 [ 745.011597][T29966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.011624][T29966] ? rw_verify_area+0x2a6/0x4d0 [ 745.011649][T29966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 745.011675][T29966] vfs_read+0x20c/0xa70 [ 745.011706][T29966] ? __pfx___mutex_lock+0x10/0x10 [ 745.011727][T29966] ? __pfx_vfs_read+0x10/0x10 [ 745.011754][T29966] ? __fget_files+0x2a/0x420 [ 745.011785][T29966] ? __fget_files+0x3a0/0x420 [ 745.011805][T29966] ? __fget_files+0x2a/0x420 [ 745.011837][T29966] ksys_read+0x150/0x270 [ 745.011865][T29966] ? __pfx_ksys_read+0x10/0x10 [ 745.011888][T29966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.011917][T29966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.011938][T29966] do_syscall_64+0x15f/0xf80 [ 745.011956][T29966] ? trace_irq_disable+0x3b/0x140 [ 745.011983][T29966] ? clear_bhb_loop+0x40/0x90 [ 745.012007][T29966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.012026][T29966] RIP: 0033:0x7f058935d68e [ 745.012043][T29966] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 745.012059][T29966] RSP: 002b:00007f058a2e1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 745.012078][T29966] RAX: ffffffffffffffda RBX: 00007f058a2e26c0 RCX: 00007f058935d68e [ 745.012089][T29966] RDX: 000000000000000f RSI: 00007f058a2e20a0 RDI: 0000000000000005 [ 745.012099][T29966] RBP: 00007f058a2e2090 R08: 0000000000000000 R09: 0000000000000000 [ 745.012110][T29966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.012119][T29966] R13: 00007f0589616038 R14: 00007f0589615fa0 R15: 00007ffd5c116988 [ 745.012147][T29966] [ 745.597747][T29957] lo speed is unknown, defaulting to 1000 [ 745.615697][T29957] lo speed is unknown, defaulting to 1000 [ 745.629207][T29979] netlink: 'syz.0.7721': attribute type 21 has an invalid length. [ 745.644611][T29979] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7721'. [ 745.663486][T29979] netlink: 'syz.0.7721': attribute type 1 has an invalid length. [ 745.673483][T29981] netlink: 'syz.1.7722': attribute type 1 has an invalid length. [ 745.777537][T29992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7722'. [ 745.836536][T29981] bond13: entered promiscuous mode [ 745.843851][T29981] 8021q: adding VLAN 0 to HW filter on device bond13 [ 746.198391][T30008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 746.251224][T30016] __nla_validate_parse: 1 callbacks suppressed [ 746.251243][T30016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7732'. [ 746.306897][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7733'. [ 746.352907][T30016] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7732'. [ 746.576262][T30030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7737'. [ 746.603222][T30031] netlink: 'syz.2.7738': attribute type 1 has an invalid length. [ 746.705424][T30037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7740'. [ 746.738929][T30037] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7740'. [ 746.778086][T30031] bond14: entered promiscuous mode [ 746.790626][T30031] 8021q: adding VLAN 0 to HW filter on device bond14 [ 746.805263][T30035] bridge0: Device is already in use. [ 746.897516][T30044] FAULT_INJECTION: forcing a failure. [ 746.897516][T30044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 746.950690][T30044] CPU: 1 UID: 0 PID: 30044 Comm: syz.1.7742 Not tainted syzkaller #0 PREEMPT(full) [ 746.950717][T30044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 746.950730][T30044] Call Trace: [ 746.950738][T30044] [ 746.950746][T30044] dump_stack_lvl+0xe8/0x150 [ 746.950775][T30044] should_fail_ex+0x412/0x560 [ 746.950806][T30044] _copy_to_user+0x31/0xb0 [ 746.950837][T30044] simple_read_from_buffer+0xe1/0x170 [ 746.950866][T30044] proc_fail_nth_read+0x1bb/0x230 [ 746.950894][T30044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.950922][T30044] ? rw_verify_area+0x2a6/0x4d0 [ 746.950946][T30044] ? tun_chr_write_iter+0xe0/0x200 [ 746.950968][T30044] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 746.950994][T30044] vfs_read+0x20c/0xa70 [ 746.951025][T30044] ? __pfx___mutex_lock+0x10/0x10 [ 746.951046][T30044] ? __pfx_vfs_read+0x10/0x10 [ 746.951074][T30044] ? __fget_files+0x2a/0x420 [ 746.951099][T30044] ? __fget_files+0x3a0/0x420 [ 746.951119][T30044] ? __fget_files+0x2a/0x420 [ 746.951149][T30044] ksys_read+0x150/0x270 [ 746.951178][T30044] ? __pfx_ksys_read+0x10/0x10 [ 746.951213][T30044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.951234][T30044] do_syscall_64+0x15f/0xf80 [ 746.951252][T30044] ? trace_irq_disable+0x3b/0x140 [ 746.951280][T30044] ? clear_bhb_loop+0x40/0x90 [ 746.951304][T30044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 746.951323][T30044] RIP: 0033:0x7f9ab6d5d68e [ 746.951342][T30044] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 746.951358][T30044] RSP: 002b:00007f9ab7c96fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 746.951379][T30044] RAX: ffffffffffffffda RBX: 00007f9ab7c976c0 RCX: 00007f9ab6d5d68e [ 746.951392][T30044] RDX: 000000000000000f RSI: 00007f9ab7c970a0 RDI: 0000000000000006 [ 746.951403][T30044] RBP: 00007f9ab7c97090 R08: 0000000000000000 R09: 0000000000000000 [ 746.951415][T30044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 746.951426][T30044] R13: 00007f9ab7016128 R14: 00007f9ab7016090 R15: 00007ffd2ecd2a38 [ 746.951458][T30044] [ 747.049908][T30050] netlink: 'syz.3.7743': attribute type 1 has an invalid length. [ 747.177549][ T1315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.188199][T30051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.192162][T30052] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7743'. [ 747.206266][T30052] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7743'. [ 747.215316][T30052] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7743'. [ 747.344542][T30050] 8021q: adding VLAN 0 to HW filter on device bond10 [ 747.359526][T30047] vlan4: entered allmulticast mode [ 747.364914][T30047] bond10: entered allmulticast mode [ 747.521869][T30064] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.7749'. [ 747.559110][T30069] netlink: 'syz.2.7748': attribute type 13 has an invalid length. [ 747.582166][T30069] netlink: 'syz.2.7748': attribute type 17 has an invalid length. [ 747.796491][T30083] netlink: 'syz.0.7754': attribute type 1 has an invalid length. [ 747.821819][T30088] netlink: 'syz.2.7755': attribute type 1 has an invalid length. [ 747.885762][T30083] bond20: entered promiscuous mode [ 747.913385][T30083] 8021q: adding VLAN 0 to HW filter on device bond20 [ 748.227806][T30072] lo speed is unknown, defaulting to 1000 [ 748.257076][T30072] lo speed is unknown, defaulting to 1000 [ 748.377286][T30103] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.118699][T30142] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 749.133230][T30134] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 749.492120][T30147] tc_dump_action: action bad kind [ 749.506985][T30150] syzkaller0: entered promiscuous mode [ 749.520478][T30150] syzkaller0: entered allmulticast mode [ 749.772245][T30170] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 749.989750][T30178] veth1_to_team: entered promiscuous mode [ 750.011410][T30178] veth1_to_team: left promiscuous mode [ 750.093600][T30184] sch_tbf: peakrate 67108864 is lower than or equals to rate 4294966145 ! [ 750.669745][T30216] netlink: 'syz.4.7791': attribute type 13 has an invalid length. [ 750.677174][T30217] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 750.687999][T30216] netlink: 'syz.4.7791': attribute type 11 has an invalid length. [ 