last executing test programs: 1m9.024530457s ago: executing program 3 (id=6496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x90) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000180)={0x6, &(0x7f0000000040)=[{0x9, 0x1f, 0xf, 0xfffffffa}, {0xf, 0x1, 0x3, 0x8}, {0x38cf, 0x1, 0x10, 0x10001}, {0x800, 0x2, 0xf7, 0xfffffffe}, {0xfd, 0xca, 0x2, 0x7}, {0x9, 0x7, 0x8, 0x1000}]}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000105002000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1m8.815574065s ago: executing program 3 (id=6500): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xd2}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x40, 0x13, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2400c0d4) r6 = socket$inet(0x2, 0x2, 0x1) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fbdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="2a003300d0000000080211000001080211000900ffb05123d498532a974e620f91ffd2aa78"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x54, r10, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd3}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x27b}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x40001) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="01002bbd7000f6d3df251200000008000300", @ANYRES32=r13, @ANYBLOB="0a000600080211000000000010001180"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x8000080) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r9, &(0x7f0000000b00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2e0, r10, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="69d4ff1b9aa7ac58b1a35ad530b86603"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="0c524f7f9dd91efce05d8b3db2a47c9e3eca972234c9e5c9"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dc7942359df88935d8043f011dfe279f"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x187c}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "7bb18d28ee554528"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="ca584f14a94a47734b252e0c6c3007a86f472a6f45fb93d445cbda088d361964"}]}, @NL80211_ATTR_REKEY_DATA={0x10, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "aa0eaa9676ea06a1"}]}, @NL80211_ATTR_REKEY_DATA={0x7c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x217f}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7dbe0d23ebc36240d65327cdb91e1826dffce7b9ed26ff76"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ce3d5680a4642947"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="77d833555e32fcef0f326bcb600e4046297feac588da02804cc0e3c905bc396c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x19}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="7951d6043128224e873b96c65e5fa7c15cd56d4ed0bd07fb"}]}, @NL80211_ATTR_REKEY_DATA={0xd4, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="0598d74f776603366049c72f9413118a24af9d85b8743fbc74bc773d7e2ee518"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="36e3b148d52d77d6f357fe06e9bc94ef5c4556a551f3f36a"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="94506c299ef7ddff81ca228a0c2260fe"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "5e9974ffbd45bb0c"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3fd0df72d8127959727638101583eeef"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "b30a316b37134a80"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "147eb495f95bd51b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a12b3d777d5bce0ad907d1e99102afb29904693a2fb2e358d6116019cb16cf5f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0e6b75c769cfdcf6"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="65cae2fe7a716ea62c248c920177df47"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="1a1fa017559c7825b6770c94d0c8e140d5dabe984d16140bf50db91d4bcf1ca7"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="cb5bf5375ccf15ec2c227bf13c8fa29ac956ff6a5575ecf5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="97d39c45b453b624262b203baea1087b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="70caae5f3cef673459ce628c2a20889e31b8775ef890a4cd"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a92656fe10fc252d26249b21d5900a15d7633de0dc3e0474"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="abc764ab92b11c11ee8641cb13c0ec2d5aa3ad83b6d28796"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e0a90436491e683d095955fa60b885ee5f466a95c42a4ddf"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2ed7073f2204c3fea89347f89f79ba52"}]}]}, 0x2e0}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8, 0x10, 0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1m8.812024846s ago: executing program 4 (id=6501): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400000000000000791090000000000063000000000000009500000000000000b8a164aed91d3d5b664c4ca806f01293f84f25209077b1bb4ab4cf447b29fad55603aa97715b6f60e53760e0565b07dd0f"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="61df712bc884fed5c38b46af21a0", 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)="fd", 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000010c0001800800014000000004440000000c0a01010000000000000000020000000900020073797a31000000000900010073797a30000000001800038014000080100001800c0001"], 0xf0}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="841100000400006300000c00028005000a0001000000f45ece56cd11b223e133dddea0f1adab230bdb3e4f8d60b667ec06d42eecc9bb6c9df71aa8bb67b6c6c2b0c3e536fce924c7e5110c666a93b0226269913ca852b8199d40f48c779d84ed91bec9d3ed0950d62ee6d9f6f6ce9c9a54bc718a444abcfed04f1ce7f767d91a004c1a5b8afe899cd1a82d92c75f5c9a1fd7ebd6a282173220b8ade409f16b1db3a62eaaadf98c56ab96b69206a93824f0f20244aea4aae91f588b6bf1925200"/205], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000200)=0x437b, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000100), 0x0) sendmsg$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) r6 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x100, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r6) listen(r6, 0x3) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000b1"], 0x0, 0x8000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r7, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) sendto$inet(r1, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x4}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000080)={0x1, 'batadv_slave_1\x00', {}, 0x2}) close(0x3) 1m8.670320117s ago: executing program 2 (id=6502): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000000bc0)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x4}, 0x80, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1200", @ANYRES64=r0], 0x42}}], 0x1, 0xc040) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_delrule={0x38, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'sit0\x00'}, @FIB_RULE_POLICY=@FRA_PRIORITY={0x8}]}, 0x38}}, 0x0) 1m8.611491029s ago: executing program 3 (id=6505): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r1, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}], 0x1, 0x0) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="010000000980ffff", 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x64, r3, 0x1, 0x0, 0x0, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x64}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f00000014c0)={&(0x7f00000000c0)={0xa, 0x4e22, 0x9, @mcast1, 0x9}, 0x1c, &(0x7f00000013c0)=[{0x0}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x18}, 0x4000) 1m8.491268267s ago: executing program 2 (id=6506): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000040)=0xde8, 0x56) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000030200000000001fe8000000000000000000000000000aaff"], 0x0) 1m8.458583515s ago: executing program 0 (id=6507): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000540)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 1m8.417571429s ago: executing program 2 (id=6508): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@private}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)={0xa8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x3}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0xa8}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FITRIM(r3, 0x40305829, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x3c, r2, 0x0, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3b}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x230}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 1m8.286282949s ago: executing program 0 (id=6510): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880088a84803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x86dd, r3}, 0x14) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000b00)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000340)=@bridge_delneigh={0x38, 0x1d, 0x200, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x80, 0x10}, [@NDA_PROTOCOL={0x5, 0xc, 0x2}, @NDA_MASTER={0x8, 0x9, 0x6}, @NDA_DST_MAC={0xa, 0x1, @local}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x400d5) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000000206010100000000000000000c0000000c0007800800124000060000050001000600000005000500d100000005000400df2f00000900020073797a31000000000d000300686173683a6e657400000000"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f00000006c0)={{r0, &(0x7f00000004c0)='geneve1\x00', 0x800, &(0x7f0000000500)={@align=0x8, {0x8001, 0x10, 0x0, 0x1}}, 0xa, &(0x7f0000000540)={@_ha_fsid}, &(0x7f0000000580)=0xff}, {[0x1, 0x479, 0x4ec, 0x70f8]}, 0xe3, 0xd6, &(0x7f00000005c0)=""/214}) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r4}, 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@bloom_filter={0x1e, 0x68d, 0xfffffffb, 0x4, 0xd4c00, r6, 0x7, '\x00', r3, r7, 0x3, 0x0, 0x5, 0xd, @void, @value, @value=r8}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r9, &(0x7f00000007c0)="0ff764", &(0x7f00000002c0)=@tcp6, 0x1}, 0x20) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xf50d, '\x00', r3, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x50) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x10}, 0x18) socket$kcm(0x2b, 0x1, 0x0) 1m8.276337805s ago: executing program 2 (id=6511): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e0c2500028008000300000000005d"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(0xffffffffffffffff, 0xfff) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0x10, 0xa, 0x8) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfff00002}, {0x16}]}, 0x10) sendto$inet6(r6, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000001c0)=@int=0x5470, 0x4) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB="64270fa6", @ANYRESDEC=r4, @ANYBLOB="100026bd7000fedbdf2515000000500000040000000800010083506f5508000200030000000c00030007000200020000000825d1e0230000000c000400ff7f0000000000000c0004000500"/94], 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x1) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e000100010000100f86500b60000000000000000", @ANYRES32=0x0, @ANYBLOB="000000002100040008001b0000000000b8001980b20002002d6a2d006735b4b3a4a6a0ee3f57ca22109e5581af1098e42c3a215487a409838a5a37fa105e4e165fae80e712d49f4fcadc176ecc3ae76a1f45eb6986aa81b0ede670d10c47bf64e7f89b10db668fc9d0c8a88aa3754e3104a84577e059688f01ef37e7951cc4a9ff927c1f26445590dbcb345ee0245a89b0c73c4de7dd589321b8858c928cdadcac6bc8843eca3b8c92b52fda7f5615ea3cc4cb6e5aa2c01693c6736e8b37d37a8c27f1685cdc0000"], 0xe0}}, 0x4080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c0002800800014000000009080002400000000008000440000000040800034000000001080005400000005cab480aaaf20073797a30000000000900020073797a3200000000140000001100010000000000000000000000d6b3a787fba1db5509776f2f4375b2432e758da3ea423ab2eb124fedce1e5955313bf1207f96381dff2b8d43630e77a92f3c713a9d0ae9232276ce691f124c2516aa9441c1b90efde2010a61be4242"], 0x98}}, 0x8c0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x6, 0x5, 0xfffff000, 0x3, 0x9c}, &(0x7f0000000100)=0x98) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r11, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r11, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r10, 0x84, 0x84, &(0x7f00000000c0)={r12, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0xfffffffd, 0x79b}, &(0x7f00000001c0)=0x9c) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000140)={r9, 0xad, 0x4, 0xff}, 0x10) 1m8.075137789s ago: executing program 0 (id=6514): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3fa, 0x400, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000004100010029bd7000040000000317000004000080"], 0x18}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendto$inet(r3, &(0x7f0000000300)="2d33f3bb46d1817443c6b86f827f867baae390e8622e7db42084067b7809c81a5e47594cdd218a52f4c0757b9656ff424671c20e9708091b4fe242c2545946f0d46eeb020a218961743875abcad6341a628551f65a0daa28aed0be8fe8fb165851cf110da5b8be1541eb46be27c1cf22cd", 0x71, 0x2004000, &(0x7f0000000380)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x40084) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000440)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x7800, 0x7, 0x7f, 0xffffff01, {{0xf, 0x4, 0x0, 0x9, 0x3c, 0x66, 0x0, 0x8, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0x3, 0x8c}, @end, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x7, 0x12, "a4d5730079a62bcaad00000000000000"}]}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x7, 0x78, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000600)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x21, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x4000) r6 = socket(0x1, 0x80802, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r7, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), r2) shutdown(r6, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000540)={'gretap0\x00', &(0x7f0000000480)={'tunl0\x00', r4, 0x8000, 0x80, 0xfffffffb, 0x6ac9, {{0x1c, 0x4, 0x0, 0x3, 0x70, 0x68, 0x0, 0xc3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@generic={0x83, 0xc, "7c59fe7b2a200b7ebf40"}, @cipso={0x86, 0x4c, 0xffffffffffffffff, [{0x6, 0xa, "382248bc45fc6ff3"}, {0x7, 0x10, "49a2c6bea0295c41c4f7f5d209be"}, {0x5, 0xc, "827ad3d72479722e5e56"}, {0x5, 0x3, "1a"}, {0x7, 0x11, "060febf86e9515c90fe649d551d37e"}, {0x0, 0xc, "f9ffa86762937064ee30"}]}, @end, @end]}}}}}) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) listen(r9, 0x7) connect$bt_l2cap(r9, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) accept(r9, &(0x7f0000000580)=@sco={0x1f, @fixed}, &(0x7f0000000680)=0x80) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) ioctl$F2FS_IOC_DECOMPRESS_FILE(r0, 0xf517, 0x0) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r10, 0x89e3, &(0x7f00000007c0)={0x15, 0x101, 0x7, 0x5, 0x3, 0x81}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x7, 0x7ff, 0x0, @remote, @mcast1, 0x0, 0x7, 0x4, 0x100}}) 1m7.940657722s ago: executing program 1 (id=6515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="98020000110001040000000000000000000017ff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d000000001400028008000200020000000800020001000000140003007866726d30"], 0x298}}, 0x0) 1m7.900524908s ago: executing program 4 (id=6516): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001780)={{0x14}, [@NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x11e8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x11bc, 0x3, 0x0, 0x1, [{0x11b8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x8c, 0x1, "f6f51d7ddc8e5c66a3be7d3fb8f0ea00eff962205d3391c6d3628b9b0bdd73d6fb95a491ba97582cbd1d40580fba50eb89486f996f8d3bc2aa864403bc5b95a6a14a280bbbd27f12d4e5722ce068966316c3c064725d80ceb4289bf323466896c8d3a4924e96da7de8b32f7069642b35bc39081724736b79d13d5400ad3be857f6950b1470260dbc"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "96fc23b4cb39a1a4dbcf3dae941b99d3524cf0444a24c6379b00269cb5b6ae5e87cb89582930a66439ddcc07e3ecc9e472d12db44298f843633b150e69"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x51, 