750.762638][T30221] netlink: 'syz.3.7792': attribute type 7 has an invalid length. [ 750.769082][T30224] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 750.919451][T30239] netlink: 'syz.4.7800': attribute type 1 has an invalid length. [ 750.977680][T30239] bond15: entered promiscuous mode [ 750.997452][T30239] 8021q: adding VLAN 0 to HW filter on device bond15 [ 751.238255][T30261] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 751.290762][T30261] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 751.361996][T30263] netlink: 'syz.1.7809': attribute type 7 has an invalid length. [ 751.777848][T30301] FAULT_INJECTION: forcing a failure. [ 751.777848][T30301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 751.826076][T30301] CPU: 1 UID: 0 PID: 30301 Comm: syz.2.7826 Not tainted syzkaller #0 PREEMPT(full) [ 751.826102][T30301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 751.826113][T30301] Call Trace: [ 751.826121][T30301] [ 751.826128][T30301] dump_stack_lvl+0xe8/0x150 [ 751.826153][T30301] should_fail_ex+0x412/0x560 [ 751.826181][T30301] _copy_from_iter+0x1d3/0x1670 [ 751.826207][T30301] ? rcu_is_watching+0x15/0xb0 [ 751.826235][T30301] ? __pfx__copy_from_iter+0x10/0x10 [ 751.826268][T30301] ? netlink_sendmsg+0x650/0xb40 [ 751.826288][T30301] ? skb_put+0x11b/0x210 [ 751.826310][T30301] netlink_sendmsg+0x6c0/0xb40 [ 751.826340][T30301] ? __pfx_netlink_sendmsg+0x10/0x10 [ 751.826365][T30301] ? aa_sock_msg_perm+0xf1/0x1b0 [ 751.826392][T30301] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 751.826421][T30301] ____sys_sendmsg+0x972/0x9f0 [ 751.826440][T30301] ? __might_fault+0xaf/0x130 [ 751.826466][T30301] ? __pfx_____sys_sendmsg+0x10/0x10 [ 751.826497][T30301] ? import_iovec+0x73/0xa0 [ 751.826526][T30301] ___sys_sendmsg+0x2a5/0x360 [ 751.826544][T30301] ? __lock_acquire+0x6b5/0x2cf0 [ 751.826568][T30301] ? __pfx____sys_sendmsg+0x10/0x10 [ 751.826622][T30301] ? __fget_files+0x2a/0x420 [ 751.826644][T30301] ? __fget_files+0x3a0/0x420 [ 751.826676][T30301] __x64_sys_sendmsg+0x1bd/0x2a0 [ 751.826699][T30301] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 751.826728][T30301] ? __pfx_ksys_write+0x10/0x10 [ 751.826763][T30301] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.826783][T30301] do_syscall_64+0x15f/0xf80 [ 751.826802][T30301] ? trace_irq_disable+0x3b/0x140 [ 751.826827][T30301] ? clear_bhb_loop+0x40/0x90 [ 751.826849][T30301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.826867][T30301] RIP: 0033:0x7f058939ce59 [ 751.826886][T30301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.826902][T30301] RSP: 002b:00007f058a2e2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 751.826922][T30301] RAX: ffffffffffffffda RBX: 00007f0589615fa0 RCX: 00007f058939ce59 [ 751.826935][T30301] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 751.826947][T30301] RBP: 00007f058a2e2090 R08: 0000000000000000 R09: 0000000000000000 [ 751.826958][T30301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 751.826969][T30301] R13: 00007f0589616038 R14: 00007f0589615fa0 R15: 00007ffd5c116988 [ 751.826999][T30301] [ 751.829174][T30304] __nla_validate_parse: 15 callbacks suppressed [ 751.829191][T30304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7825'. [ 752.007643][T30314] hma(kX: entered promiscuous mode [ 752.120173][T30316] ip6tnl3: entered allmulticast mode [ 752.231328][T30308] netlink: 'syz.3.7827': attribute type 7 has an invalid length. [ 752.323572][ T725] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.343650][ T725] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.351584][T11715] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.562150][T30331] syzkaller1: entered promiscuous mode [ 752.574061][T30331] syzkaller1: entered allmulticast mode [ 752.608399][T30341] batman_adv: batadv0: Adding interface: macvtap2 [ 752.615169][T30341] batman_adv: batadv0: The MTU of interface macvtap2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 752.642021][T30341] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 752.684207][ T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.771393][T30348] netlink: 'syz.3.7842': attribute type 21 has an invalid length. [ 752.854247][ T24] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 752.922288][T30351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7843'. [ 752.923262][T30338] lo speed is unknown, defaulting to 1000 [ 752.949803][T30338] lo speed is unknown, defaulting to 1000 [ 753.026195][T30360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7846'. [ 753.186972][T30369] FAULT_INJECTION: forcing a failure. [ 753.186972][T30369] name failslab, interval 1, probability 0, space 0, times 0 [ 753.207318][T30369] CPU: 0 UID: 0 PID: 30369 Comm: syz.0.7851 Not tainted syzkaller #0 PREEMPT(full) [ 753.207344][T30369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 753.207357][T30369] Call Trace: [ 753.207365][T30369] [ 753.207373][T30369] dump_stack_lvl+0xe8/0x150 [ 753.207400][T30369] should_fail_ex+0x412/0x560 [ 753.207432][T30369] should_failslab+0xa8/0x100 [ 753.207462][T30369] __kmalloc_cache_noprof+0x88/0x660 [ 753.207490][T30369] ? netlbl_mgmt_add_common+0x57/0x13b0 [ 753.207517][T30369] netlbl_mgmt_add_common+0x57/0x13b0 [ 753.207547][T30369] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 753.207578][T30369] netlbl_mgmt_adddef+0x28f/0x330 [ 753.207601][T30369] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 753.207626][T30369] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 753.207652][T30369] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 753.207687][T30369] genl_family_rcv_msg_doit+0x22a/0x330 [ 753.207720][T30369] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 753.207760][T30369] ? bpf_lsm_capable+0x9/0x20 [ 753.207779][T30369] ? security_capable+0x7e/0x2c0 [ 753.207809][T30369] genl_rcv_msg+0x61c/0x7a0 [ 753.207848][T30369] ? __pfx_genl_rcv_msg+0x10/0x10 [ 753.207872][T30369] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 753.207908][T30369] netlink_rcv_skb+0x232/0x4b0 [ 753.207930][T30369] ? __pfx_genl_rcv_msg+0x10/0x10 [ 753.207961][T30369] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 753.208000][T30369] ? down_read+0x270/0x2e0 [ 753.208019][T30369] ? genl_rcv+0xd/0x40 [ 753.208045][T30369] genl_rcv+0x28/0x40 [ 753.208068][T30369] netlink_unicast+0x75c/0x8e0 [ 753.208098][T30369] netlink_sendmsg+0x813/0xb40 [ 753.208130][T30369] ? __pfx_netlink_sendmsg+0x10/0x10 [ 753.208155][T30369] ? aa_sock_msg_perm+0xf1/0x1b0 [ 753.208181][T30369] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 753.208210][T30369] ____sys_sendmsg+0x972/0x9f0 [ 753.208231][T30369] ? __might_fault+0xaf/0x130 [ 753.208263][T30369] ? __pfx_____sys_sendmsg+0x10/0x10 [ 753.208294][T30369] ? import_iovec+0x73/0xa0 [ 753.208326][T30369] ___sys_sendmsg+0x2a5/0x360 [ 753.208345][T30369] ? __lock_acquire+0x6b5/0x2cf0 [ 753.208370][T30369] ? __pfx____sys_sendmsg+0x10/0x10 [ 753.208428][T30369] ? __fget_files+0x2a/0x420 [ 753.208449][T30369] ? __fget_files+0x3a0/0x420 [ 753.208483][T30369] __x64_sys_sendmsg+0x1bd/0x2a0 [ 753.208507][T30369] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 753.208539][T30369] ? __pfx_ksys_write+0x10/0x10 [ 753.208575][T30369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.208594][T30369] do_syscall_64+0x15f/0xf80 [ 753.208612][T30369] ? trace_irq_disable+0x3b/0x140 [ 753.208637][T30369] ? clear_bhb_loop+0x40/0x90 [ 753.208659][T30369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.208676][T30369] RIP: 0033:0x7f2f29d9ce59 [ 753.208695][T30369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 