0x1, "538b82828eb742e51c20e8ec32a5fef5838288dea429fb87678abad0a0eb33780e5a520baa36d1dbf916bf29b91ae0224ee8c6a41dc7677acb0d79d987716ae062b53daab3ddce5d4382b9f68f"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}]}]}]}], {0x14, 0x10}}, 0x127c}}, 0x4008015) 1m7.664691061s ago: executing program 1 (id=6517): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000040000000000000000000007110ad000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000080)={r1, r2/1000+10000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x28b1b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e1f}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 1m7.664450284s ago: executing program 4 (id=6518): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="2401000041000100fcff07000400000002000000040048800c0101800801108004010f"], 0x124}, 0x1, 0x0, 0x0, 0x400c801}, 0x200080c4) (async) sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYRES8=r1], 0x50}, 0x1, 0x0, 0x0, 0x4048080}, 0x8000) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1m7.6635474s ago: executing program 1 (id=6519): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x420, 0xf0, 0xf0, 0xfeffffff, 0xf0, 0x2d0, 0x388, 0x388, 0xffffffff, 0x388, 0x388, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x8, 0x8}}, @common=@addrtype={{0x30}, {0x8, 0x22b, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, 0xff000000, 0xffffff00, 'wg0\x00', 'syzkaller0\x00', {}, {0xff}, 0x84, 0x1, 0x20}, 0x0, 0x100, 0x138, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4008803, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x0, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @gre_key=0x3}}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480) 1m7.626111572s ago: executing program 3 (id=6520): getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x64010102}}, [0xd, 0x7, 0x1, 0x3, 0x101, 0x1c7, 0x1000, 0x81, 0x1, 0xfffffffffffffff9, 0xfffffffffffffffc, 0x6, 0x0, 0x0, 0x200]}, &(0x7f0000000100)=0x100) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000140)={r0, 0x2, 0x59, "53c43c016e0f3b00681ea1afdecd12bba9bdf5dc20aef450dd6979a21484b56f55f9b1e75a9038b07442b8b3c3d3a9c1aa6f3164c3ceb634c3f0c1df53780f49cda1e59915dcfcbb6d3ac4ece5edc3f98d200181a47495a8b6"}, 0x61) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001440)={{0xffffffffffffffff, &(0x7f00000001c0)='^\x00', 0x204000, &(0x7f0000000200)={@_ha_fsid={[0x1a87, 0xc]}, {0x3, 0x80, 0x6, 0x99}}, 0x0, &(0x7f0000000240), &(0x7f0000000280)=0xfffffffb}, 0x2, &(0x7f0000001400)=[{0x3, 0xe2f, &(0x7f00000002c0)='!+[\'{!\x12{\x00', &(0x7f0000000300)="303e39221c097b8d1d9c8241d583200dd5ae47325b40c7cf13988fc6dbb367dac71fff2cfc9583ebff2310255cc6e75c3e7b8e196529794604d54dea459832bdd2f39714832fd2c82909b41a79e98687bc63c21ec336bbd1419965043fa0aa9502cb0209b08988aa10b88fca5465e42cd342a5832c6928514c7750265d1ab912625bddb7a1a3c8b1faff5bd73628993d5d7dd6a923a772aea4d837d4d73d2732751fe05c136e19e4f5b2aeb8c3e9144b2b5f17d49bfc160fd9bc1f90e2714135ae16b4b843bce0d9eed8a2fd6d641c8a71ed0464cff72bea257dfcfa233a14d4201bac3ef3aadcd38b5d5fb2f5013e2eaceef86b07d33ac4a7e41f11f829b097e554548665f884727ffa077675444180fe927d01b8d05277c7ed292755619a83af0219fda6836f6a3e6b75b0775b96cf88c84f839a8bba934d47b52ff4c9d17e3537fe8c33275e469b1e66365420985c4dca235ec90ab6df99913274401a914d8a92fb326b28490ca9b2ffaa831f291b05d9c81abd8f99788cb4ad96ef3a6b11c37a0dd3bfd1c1376fa6ca14625e89c84e63c3fb58508196c4b6a919cc13494731ae5b4022c5bcf764142e3185be97b86b26942214c632ec8eb75d1eea28ace3025f2208957a4f8e1e228ac0767c871d326983ef7c30a2cd9de865c3feef08912019a315d9bab33ccd97bba2c5fb90ae31eca3f0e872398486e62aac864b9be26a18e9cd99e73b628d44f1a6d3e8f7271e95c5afa220539836a5c8f047ea09a40421a6bcaf0adc3667508df08751ea2f74459babcb08bc799e1ddf4e96a99f65e9fb21eaf6a555626abd2fe820dccf37f7c02bde2c8ae371bcc153e1146b0ac89b86ed40674598d47b1cd307f7612767fcd2c5567232f85da43879db5debf9f13a0506c5af417a999c9cd9095dd697a98d529472fc3817c60dbc9010ad951c5cbbe578472a2b19ab9f78d02202529a05aaf4cd1e76de96fe90c9196dd230549a836d3045ab9c7142a41e81b183ce548025a7e34f71bdcc9b056f48e7db2f8fe9780f21259245e19dcdf8bf9bec972c660ff6c2c7bd4b695815056b93dfed2d06cd1148b75f02572f36349eee969b96c74182ed84c9b0f6141fadd5d318141da53ed34d096b82fa4270d9a2365564747a92088675b3dbf502b4644ab12b9b250a4b20838e55a8dc47d6fecfd44fd4d74b53e16728bd3169fd478ace2812d174b58b4b4791d7b1fd626bc437c82656eb085a1888a611babc5fc1a544286991e4d66a15d06bd9e29d36c919e9f136f3bb81b98a88a1506ad5c7e152ccced32e54cce08bdec79a5a7fb2e573f2e43045f16a26df444151e10ab23dd2ed113d94a02597a5263847c0ea40b090739d8cfb4b59744c88eed44515fdf752b471eceee018fa337aa32033f53c41d084ab4665f8dd4d3c0a797514dca65376118bae35de5e156a36e58d7942cd6c4336f15277a6992d62345c7e91efe5e794528816427e9927648a82ff193e1536a96d4b4f9f324f0fc2c2ca390e50972ad59ca1255ef69494351e5f306618c299700610acbc4956f6ee116c018e2d622e01aa5620ebb742643cae010ff894f6413831a2100af9924b51fae9b12b49340834b57fb230fbf02a01d438b1edf024b04f96cb7a53c1591c06c19b74965b3b53a8687f9ad558a47dda747f46a5cd3f85103bedaaa3664c8d0c690b527dcc3b73385507503b0e8cf01420ac86eab586ce10d9e47364fc9df75dfb996b401e8f782a6bd08885ec865e7b1137304fdeb29ad05b124783986d6a8ea676dc38f902f8d2e0314162c1b4c3c58335a48ebf7c1f249914de483a8953e289adc42477d39686b10822a6122a065ea8e0f9efd494036945d6576bc2a4400ab3fc40ccb444857f91497bdf89ab5e30e755101bab1d90ea71893851c5058b57fddbab99bf2dc70503e6fedac317673fa6706e58be6497ccf040f1b7b3f8c451c178b1060cb3a3170c49b62db03766985b666cab6dba0dab6a0ae427ab8df9b0778814a6f0a588fb00c2679f5d0c799f95164450de3239237db8547221ab85e40332b0afa214c953384dbf1f58f197d49d40bc50e038ffab007c5e3c4368a579ba3166434a772b12394375583b66b3c7c8d57b0876e7a9621ba1c44407a510e71c62a10517bf04679e2e419c4f79f9495640d15beade76ebb7117732cce8930706d516af41fc4e0c36d6a97f6ed22f7a1ad16dae6428630a233d046e0087768f4c7c250fedcbe6b8da31c53784bdd7bbadd42f3508f614092bd7ae73bcd6e769aa5d69ecc2fe94a2751fbe17b0da70c13c8a54ee662c71fef7555da573f07a9c9c24015e3ea5f8e95507836f50da5c4fd4c091f01c435d11635ce8e97dbff928639575bc43988faa4c8f69dabb3fc31710a7ef2c698a158e0cad7fb1f654fb8a0b96a572b30c33e4799ea30bb485e834e5132a44a6e44dfaf64958b8b2a34392bd4f6c0584e86cb52bb2ac592c6e6a79b16b1f5767fac6c2deb39637b1576c74633d6cd744ca9011e2b5771de88480856662086f449cd03f5449d1a7e8dd856254a9be9d965e17ccf3074c85bfbdfcb3b38cbfcc35100d28f0a93ba51c652f2a1385118b3edd52cedbacc3f0f45e0288c67ccc04c1889c42ca22b55da5ee4c7d31890d293801c9f43b6c3a6f287f9b6b9f4feb2968e2222db75468f9a103bcf96f01aeccc1fdb2220619fc70cf7a4e227c9513d6f2410e3ec0ac73461491e4104b148c4634a2c2ef5bde3b7194dbf0e17e73b020dad482013485e12edf4797c0f3bb41ae5a308f18740a8742c85e93a1fb7aef63d74ad924246b55560479d7a9ad971a37f84afc5944ad7708f0183c9ef92afbd9bf9293d6bf0fd958e6261ee102c6120ffceff5c6854553f4442bf6018ba88e4a097eee0ec9372898c96e6884b71712ab830ef0098d13692a9980b123a310f99fd6960a1748514390ee6437b7e519d009436122466b6601760bd02df8008f8e8873e73f6d709ff0ca9605451eea6882e3c4c6ef3b710bbe05d69e38a2be03e4f707aeed8005b29e0758bb87a140b5fe2d26b7ee580460d3d6ccd07dd7cadcaf12f42407d6600a87fcf745099b9fa1a501a1d9fae87085e4f703eb4c92e57a4a953d48abeec60952f8477c459b3ee760731e6e77f820f29d91084f09d34a48a9a7dacc2f876ed2affb3243fa2fc5fdd82d09cf342e2ca8daa63161c8ab6a3f87377a565b5fb52c96f4c8ea419f336ee73e714f3ddf6528ea9597a93d2f89f1f37b99117e017404f649483fb60298301a41573d6267ac6d43dc1eb1a34e97e25cb88fd009e652e5cc1bcedc136f720f167e87424b36caf5aa70fe59dee822047037030a2300fa019eb3ce784491356c67d25203f92223e7bcd94f178bac81f2d7c7809406448442b2a7e25c008c4c7da17b561e7ae08752385ec4546f3a2eff82333d33dfdf023f06f03cfbfb915ddc68eef046f3e38223fb7c5bfacdd0176ba666893e1bc40a25e389e64f697e1cf2a38296063de75a01797a78e3e7e4eb2a11c955419c2e4c89ec3e95c54978d5f9146ba58dee35a16b427f76816576c5d9d3cb6e170df4db9feeee37167213c0f686bbd93d45b73df19e2bd0b9cbbf13e48ec113f45071654757c9dd2e6a31eaca9f4eac292af20cfb46bfa7dce1b17d8794f28b316187d302c44756f65b50e6b11954028b2a4e93c9eebc340a7b0c996ee9d6101a180b45a44d91961d3ae0af35146c27f9d1a8464df5e2dec57ad039c4b770504012c2594c808547b89b42c3949d5bd5709d9358ee6d4c28947fa49d451c77126136c332cbe227c2fb0c5553ff09c6945f7a4b4604b512c06af4fb21eb64dbd530b4638273ee9281a119b839994f6a2d79798cd0c92aba271ef2288101eaab318387429af908d136ff84279aea573780449aa08f2060b80e129c1354850b0890ad634f4028673ac4801c04186ada75a468007e79bf96f1da83a8588d0a8bc304852b0cc190e9e6a7155409a77358ad308aec716402d95f19e602b47994727a1adbb199c5bcf77902a10ca7ae55b49dc1bf608d2fada8f5a91ea2c5906de894aa5eebdf7b2abeb6a675aaaf7b81ac5b264efa7e34303ae53bd44cc3d1a2b0ae7ea6fa45ad3d973e2294c7120054050eaeb3a8be309c299e37eb0633251f4c2d2cdf57f07925093b283b03f2b4b4c4a4b95e9700b8dd3be081a1e42f59c4370cd0b860754de4b7838a05fb2a6788bdb6dfcf52d84b3f4c3daa0c4d9baa1160cffe33bdfecf83710d1628aa3fa5237d41caab630f94d357cc26a539b3271d1e946b60239ddf96109db409a3f9efbc73fc4f8390e5723ca4c23592503470bed164b3bf2d0ba35d497c414301c54a318c22ca416c860d3b0a62c98ffa4033b83cadefccb939fb51406e24625ed7ad8d00170709115204083b6dfa6818d181822023b4cfb43b2d1d9cdf0b1b3162bc1629c2d2f01528d119558e6f7235be940a43bf4f77bf5fc58bf91713a505378e71f05cd8a9980641f3fc3e1a044644999446913f103a7bc0f4e47f95923bede53f744fb9562deaba68e13d46a3489d609d8ad4bed269dda5056ed2fdbb8193646e305e05a161a7c343c7964805d534ee1ef90ef7f192ab24cbc594f5464f102f486c36409cc716ec3dcf99a196cc4885c29a8fa2006f96da77fa1ac833fa8db230e3b2f4e6ac6aa195a8d107a905c5e55398492c04e7135961cf26634e4a8acdbf29fedd2d4cfdd5ce17709a346c83c635dcbda55184067f160d41614eb7942a8af0bdf1896d49595c094e81c176b35cb99690c46a58527b6c43ffee166d313c5bf7c58cb54d2efbc30f7763b473bf6c47d92e47fefcd7b8bb00fda4c47bdc31ecb7734a3ce924629feb13fd16597fcc00eb0a3889425dc2386cfee026abf49a4e3108519f9d692968e98d9d3757cb5bced41fada436a814781e88b3f153c31f0df8b122b9509d0ddfeaa9a64a7f5336141caf0400e70ee45a81ea2b1017d589f42da7c19fafc2484e6afc7ffc7974307b769816978d403bf578f8d5a58881fc496654ed3a01277316577bbbad625451e93db46b555bf94f591833d602d36d4da30a77187edd3252a59e7933b0e9f59b2e8f28319a2b1c8146db2d99457312a64477a669096019d9d7e334e69a01deb1481f5b1e15264cdf69f9be5825bb6670d0b5e6145450cb8e1f2e78923f4addef0dc0ab85bac0f18b444050bb6479bef0f96aa370b3840a12c31dc98c9e05af946e99a7400375e475a20d10765bee070dcc17f21449db4766fea66666f9f82c77bb71e6d805dbcb86c648f4a9cf9913e28590a60fc3cd07c26a068efbe8afe7ce62cd4828e219162907f6fe4eac810dc42671f5589d062801e0999cee7155b16ad0866db7fb1b70b62dcdff8fbbe95fb4a4ca30ee448147a81c33bf9c1d42e91e871d25275717a62ce1e955373c41c6c382484356ccfc1f3c17f06138ab37c28c46b10169aa2a02fd173a93bf82c1183e0865cfc4f8b0175950e07cc3668df8d441d41aa7d89f3a90d4f1ab67e128b30f95fb1342ca80c8e1883a00685eeaa0ba0819e1eafb67a92c5d4692c6ddc9189d180c9dd8d1b795bfa2b5db8527e840f4cdb70ff5f4ba04201f047e1843322f3a842c8b30ad4cce407ff18ed1ed0e4bc1a35cdb5d6d9b56b3a9fd947dd32a34886f80fd9b2533d68f953daba91c8f065bbbb3d7a50c9a86c2c267ab5377c4e1d386d5178411077bb5141af415a82b4d0eaf31a97e9bfbc9606edf7ac39a66efff9cd8d70d556544d8a0ba6b36e6", 0x1000, 0x2a}, {0x1, 0x6, &(0x7f0000001300)='$\x00', &(0x7f0000001340)="8f77dae0314d433ddbe179be011b725081c1b7b9ed73a1186c72506814ba9039f7f294b4a07b665139ec0dd248b5214ce789413b96c254a8001251e850ac59c936799d4c4966689ec3cf21fabb11033bcb3744c5803160c72dba4fcad77943b0d364472d403d3803ed39db9acf4e21f8398f846b742118550e93db0353eb191922e47759e04aa057fa2c383a3e4ab48d547e1b778a7130ad382a76e22190d3c8b11a41481a05b75c17be1bcfe6f81022db7f00c55f238b", 0xb7, 0x10}]}) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000014c0)={0x0, 0x7fe0}, 0x8) getsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000001500), &(0x7f0000001540)=0x4) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001580)) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f00000015c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000001800)={0x3c, 0x5, '\x00', [@pad1, @hao={0xc9, 0x10, @private1}, @enc_lim={0x4, 0x1, 0x1}, @hao={0xc9, 0x10, @remote}]}, 0x38) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000001840)="dcc1125af08cc701ec913d26a46fbd89239f1d67a3757a98ab965fe58fbfe898e2094191e4d3643506115f60bd196b4f2cf43a3e88e99a8ff9fce590a03365bd00e6115cf4bd3bfe577ef6c7e9dc8aca2bd2895e97fc05c9116dadfc0536e81b4789bc1793", 0x65) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f00000018c0)="ccafbacd41cd3279726d23152020dcb4733ba6a89e2d0f873558756c98576488bd74e86d9de04f334ee6f2d76ff1d660d0ab6b1ff863cf4db8d55418452e37cc4f5ea5387c8860de7cf85ec467c837fb0f52f57f5e4f71dc770100b38eb1950ac59c521a9def504c", 0x68) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001980), r1) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x1c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c010}, 0x4004000) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000001ac0)={@dev, @dev, 0x0}, &(0x7f0000001b00)=0xc) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000001c80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001c40)={&(0x7f0000001b40)={0xf8, 0x12, 0x400, 0x70bd29, 0x25dfdbfd, {0x25, 0xc1, 0x8, 0x65, {0x4e20, 0x4e20, [0x0, 0x9, 0x6, 0x3], [0x7, 0x58f1f8f3, 0x80000001, 0xfffffff9], r3, [0xc, 0x7ff]}, 0x401, 0x7b}, [@INET_DIAG_REQ_BYTECODE={0x86, 0x1, "d3dd6be866e831aeebb827772c55701acbb831986730267bedcfda7f6840dd615b49d71c85a021fdf68473ceff5dba033eeb911663aff6de6aa7920857d8c12e31a189f8a615e7ae0748dccd20e700d952d062710b1af11c1ac00d8358bec46e85668884632d145ce15c801e004ff5a3aa658af07dabc438c32dbb52595906ff05cd"}, @INET_DIAG_REQ_BYTECODE={0x21, 0x1, "43eb084918d9b996462b8df23710d8268b6b9c38fa89b96969a08dbdab"}]}, 0xf8}, 0x1, 0x0, 0x0, 0x11}, 0x10) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000001cc0)="0d3a7ed9d75334644179e0ca54689cf0434307c524308ef733bc62526fd57979c207120b328a89c3d27b55675840c1ddd4a63ac542d6eada08b98c8dd97227e2dcb9d69b4774addf02a4b0e365a041db54c9055041e5eb14c30dfb1beb7f7e5907966d", 0x63) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001d40)={{r1}, "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"}) sendmsg$nl_route_sched(r1, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)=@getchain={0x54, 0x66, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x8, 0x1}, {0x0, 0x5}, {0x4, 0xfff2}}, [{0x8, 0xb, 0x8}, {0x8, 0xb, 0x5e244122}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x80000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x408c0}, 0x24008001) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002ec0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000002f80)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002f00)={0x34, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x9, 0x30, @udp='udp:syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0xc4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000002fc0)={r0, 0xfff6, 0x7, 0x6, 0x7fffffff, 0x7}, 0x14) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000003040), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000003100)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x34, r7, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x11, 0x6, @udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x34}}, 0x1) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000003140), &(0x7f0000003180)=0x4) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003200), r4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000032c0)={'syztnl0\x00', &(0x7f0000003240)={'ip6gre0\x00', r3, 0x4, 0x53, 0x60, 0x3, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, 0x20, 0x80, 0x1, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000003380)={'syztnl1\x00', &(0x7f0000003300)={'syztnl2\x00', r3, 0x2f, 0x9, 0x8, 0x2, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, 0x40, 0x1, 0x7f, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000033c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000003640)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003600)={&(0x7f0000003480)={0x170, r8, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x170}, 