753.208711][T30369] RSP: 002b:00007f2f2abec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 753.208731][T30369] RAX: ffffffffffffffda RBX: 00007f2f2a015fa0 RCX: 00007f2f29d9ce59 [ 753.208745][T30369] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000000000000004 [ 753.208757][T30369] RBP: 00007f2f2abec090 R08: 0000000000000000 R09: 0000000000000000 [ 753.208769][T30369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.208780][T30369] R13: 00007f2f2a016038 R14: 00007f2f2a015fa0 R15: 00007ffc6270ef38 [ 753.208813][T30369] [ 753.598846][T30371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.616034][T30372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 753.635813][T30377] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7852'. [ 753.778530][T30380] netlink: 'syz.0.7854': attribute type 1 has an invalid length. [ 753.897098][T30393] 5n: entered promiscuous mode [ 753.926828][T30400] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7858'. [ 753.928071][T30399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.182644][T30410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7859'. [ 754.526889][T30410] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 754.620601][T30436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.647999][T30431] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7866'. [ 754.809420][T30429] syzkaller0: entered promiscuous mode [ 754.815170][T30429] syzkaller0: entered allmulticast mode [ 754.852952][T30440] syzkaller0: entered promiscuous mode [ 754.871745][T30440] syzkaller0: entered allmulticast mode [ 756.744669][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 757.141102][T30452] sctp: [Deprecated]: syz.1.7873 (pid 30452) Use of int in max_burst socket option. [ 757.141102][T30452] Use struct sctp_assoc_value instead [ 757.213466][T30452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.228932][T30457] netlink: 'syz.3.7875': attribute type 10 has an invalid length. [ 757.239138][T30457] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7875'. [ 757.278609][T30456] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 757.365459][T30461] netlink: 'syz.0.7877': attribute type 21 has an invalid length. [ 757.390214][T30461] netlink: 'syz.0.7877': attribute type 15 has an invalid length. [ 757.403628][T30461] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7877'. [ 757.573231][T30477] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 757.618215][T30480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7883'. [ 758.252862][T30505] netlink: 'syz.4.7889': attribute type 10 has an invalid length. [ 758.286245][T30510] batman_adv: batadv0: Adding interface: macvtap3 [ 758.315761][T30510] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.369031][T30510] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 758.429713][T30521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.517768][T30523] batman_adv: batadv0: Adding interface: macvtap4 [ 758.524962][T30523] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.551784][T30523] batman_adv: batadv0: Not using interface macvtap4 (retrying later): interface not active [ 758.596665][T30527] netlink: 'syz.3.7898': attribute type 1 has an invalid length. [ 758.652159][T30536] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7900'. [ 758.655517][T30535] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7898'. [ 758.708750][T30539] netlink: 'syz.0.7901': attribute type 1 has an invalid length. [ 758.724174][T30527] bond11: entered promiscuous mode [ 758.731588][T30527] 8021q: adding VLAN 0 to HW filter on device bond11 [ 758.810759][T30547] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.869570][T30550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7905'. [ 758.879996][T30550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7905'. [ 758.902317][T30547] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.924173][T30554] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7907'. [ 759.007205][T30552] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.046160][T30552] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 759.057891][T30552] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 759.094687][T30552] bond8: left promiscuous mode [ 759.107064][T30552] bond9: left promiscuous mode [ 759.127496][T30552] bond11: left promiscuous mode [ 759.134657][T30552] bond12: left promiscuous mode [ 759.146815][T30552] bond13: left promiscuous mode [ 759.164432][T30547] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.252968][T30547] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.389303][T30568] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 759.498446][T30573] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20002 [ 759.511836][ T6540] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.537829][ T6540] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.602148][ T6540] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.679300][ T6540] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.781338][T30581] netlink: 'syz.0.7914': attribute type 10 has an invalid length. [ 759.792189][T30581] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7914'. [ 759.986059][T30585] syzkaller1: entered promiscuous mode [ 759.993217][T30585] syzkaller1: entered allmulticast mode [ 760.005152][T30586] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7915'. [ 760.050733][T30588] netlink: 'syz.4.7917': attribute type 21 has an invalid length. [ 760.117265][T30591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 760.276581][T30597] netlink: 'syz.4.7919': attribute type 13 has an invalid length. [ 760.302164][T30597] netlink: 'syz.4.7919': attribute type 17 has an invalid length. [ 760.436477][ T9] lo speed is unknown, defaulting to 1000 [ 760.479187][T30597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.489453][T30608] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 760.502009][T30597] dummy0: left promiscuous mode [ 760.547409][T30597] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 760.558390][T30597] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 760.573785][T30597] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 760.608660][ T24] lo speed is unknown, defaulting to 1000 [ 760.617821][ T9] lo speed is unknown, defaulting to 1000 [ 761.169411][T30634] 8021q: adding VLAN 0 to HW filter on device bond21 [ 761.551174][T30660] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.878557][T30641] bond21: (slave veth27): Enslaving as an active interface with a down link [ 761.901725][T30634] dummy0: entered promiscuous mode [ 761.945376][T30634] team0: Port device dummy0 removed [ 762.269772][T30685] __nla_validate_parse: 6 callbacks suppressed [ 762.269791][T30685] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7936'. [ 762.328577][T30686] validate_nla: 5 callbacks suppressed [ 762.328594][T30686] netlink: 'syz.0.7937': attribute type 7 has an invalid length. [ 762.479779][T30695] team0: Device vlan5 is already an upper device of the team interface [ 762.685987][T30705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7946'. [ 762.707334][T30707] IPVS: stopping backup sync thread 6705 ... [ 762.726227][T30705] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7946'. [ 762.749150][T30705] netlink: 84 bytes leftover after parsing attributes in process `syz.3.7946'. [ 762.780528][T30705] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 762.828800][T30707] batman_adv: batadv0: Adding interface: macvtap1 [ 762.842681][T30712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 762.855318][T30707] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 763.031699][T30717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.087127][T30720] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 763.113610][T30719] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7952'. [ 763.153542][T30719] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7952'. [ 764.021547][T30758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7961'. [ 764.049311][T30758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7961'. [ 764.074385][T30756] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 764.200256][T30768] FAULT_INJECTION: forcing a failure. [ 764.200256][T30768] name failslab, interval 1, probability 0, space 0, times 0 [ 764.315683][T30768] CPU: 0 UID: 0 PID: 30768 Comm: syz.1.7962 Not tainted syzkaller #0 PREEMPT(full) [ 764.315711][T30768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.315725][T30768] Call Trace: [ 764.315732][T30768] [ 764.315742][T30768] dump_stack_lvl+0xe8/0x150 [ 764.315770][T30768] should_fail_ex+0x412/0x560 [ 764.315801][T30768] should_failslab+0xa8/0x100 [ 764.315832][T30768] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 764.315860][T30768] ? __get_vm_area_node+0x13f/0x300 [ 764.315889][T30768] __get_vm_area_node+0x13f/0x300 [ 764.315918][T30768] __vmalloc_node_range_noprof+0x36a/0x1750 [ 764.315943][T30768] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 764.315964][T30768] ? kasan_save_track+0x3e/0x80 [ 764.315988][T30768] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 764.316013][T30768] ? kmemdup_noprof+0x2b/0x70 [ 764.316030][T30768] ? tcf_bpf_init_from_ops+0x17d/0x350 [ 764.316049][T30768] ? tcf_bpf_init+0x49f/0x960 [ 764.316065][T30768] ? tcf_action_init_1+0x4ba/0x740 [ 764.316088][T30768] ? tcf_action_init+0x31e/0xb40 [ 764.316112][T30768] ? rtnetlink_rcv_msg+0x77e/0xbe0 [ 764.316138][T30768] ? netlink_sendmsg+0x813/0xb40 [ 764.316178][T30768] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 764.316218][T30768] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 764.316235][T30768] __vmalloc_noprof+0xd2/0x120 [ 764.316259][T30768] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 764.316281][T30768] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 764.316305][T30768] bpf_prog_alloc+0x3c/0x1a0 [ 764.316325][T30768] bpf_prog_create+0x9e/0x200 [ 764.316352][T30768] tcf_bpf_init_from_ops+0x1a8/0x350 [ 764.316376][T30768] ? __pfx_tcf_bpf_init_from_ops+0x10/0x10 [ 764.316398][T30768] ? tcf_idr_create+0x4b7/0x6b0 [ 764.316430][T30768] tcf_bpf_init+0x49f/0x960 [ 764.316458][T30768] ? __pfx_tcf_bpf_init+0x10/0x10 [ 764.316493][T30768] ? nla_memcpy+0x5b/0xc0 [ 764.316520][T30768] tcf_action_init_1+0x4ba/0x740 [ 764.316559][T30768] ? __pfx_tcf_action_init_1+0x10/0x10 [ 764.316583][T30768] ? _raw_read_unlock+0x28/0x50 [ 764.316609][T30768] ? tc_action_load_ops+0x247/0x540 [ 764.316655][T30768] ? __nla_parse+0x40/0x60 [ 764.316685][T30768] tcf_action_init+0x31e/0xb40 [ 764.316718][T30768] ? lapic_next_event+0x11/0x20 [ 764.316744][T30768] ? __pfx_tcf_action_init+0x10/0x10 [ 764.316794][T30768] ? __pfx___nla_validate_parse+0x10/0x10 [ 764.316855][T30768] tc_ctl_action+0x43b/0xc70 [ 764.316891][T30768] ? __pfx_tc_ctl_action+0x10/0x10 [ 764.316924][T30768] ? trace_contention_end+0x3d/0x140 [ 764.316986][T30768] ? __pfx_tc_ctl_action+0x10/0x10 [ 764.317010][T30768] rtnetlink_rcv_msg+0x77e/0xbe0 [ 764.317035][T30768] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 764.317060][T30768] ? netlink_sendmsg+0x5d4/0xb40 [ 764.317083][T30768] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 764.317110][T30768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.317139][T30768] ? __lock_acquire+0x6b5/0x2cf0 [ 764.317174][T30768] netlink_rcv_skb+0x232/0x4b0 [ 764.317196][T30768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.317224][T30768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.317258][T30768] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.317278][T30768] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.317305][T30768] netlink_unicast+0x75c/0x8e0 [ 764.317337][T30768] netlink_sendmsg+0x813/0xb40 [ 764.317369][T30768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.317394][T30768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 764.317421][T30768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.317449][T30768] ____sys_sendmsg+0x972/0x9f0 [ 764.317471][T30768] ? __might_fault+0xaf/0x130 [ 764.317502][T30768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.317532][T30768] ? import_iovec+0x73/0xa0 [ 764.317570][T30768] ___sys_sendmsg+0x2a5/0x360 [ 764.317591][T30768] ? __lock_acquire+0x6b5/0x2cf0 [ 764.317616][T30768] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.317675][T30768] ? __fget_files+0x2a/0x420 [ 764.317697][T30768] ? __fget_files+0x3a0/0x420 [ 764.317730][T30768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 764.317754][T30768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.317785][T30768] ? __pfx_ksys_write+0x10/0x10 [ 764.317821][T30768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.317842][T30768] do_syscall_64+0x15f/0xf80 [ 764.317860][T30768] ? trace_irq_disable+0x3b/0x140 [ 764.317887][T30768] ? clear_bhb_loop+0x40/0x90 [ 764.317910][T30768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.317929][T30768] RIP: 0033:0x7f9ab6d9ce59 [ 764.317949][T30768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.317964][T30768] RSP: 002b:00007f9ab7cb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.317984][T30768] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9ce59 [ 764.317998][T30768] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 764.318010][T30768] RBP: 00007f9ab7cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 764.318023][T30768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.318034][T30768] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffd2ecd2a38 [ 764.318068][T30768] [ 764.907825][T30768] syz.1.7962: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 764.975100][T30770] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7963'. [ 764.984082][T30768] CPU: 0 UID: 0 PID: 30768 Comm: syz.1.7962 Not tainted syzkaller #0 PREEMPT(full) [ 764.984107][T30768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 764.984119][T30768] Call Trace: [ 764.984128][T30768] [ 764.984135][T30768] dump_stack_lvl+0xe8/0x150 [ 764.984160][T30768] warn_alloc+0x249/0x340 [ 764.984192][T30768] ? __pfx_warn_alloc+0x10/0x10 [ 764.984217][T30768] ? __get_vm_area_node+0x13f/0x300 [ 764.984245][T30768] ? __get_vm_area_node+0x2b5/0x300 [ 764.984275][T30768] __vmalloc_node_range_noprof+0x38f/0x1750 [ 764.984302][T30768] ? kasan_save_track+0x3e/0x80 [ 764.984325][T30768] ? __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 764.984350][T30768] ? kmemdup_noprof+0x2b/0x70 [ 764.984366][T30768] ? tcf_bpf_init_from_ops+0x17d/0x350 [ 764.984384][T30768] ? tcf_bpf_init+0x49f/0x960 [ 764.984400][T30768] ? tcf_action_init_1+0x4ba/0x740 [ 764.984421][T30768] ? tcf_action_init+0x31e/0xb40 [ 764.984444][T30768] ? rtnetlink_rcv_msg+0x77e/0xbe0 [ 764.984480][T30768] ? netlink_sendmsg+0x813/0xb40 [ 764.984517][T30768] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 764.984553][T30768] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 764.984569][T30768] __vmalloc_noprof+0xd2/0x120 [ 764.984592][T30768] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 764.984611][T30768] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 764.984633][T30768] bpf_prog_alloc+0x3c/0x1a0 [ 764.984655][T30768] bpf_prog_create+0x9e/0x200 [ 