0x1, 0x0, 0x0, 0x4800}, 0x24000000) 1m7.580641584s ago: executing program 1 (id=6521): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000001bc0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) 1m7.54807974s ago: executing program 1 (id=6522): bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe80000000000000000000"], 0x0) syz_emit_ethernet(0x52, &(0x7f00000007c0)=ANY=[], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002a80)=@newtaction={0xa0, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_ctinfo={0x88, 0x18, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x9}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x2}]}, {0x34, 0x6, "85f5d6baa39213195ace3c9cbff29b8fe391a2484bcf648878abf211eb3862224cc20aa7bcd77e6fc560d38d05288df6"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f00000000c0)=0x400) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mreq(r1, 0x29, 0x31, 0x0, &(0x7f0000002280)) r2 = getpid() r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv', 0x2) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0xa00) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, &(0x7f0000000140)=r2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x400c941) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="14000000a531c9167cb5b781f9371609ba8c231d2d0001000000008a"], 0x14}], 0x1, 0x0, 0x0, 0x1001}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETLINK(r4, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, 0x0, 0x36) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) 1m7.513342174s ago: executing program 4 (id=6523): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000300000000000000fcf142525f0000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x13}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xb0}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000600)) (async) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) (async) 1m7.326522314s ago: executing program 3 (id=6524): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690022000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc0, &(0x7f000000cf3d)=""/192, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) 1m7.117374007s ago: executing program 0 (id=6525): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c00000018000000000000000101000005000100080000700a7b610e0008000400000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0xde6537f16e3fc966}, 0x20002000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 1m6.970488669s ago: executing program 3 (id=6526): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000013c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001380)={&(0x7f0000001280)={0xf4, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0xc8, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57f9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcaf7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x549a9b88}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd143}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1418}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60cf72d3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29fe3744}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd817}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7f81}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5e4683c6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x23412572}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3b2}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45542391}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6bf0a5ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd140}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1520cd03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3716d42b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x28b7}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa2c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6ba2}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}]}, 0xf4}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) (async) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}, 0x40000100) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001080), r0) (rerun: 64) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f00000025c0)={0x0, 0x0, "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", "30cfa9cf64b1558335ae87e77ba13d17786cebe1018851da7991ff208022cbd3da80894b96d1b887c143f359243d6f119dcc7b8e3fbbf8972a3dca8b198babe7b256f0698faa402ece85f7958d8475b1ed8e837798863b2fc9cce2e3f2d3c40bf1c068ba5b0fa19f8f2da7ba08f2c6dcd6726f97bdc95313e9ef2d632b986cb86934c5a415e179391340c3cc0d46b73233d7782883b45d5faeac6e7ad6da1cdd9426558e8532210498b8cabebab953ef47bcebc324203c56123e9e243a664ad0b2ad272dd0a7cae505a99723baa836dfdaf071bfde4dbfb02dfc131351726da16aa859590b9b20c479f6ce0aa6c91414311d6f1991ef27932b6c1f404e7cf41f965de2417b9f07f81266035be43657f884550c5e55c861c5aa15bb1133913c87cdf2d8c0a6442cc6ac3c9c0340076fd949ba3d5b618098560116cc51236ac77f41099b6c6ba6eb69b726ee00ab41bb1e28ac613e6a4bcd465c302250377435e1da599aba3fb0e87aa9904823ad797bb13ab4ea1c447c7ff7bad3aa425913aaadb96e61fc4223beee0042ad6c1e88edb104c13f2a9235b28de1087b9156ad4693bb96d92d7cff9245fddf45a366b69e04b7b7a3ea16273ed919ed7e30b621050e389037b80054529ab66660c41cf44ca475ded8118430c19648af24a940f7ff8ffc5f45bd7e42e12ba7ea8732e5c7ce67c8015db1c80fafc0a3a2b61b087f69439634d8ef7d90a3148dd0f885244c64b4d73042ddb1712023a1446bc150042b0dd2e8ac0e5035ecdcdb8ae9eafbd5110504176d40dfc8433ac15274b8851de86aaa24f9ff6f9dc07d4ea674252b79ec67f0ece9306e46f440101df1f8bb5894eceed17cc5efbfce03f4e4189ef1758bae4ec63b9b43918b620ba9b0c845784c5631c40081eefc03403bae2dcf7fc924477a35fda1b83bbae82bcacec6f8c9709f08f42bcfd4d2648113d89e0915cc5e33213f0e72b3b72f5b11e0c337762bc190c51f72fefab7c7ce06c1a887237cfedc80a827f58153683c89e4ca8c5c88acb5d83b83eef2fe69d5d70b7b31f0f82a33677587c971dba290d716645e0d01a5628d1e90e3e4e91348786d6071d45b6fb1ff81f7fd10b9e6b6522bf532eb6f1d1761ff5e12857b5625cd3868256a87e306fd44a78b5c0fe619d9ee9e3b5c68777bae5e7178dbff8dbd318f5c1b8199321a881a3e8aef9730ebea6de7c3a21f9883c5d22d65cf763e06a61479d62f12511941fa30d18e50857918aff64b302efc59a02687e2e07058379fa7acf0d0b55296106f2061018653055607ff51394749665115a26847a3a5720f1aca7908b3e8984b6a32961aa219c0b23628d57d4bad398dbcf94e229c32d9eb590371b1f2dcfc44b03cb67b79af82a2b103019bcd2ab84ae2a46a183f42697e3651e815493ab17717651523a58b4ade539cd2de378be5ca41a303c903219f701db9cb14ab065c1a3009a60b23c32d36f79e1793da6aa8413639f85162539d1db3f01226371393f53a10e34346119ed5f1e2a91d6a16e065430125cd3d3b8e03602183032acf407c0b0f3a878bc0315fe8ab649bebddc84e6109bc1b93abbebce2f20b0f07d470b407b0dfd6f09adf4b11d6c9db5a1f2301ee0980067b2d6004029af121413301710d6766ab23ab198a1460320eb820fcbb0a6f8fffc104a1abca2d2aca26ae39523b4610af3be3b590011285d19c9fd669c72f2156e9a50ea5cad51a4b09f9fbffc9583ddfaeff3d829c2249e9fd490dc044312ab37ebaeb30d08182cabf15a5ee48845da5d2286e334dfd49b285e943a5a2e73ae788279f237c5cb29f3d6bad25d9b357bbf85f3280345530f6d63bcc7b8d2f035ed3f2caeede7fc19391b7eb50682cbb4bba9fdd82e7404c9ad3edebce782803e2ad1ce9a95123d3a1479d7e56ec0c73016fce13a468bf2e85a88d5d5e0deef4249ad4399fc05a80c00a9ddd4a465e1a75024afeeab214dd7a2d1e366f131a355a2c166718b3374051bf611d67a8796690ed94064fa23ef65999bce15fe386426638e1dca9e730e2cb40d3a916f9955e272fadee0e938dcf4a63a9730b80a01587ee428aca09d7419823b6e1d19998be72db62bebd9b15054848629a2286ac38ad37e59fe52f8df2ff3c945a7de1a633b1068311f23021bbca132566bb90b1cc004a443789fec605fd9a1d34add73801dc0048d9d54c52d9fe4d76f8691e27d6f4edd14a8c83a50623d2d3807cb844aa7d0e55947bf1df1a8ebe4a01cef5d244fa8e231e14d3cf5596d5846403348d4ca86ef8fa3c4623020a2c2c68bffaf0d577220f3e305e33d4da8b04a88e67b3f917e7c80a303dd7ee5b2bb2de14833eb07cc99f67b1dac43b158dc114717ff75e7b6ccbeb59fb5c54aa689fc66069ce47a4cb7b98677026412028da39ec6f1d0dce276940c5544ccbcea909220b20b6b0f1d2ed69d1009f9dd71ed35e7bbb5f760621ce8d9ca0d3b39cb847b7d0db1a9f39a03b67c0588c37467b49d4a889ed575c585170b345619bab1f384f64ec70a5f5b5a72fdc205aebe1794c78a101a16008e300d5399b8498a29d7087fcdcf98feb820eeea3aa669de3f74976c2c25c0784f32b54e7afcc8f046ce093c5aee2f72938f98664fd74aadaa363384a5252781623fc576b111c81db7f182907ea6e75d4cf0d1b7698f9c33f75da52417351abced7558f72858f2aaa16578035bd6b11cc09b1b6e9b0ff6b8012160347403f8a6a1ca7214ef2265f0e02798f8d9982d90b9756753c7dcefe9b48e6f6b36dddcfb672de2001269fabe9ae863846da6441a8a360080120d50cd66b865368693a2bb23bd0d71ce6de19cbf554437195f1baa31c89e641d3e12472fdd5af5f4941ab8ccea68b09fe4ee5d1035ca9b72ecc54903d35fa57e3282ddc7ec94f48f94a97d5a2a4b5c36aefa54f8bec58f84216284e4a6ecade11dd1dbb587e4121959b6c6a4e40cc89b8b0afe546926bfd6efb093f6a93108374a2cbcb98c65d746ce194fdad49ebb785b83fbe000a1ec9fb1e52c25b5b855631171a1cf8b3c50140ec4a761da8e367c972f710b66e4370684946989f21e213188cb2fd7e97d4387968e91f229e2da8c9ca8e29ca14e5f91a843a188e3abbf41e48bc3492677dc31be62b47039292bb607fd82bc8b0a6f0a34355f1c6b10f7e35fb7a37ee5614a0fad47b2871ad9146d80e3038894a9ad7a61ab7f552a382b1e021f3a78c0ac5c268f36c276e07e3e29e278b8c11c436182d91e57608660efb30406f0eab3c4919d53c9b7bfa7efb4ea3aff6d6e5a0d470ffaa3c6ac30c76b66208c6c322e9681457b81d491dd70a6bb1c47ad5030f4e1d3b34d40ca6b5002416f0f62b2f1a3af5eac5576190da4656e4104deb04e72b4ae512d749a5dc250c127199b80b78ac1f6a5b2636c2309421dbcab9b78c7fb0a2fbcfd8cd850b4b8ece6655ef592c3006cd70ce3ac4f40891dfa7901fdd115d821b71912119a9022a1d73a5328c025e374b929b5d15e6a5cc11a0233c4cbc6e683190bbfa551f082bb524bf4e051af11a424f112c465523950e5fa5908e6e8bd10b0ca185da28974145448e424f8c91db163085d39c74f274d83f30f6211c975f4542ff047de34460b09cc2d4720878a3f6fd4858552868359bdb291d94e383247d16e53edc02801b24b085615d38093eaa2a5d783a9a285c947cd3bc18665bfe05125b39d30418dd4cd53678aab26f985ee6c1a3b331bfff73fbc2f987d9d269c13f5595978a312a7e12ecccb5533025947de879ee5b9f8ffbb7c024a56370ee3692aa71a48d0fa6fff8861235cea1453d6839260d5195043e7d4c9b81c5299e01d6af38cdd4777d33ab7228e63b86ca64af6e3e6b056088e25d31a53cabcc59569e54f6b99a3dd7e42bbc1bf011beae557c06d9a33887d29dac3576bc498b5a6388e8b14e28683b21c05c242862a7053af52cc32307d1600cd46d58563485ab5f5049130d586910bd9573c25d9fdfb246718902970f9fa5df89c78b8419f81ce64cee0e0964a79d3015131773a8847df8f93f56ec6d49582a54e80eabf810b0586220af1bbc4c087d882360c6de29c3f27239ca41b6e6b605d861483ce0cb9d29445dc909c22def3fe20a6d36d1f2a7a65dbb4f1492d9d4d974e8d16d8ac42fcfd1e7ab8564110297c27be30e0d78c8a653dcc749aff8c06a79cd892184ebdd7a1275e0db0d76abf534a87cb6bcba146359384012132b5c8d8197771011856cdc3bf8141b901172f97c153c1de9ca36b57dd517274dbc18a19de2499ba0b4b97d2d498ce5efc65538f39b8ea2ec4f58cb32c2aca557ba48e3b2e03a3585e5c276cc17456d2632eed3b106fa5bb46bd13efaad5efab3257ab1e0d1c07fcc071143026bde22a03b54ca9fd7cca576333b6bf77835642dfab5fcd6a6a186ff7a8f89997f197e83af8f9db897379b3dd326e0dd36bd240d312448ad7f457c5d3d6e06f177b6ae86169653c8acd450b484c19a719cb3f272f7c8cb69ff9f51b9f570be8b9b975294aefd855fd5450a76c86f5a2d4a2245aec0a67e6b7f9349690b7eda028cafcc618d4596a1f2783b901c4ac43cb528119a0de9a7b72e305589257c54b9eecfca443da96f794e4ccb40371aeac4b4e76fbb200c2abaa1bba08ed701c95fee7aa537f4bc1127af18173ce5f121b75357dd7af405d3858f1d54cc8a502f7a6a8f811dd4eef456dbc675bc4f4971e50a824aceaf154c055643a6280ec16f93f166f9378a09a66dfbc1d23d7b5c8e4adb0f17a972d801ff15931531d197c353a9c75ecd691b7559face042d04b585b65da3214fe3bb630a11ed6b21e932762af144158d1eeebabc70dde45c1084df8ff40ec64e2bf61f1a5331ee49d16a0e897fa618990f28dede817348d537ed69fee288049cedd8526d6d813e1a2621d17add66df92b63e2fa2cb4571722dfdf014cdce65b218921df8e92e58072e458e2106bfeb3f8a4dccb22464024831ccd90f090362a418171d574bbbd78f7007ebd26f3a4b81bdb8cfa59db0c819577e54a62737299df75e35deb1d19c0319600497982e645426e9397c0145d90ee1eea967ba7da3ac7a616f8bcdebd8fb292c856af926135b40a9916242742c705ec33f45ab19b4b6502ba689b6976186f7f989d8d6c0fedefeaacc9c8db87f65899cc986004e1e19164cce56943054eaf07b819cfbcac9543eb76d69056da2d7f2272d2489ebf73a08cfce8b7cf0a9ec6e53864b6e16ae01a2f595f7e7f9a822843c6286bee4d3124e0cfe84800873c265c187e818610bb42b8a91e9a509be114107fe0837017410b7ffecafe748a3afe134ef68cb7b547c496c5acacd3ae3dcc9c8b72bd5f831e30856b7cc51761ef7b8ef5775a65c9710a29d76f39d56319ffe"}) (async) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f00000014c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048000}, 0x20004000) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100fcffffff000000001800000008000300", @ANYRES32=r1, @ANYBLOB="3e853cec303e1b320f88a32b710ef7378d39bb9f2ca2df042ac3a74fe486059eca18744ff5b9230790adc4baf72cd111b1933943ffadb02f1ad49ecec42bbad0cdb7f153deacc78c1209c204dc38812d046ad401e5fd97cd880442f891aac602200c299a70b5676337b0ce67b31b984973a27281a4a64ddb3f9b2d992b38b2d474b3f6cce115f02add58607194c666078ac590625e658652e5bfeef3fe35f5a875594020099b9eeda00e948d3079060aa9ad1a4d02441b"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001540), r0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r6, &(0x7f0000003640)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003600)={&(0x7f00000035c0)={0x1c, r7, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) 1m6.856949514s ago: executing program 2 (id=6527): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x4, 0x4) 1m6.457971499s ago: executing program 4 (id=6528): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x68, r1, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x94}, 0x8000) writev(r0, &(0x7f0000000180), 0x100000000000003c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003535b3d215ee0169395f"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}}, 0x5c) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80c}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}, @IFLA_PORT_SELF={0x18, 0x19, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "58bf91f3e60897297a3578661bed658b"}]}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}]}, 0x48}}, 0x44005) 1m6.391602104s ago: executing program 0 (id=6529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=ANY=[@ANYBLOB="580000001000010009000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="00000000da44000024001a8020000a8014000700fe8000000000000000020040000000000500080002000000140003007866726d30"], 0x58}}, 0x240488c4) r2 = socket$inet6(0xa, 0x2, 0x0) close(0x3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r2, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e20, 0x80000, @dev={0xfe, 0x80, '\x00', 0x20}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000001140)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}], 0x18}, 0x40c0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r0) sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x34, r3, 0x1, 0x70bd28, 0x25df9bfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x34}, 0x1, 0x4000000000000000, 0x0, 0x882}, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000002180)=ANY=[], 0x0, 0x26}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0xf, &(0x7f0000000b80)=@ringbuf, &(0x7f0000000580)='syzkaller\x00', 0x5, 0x20, &(0x7f00000000c0)=""/32, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000400)={0x0, 0x800000}, 0x8}, 0x90) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="3b07040000080000fe800000000000000000000000000001052600000000000700"/64], 0x40) sendto$inet6(r5, &(0x7f0000000400)="0123456789", 0xa, 0x0, &(0x7f0000000500)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1m6.181833293s ago: executing program 2 (id=6530): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001100050026bd7000ffdbdf25070fef93", @ANYRES32=r1, @ANYBLOB="cfe819000000000014001a80100005"], 0x34}, 0x1, 0x7000000, 0x0, 0x2800c895}, 0x20040854) 1m6.181299543s ago: executing program 1 (id=6531): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x90) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000020202000900010073797a09"], 