764.984683][T30768] tcf_bpf_init_from_ops+0x1a8/0x350 [ 764.984705][T30768] ? __pfx_tcf_bpf_init_from_ops+0x10/0x10 [ 764.984728][T30768] ? tcf_idr_create+0x4b7/0x6b0 [ 764.984760][T30768] tcf_bpf_init+0x49f/0x960 [ 764.984792][T30768] ? __pfx_tcf_bpf_init+0x10/0x10 [ 764.984825][T30768] ? nla_memcpy+0x5b/0xc0 [ 764.984850][T30768] tcf_action_init_1+0x4ba/0x740 [ 764.984881][T30768] ? __pfx_tcf_action_init_1+0x10/0x10 [ 764.984904][T30768] ? _raw_read_unlock+0x28/0x50 [ 764.984928][T30768] ? tc_action_load_ops+0x247/0x540 [ 764.984973][T30768] ? __nla_parse+0x40/0x60 [ 764.985002][T30768] tcf_action_init+0x31e/0xb40 [ 764.985031][T30768] ? lapic_next_event+0x11/0x20 [ 764.985056][T30768] ? __pfx_tcf_action_init+0x10/0x10 [ 764.985108][T30768] ? __pfx___nla_validate_parse+0x10/0x10 [ 764.985170][T30768] tc_ctl_action+0x43b/0xc70 [ 764.985207][T30768] ? __pfx_tc_ctl_action+0x10/0x10 [ 764.985238][T30768] ? trace_contention_end+0x3d/0x140 [ 764.985304][T30768] ? __pfx_tc_ctl_action+0x10/0x10 [ 764.985329][T30768] rtnetlink_rcv_msg+0x77e/0xbe0 [ 764.985354][T30768] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 764.985377][T30768] ? netlink_sendmsg+0x5d4/0xb40 [ 764.985399][T30768] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 764.985424][T30768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.985459][T30768] ? __lock_acquire+0x6b5/0x2cf0 [ 764.985492][T30768] netlink_rcv_skb+0x232/0x4b0 [ 764.985513][T30768] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 764.985541][T30768] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 764.985574][T30768] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.985593][T30768] ? netlink_deliver_tap+0x2e/0x1b0 [ 764.985618][T30768] netlink_unicast+0x75c/0x8e0 [ 764.985647][T30768] netlink_sendmsg+0x813/0xb40 [ 764.985676][T30768] ? __pfx_netlink_sendmsg+0x10/0x10 [ 764.985700][T30768] ? aa_sock_msg_perm+0xf1/0x1b0 [ 764.985726][T30768] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 764.985754][T30768] ____sys_sendmsg+0x972/0x9f0 [ 764.985774][T30768] ? __might_fault+0xaf/0x130 [ 764.985804][T30768] ? __pfx_____sys_sendmsg+0x10/0x10 [ 764.985833][T30768] ? import_iovec+0x73/0xa0 [ 764.985863][T30768] ___sys_sendmsg+0x2a5/0x360 [ 764.985881][T30768] ? __lock_acquire+0x6b5/0x2cf0 [ 764.985906][T30768] ? __pfx____sys_sendmsg+0x10/0x10 [ 764.985960][T30768] ? __fget_files+0x2a/0x420 [ 764.985981][T30768] ? __fget_files+0x3a0/0x420 [ 764.986013][T30768] __x64_sys_sendmsg+0x1bd/0x2a0 [ 764.986036][T30768] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 764.986065][T30768] ? __pfx_ksys_write+0x10/0x10 [ 764.986099][T30768] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.986119][T30768] do_syscall_64+0x15f/0xf80 [ 764.986135][T30768] ? trace_irq_disable+0x3b/0x140 [ 764.986161][T30768] ? clear_bhb_loop+0x40/0x90 [ 764.986183][T30768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.986202][T30768] RIP: 0033:0x7f9ab6d9ce59 [ 764.986220][T30768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.986235][T30768] RSP: 002b:00007f9ab7cb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 764.986255][T30768] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9ce59 [ 764.986268][T30768] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 764.986280][T30768] RBP: 00007f9ab7cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 764.986291][T30768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 764.986302][T30768] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffd2ecd2a38 [ 764.986333][T30768] [ 764.986382][T30768] Mem-Info: [ 765.162806][T30786] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 765.167582][T30768] active_anon:5566 inactive_anon:5 isolated_anon:0 [ 765.167582][T30768] active_file:5054 inactive_file:40613 isolated_file:0 [ 765.167582][T30768] unevictable:768 dirty:408 writeback:0 [ 765.167582][T30768] slab_reclaimable:16076 slab_unreclaimable:229088 [ 765.167582][T30768] mapped:31609 shmem:1286 pagetables:1367 [ 765.167582][T30768] sec_pagetables:0 bounce:0 [ 765.167582][T30768] kernel_misc_reclaimable:0 [ 765.167582][T30768] free:1182891 free_pcp:11340 free_cma:0 [ 765.167646][T30768] Node 0 active_anon:22264kB inactive_anon:20kB active_file:20216kB inactive_file:162244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126436kB dirty:1632kB writeback:0kB shmem:3608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16012kB pagetables:5336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 765.338390][T30790] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7968'. [ 765.347192][T30768] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 765.604742][T30768] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 765.635098][T30768] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 765.640893][T30768] Node 0 DMA32 free:781000kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22264kB inactive_anon:20kB active_file:20216kB inactive_file:162244kB unevictable:1536kB writepending:1632kB zspages:0kB present:3129332kB managed:2552360kB mlocked:0kB bounce:0kB free_pcp:39348kB local_pcp:18008kB free_cma:0kB [ 765.681979][T30768] lowmem_reserve[]: 0 0 0 0 0 [ 765.687488][T30768] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 765.717560][T30768] lowmem_reserve[]: 0 0 0 0 0 [ 765.722313][T30768] Node 1 Normal free:3935204kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6548kB local_pcp:0kB free_cma:0kB [ 765.754991][T30768] lowmem_reserve[]: 0 0 0 0 0 [ 765.759724][T30768] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 765.772359][T30768] Node 0 DMA32: 4691*4kB (UME) 4932*8kB (UME) 2940*16kB (UME) 297*32kB (UME) 101*64kB (UME) 121*128kB (UME) 234*256kB (UM) 102*512kB (UM) 136*1024kB (UME) 78*2048kB (UME) 57*4096kB (UM) = 781324kB [ 765.795239][T30768] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 765.807014][T30768] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 1*16kB (M) 2*32kB (UM) 2*64kB (UM) 2*128kB (UM) 2*256kB (M) 2*512kB (M) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3935204kB [ 765.823264][T30768] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.833079][T30768] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 765.842449][T30768] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 765.852051][T30768] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 765.861480][T30768] 46949 total pagecache pages [ 765.866526][T30768] 0 pages in swap cache [ 765.870687][T30768] Free swap = 124996kB [ 765.875252][T30768] Total swap = 124996kB [ 765.879425][T30768] 2097051 pages RAM [ 765.883227][T30768] 0 pages HighMem/MovableOnly [ 765.887977][T30768] 427181 pages reserved [ 765.892127][T30768] 0 pages cma reserved [ 766.217658][T30810] netlink: 'syz.0.7970': attribute type 10 has an invalid length. [ 766.277064][T30809] IPVS: Unknown mcast interface: veth0_to_bond [ 767.104679][T30838] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 767.566660][T30867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.658576][T30886] netlink: 'syz.2.7989': attribute type 13 has an invalid length. [ 769.689086][T30886] netlink: 'syz.2.7989': attribute type 17 has an invalid length. [ 769.842960][T30895] FAULT_INJECTION: forcing a failure. [ 769.842960][T30895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.909516][T30895] CPU: 0 UID: 0 PID: 30895 Comm: syz.0.7993 Not tainted syzkaller #0 PREEMPT(full) [ 769.909543][T30895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 769.909555][T30895] Call Trace: [ 769.909563][T30895] [ 769.909571][T30895] dump_stack_lvl+0xe8/0x150 [ 769.909601][T30895] should_fail_ex+0x412/0x560 [ 769.909632][T30895] _copy_to_user+0x31/0xb0 [ 769.909662][T30895] bpf_test_finish+0x53c/0x6b0 [ 769.909690][T30895] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 769.909715][T30895] ? __pfx_bpf_test_finish+0x10/0x10 [ 769.909749][T30895] ? _copy_from_user+0x94/0xb0 [ 769.909776][T30895] ? bpf_test_init+0x113/0x150 [ 769.909798][T30895] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 769.909837][T30895] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 769.909864][T30895] ? __fget_files+0x2a/0x420 [ 769.909892][T30895] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 769.909914][T30895] bpf_prog_test_run+0x2c7/0x340 [ 769.909939][T30895] __sys_bpf+0x643/0x950 [ 769.909968][T30895] ? __pfx___sys_bpf+0x10/0x10 [ 769.910016][T30895] ? ksys_write+0x242/0x270 [ 769.910044][T30895] ? __pfx_ksys_write+0x10/0x10 [ 769.910074][T30895] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.910094][T30895] __x64_sys_bpf+0x7c/0x90 [ 769.910117][T30895] do_syscall_64+0x15f/0xf80 [ 769.910134][T30895] ? trace_irq_disable+0x3b/0x140 [ 769.910159][T30895] ? clear_bhb_loop+0x40/0x90 [ 769.910179][T30895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.910196][T30895] RIP: 0033:0x7f2f29d9ce59 [ 769.910213][T30895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.910229][T30895] RSP: 002b:00007f2f2abec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 769.910248][T30895] RAX: ffffffffffffffda RBX: 00007f2f2a015fa0 RCX: 00007f2f29d9ce59 [ 769.910260][T30895] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 000000000000000a [ 769.910270][T30895] RBP: 00007f2f2abec090 R08: 0000000000000000 R09: 0000000000000000 [ 769.910281][T30895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 769.910292][T30895] R13: 00007f2f2a016038 R14: 00007f2f2a015fa0 R15: 00007ffc6270ef38 [ 769.910322][T30895] [ 770.477948][T30918] __nla_validate_parse: 3 callbacks suppressed [ 770.477976][T30918] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7998'. [ 770.529402][T30918] netlink: 'syz.2.7998': attribute type 1 has an invalid length. [ 770.551117][T30918] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7998'. [ 770.572760][T30918] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7998'. [ 770.624742][T30918] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7998'. [ 771.043876][T30941] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.092434][T30957] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8006'. [ 771.103092][T30957] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8006'. [ 771.310949][T30968] FAULT_INJECTION: forcing a failure. [ 771.310949][T30968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.350848][T30972] syzkaller0: entered promiscuous mode [ 771.357968][T30972] syzkaller0: entered allmulticast mode [ 771.363659][T30968] CPU: 1 UID: 0 PID: 30968 Comm: syz.1.8011 Not tainted syzkaller #0 PREEMPT(full) [ 771.363684][T30968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 771.363696][T30968] Call Trace: [ 771.363704][T30968] [ 771.363713][T30968] dump_stack_lvl+0xe8/0x150 [ 771.363740][T30968] should_fail_ex+0x412/0x560 [ 771.363771][T30968] _copy_from_iter+0x1d3/0x1670 [ 771.363801][T30968] ? rcu_is_watching+0x15/0xb0 [ 771.363829][T30968] ? __pfx__copy_from_iter+0x10/0x10 [ 771.363862][T30968] ? netlink_sendmsg+0x650/0xb40 [ 771.363882][T30968] ? skb_put+0x11b/0x210 [ 771.363908][T30968] netlink_sendmsg+0x6c0/0xb40 [ 771.363936][T30968] ? __pfx_netlink_sendmsg+0x10/0x10 [ 771.363959][T30968] ? aa_sock_msg_perm+0xf1/0x1b0 [ 771.363985][T30968] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 771.364014][T30968] ____sys_sendmsg+0x972/0x9f0 [ 771.364034][T30968] ? __might_fault+0xaf/0x130 [ 771.364065][T30968] ? __pfx_____sys_sendmsg+0x10/0x10 [ 771.364102][T30968] ? import_iovec+0x73/0xa0 [ 771.364132][T30968] ___sys_sendmsg+0x2a5/0x360 [ 771.364151][T30968] ? __lock_acquire+0x6b5/0x2cf0 [ 771.364176][T30968] ? __pfx____sys_sendmsg+0x10/0x10 [ 771.364232][T30968] ? __fget_files+0x2a/0x420 [ 771.364253][T30968] ? __fget_files+0x3a0/0x420 [ 771.364285][T30968] __x64_sys_sendmsg+0x1bd/0x2a0 [ 771.364309][T30968] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 771.364340][T30968] ? __pfx_ksys_write+0x10/0x10 [ 771.364373][T30968] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.364393][T30968] do_syscall_64+0x15f/0xf80 [ 771.364411][T30968] ? trace_irq_disable+0x3b/0x140 [ 771.364438][T30968] ? clear_bhb_loop+0x40/0x90 [ 771.364462][T30968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.364480][T30968] RIP: 0033:0x7f9ab6d9ce59 [ 771.364498][T30968] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 771.364514][T30968] RSP: 002b:00007f9ab7cb8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 771.364535][T30968] RAX: ffffffffffffffda RBX: 00007f9ab7015fa0 RCX: 00007f9ab6d9ce59 [ 771.364549][T30968] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000000000000004 [ 771.364561][T30968] RBP: 00007f9ab7cb8090 R08: 0000000000000000 R09: 0000000000000000 [ 771.364573][T30968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 771.364585][T30968] R13: 00007f9ab7016038 R14: 00007f9ab7015fa0 R15: 00007ffd2ecd2a38 [ 771.364616][T30968] [ 771.740891][T30979] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8014'. [ 771.864121][T30979] hsr_slave_0: left promiscuous mode [ 771.870855][T30979] hsr_slave_1: left promiscuous mode [ 771.890558][T30963] lo speed is unknown, defaulting to 1000 [ 771.911930][T30981] netlink: 'syz.1.8015': attribute type 10 has an invalid length. [ 771.916216][T30963] lo speed is unknown, defaulting to 1000 [ 771.920076][T30981] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8015'. [ 772.081720][T30990] netlink: 'syz.0.8018': attribute type 10 has an invalid length. [ 772.093699][T30990] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8018'. [ 772.218673][T30996] netlink: 'syz.0.8021': attribute type 5 has an invalid length. [ 772.268164][T30998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8019'. [ 772.364424][T30998] 8021q: adding VLAN 0 to HW filter on device bond15 [ 772.746021][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 772.982397][T31029] bridge0: port 3(syz_tun) entered blocking state [ 773.003091][T31029] bridge0: port 3(syz_tun) entered disabled state [ 773.022925][T31029] syz_tun: entered allmulticast mode [ 773.077823][T31029] syz_tun: entered promiscuous mode [ 773.159726][T31029] bridge0: port 3(syz_tun) entered blocking state [ 773.166496][T31029] bridge0: port 3(syz_tun) entered forwarding state [ 773.202614][T31006] lo speed is unknown, defaulting to 1000 [ 773.253736][T31006] lo speed is unknown, defaulting to 1000 [ 774.403414][T31050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 774.415296][T31050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.477674][T11715] lo speed is unknown, defaulting to 1000 [ 774.495493][T11715] syz2: Port: 1 Link DOWN [ 774.535702][ T1176] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.563219][ T1176] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.793603][T31061] tipc: Resetting bearer [ 774.822956][ T1176] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.845782][ T5702] syz0: Port: 1 Link DOWN [ 774.849928][ T1176] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.867259][ T1176] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.888494][ T1176] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.917044][ T1176] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.940801][ T1176] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 775.107325][T31070] FAULT_INJECTION: forcing a failure. [ 775.107325][T31070] name