0x2c}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080029bd7000fedbdf25030000000900010073797a30000000000900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r8, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) 1m6.026808359s ago: executing program 4 (id=6532): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000013000100dffffffffffffff607"], 0x14}], 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) (async) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r2, 0x5, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote}, @in={0x2, 0x4e22, @multicast1}], 0x20) (rerun: 32) r3 = socket$rds(0x15, 0x5, 0x0) ioctl$XFS_IOC_GETBMAPX(r3, 0xc0205838, &(0x7f0000000040)={0x7, 0x8000000000000000, 0x100000001, 0x31, 0x8000, 0x1, 0xa}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000091108c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r5 = socket(0x200000000000011, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$sock_cred(r5, 0x1, 0x11, 0xfffffffffffffffe, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000a40000000000000063015600000000009500000000000000e10b7cb325f83374040925120e9fe2aa041b4b5d9913b50cd900ed46982710e726c5d82c8854fccd41f817f298a5366ea89294cbf8ce443c7a2047613c50bc45bfa32842ef98879bcc39e52a5f5ae80cfb04756d07822fc2d8bafa351b68cbcf24a8e1be1f0804bc7b0edf21eb43229d40fcd86dcfee1b08fb9bcf41cf03cee336f6f112d5f1d2366e6e21bac227f8ae26cd9869f63300ae249bcea4d2405839c4d38b5b0a0000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) (async, rerun: 64) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x54, r7, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x79}}}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1b920fd1ebfc04c2eee7c7b3e2"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "72388b568a"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "0f53fa75fd"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0xc804}, 0x8001) (async, rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r6, @ANYBLOB="0000000003120100500012800b00010062726964676500004000028008000500010000000600270000000000080001001500080005002500"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 52.934049759s ago: executing program 0 (id=6533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x4}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xcc}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0xcc, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x38, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x4}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @empty}]}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) socket$tipc(0x1e, 0x2, 0x0) (async) r2 = socket$tipc(0x1e, 0x2, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) (async) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000180)=@qipcrtr={0x2a, 0x4, 0x2}, 0x80, &(0x7f0000003880)=[{&(0x7f00000002c0)="27031c00160016000000001106afacf706e1054000006558", 0x18}, {&(0x7f0000000640)="22ea7e2bb1b280b1718a70a8f814e3ba81f4d19edcce18b75bf5034bb80875257d68b199f247eac81ab52f03e698103d9d05000000000000007017285d0e1b1dabc9ec2d341f383840698a3fb95e9b1aaf2bb8cb0191e7e392db050fa06124f73d1c36daaca9921f207f88516871989276bad26884d4208acc499b17a4d62f2bbb14db3e0007478df45cff3aa28b8e92621be927ca29819dee3285effdab982e387002c3d38fb39d0c01de235b9f10e0ca40f84bf2d57e92fff34cc8c27d81acd4665c91d4d8cb8b843e996c598047b5c3e3572b3a3012ad63fd354f546f", 0xde}], 0x2}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r5, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) ioctl$RFKILL_IOCTL_NOINPUT(r3, 0x5202) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000001440)={'team0\x00', &(0x7f0000001400)=@ethtool_eee={0x44, 0x4, 0x10, 0x2, 0x41e, 0x9, 0x7, 0xb, [0x3, 0x8000]}}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) ioctl$FS_IOC_SETFSLABEL(r1, 0x41009432, &(0x7f0000000180)="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") bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="00bf951496935b9d36e47d6700050000a577d4d9337e0d310000000000779f9fa2e91cf24af1ccc935d366c047a78fee18000000000000005af4a7db3b1ebf2645589098a327d63ecbd5e23c039b1c21b7c73ea3ce5a35ff5c8d9aecbb8b"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc4, &(0x7f00000002c0)=""/196, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 0s ago: executing program 32 (id=6531): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200047bd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f700004e236ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000b80)=ANY=[@ANYBLOB="021800001c000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000aa00000000000000000800120000001500000000000000000006000000000000000000000000000000e0000002000000000000000000000000fc01000000000000000000000000000005000600000000000a00000000000000000000000000000000000000000000000000000000000000080019"], 0xe0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r5) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r6, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {0x0, 0x4108}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4c000) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=@raw=[@call={0x85, 0x0, 0x0, 0xae}, @exit], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x90) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000000000020202000900010073797a09"], 0x2c}, 0x1, 0x40030000000000}, 0x0) sendmsg$SMC_PNETID_DEL(r7, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="080029bd7000fedbdf25030000000900010073797a30000000000900010073797a3000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x18, r8, 0xd574370038829967, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newlink={0x40, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) kernel console output (not intermixed with test programs): 4050][T24116] geneve2: entered promiscuous mode [ 837.326985][T24116] vxlan0: entered promiscuous mode [ 837.333956][T24116] dvmrp8: entered promiscuous mode [ 837.346570][T24116] tipc: Resetting bearer [ 837.377345][T24116] syzkaller0: entered promiscuous mode [ 837.403012][T24116] vxcan2: entered promiscuous mode [ 837.414363][T24116] vxcan3: entered promiscuous mode [ 837.499981][T24116] bond0: entered promiscuous mode [ 837.502703][T24116] veth2: entered promiscuous mode [ 837.537911][T24116] veth3: entered promiscuous mode [ 837.552828][T24116] ip6tnl1: entered promiscuous mode [ 837.553278][T24116] bond1: entered promiscuous mode [ 837.553650][T24116] veth4: entered promiscuous mode [ 837.574415][T24116] veth5: entered promiscuous mode [ 837.584915][T24116] ip6gre1: entered promiscuous mode [ 837.591430][T24116] veth6: entered promiscuous mode [ 837.591847][T24116] veth7: entered promiscuous mode [ 837.669977][T24116] erspan1: entered promiscuous mode [ 837.675470][T24116] vlan0.4: entered promiscuous mode [ 837.802394][T24116] ipip0: entered promiscuous mode [ 837.810656][T24116] syztnl1: entered promiscuous mode [ 837.818802][T24116] veth8: entered promiscuous mode [ 837.818998][T24116] veth9: entered promiscuous mode [ 837.873467][T24116] vti60: entered promiscuous mode [ 837.941463][T24116] bond3: entered promiscuous mode [ 837.954961][T24116] geneve3: entered promiscuous mode [ 837.965256][T24116] ip6gre2: entered promiscuous mode [ 837.965877][T24116] ip6tnl2: entered promiscuous mode [ 837.999928][ T7323] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.009498][ T7310] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.009553][ T7310] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.190307][T24155] netlink: 15 bytes leftover after parsing attributes in process `syz.1.5540'. [ 839.385508][T24162] xt_nfacct: accounting object `' does not exist [ 840.248184][T24187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5551'. [ 840.261302][T24187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5551'. [ 840.556105][T24194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5551'. [ 840.556236][T24194] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5551'. [ 842.367703][T24225] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.5558'. [ 843.393238][T24247] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5563'. [ 843.537815][T24247] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 844.546573][T24276] vcan0: tx address claim with dest, not broadcast [ 845.381178][T24285] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5574'. [ 845.885488][T24302] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5579'. [ 846.327583][T24314] xt_nfacct: accounting object `' does not exist [ 847.329730][T24336] netlink: 'syz.3.5585': attribute type 4 has an invalid length. [ 848.038478][T24349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5589'. [ 848.073706][T24349] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5589'. [ 848.091202][T24349] netlink: 'syz.0.5589': attribute type 1 has an invalid length. [ 848.122861][T24349] netlink: 'syz.0.5589': attribute type 1 has an invalid length. [ 848.521099][T24359] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.5592'. [ 849.352345][T24378] FAULT_INJECTION: forcing a failure. [ 849.352345][T24378] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 849.370944][T24378] CPU: 1 UID: 0 PID: 24378 Comm: syz.2.5598 Not tainted syzkaller #0 PREEMPT(full) [ 849.370992][T24378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 849.371007][T24378] Call Trace: [ 849.371018][T24378] [ 849.371029][T24378] dump_stack_lvl+0xe8/0x150 [ 849.371072][T24378] should_fail_ex+0x410/0x560 [ 849.371134][T24378] _copy_to_iter+0x404/0x1810 [ 849.371185][T24378] ? __pfx__copy_to_iter+0x10/0x10 [ 849.371220][T24378] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 849.371256][T24378] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 849.371286][T24378] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 849.371407][T24378] __skb_datagram_iter+0xf8/0x980 [ 849.371434][T24378] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 849.371468][T24378] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 849.371504][T24378] skb_copy_datagram_iter+0xb5/0x240 [ 849.371535][T24378] netlink_recvmsg+0x2b9/0xa50 [ 849.371566][T24378] ? irqentry_exit+0x218/0x910 [ 849.371606][T24378] ? __pfx_netlink_recvmsg+0x10/0x10 [ 849.371633][T24378] ? lock_acquire+0x115/0x350 [ 849.371660][T24378] ? aa_sock_msg_perm+0x144/0x210 [ 849.371691][T24378] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 849.371719][T24378] ? security_socket_recvmsg+0x7e/0x2c0 [ 849.371780][T24378] ? __pfx_netlink_recvmsg+0x10/0x10 [ 849.371828][T24378] sock_recvmsg+0x196/0x1e0 [ 849.371901][T24378] ____sys_recvmsg+0x1e6/0x4a0 [ 849.371937][T24378] ? __pfx_____sys_recvmsg+0x10/0x10 [ 849.371979][T24378] ? import_iovec+0x73/0xa0 [ 849.372007][T24378] ___sys_recvmsg+0x213/0x5a0 [ 849.372038][T24378] ? __pfx____sys_recvmsg+0x10/0x10 [ 849.372089][T24378] ? lock_acquire+0x115/0x350 [ 849.372129][T24378] ? __fget_files+0x3a2/0x420 [ 849.372174][T24378] do_recvmmsg+0x31a/0x7f0 [ 849.372210][T24378] ? __pfx_do_recvmmsg+0x10/0x10 [ 849.372238][T24378] ? __mutex_unlock_slowpath+0x752/0x900 [ 849.372283][T24378] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 849.372320][T24378] ? __fget_files+0x3a2/0x420 [ 849.372360][T24378] __x64_sys_recvmmsg+0x198/0x250 [ 849.372391][T24378] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 849.372438][T24378] do_syscall_64+0x166/0x520 [ 849.372472][T24378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.372497][T24378] ? clear_bhb_loop+0x70/0xc0 [ 849.372526][T24378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.372551][T24378] RIP: 0033:0x7f23c0b9e159 [ 849.372572][T24378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.372591][T24378] RSP: 002b:00007f23bedf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 849.372618][T24378] RAX: ffffffffffffffda RBX: 00007f23c0e25fa0 RCX: 00007f23c0b9e159 [ 849.372635][T24378] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000003 [ 849.372651][T24378] RBP: 00007f23bedf6090 R08: 0000000000000000 R09: 0000000000000000 [ 849.372667][T24378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.372682][T24378] R13: 00007f23c0e26038 R14: 00007f23c0e25fa0 R15: 00007ffd5cd882f8 [ 849.372718][T24378] [ 850.730725][T24394] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 851.152828][T24405] netdevsim netdevsim0: Firmware load for './file0/file0/..' refused, path contains '..' component [ 852.383254][T24432] ip_tables: iptables: counters copy to user failed while replacing table [ 852.710449][T24438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5617'. [ 852.825399][T24443] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 855.132097][T24474] netlink: 'syz.1.5625': attribute type 2 has an invalid length. [ 856.896611][T24508] netlink: 'syz.1.5637': attribute type 1 has an invalid length. [ 857.070661][T24508] 8021q: adding VLAN 0 to HW filter on device bond11 [ 857.092386][T24516] netlink: 'syz.2.5638': attribute type 1 has an invalid length. [ 857.214660][T24515] bond11: (slave ip6gretap1): making interface the new active one [ 857.303194][T24515] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 857.314458][T24513] bond11: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 857.356466][T24513] bond11: entered allmulticast mode [ 857.356592][T24513] ip6gretap1: entered allmulticast mode [ 857.872286][T24517] veth11: entered allmulticast mode [ 857.888895][T24527] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5642'. [ 857.925692][T24517] bond7: (slave veth11): Enslaving as an active interface with a down link [ 857.946010][T24530] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5642'. [ 858.106247][T24521] bond5: (slave veth0_to_bond): Releasing active interface [ 858.159374][T24521] bond7: (slave veth0_to_bond): making interface the new active one [ 858.176085][T24521] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 858.409336][T24527] syzkaller1: entered promiscuous mode [ 858.409460][T24527] syzkaller1: entered allmulticast mode [ 858.476999][T24529] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5643'. [ 858.492856][T24527] netlink: 'syz.4.5642': attribute type 21 has an invalid length. [ 858.503021][T24527] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5642'. [ 858.514427][T24527] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5642'. [ 858.944750][T24541] syzkaller0: entered promiscuous mode [ 858.961454][T24541] syzkaller0: entered allmulticast mode [ 859.066718][T24548] x_tables: ip_tables: osf match: only valid for protocol 6 [ 859.562939][T24546] FAULT_INJECTION: forcing a failure. [ 859.562939][T24546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 859.646613][T24546] CPU: 1 UID: 0 PID: 24546 Comm: syz.0.5647 Not tainted syzkaller #0 PREEMPT(full) [ 859.646649][T24546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.646664][T24546] Call Trace: [ 859.646673][T24546] [ 859.646684][T24546] dump_stack_lvl+0xe8/0x150 [ 859.646724][T24546] should_fail_ex+0x410/0x560 [ 859.646765][T24546] prepare_alloc_pages+0x223/0x600 [ 859.646797][T24546] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 859.646838][T24546] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 859.646865][T24546] ? __pfx_policy_nodemask+0x10/0x10 [ 859.646897][T24546] ? __lock_acquire+0x6df/0x2e50 [ 859.646922][T24546] alloc_pages_mpol+0x21e/0x390 [ 859.646954][T24546] folio_alloc_mpol_noprof+0x39/0x160 [ 859.646983][T24546] vma_alloc_folio_noprof+0xe1/0x1e0 [ 859.647013][T24546] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 859.647040][T24546] ? lock_acquire+0x115/0x350 [ 859.647069][T24546] do_pte_missing+0x173a/0x34b0 [ 859.647153][T24546] handle_mm_fault+0x1a53/0x3750 [ 859.647191][T24546] ? handle_mm_fault+0xf1/0x3750 [ 859.647230][T24546] ? __pfx_handle_mm_fault+0x10/0x10 [ 859.647277][T24546] ? lock_mm_and_find_vma+0xa7/0x340 [ 859.647311][T24546] do_user_addr_fault+0x746/0x1340 [ 859.647359][T24546] exc_page_fault+0x6a/0xc0 [ 859.647391][T24546] asm_exc_page_fault+0x26/0x30 [ 859.647413][T24546] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 859.647439][T24546] Code: 66 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 4f 66 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 859.647457][T24546] RSP: 0018:ffffc900072b74f8 EFLAGS: 00050202 [ 859.647477][T24546] RAX: ffff88805a198001 RBX: ffff88805a1981a6 RCX: 0000000000000312 [ 859.647493][T24546] RDX: 0000000000000000 RSI: ffff88805a198b66 RDI: 0000200000002000 [ 859.647516][T24546] RBP: ffffc900072b7670 R08: ffff88805a198e77 R09: 1ffff1100b4331ce [ 859.647533][T24546] R10: dffffc0000000000 R11: ffffed100b4331cf R12: dffffc0000000000 [ 859.647549][T24546] R13: 0000000000000cd2 R14: 0000200000002312 R15: 00007ffffffff000 [ 859.647582][T24546] _copy_to_iter+0x619/0x1810 [ 859.647614][T24546] ? irqentry_exit+0x218/0x910 [ 859.647643][T24546] ? trace_irq_disable+0x3b/0x140 [ 859.647679][T24546] ? __pfx__copy_to_iter+0x10/0x10 [ 859.647713][T24546] ? _raw_spin_unlock_irqrestore+0x47/0x80 [ 859.647743][T24546] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 859.647772][T24546] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 859.647803][T24546] __skb_datagram_iter+0xf8/0x980 [ 859.647827][T24546] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 859.647857][T24546] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 859.647891][T24546] skb_copy_datagram_iter+0xb5/0x240 [ 859.647939][T24546] netlink_recvmsg+0x2b9/0xa50 [ 859.647979][T24546] ? __pfx_netlink_recvmsg+0x10/0x10 [ 859.648006][T24546] ? lock_acquire+0x115/0x350 [ 859.648031][T24546] ? aa_sock_msg_perm+0x144/0x210 [ 859.648061][T24546] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 859.648087][T24546] ? security_socket_recvmsg+0x7e/0x2c0 [ 859.648116][T24546] ? __pfx_netlink_recvmsg+0x10/0x10 [ 859.648144][T24546] sock_recvmsg+0x196/0x1e0 [ 859.648176][T24546] ____sys_recvmsg+0x1e6/0x4a0 [ 859.648210][T24546] ? __pfx_____sys_recvmsg+0x10/0x10 [ 859.648251][T24546] ? import_iovec+0x73/0xa0 [ 859.648278][T24546] ___sys_recvmsg+0x213/0x5a0 [ 859.648308][T24546] ? __pfx____sys_recvmsg+0x10/0x10 [ 859.648338][T24546] ? lock_acquire+0x115/0x350 [ 859.648375][T24546] ? __fget_files+0x3a2/0x420 [ 859.648414][T24546] do_recvmmsg+0x31a/0x7f0 [ 859.648447][T24546] ? __pfx_do_recvmmsg+0x10/0x10 [ 859.648485][T24546] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 859.648525][T24546] ? __fget_files+0x3a2/0x420 [ 859.648565][T24546] __x64_sys_recvmmsg+0x198/0x250 [ 859.648593][T24546] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 859.648631][T24546] do_syscall_64+0x166/0x520 [ 859.648673][T24546] ? trace_irq_disable+0x3b/0x140 [ 859.648693][T24546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.648714][T24546] ? clear_bhb_loop+0x70/0xc0 [ 859.648739][T24546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.648760][T24546] RIP: 0033:0x7f1cc8b9e159 [ 859.648779][T24546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.648796][T24546] RSP: 002b:00007f1cc9aa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 859.648817][T24546] RAX: ffffffffffffffda RBX: 00007f1cc8e26090 RCX: 00007f1cc8b9e159 [ 859.648833][T24546] RDX: 0000000000000007 RSI: 00002000000006c0 RDI: 0000000000000003 [ 859.648847][T24546] RBP: 00007f1cc9aa4090 R08: 0000000000000000 R09: 0000000000000000 [ 859.648860][T24546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.648873][T24546] R13: 00007f1cc8e26128 R14: 00007f1cc8e26090 R15: 00007ffdbaf4d158 [ 859.648904][T24546] [ 860.963360][T24558] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.5652'. [ 861.167762][T24562] xt_hashlimit: max too large, truncated to 1048576 [ 861.199649][T24562] No such timeout policy "syz1" [ 861.779218][T24153] Bluetooth: hci3: command 0x0406 tx timeout [ 861.820525][T24575] x_tables: ip_tables: osf match: only valid for protocol 6 [ 862.474914][T24591] syzkaller0: left promiscuous mode [ 862.720647][ T7323] nci: nci_rx_work: unknown MT 0x1 [ 863.697489][T24617] x_tables: ip_tables: osf match: only valid for protocol 6 [ 864.253364][T24622] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5675'. [ 864.306741][ T1157] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 865.184320][T24625] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5676'. [ 865.539410][T24593] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 866.917601][T24644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5684'. [ 866.934410][T24645] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5683'. [ 867.768423][T24664] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 867.974633][T24671] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5693'. [ 868.225055][T24672] ip6tnl1: entered promiscuous mode [ 868.233902][T24672] ip6tnl1: entered allmulticast mode [ 868.806648][T24685] netlink: 'syz.2.5696': attribute type 2 has an invalid length. [ 869.672077][T24705] openvswitch: netlink: IP tunnel dst address not specified [ 869.926096][T24710] veth15: entered allmulticast mode [ 870.189689][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.339545][T24718] netlink: 'syz.3.5706': attribute type 1 has an invalid length. [ 871.138050][T24721] veth9: entered allmulticast mode [ 871.174627][T24721] bond6: (slave veth9): Enslaving as an active interface with a down link [ 871.213490][T24724] bond5: (slave veth0_to_bond): Releasing backup interface [ 871.246652][T24724] bond6: (slave veth0_to_bond): making interface the new active one [ 871.260047][T24724] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 871.679557][T24746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5711'. [ 871.712722][T24747] x_tables: ip_tables: osf match: only valid for protocol 6 [ 871.774456][T24745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5711'. [ 872.360107][T24762] xt_nfacct: accounting object `' does not exist [ 872.427317][T24763] syzkaller1: entered promiscuous mode [ 872.428233][T24763] syzkaller1: entered allmulticast mode [ 872.531983][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.553198][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.586301][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.630992][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.643579][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.651174][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.680373][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.762120][T24764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5719'. [ 872.842472][T24775] netlink: 'syz.4.5723': attribute type 1 has an invalid length. [ 873.436135][T24774] veth11: entered allmulticast mode [ 873.503765][T24774] bond4: (slave veth11): Enslaving as an active interface with a down link [ 873.514990][T24781] veth0_to_bond: left promiscuous mode [ 873.549197][T24781] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 873.581771][T24791] x_tables: ip_tables: osf match: only valid for protocol 6 [ 874.686961][T24804] xt_nfacct: accounting object `' does not exist [ 874.800135][T24803] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 874.999309][T24809] Bluetooth: MGMT ver 1.23 [ 876.076643][T24834] netlink: 'syz.4.5743': attribute type 1 has an invalid length. [ 876.972182][T24838] veth13: entered allmulticast mode [ 876.997698][T24838] bond5: (slave veth13): Enslaving as an active interface with a down link [ 877.117240][T24841] bond4: (slave veth0_to_bond): Releasing active interface [ 877.188367][T24841] bond5: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 878.264582][ T1657] wlan0 speed is unknown, defaulting to 1000 [ 878.265081][ T1657] syq0: Port: 1 Link DOWN [ 878.695899][T24882] __nla_validate_parse: 17 callbacks suppressed [ 878.695985][T24882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5760'. [ 879.892219][T24906] netlink: 'syz.2.5768': attribute type 10 has an invalid length. [ 880.089729][T24906] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 880.243483][T24906] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 880.903642][ T7323] bond0: (slave netdevsim1): link status definitely up [ 881.503010][T24927] FAULT_INJECTION: forcing a failure. [ 881.503010][T24927] name failslab, interval 1, probability 0, space 0, times 0 [ 881.503256][T24927] CPU: 0 UID: 0 PID: 24927 Comm: syz.4.5774 Not tainted syzkaller #0 PREEMPT(full) [ 881.503284][T24927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 881.503300][T24927] Call Trace: [ 881.503309][T24927] [ 881.503321][T24927] dump_stack_lvl+0xe8/0x150 [ 881.503361][T24927] should_fail_ex+0x410/0x560 [ 881.503402][T24927] ? __alloc_skb+0x1db/0x7a0 [ 881.503437][T24927] should_failslab+0xa8/0x100 [ 881.503466][T24927] ? __alloc_skb+0x1db/0x7a0 [ 881.503500][T24927] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 881.503536][T24927] ? __alloc_skb+0x18d/0x7a0 [ 881.503571][T24927] ? __alloc_skb+0x1db/0x7a0 [ 881.503612][T24927] __alloc_skb+0x1db/0x7a0 [ 881.503659][T24927] netlink_sendmsg+0x5d4/0xb40 [ 881.503699][T24927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.503738][T24927] ? apparmor_socket_sendmsg+0x98/0x360 [ 881.503777][T24927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 881.503805][T24927] sock_sendmsg_nosec+0x13a/0x180 [ 881.503841][T24927] ____sys_sendmsg+0x54e/0x850 [ 881.503873][T24927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 881.503908][T24927] ? import_iovec+0x73/0xa0 [ 881.503938][T24927] ___sys_sendmsg+0x2a5/0x360 [ 881.503962][T24927] ? __lock_acquire+0x6df/0x2e50 [ 881.503991][T24927] ? __pfx____sys_sendmsg+0x10/0x10 [ 881.504054][T24927] ? __fget_files+0x2a/0x420 [ 881.504083][T24927] ? __fget_files+0x3a2/0x420 [ 881.504125][T24927] __x64_sys_sendmsg+0x1b1/0x290 [ 881.504164][T24927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 881.504211][T24927] do_syscall_64+0x166/0x520 [ 881.504246][T24927] ? trace_irq_disable+0x3b/0x140 [ 881.504269][T24927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.504292][T24927] ? clear_bhb_loop+0x70/0xc0 [ 881.504320][T24927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.504343][T24927] RIP: 0033:0x7fb0cb39e159 [ 881.504364][T24927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.504385][T24927] RSP: 002b:00007fb0cc285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 881.504410][T24927] RAX: ffffffffffffffda RBX: 00007fb0cb625fa0 RCX: 00007fb0cb39e159 [ 881.504427][T24927] RDX: 0000000000000010 RSI: 0000200000000480 RDI: 0000000000000003 [ 881.504442][T24927] RBP: 00007fb0cc285090 R08: 0000000000000000 R09: 0000000000000000 [ 881.504458][T24927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 881.504472][T24927] R13: 00007fb0cb626038 R14: 00007fb0cb625fa0 R15: 00007ffd4a453718 [ 881.504508][T24927] [ 882.296937][T24938] x_tables: ip_tables: osf match: only valid for protocol 6 [ 882.573911][T24945] netlink: 'syz.0.5780': attribute type 1 has an invalid length. [ 883.038837][T24948] veth17: entered allmulticast mode [ 883.083139][T24956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5781'. [ 883.102790][T24948] bond17: (slave veth17): Enslaving as an active interface with a down link [ 883.691184][T24945] bond14: (slave veth0_to_bond): Releasing active interface [ 883.757640][T24945] bond17: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 884.500367][T24980] bridge4: the hash_elasticity option has been deprecated and is always 16 [ 884.804230][T24985] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 886.146147][T25011] ±ÿª¨úrBº“€: entered promiscuous mode [ 886.165684][T25011] tunl0: entered promiscuous mode [ 886.188060][T25011] gre0: entered promiscuous mode [ 886.488403][T25011] gretap0: entered promiscuous mode [ 886.868767][T25011] ip_vti0: entered promiscuous mode [ 887.057943][T25011] ip6_vti0: entered promiscuous mode [ 887.157332][T25011] sit0: entered promiscuous mode [ 887.209312][T25011] ip6tnl0: entered promiscuous mode [ 887.357324][T25011] ip6gre0: entered promiscuous mode [ 887.835725][T25011] syz_tun: entered promiscuous mode [ 888.013257][T25056] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5803'. [ 888.050825][T25011] ip6gretap0: entered promiscuous mode [ 888.195715][T25011] bridge0: port 1(team0) entered disabled state [ 888.196475][T25011] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.240127][T25011] bridge0: entered promiscuous mode [ 888.467115][T25011] vcan0: entered promiscuous mode [ 888.501256][T25011] .`: entered promiscuous mode [ 888.509713][T25011] bond_slave_0: entered promiscuous mode [ 888.510169][T25011] bond_slave_1: entered promiscuous mode [ 888.710555][T25011] nlmon0: entered promiscuous mode [ 888.842115][T25011] batadv0: entered promiscuous mode [ 888.907760][T25011] vxcan0: entered promiscuous mode [ 888.987326][T25011] vxcan1: entered promiscuous mode [ 888.994931][T25011] veth0: entered promiscuous mode [ 889.013828][T25011] veth1: entered promiscuous mode [ 889.056921][T25011] wg0: entered promiscuous mode [ 889.113677][T25011] wg1: entered promiscuous mode [ 889.220517][T25011] wg2: entered promiscuous mode [ 889.245674][T25011] veth1_to_bridge: entered promiscuous mode [ 889.273989][T25011] veth0_to_bond: entered promiscuous mode [ 889.312884][T25011] veth1_to_bond: entered promiscuous mode [ 889.330938][T25011] veth0_to_team: entered promiscuous mode [ 889.351254][T25011] veth1_to_team: entered promiscuous mode [ 889.369242][T25011] veth0_to_batadv: entered promiscuous mode [ 889.383918][T25011] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.397817][T25011] batadv_slave_0: entered promiscuous mode [ 889.412857][T25011] veth1_to_batadv: entered promiscuous mode [ 889.462985][T25011] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.475020][T25011] batadv_slave_1: entered promiscuous mode [ 889.669839][T25011] xfrm0: entered promiscuous mode [ 889.737921][T25011] veth0_to_hsr: entered promiscuous mode [ 889.816309][T25011] veth1_to_hsr: entered promiscuous mode [ 890.280984][T25011] veth1_virt_wifi: entered promiscuous mode [ 890.348746][T25011] veth0_virt_wifi: entered promiscuous mode [ 890.554893][T25011] virt_wifi0: entered promiscuous mode [ 890.635503][T25011] vlan0: entered promiscuous mode [ 890.702021][T25011] vlan1: entered promiscuous mode [ 890.804523][T25011] macvlan0: entered promiscuous mode [ 890.874651][T25011] macvlan1: entered promiscuous mode [ 890.936191][T25011] ipvlan0: entered promiscuous mode [ 890.960612][T25011] ipvlan1: entered promiscuous mode [ 891.168620][T25011] macvtap0: entered promiscuous mode [ 891.195490][T25011] macsec0: entered promiscuous mode [ 891.334887][T25011] geneve0: entered promiscuous mode [ 891.539398][T25011] geneve1: entered promiscuous mode [ 891.591574][T25011] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 891.746802][T25011] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 891.891345][T25011] netdevsim netdevsim1 netdevsim2: entered promiscuous mode [ 891.999835][T25011] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 892.034870][T25011] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 892.134916][T25011] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 892.181542][T25011] vxlan0: entered promiscuous mode [ 892.182028][T25011] ipip0: entered promiscuous mode [ 892.182490][T25011] syztnl2: entered promiscuous mode [ 892.207072][T25011] mac80211_hwsim hwsim22 dvmrp0: entered promiscuous mode [ 892.207494][T25011] ip6erspan0: entered promiscuous mode [ 892.225033][T25011] bridge1: entered promiscuous mode [ 892.314574][T25011] veth1_macvtap.4: entered promiscuous mode [ 892.332054][T25011] gtp0: entered promiscuous mode [ 892.335061][T25011] mac80211_hwsim hwsim38 wlan2: entered promiscuous mode [ 892.337342][T25011] bond1: entered promiscuous mode [ 892.359535][T25011] bond2: entered promiscuous mode [ 892.364936][T25011] bond3: entered promiscuous mode [ 892.365948][T25011] veth2: entered promiscuous mode [ 892.380117][T25011] veth3: entered promiscuous mode [ 892.423935][T25011] bond4: entered promiscuous mode [ 892.433239][T25011] veth4: entered promiscuous mode [ 892.440279][T25011] veth5: entered promiscuous mode [ 892.507298][T25011] bridge2: entered promiscuous mode [ 892.533553][T25011] bond6: entered promiscuous mode [ 892.571064][T25011] bond0: entered promiscuous mode [ 892.577419][T25011] veth6: entered promiscuous mode [ 892.588866][T25011] veth7: entered promiscuous mode [ 892.600720][T25011] gtp1: entered promiscuous mode [ 892.608282][T25011] bridge3: entered promiscuous mode [ 892.615102][T25011] bond7: entered promiscuous mode [ 892.621729][T25011] veth8: entered promiscuous mode [ 892.629931][T25011] veth9: entered promiscuous mode [ 892.713826][T25011] bond8: entered promiscuous mode [ 892.716485][T25011] veth10: entered promiscuous mode [ 892.729577][T25011] veth11: entered promiscuous mode [ 892.789547][T25011] rose0: entered promiscuous mode [ 892.792361][T25011] nicvf0: entered promiscuous mode [ 892.794773][T25011] vlan4: entered promiscuous mode [ 892.810386][T25011] pim6reg: entered promiscuous mode [ 892.972426][T25011] bond9: entered promiscuous mode [ 892.985366][T25011] veth12: entered promiscuous mode [ 892.993515][T25011] veth13: entered promiscuous mode [ 893.004964][T25011] syztnl1: entered promiscuous mode [ 893.015250][T25011] bond10: entered promiscuous mode [ 893.045595][T25011] veth14: entered promiscuous mode [ 893.074852][T25011] veth15: entered promiscuous mode [ 893.140322][T25011] macsec1: entered promiscuous mode [ 893.154522][T25011] bond11: entered promiscuous mode [ 893.164025][T25011] ip6gretap1: entered promiscuous mode [ 893.297686][T25052] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 893.306762][T25052] syzkaller1: linktype set to 823 [ 893.648676][ T1287] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.650840][ T1287] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.650974][ T1287] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.651066][ T1287] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 894.326442][T25084] openvswitch: netlink: Tunnel attr 2 has unexpected len 0 expected 4 [ 894.395838][T25084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 894.766839][T25091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5812'. [ 895.334799][T15986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 895.376582][T25096] syzkaller1: entered promiscuous mode [ 895.383036][T25096] syzkaller1: entered allmulticast mode [ 896.377994][T25113] netlink: 'syz.0.5818': attribute type 1 has an invalid length. [ 896.443382][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5821'. [ 896.641708][T25113] bond18: entered promiscuous mode [ 896.651082][T25113] 8021q: adding VLAN 0 to HW filter on device bond18 [ 897.029125][T25122] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5822'. [ 897.231241][T25129] 8021q: adding VLAN 0 to HW filter on device bond18 [ 897.241519][T25129] bond18: (slave xfrm1): The slave device specified does not support setting the MAC address [ 897.241760][T25129] bond18: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 897.288269][T25129] bond18: (slave xfrm1): making interface the new active one [ 897.295851][T25129] xfrm1: entered promiscuous mode [ 897.339195][T25129] xfrm1: left promiscuous mode [ 898.246209][T25152] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5826'. [ 899.193986][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5834'. [ 899.210332][T25174] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5834'. [ 899.347393][T25173] batman_adv: batadv0: Adding interface: veth0 [ 899.347468][T25173] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.347565][T25173] batman_adv: batadv0: Interface activated: veth0 [ 899.550297][T25173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5833'. [ 899.550496][T25173] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.576017][T25173] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.602772][T25173] batman_adv: batadv0: Interface deactivated: veth0 [ 899.710239][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 899.763039][T25173] batman_adv: batadv0: Removing interface: veth0 [ 900.125430][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.126018][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.129328][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.132877][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.133497][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.134199][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.134702][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.154005][T25187] netlink: 'syz.3.5836': attribute type 1 has an invalid length. [ 900.414817][T25193] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5839'. [ 901.149758][T25200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5841'. [ 901.387893][T25202] validate_nla: 22 callbacks suppressed [ 901.387983][T25202] netlink: 'syz.2.5841': attribute type 1 has an invalid length. [ 901.426750][T24153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 901.436091][T24153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 901.452458][T24153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 901.483974][T24153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 901.494003][T24153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 903.698593][ T4936] Bluetooth: hci2: command tx timeout [ 903.882631][T25245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5848'. [ 903.882924][T25245] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5848'. [ 903.920140][T25248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5849'. [ 903.920371][T25248] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 904.053748][T25250] FAULT_INJECTION: forcing a failure. [ 904.053748][T25250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.053996][T25250] CPU: 0 UID: 0 PID: 25250 Comm: syz.0.5850 Not tainted syzkaller #0 PREEMPT(full) [ 904.054024][T25250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 904.054038][T25250] Call Trace: [ 904.054049][T25250] [ 904.054059][T25250] dump_stack_lvl+0xe8/0x150 [ 904.054101][T25250] should_fail_ex+0x410/0x560 [ 904.054144][T25250] _copy_from_user+0x2d/0xb0 [ 904.054175][T25250] ___sys_recvmsg+0x173/0x5a0 [ 904.054211][T25250] ? __pfx____sys_recvmsg+0x10/0x10 [ 904.054243][T25250] ? lock_acquire+0x115/0x350 [ 904.054300][T25250] do_recvmmsg+0x31a/0x7f0 [ 904.054337][T25250] ? __pfx_do_recvmmsg+0x10/0x10 [ 904.054384][T25250] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 904.054424][T25250] ? __fget_files+0x3a2/0x420 [ 904.054478][T25250] __x64_sys_recvmmsg+0x198/0x250 [ 904.054507][T25250] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 904.054546][T25250] do_syscall_64+0x166/0x520 [ 904.054578][T25250] ? trace_irq_disable+0x3b/0x140 [ 904.054600][T25250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.054624][T25250] ? clear_bhb_loop+0x70/0xc0 [ 904.054651][T25250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.054674][T25250] RIP: 0033:0x7f1cc8b9e159 [ 904.054706][T25250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.054725][T25250] RSP: 002b:00007f1cc9ac5028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 904.054748][T25250] RAX: ffffffffffffffda RBX: 00007f1cc8e25fa0 RCX: 00007f1cc8b9e159 [ 904.054764][T25250] RDX: 0000000000000008 RSI: 0000200000008d80 RDI: 0000000000000003 [ 904.054778][T25250] RBP: 00007f1cc9ac5090 R08: 0000000000000000 R09: 0000000000000000 [ 904.054792][T25250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 904.054804][T25250] R13: 00007f1cc8e26038 R14: 00007f1cc8e25fa0 R15: 00007ffdbaf4d158 [ 904.054837][T25250] [ 904.617548][T25252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5851'. [ 904.935617][T25203] wlan0 speed is unknown, defaulting to 1000 [ 905.143277][ T7310] bridge0: port 1(team0) entered disabled state [ 905.153293][ T7310] bridge_slave_1: left allmulticast mode [ 905.160532][ T7310] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.366440][ T7310] pim6reg: left allmulticast mode [ 905.713556][ T4936] block nbd0: Receive control failed (result -32) [ 905.724679][ T7310] bond11 (unregistering): (slave ip6gretap1): Releasing active interface [ 905.724798][ T7310] ip6gretap1 (unregistering): left allmulticast mode [ 905.793683][ T4936] Bluetooth: hci2: command tx timeout [ 906.521969][ T7310] bond6 (unregistering): (slave .`): Releasing active interface [ 906.538142][ T7310] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.549142][ T7310] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.558590][ T7310] .` (unregistering): Released all slaves [ 906.584695][ T7310] bond1 (unregistering): Released all slaves [ 906.644893][ T7310] bond2 (unregistering): Released all slaves [ 906.717149][ T7310] bond3 (unregistering): (slave veth3): Releasing active interface [ 906.731109][ T7310] bond3 (unregistering): Released all slaves [ 906.797825][ T7310] bond4 (unregistering): Released all slaves [ 906.926542][ T7310] bond5 (unregistering): Released all slaves [ 906.995978][ T7310] bond6 (unregistering): Released all slaves [ 907.082847][ T7310] bond0 (unregistering): (slave veth7): Releasing active interface [ 907.112957][ T7310] bond0 (unregistering): Released all slaves [ 907.166337][ T7310] bond7 (unregistering): (slave veth9): Releasing active interface [ 907.191929][ T7310] bond7 (unregistering): Released all slaves [ 907.262187][ T7310] bond8 (unregistering): (slave veth11): Releasing active interface [ 907.276967][ T7310] bond8 (unregistering): Released all slaves [ 907.357584][ T7310] bond9 (unregistering): (slave veth13): Releasing active interface [ 907.368547][ T7310] bond9 (unregistering): (slave veth0_to_bond): Releasing active interface [ 907.382645][ T7310] bond9 (unregistering): Released all slaves [ 907.465747][ T7310] bond10 (unregistering): (slave veth15): Releasing active interface [ 907.482240][ T7310] bond10 (unregistering): Released all slaves [ 907.544362][ T7310] bond11 (unregistering): Released all slaves [ 907.858716][ T4936] Bluetooth: hci2: command tx timeout [ 908.376302][ T7310] tipc: Disabling bearer [ 908.415529][ T7310] tipc: Left network mode [ 908.862699][ T7310] IPVS: stopping backup sync thread 15984 ... [ 909.362480][T25309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5861'. [ 909.362577][T25309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5861'. [ 909.938858][ T4936] Bluetooth: hci2: command tx timeout [ 910.146453][T25319] netlink: 'syz.4.5864': attribute type 1 has an invalid length. [ 910.315161][T15986] smbdirect: ib_dev[syq0] removed [ 910.775654][T25319] 8021q: adding VLAN 0 to HW filter on device bond6 [ 910.938606][T25326] bond6: (slave geneve4): making interface the new active one [ 910.964884][T25326] bond6: (slave geneve4): Enslaving as an active interface with an up link [ 910.976750][T25320] FAULT_INJECTION: forcing a failure. [ 910.976750][T25320] name failslab, interval 1, probability 0, space 0, times 0 [ 910.977163][T25320] CPU: 0 UID: 0 PID: 25320 Comm: syz.3.5863 Not tainted syzkaller #0 PREEMPT(full) [ 910.977229][T25320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 910.977265][T25320] Call Trace: [ 910.977285][T25320] [ 910.977307][T25320] dump_stack_lvl+0xe8/0x150 [ 910.977403][T25320] should_fail_ex+0x410/0x560 [ 910.977498][T25320] should_failslab+0xa8/0x100 [ 910.977558][T25320] ? skb_clone+0x212/0x3a0 [ 910.977616][T25320] kmem_cache_alloc_noprof+0xa1/0x600 [ 910.977707][T25320] ? skb_clone+0x212/0x3a0 [ 910.977789][T25320] skb_clone+0x212/0x3a0 [ 910.977855][T25320] __netlink_deliver_tap+0x413/0x860 [ 910.977951][T25320] ? netlink_deliver_tap+0x2e/0x1b0 [ 910.978019][T25320] netlink_deliver_tap+0x19c/0x1b0 [ 910.978073][T25320] netlink_dump+0x95b/0xee0 [ 910.978161][T25320] ? __pfx_netlink_dump+0x10/0x10 [ 910.978269][T25320] ? netlink_recvmsg+0x5bf/0xa50 [ 910.978326][T25320] ? kmem_cache_free+0x182/0x650 [ 910.978399][T25320] netlink_recvmsg+0x683/0xa50 [ 910.978511][T25320] ? __pfx_netlink_recvmsg+0x10/0x10 [ 910.978580][T25320] ? lock_acquire+0x115/0x350 [ 910.978649][T25320] ? __lock_acquire+0x6df/0x2e50 [ 910.978730][T25320] ? __pfx_netlink_recvmsg+0x10/0x10 [ 910.978805][T25320] sock_recvmsg_nosec+0x130/0x170 [ 910.978880][T25320] ____sys_recvmsg+0x3e3/0x4a0 [ 910.978956][T25320] ? __pfx_____sys_recvmsg+0x10/0x10 [ 910.979051][T25320] ? import_iovec+0x73/0xa0 [ 910.979123][T25320] ___sys_recvmsg+0x213/0x5a0 [ 910.979199][T25320] ? __pfx____sys_recvmsg+0x10/0x10 [ 910.979271][T25320] ? lock_acquire+0x115/0x350 [ 910.979392][T25320] do_recvmmsg+0x31a/0x7f0 [ 910.979468][T25320] ? __pfx_do_recvmmsg+0x10/0x10 [ 910.979547][T25320] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 910.979629][T25320] ? __fget_files+0x3a2/0x420 [ 910.979709][T25320] __x64_sys_recvmmsg+0x198/0x250 [ 910.979784][T25320] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 910.979889][T25320] do_syscall_64+0x166/0x520 [ 910.979956][T25320] ? trace_irq_disable+0x3b/0x140 [ 910.980011][T25320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.980061][T25320] ? clear_bhb_loop+0x70/0xc0 [ 910.980126][T25320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.980177][T25320] RIP: 0033:0x7efe26f9e159 [ 910.980225][T25320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 910.980267][T25320] RSP: 002b:00007efe27f22028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 910.980324][T25320] RAX: ffffffffffffffda RBX: 00007efe27226090 RCX: 00007efe26f9e159 [ 910.980362][T25320] RDX: 0000000000000008 RSI: 0000200000008d80 RDI: 0000000000000003 [ 910.980392][T25320] RBP: 00007efe27f22090 R08: 0000000000000000 R09: 0000000000000000 [ 910.980428][T25320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 910.980453][T25320] R13: 00007efe27226128 R14: 00007efe27226090 R15: 00007ffd8ba569b8 [ 910.980535][T25320] [ 911.007895][ T153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.462054][ T153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.466841][ T153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 911.675517][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.710110][ T7310] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.817253][T25341] xt_hashlimit: overflow, try lower: 3/0 [ 913.364043][ T7310] team_slave_1 (unregistering): left allmulticast mode [ 913.377799][ T7310] team0 (unregistering): Port device team_slave_1 removed [ 913.427080][ T7310] team_slave_0 (unregistering): left allmulticast mode [ 913.441374][ T7310] team0 (unregistering): Port device team_slave_0 removed [ 914.181686][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 915.100308][T25203] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.109157][T25203] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.109378][T25203] bridge_slave_0: entered allmulticast mode [ 915.111259][T25203] bridge_slave_0: entered promiscuous mode [ 915.156734][T25203] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.165190][T25203] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.176131][T25203] bridge_slave_1: entered allmulticast mode [ 915.191334][T25203] bridge_slave_1: entered promiscuous mode [ 915.313270][T25203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.375627][T25203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.478400][T25366] raw_sendmsg: syz.3.5875 forgot to set AF_INET. Fix it! [ 915.907281][T25203] team0: Port device team_slave_0 added [ 915.923398][T25365] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 