failslab, interval 1, probability 0, space 0, times 0 [ 775.120284][T31070] CPU: 0 UID: 0 PID: 31070 Comm: syz.4.8042 Not tainted syzkaller #0 PREEMPT(full) [ 775.120311][T31070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 775.120324][T31070] Call Trace: [ 775.120332][T31070] [ 775.120341][T31070] dump_stack_lvl+0xe8/0x150 [ 775.120368][T31070] should_fail_ex+0x412/0x560 [ 775.120399][T31070] should_failslab+0xa8/0x100 [ 775.120429][T31070] __kmalloc_noprof+0xe8/0x760 [ 775.120456][T31070] ? rfcomm_dev_ioctl+0x48a/0x21d0 [ 775.120481][T31070] ? __might_fault+0xaf/0x130 [ 775.120509][T31070] rfcomm_dev_ioctl+0x48a/0x21d0 [ 775.120542][T31070] ? kasan_quarantine_put+0xbb/0x1f0 [ 775.120573][T31070] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 775.120606][T31070] ? tomoyo_path_number_perm+0x219/0x630 [ 775.120631][T31070] ? tomoyo_path_number_perm+0x219/0x630 [ 775.120657][T31070] ? do_vfs_ioctl+0x1166/0x1530 [ 775.120688][T31070] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 775.120721][T31070] sock_do_ioctl+0x101/0x320 [ 775.120748][T31070] ? __pfx_sock_do_ioctl+0x10/0x10 [ 775.120769][T31070] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 775.120804][T31070] sock_ioctl+0x5c6/0x7f0 [ 775.120829][T31070] ? __pfx_sock_ioctl+0x10/0x10 [ 775.120852][T31070] ? __fget_files+0x2a/0x420 [ 775.120872][T31070] ? __fget_files+0x3a0/0x420 [ 775.120893][T31070] ? __fget_files+0x2a/0x420 [ 775.120917][T31070] ? bpf_lsm_file_ioctl+0x9/0x20 [ 775.120942][T31070] ? __pfx_sock_ioctl+0x10/0x10 [ 775.120964][T31070] __se_sys_ioctl+0xfc/0x170 [ 775.120990][T31070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.121010][T31070] do_syscall_64+0x15f/0xf80 [ 775.121027][T31070] ? trace_irq_disable+0x3b/0x140 [ 775.121054][T31070] ? clear_bhb_loop+0x40/0x90 [ 775.121077][T31070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.121095][T31070] RIP: 0033:0x7fdbde59ce59 [ 775.121113][T31070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.121129][T31070] RSP: 002b:00007fdbdf476028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 775.121148][T31070] RAX: ffffffffffffffda RBX: 00007fdbde815fa0 RCX: 00007fdbde59ce59 [ 775.121161][T31070] RDX: 0000200000000100 RSI: 00000000800452d2 RDI: 0000000000000004 [ 775.121173][T31070] RBP: 00007fdbdf476090 R08: 0000000000000000 R09: 0000000000000000 [ 775.121185][T31070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 775.121196][T31070] R13: 00007fdbde816038 R14: 00007fdbde815fa0 R15: 00007ffcb74f1aa8 [ 775.121230][T31070] [ 775.133262][T31068] batman_adv: batadv0: Adding interface: macvtap2 [ 775.133283][T31068] batman_adv: batadv0: Not using interface macvtap2 (retrying later): interface not active [ 775.564720][T31079] netlink: 'syz.0.8045': attribute type 7 has an invalid length. [ 775.618261][T31095] netlink: 'syz.1.8047': attribute type 1 has an invalid length. [ 775.666730][T31098] __nla_validate_parse: 6 callbacks suppressed [ 775.666756][T31098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8046'. [ 775.679064][T31095] bond14: entered promiscuous mode [ 775.688531][T31095] 8021q: adding VLAN 0 to HW filter on device bond14 [ 775.700894][T31101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8047'. [ 775.928396][T31110] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8049'. [ 776.201049][T31124] netlink: 'syz.4.8054': attribute type 1 has an invalid length. [ 776.321925][T31124] 8021q: adding VLAN 0 to HW filter on device bond16 [ 776.459010][T31139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8059'. [ 776.475778][T31139] vlan1: entered promiscuous mode [ 776.485668][T31139] bridge0: entered promiscuous mode [ 776.520582][T31139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8059'. [ 776.534550][T31139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8059'. [ 776.553557][T31143] netlink: 'syz.4.8060': attribute type 3 has an invalid length. [ 776.562252][T31143] netlink: 'syz.4.8060': attribute type 3 has an invalid length. [ 776.572161][T31143] netlink: 'syz.4.8060': attribute type 3 has an invalid length. [ 776.581004][T31143] netlink: 'syz.4.8060': attribute type 3 has an invalid length. [ 776.590073][T31143] netlink: 'syz.4.8060': attribute type 3 has an invalid length. [ 776.655075][T31118] lo speed is unknown, defaulting to 1000 [ 776.662736][T31118] lo speed is unknown, defaulting to 1000 [ 777.115741][T31140] lo speed is unknown, defaulting to 1000 [ 777.145792][T31140] lo speed is unknown, defaulting to 1000 [ 777.496930][T31168] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8070'. [ 777.784822][T31176] netlink: 'syz.0.8073': attribute type 21 has an invalid length. [ 777.910806][T31176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8073'. [ 777.948590][T31176] netlink: 'syz.0.8073': attribute type 1 has an invalid length. [ 778.145301][T31187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 778.507494][T31202] netlink: 228 bytes leftover after parsing attributes in process `syz.1.8082'. [ 778.687730][T31210] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8084'. [ 778.958850][T31228] batman_adv: batadv0: Adding interface: macvtap5 [ 778.978158][T31228] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.007397][T31228] batman_adv: batadv0: Not using interface macvtap5 (retrying later): interface not active [ 779.049168][T31234] tc_dump_action: action bad kind [ 779.064943][T31234] syzkaller0: entered promiscuous mode [ 779.072400][T31234] syzkaller0: entered allmulticast mode [ 779.381830][T31257] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 779.837032][T31276] tc_dump_action: action bad kind [ 779.853975][T31276] syzkaller0: entered promiscuous mode [ 779.862917][T31276] syzkaller0: entered allmulticast mode [ 780.665040][ T24] lo speed is unknown, defaulting to 1000 [ 780.673365][ T24] sqz0: Port: 1 Link DOWN [ 780.713578][ T5702] lo speed is unknown, defaulting to 1000 [ 780.895122][T31306] __nla_validate_parse: 10 callbacks suppressed [ 780.895141][T31306] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8120'. [ 780.952750][T31323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 780.962184][T31319] validate_nla: 2 callbacks suppressed [ 780.962201][T31319] netlink: 'syz.3.8124': attribute type 7 has an invalid length. [ 780.965286][T31323] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8126'. [ 781.052686][T31323] pimreg: tun_chr_ioctl cmd 1074025677 [ 781.063352][T31323] pimreg: linktype set to 774 [ 781.244595][T31340] netlink: 220 bytes leftover after parsing attributes in process `syz.0.8134'. [ 781.254224][T31340] tc_dump_action: action bad kind [ 781.257994][T31339] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8132'. [ 781.310383][T31342] batman_adv: batadv0: Adding interface: macvtap3 [ 781.328689][T31342] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.364574][T31342] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 781.584206][T31354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8141'. [ 781.597536][T31354] netlink: 'syz.0.8141': attribute type 30 has an invalid length. [ 781.686959][T31361] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.707129][ T48] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.735682][ T48] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.791441][ T48] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.800301][ T48] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 781.985787][T31374] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8149'. [ 782.080882][T31376] batman_adv: batadv0: Adding interface: macvtap6 [ 