915.961930][T25203] team0: Port device team_slave_1 added [ 916.204879][T25203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.204975][T25203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.205079][T25203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.277308][T25203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.289162][T25203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.289323][T25203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 917.203259][ T7310] IPVS: stop unused estimator thread 0... [ 917.321611][T25203] hsr_slave_0: entered promiscuous mode [ 917.338626][T25203] hsr_slave_1: entered promiscuous mode [ 917.979553][T25394] syzkaller1: entered promiscuous mode [ 917.979648][T25394] syzkaller1: entered allmulticast mode [ 919.335988][T25421] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5888'. [ 919.336087][T25421] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5888'. [ 921.748511][T25451] netlink: 'syz.0.5896': attribute type 9 has an invalid length. [ 922.105455][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 924.801035][T25500] netlink: 'syz.4.5910': attribute type 21 has an invalid length. [ 924.812575][T25500] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5910'. [ 924.973474][T25500] netlink: 'syz.4.5910': attribute type 5 has an invalid length. [ 924.973899][T25500] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5910'. [ 925.924192][T25525] netlink: 6024 bytes leftover after parsing attributes in process `syz.3.5916'. [ 925.936171][T25525] netlink: 'syz.3.5916': attribute type 21 has an invalid length. [ 926.127005][T25525] netlink: 'syz.3.5916': attribute type 6 has an invalid length. [ 926.137763][T25525] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5916'. [ 926.188403][T25203] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 926.362119][T15986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 926.454515][T25203] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 926.484023][T25203] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 926.615328][T25203] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 927.234894][T25203] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 927.301948][T25203] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 927.321782][T25203] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 927.417946][T25203] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 928.226314][T25556] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5921'. [ 928.490444][T25560] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5920'. [ 928.490994][T25560] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5920'. [ 928.491138][T25560] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5920'. [ 928.837063][T25203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 929.210801][T25203] 8021q: adding VLAN 0 to HW filter on device team0 [ 929.343762][ T7310] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.344022][ T7310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 929.475199][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.475394][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 929.683118][T25580] netlink: 'syz.4.5926': attribute type 20 has an invalid length. [ 929.683221][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5926'. [ 929.790702][T25580] netlink: 'syz.4.5926': attribute type 20 has an invalid length. [ 929.803156][T25580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5926'. [ 929.876218][ T7310] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.889883][ T7316] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 929.891271][ T7316] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 930.121771][T25588] openvswitch: netlink: VLAN attribute unexpected. [ 931.698774][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.887240][T25618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5933'. [ 932.503917][T25630] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 932.878848][T25636] netlink: 'syz.3.5939': attribute type 1 has an invalid length. [ 933.170777][T25641] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5941'. [ 933.170987][T25641] tipc: Invalid UDP bearer configuration [ 933.171221][T25641] tipc: Enabling of bearer rejected, failed to enable media [ 933.641132][T25643] veth11: entered allmulticast mode [ 933.664555][T25643] bond7: (slave veth11): Enslaving as an active interface with a down link [ 933.803512][T25644] bond6: (slave veth0_to_bond): Releasing active interface [ 933.902822][T25644] bond7: (slave veth0_to_bond): making interface the new active one [ 933.924973][T25644] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 935.013782][T25671] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5944'. [ 935.340431][T25679] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 935.515299][T25679] xt_hashlimit: size too large, truncated to 1048576 [ 935.665915][T25685] ip6gre0: Master is either lo or non-ether device [ 936.046958][T25203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.550057][T25701] netlink: 'syz.2.5953': attribute type 1 has an invalid length. [ 936.825749][T25704] bond7: (slave veth0_to_bond): Releasing active interface [ 936.915364][T25704] bond8: (slave veth0_to_bond): making interface the new active one [ 936.934044][T25704] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 937.090786][T25702] veth13: entered allmulticast mode [ 937.129582][T25702] bond8: (slave veth13): Enslaving as an active interface with a down link [ 937.299054][T25203] veth0_vlan: entered promiscuous mode [ 937.401469][T25203] veth1_vlan: entered promiscuous mode [ 937.643740][T25203] veth0_macvtap: entered promiscuous mode [ 937.755956][T25203] veth1_macvtap: entered promiscuous mode [ 937.941405][T25723] netlink: 'syz.0.5961': attribute type 12 has an invalid length. [ 937.959499][T25203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 938.323053][T25723] bond19: option primary_reselect: invalid value (255) [ 938.355464][T25723] bond19 (unregistering): Released all slaves [ 938.586796][T25203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 938.734750][ T7310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.841302][ T7310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.922155][ T7310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 938.971202][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 939.471643][ T7316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 939.472520][ T7316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 939.944990][T25731] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5963'. [ 939.975074][T25736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5963'. [ 940.070172][T25746] bond19: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 940.094317][T25746] bond19 (unregistering): Released all slaves [ 940.505271][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 940.505367][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 940.763825][T25758] x_tables: ip_tables: osf match: only valid for protocol 6 [ 941.145598][T25729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5963'. [ 941.325102][T25766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5971'. [ 941.545273][T25772] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5973'. [ 942.273171][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 942.296024][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 942.309976][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 942.325020][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 942.354653][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.416088][T25795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5980'. [ 944.090723][ T7323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.090832][ T7323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.432184][ T4936] Bluetooth: hci5: command tx timeout [ 944.602112][ T7323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.623995][ T7323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.096928][ T7323] bond0: (slave netdevsim1): Releasing backup interface [ 945.217399][ T7323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.217480][ T7323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.602401][ T7323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.602521][ T7323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 946.499414][ T4936] Bluetooth: hci5: command tx timeout [ 946.707123][T25844] netlink: 'syz.4.5993': attribute type 83 has an invalid length. [ 947.045698][T25853] netlink: 'syz.4.5997': attribute type 1 has an invalid length. [ 947.434252][T25853] 8021q: adding VLAN 0 to HW filter on device bond7 [ 947.435453][T25854] batadv_slave_0: left promiscuous mode [ 947.452341][T25854] bond7: (slave batadv_slave_0): Enslaving as a backup interface with a down link [ 947.930162][ T7323] lo: left allmulticast mode [ 947.938607][ T7323] pimreg3: left allmulticast mode [ 948.211574][T25876] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6003'. [ 948.212810][T25876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6003'. [ 948.579071][ T4936] Bluetooth: hci5: command tx timeout [ 949.139614][ T7323] bond6 (unregistering): (slave geneve2): Releasing active interface [ 949.375841][ T7323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 949.388743][ T7323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 949.399307][ T7323] bond0 (unregistering): Released all slaves [ 949.427220][ T7323] bond1 (unregistering): (slave lo): Releasing backup interface [ 949.435876][ T7323] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 949.438812][ T7323] bond1 (unregistering): Released all slaves [ 949.516595][ T7323] bond2 (unregistering): (slave veth3): Releasing active interface [ 949.555711][ T7323] bond2 (unregistering): Released all slaves [ 949.625806][ T7323] bond3 (unregistering): Released all slaves [ 949.719456][ T7323] bond4 (unregistering): (slave veth7): Releasing active interface [ 949.736962][ T7323] bond4 (unregistering): Released all slaves [ 949.785684][ T7323] bond5 (unregistering): (slave veth9): Releasing active interface [ 949.817107][ T7323] bond5 (unregistering): Released all slaves [ 949.900506][ T7323] bond6 (unregistering): Released all slaves [ 949.967917][ T7323] bond7 (unregistering): (slave veth11): Releasing active interface [ 949.995735][ T7323] bond7 (unregistering): Released all slaves [ 950.064909][ T7323] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 950.096197][ T7323] bond8 (unregistering): (slave veth13): Releasing active interface [ 950.112582][ T7323] bond8 (unregistering): Released all slaves [ 950.536336][T25880] vlan2: entered allmulticast mode [ 950.545390][T25880] bond0: entered allmulticast mode [ 950.550865][T25880] bond_slave_0: entered allmulticast mode [ 950.558431][T25880] bond_slave_1: entered allmulticast mode [ 950.659438][ T4936] Bluetooth: hci5: command tx timeout [ 951.156031][ T7323] IPVS: stopping master sync thread 23936 ... [ 953.408395][T25927] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6016'. [ 953.595567][T25779] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.595768][T25779] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.596087][T25779] bridge_slave_0: entered allmulticast mode [ 953.636024][T25779] bridge_slave_0: entered promiscuous mode [ 953.712884][T25936] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6020'. [ 953.885406][T25779] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.886714][T25779] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.887618][T25779] bridge_slave_1: entered allmulticast mode [ 953.913783][T25779] bridge_slave_1: entered promiscuous mode [ 953.995060][T25941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6019'. [ 954.746805][ T7323] hsr_slave_0: left promiscuous mode [ 954.761058][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 954.770282][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.800416][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 954.812508][ T7323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 954.894566][ T7323] veth1_macvtap: left promiscuous mode [ 954.902106][ T7323] veth0_macvtap: left promiscuous mode [ 954.910757][ T7323] veth1_vlan: left promiscuous mode [ 954.916954][ T7323] veth0_vlan: left promiscuous mode [ 956.721358][ T7323] team0 (unregistering): Port device team_slave_1 removed [ 956.756554][ T7323] team0 (unregistering): Port device team_slave_0 removed [ 957.022532][T25945] veth0_to_bond: entered allmulticast mode [ 957.055742][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 957.113338][T25779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.135038][T25779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.315770][T25779] team0: Port device team_slave_0 added [ 957.524669][ T59] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 957.687443][T25779] team0: Port device team_slave_1 added [ 957.808905][T25977] netlink: 'syz.3.6030': attribute type 1 has an invalid length. [ 957.847341][T25779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.847560][T25779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.847745][T25779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.920082][T25779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.920288][T25779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 957.920505][T25779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 958.059293][T25977] 8021q: adding VLAN 0 to HW filter on device bond8 [ 958.266394][T25980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6028'. [ 958.276030][T25980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6028'. [ 958.676746][T25779] hsr_slave_0: entered promiscuous mode [ 958.693855][T25779] hsr_slave_1: entered promiscuous mode [ 958.704269][T25779] debugfs: 'hsr0' already exists in 'hsr' [ 958.711912][T25779] Cannot create hsr debugfs directory [ 958.799470][ T7323] IPVS: stop unused estimator thread 0... [ 959.289671][T26019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6036'. [ 959.718504][T26028] macsec1: entered promiscuous mode [ 960.431202][T26059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6043'. [ 960.787961][T26069] netlink: 'syz.1.6049': attribute type 1 has an invalid length. [ 960.977358][T26073] veth3: entered allmulticast mode [ 962.014112][T25779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 962.035939][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 962.046115][T25779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 962.065610][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 962.079599][T25779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 962.123218][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 962.143406][T25779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 962.163501][T25779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 962.219041][T26122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6061'. [ 962.392827][T25779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 962.491566][T25779] 8021q: adding VLAN 0 to HW filter on device team0 [ 962.551781][T26127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6062'. [ 962.579844][T15986] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.579999][T15986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 962.679262][T15986] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.679392][T15986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.196245][T26132] syzkaller0: entered promiscuous mode [ 963.196287][T26132] syzkaller0: entered allmulticast mode [ 963.524568][T26150] netlink: 'syz.3.6067': attribute type 5 has an invalid length. [ 964.268541][T26172] netlink: 