782.108428][T31376] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.142629][T31376] batman_adv: batadv0: Not using interface macvtap6 (retrying later): interface not active [ 782.154341][T31378] netlink: 'syz.1.8151': attribute type 2 has an invalid length. [ 782.182058][T31387] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8153'. [ 782.387316][T31393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8157'. [ 782.404430][T31393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8157'. [ 782.431035][T31403] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8161'. [ 782.836707][T31396] lo speed is unknown, defaulting to 1000 [ 782.856529][T31396] lo speed is unknown, defaulting to 1000 [ 782.978492][T31426] netlink: 'syz.3.8166': attribute type 10 has an invalid length. [ 783.130969][T31430] netlink: 'syz.4.8167': attribute type 7 has an invalid length. [ 783.438301][T31453] netlink: 'syz.0.8174': attribute type 21 has an invalid length. [ 783.478076][T31453] netlink: 'syz.0.8174': attribute type 1 has an invalid length. [ 783.697937][T31463] netlink: 'syz.0.8180': attribute type 21 has an invalid length. [ 784.175880][T31475] openvswitch: netlink: Flow key attr not present in new flow. [ 784.485755][T31495] netlink: 'syz.0.8191': attribute type 7 has an invalid length. [ 785.860368][T31554] batman_adv: batadv0: Adding interface: macvtap7 [ 785.871450][T31554] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 785.924056][T31554] batman_adv: batadv0: Not using interface macvtap7 (retrying later): interface not active [ 785.926028][T31565] __nla_validate_parse: 14 callbacks suppressed [ 785.926046][T31565] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8218'. [ 786.107380][T31575] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8221'. [ 786.128711][T31575] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8221'. [ 786.138753][T31575] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 786.171453][T31582] netlink: 'syz.3.8223': attribute type 7 has an invalid length. [ 786.862100][T31628] netlink: 'syz.2.8240': attribute type 21 has an invalid length. [ 786.899107][T31628] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8240'. [ 786.914174][T31628] netlink: 'syz.2.8240': attribute type 1 has an invalid length. [ 786.938244][T31629] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN PTI [ 786.950182][T31629] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 786.958603][T31629] CPU: 0 UID: 0 PID: 31629 Comm: syz.4.8241 Not tainted syzkaller #0 PREEMPT(full) [ 786.967969][T31629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 786.978011][T31629] RIP: 0010:kernel_sock_shutdown+0x2a/0x70 [ 786.983811][T31629] Code: f3 0f 1e fa 41 57 41 56 41 54 53 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 21 67 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 67 a7 bd f8 4d 8b 3f 49 83 c7 68 [ 787.003403][T31629] RSP: 0018:ffffc9000cf5f0b0 EFLAGS: 00010202 [ 787.009483][T31629] RAX: 0000000000000004 RBX: 0000000000000002 RCX: ffff88807ed0dc40 [ 787.017440][T31629] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 787.025397][T31629] RBP: 0000000000000000 R08: ffff88802b238083 R09: 1ffff11005647010 [ 787.033356][T31629] R10: dffffc0000000000 R11: ffffed1005647011 R12: dffffc0000000000 [ 787.041309][T31629] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 787.049266][T31629] FS: 00007fdbdf4766c0(0000) GS:ffff888125276000(0000) knlGS:0000000000000000 [ 787.058179][T31629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.064749][T31629] CR2: 0000200000001a40 CR3: 00000000871ec000 CR4: 00000000003526f0 [ 787.072709][T31629] Call Trace: [ 787.075971][T31629] [ 787.078891][T31629] udp_tunnel_sock_release+0x6d/0x80 [ 787.084169][T31629] rxe_net_del+0xfb/0x280 [ 787.088489][T31629] rxe_dellink+0x15/0x20 [ 787.092721][T31629] nldev_dellink+0x304/0x3d0 [ 787.097303][T31629] ? __pfx_nldev_dellink+0x10/0x10 [ 787.102439][T31629] ? apparmor_capable+0x126/0x170 [ 787.107457][T31629] ? bpf_lsm_capable+0x9/0x20 [ 787.112117][T31629] ? security_capable+0x7e/0x2c0 [ 787.117043][T31629] ? __pfx_nldev_dellink+0x10/0x10 [ 787.122142][T31629] rdma_nl_rcv+0x6d1/0xa10 [ 787.126551][T31629] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 787.131490][T31629] ? netlink_deliver_tap+0x2e/0x1b0 [ 787.136674][T31629] ? netlink_deliver_tap+0x2e/0x1b0 [ 787.141860][T31629] netlink_unicast+0x75c/0x8e0 [ 787.146611][T31629] netlink_sendmsg+0x813/0xb40 [ 787.151364][T31629] ? __pfx_netlink_sendmsg+0x10/0x10 [ 787.156741][T31629] ? aa_sock_msg_perm+0xf1/0x1b0 [ 787.161677][T31629] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 787.166957][T31629] ____sys_sendmsg+0x972/0x9f0 [ 787.171713][T31629] ? __might_fault+0xaf/0x130 [ 787.176384][T31629] ? __pfx_____sys_sendmsg+0x10/0x10 [ 787.181664][T31629] ? import_iovec+0x73/0xa0 [ 787.186169][T31629] ___sys_sendmsg+0x2a5/0x360 [ 787.190837][T31629] ? __lock_acquire+0x6b5/0x2cf0 [ 787.195766][T31629] ? __pfx____sys_sendmsg+0x10/0x10 [ 787.200951][T31629] ? futex_wake+0x4ac/0x580 [ 787.205451][T31629] ? __fget_files+0x2a/0x420 [ 787.210026][T31629] ? __fget_files+0x3a0/0x420 [ 787.214691][T31629] __x64_sys_sendmsg+0x1bd/0x2a0 [ 787.219705][T31629] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 787.225158][T31629] ? rcu_is_watching+0x15/0xb0 [ 787.229916][T31629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.235971][T31629] do_syscall_64+0x15f/0xf80 [ 787.240546][T31629] ? trace_irq_disable+0x3b/0x140 [ 787.245567][T31629] ? clear_bhb_loop+0x40/0x90 [ 787.250228][T31629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.256102][T31629] RIP: 0033:0x7fdbde59ce59 [ 787.260500][T31629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.280090][T31629] RSP: 002b:00007fdbdf476028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 787.288486][T31629] RAX: ffffffffffffffda RBX: 00007fdbde815fa0 RCX: 00007fdbde59ce59 [ 787.296442][T31629] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 000000000000000f [ 787.304395][T31629] RBP: 00007fdbde632d6f R08: 0000000000000000 R09: 0000000000000000 [ 787.312348][T31629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.320299][T31629] R13: 00007fdbde816038 R14: 00007fdbde815fa0 R15: 00007ffcb74f1aa8 [ 787.328263][T31629] [ 787.331275][T31629] Modules linked in: [ 787.336475][T31629] ---[ end trace 0000000000000000 ]--- [ 787.345008][T31635] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8242'. [ 787.356333][T31629] RIP: 0010:kernel_sock_shutdown+0x2a/0x70 [ 787.386029][T31629] Code: f3 0f 1e fa 41 57 41 56 41 54 53 89 f3 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 21 67 52 f8 4d 8d 7e 20 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 67 a7 bd f8 4d 8b 3f 49 83 c7 68 [ 787.406260][T31629] RSP: 0018:ffffc9000cf5f0b0 EFLAGS: 00010202 [ 787.424087][T31629] RAX: 0000000000000004 RBX: 0000000000000002 RCX: ffff88807ed0dc40 [ 787.435349][T31629] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 787.447014][T31629] RBP: 0000000000000000 R08: ffff88802b238083 R09: 1ffff11005647010 [ 787.455616][T31629] R10: dffffc0000000000 R11: ffffed1005647011 R12: dffffc0000000000 [ 787.474207][T31629] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000020 [ 787.484860][T31629] FS: 00007fdbdf4766c0(0000) GS:ffff888125376000(0000) knlGS:0000000000000000 [ 787.494201][T31629] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 787.504184][T31629] CR2: 00007fe6d9023e9c CR3: 00000000871ec000 CR4: 00000000003526f0 [ 787.516513][T31629] Kernel panic - not syncing: Fatal exception [ 787.522941][T31629] Kernel Offset: disabled [ 787.527280][T31629] Rebooting in 86400 seconds..