'syz.3.6073': attribute type 1 has an invalid length. [ 964.387140][T26174] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 964.387533][T26174] gretap1: entered promiscuous mode [ 964.387589][T26174] gretap1: entered allmulticast mode [ 964.439859][T26183] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6076'. [ 964.440243][T26183] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6076'. [ 964.440293][T26183] netlink: 'syz.0.6076': attribute type 6 has an invalid length. [ 964.440335][T26183] netlink: 'syz.0.6076': attribute type 5 has an invalid length. [ 964.440366][T26183] netlink: 43 bytes leftover after parsing attributes in process `syz.0.6076'. [ 964.815102][T26179] veth13: entered allmulticast mode [ 964.832445][T26179] bond9: (slave veth13): Enslaving as an active interface with a down link [ 964.867091][T26185] veth0_to_bond: left allmulticast mode [ 964.891489][T26185] bond7: (slave veth0_to_bond): Releasing active interface [ 965.001460][T26185] bond9: (slave veth0_to_bond): making interface the new active one [ 965.012405][T26185] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 965.074452][T26193] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 965.324984][T26203] Cannot find set identified by id 172 to match [ 965.546485][T26208] syzkaller1: entered promiscuous mode [ 965.546528][T26208] syzkaller1: entered allmulticast mode [ 965.858418][T26227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6085'. [ 966.005034][T26232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6084'. [ 966.119905][T25779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 966.257422][T25779] veth0_vlan: entered promiscuous mode [ 966.295577][T25779] veth1_vlan: entered promiscuous mode [ 966.636700][T25779] veth0_macvtap: entered promiscuous mode [ 966.668881][T25779] veth1_macvtap: entered promiscuous mode [ 966.732947][T25779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 966.754064][T25779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 966.790497][ T7310] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.907090][ T1157] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.921654][ T1157] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.943328][ T1157] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 966.961930][T26254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6089'. [ 966.987986][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 966.988085][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 967.395257][T26254] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 967.407846][T26254] bond_slave_0: left allmulticast mode [ 967.471966][T26254] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 967.489489][T26254] bond_slave_1: left allmulticast mode [ 967.519130][T26254] bond0 (unregistering): Released all slaves [ 967.602567][ T153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 967.602982][ T153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 968.300038][T26284] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5972'. [ 968.368241][T26281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6096'. [ 968.779981][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6101'. [ 968.869589][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6101'. [ 968.879885][ T7310] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.880288][ T7310] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.909260][ T153] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 968.921020][ T7310] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.006455][T26337] __nla_validate_parse: 1 callbacks suppressed [ 970.006503][T26337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6119'. [ 970.136951][ T5626] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 970.143943][ T5626] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 970.146870][ T5626] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 970.161693][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 970.182144][ T5626] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 970.293175][T26350] netlink: 'syz.4.6122': attribute type 21 has an invalid length. [ 970.301608][T26350] netlink: 176 bytes leftover after parsing attributes in process `syz.4.6122'. [ 970.312337][T26350] IPv6: NLM_F_CREATE should be specified when creating new route [ 970.312443][T26350] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 970.312458][T26350] IPv6: NLM_F_CREATE should be set when creating new route [ 970.312501][T26350] IPv6: NLM_F_CREATE should be set when creating new route [ 970.312528][T26350] IPv6: NLM_F_CREATE should be set when creating new route [ 970.385226][T26347] netlink: 4384 bytes leftover after parsing attributes in process `syz.1.6120'. [ 970.769494][T26372] dummy0: left promiscuous mode [ 970.794294][T26372] netlink: 'syz.4.6123': attribute type 1 has an invalid length. [ 970.958978][T26372] 8021q: adding VLAN 0 to HW filter on device bond8 [ 971.106562][T26415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6126'. [ 971.133011][T26405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.160632][T26418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6126'. [ 971.463603][T26429] Cannot find set identified by id 904 to match [ 971.672250][T26405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.885977][T26405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.219923][T26405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.258441][ T5626] Bluetooth: hci0: command tx timeout [ 972.392367][T26452] netlink: 'syz.2.6136': attribute type 32 has an invalid length. [ 972.392409][T26452] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6136'. [ 972.992095][T26468] Cannot find set identified by id 986 to match [ 973.324466][T26405] bond6: left allmulticast mode [ 973.324732][T26405] bridge0: port 3(bond6) entered disabled state [ 973.350538][T26405] bridge_slave_1: left allmulticast mode [ 973.350787][T26405] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.414097][T26405] bridge_slave_0: left allmulticast mode [ 973.414357][T26405] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.487078][T26405] lo: left allmulticast mode [ 973.621739][T26477] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6143'. [ 974.055563][T26496] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6147'. [ 974.075453][T26501] netlink: 80 bytes leftover after parsing attributes in process `syz.2.6147'. [ 974.338683][ T5626] Bluetooth: hci0: command tx timeout [ 974.536833][T26509] netlink: 'syz.2.6148': attribute type 39 has an invalid length. [ 974.815408][T26405] bond12 (unregistering): (slave bridge3): Releasing active interface [ 974.883741][T26405] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 974.905467][T26405] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.916587][T26405] bond0 (unregistering): Released all slaves [ 974.933601][T26405] bond1 (unregistering): Released all slaves [ 974.956246][T26405] bond2 (unregistering): Released all slaves [ 974.986939][T26405] bond3 (unregistering): Released all slaves [ 975.078122][T26405] bond4 (unregistering): Released all slaves [ 975.152012][T26405] bond5 (unregistering): (slave veth5): Releasing active interface [ 975.173178][T26405] bond5 (unregistering): Released all slaves [ 975.251928][T26405] bond6 (unregistering): Released all slaves [ 975.302260][T26405] bond7 (unregistering): (slave veth7): Releasing active interface [ 975.314204][T26405] bond7 (unregistering): Released all slaves [ 975.339519][T26405] bond8 (unregistering): (slave bond9): Releasing backup interface [ 975.350901][T26405] bond8 (unregistering): Released all slaves [ 975.371803][T26405] bond9 (unregistering): Released all slaves [ 975.402338][T26405] bond10 (unregistering): (slave veth9): Releasing active interface [ 975.416979][T26405] bond10 (unregistering): Released all slaves [ 975.441119][T26405] bond11 (unregistering): (slave veth11): Releasing active interface [ 975.456043][T26405] bond11 (unregistering): Released all slaves [ 975.478868][T26405] bond12 (unregistering): Released all slaves [ 975.499956][T26405] bond13 (unregistering): Released all slaves [ 975.533968][T26405] bond14 (unregistering): (slave veth13): Releasing active interface [ 975.552099][T26405] bond14 (unregistering): Released all slaves [ 975.589171][T26405] bond15 (unregistering): Released all slaves [ 975.615893][T26405] bond16 (unregistering): Released all slaves [ 975.640561][T26405] bond17 (unregistering): (slave veth17): Releasing active interface [ 975.662455][T26405] bond17 (unregistering): (slave veth0_to_bond): Releasing active interface [ 975.673708][T26405] bond17 (unregistering): Released all slaves [ 975.695343][T26405] bond18 (unregistering): Released all slaves [ 975.764097][T26507] netlink: 'syz.2.6148': attribute type 39 has an invalid length. [ 975.831552][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 975.996777][T26507] netlink: 'syz.2.6148': attribute type 39 has an invalid length. [ 976.382913][T26341] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.391770][T26341] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.401000][T26341] bridge_slave_0: entered allmulticast mode [ 976.413362][T26341] bridge_slave_0: entered promiscuous mode [ 976.428705][T26341] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.428860][T26341] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.428998][T26341] bridge_slave_1: entered allmulticast mode [ 976.434948][ T5626] Bluetooth: hci0: command tx timeout [ 976.464338][T26341] bridge_slave_1: entered promiscuous mode [ 976.730457][T26533] skbuff: bad partial csum: csum=65535/2 headroom=178 headlen=65543 [ 977.112260][T26533] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6157'. [ 977.173972][T26341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.268005][T26535] syzkaller1: entered promiscuous mode [ 977.277558][T26535] syzkaller1: entered allmulticast mode [ 977.451236][T26341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.116546][T26568] bond10: entered allmulticast mode [ 978.141079][T26568] 8021q: adding VLAN 0 to HW filter on device bond10 [ 978.210192][T26341] team0: Port device team_slave_0 added [ 978.460243][T26341] team0: Port device team_slave_1 added [ 978.498297][ T5626] Bluetooth: hci0: command tx timeout [ 978.627637][T26405] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 978.644585][T26405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 979.215869][T26405] team0 (unregistering): Port device team_slave_1 removed [ 979.251232][T26405] team0 (unregistering): Port device team_slave_0 removed [ 979.475073][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 979.572885][T26341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.584316][T26341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.612186][T26341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.628317][T26341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.628815][T26341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.628907][T26341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 980.052437][T26341] hsr_slave_0: entered promiscuous mode [ 980.073422][T26341] hsr_slave_1: entered promiscuous mode [ 980.077928][T26341] debugfs: 'hsr0' already exists in 'hsr' [ 980.077983][T26341] Cannot create hsr debugfs directory [ 980.126970][T26623] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6176'. [ 980.193243][T26619] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 980.482925][T26627] syzkaller0: entered promiscuous mode [ 980.483336][T26627] syzkaller0: entered allmulticast mode [ 981.397813][T26405] IPVS: stop unused estimator thread 0... [ 981.483272][T26656] netlink: 'syz.4.6185': attribute type 21 has an invalid length. [ 981.483322][T26656] netlink: 'syz.4.6185': attribute type 22 has an invalid length. [ 981.483355][T26656] netlink: 'syz.4.6185': attribute type 23 has an invalid length. [ 981.483374][T26656] netlink: 'syz.4.6185': attribute type 25 has an invalid length. [ 981.483393][T26656] netlink: 'syz.4.6185': attribute type 26 has an invalid length. [ 981.483412][T26656] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6185'. [ 981.846511][T26682] netlink: 'syz.4.6192': attribute type 4 has an invalid length. [ 981.846553][T26682] netlink: 152 bytes leftover after parsing attributes in process `syz.4.6192'. [ 982.014422][T26688] netlink: 'syz.3.6193': attribute type 1 has an invalid length. [ 982.120468][T26684] veth15: entered allmulticast mode [ 982.137691][T26684] bond11: (slave veth15): Enslaving as an active interface with a down link [ 982.153066][T26688] bond9: (slave veth0_to_bond): Releasing active interface [ 982.172719][T26688] bond11: (slave veth0_to_bond): making interface the new active one [ 982.181694][T26688] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 982.573979][T26341] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 982.610304][T26341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 982.617733][T26341] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 982.651045][T26341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 982.659782][T26341] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 982.675144][T26341] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 982.686701][T26341] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 982.711471][T26341] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 983.076816][T26341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 983.222911][T26341] 8021q: adding VLAN 0 to HW filter on device team0 [ 983.235256][T26745] netlink: 'syz.1.6207': attribute type 4 has an invalid length. [ 983.235295][T26745] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6207'. [ 983.270588][T26383] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.270935][T26383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 983.314401][T26749] netlink: 'syz.3.6206': attribute type 1 has an invalid length. [ 983.325365][T26745] Bluetooth: MGMT ver 1.23 [ 983.532243][T26749] veth17: entered allmulticast mode [ 983.554230][T26749] bond12: (slave veth17): Enslaving as an active interface with a down link [ 983.575623][T26401] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.575730][T26401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 983.623124][T26752] bond11: (slave veth0_to_bond): Releasing active interface [ 983.666251][T26752] bond12: (slave veth0_to_bond): making interface the new active one [ 983.680562][T26752] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 983.826471][T26763] netlink: 7 bytes leftover after parsing attributes in process `syz.1.6210'. [ 984.240098][T26790] FAULT_INJECTION: forcing a failure. [ 984.240098][T26790] name failslab, interval 1, probability 0, space 0, times 0 [ 984.240152][T26790] CPU: 0 UID: 0 PID: 26790 Comm: syz.4.6217 Not tainted syzkaller #0 PREEMPT(full) [ 984.240178][T26790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 984.240192][T26790] Call Trace: [ 984.240201][T26790] [ 984.240212][T26790] dump_stack_lvl+0xe8/0x150 [ 984.240266][T26790] should_fail_ex+0x410/0x560 [ 984.240305][T26790] ? __alloc_skb+0x1db/0x7a0 [ 984.240339][T26790] should_failslab+0xa8/0x100 [ 984.240367][T26790] ? __alloc_skb+0x1db/0x7a0 [ 984.240399][T26790] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 984.240457][T26790] ? __alloc_skb+0x18d/0x7a0 [ 984.240556][T26790] ? __alloc_skb+0x1db/0x7a0 [ 984.240662][T26790] __alloc_skb+0x1db/0x7a0 [ 984.240763][T26790] netlink_sendmsg+0x5d4/0xb40 [ 984.240860][T26790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.240949][T26790] ? apparmor_socket_sendmsg+0x98/0x360 [ 984.241061][T26790] ? __pfx_netlink_sendmsg+0x10/0x10 [ 984.241132][T26790] sock_sendmsg_nosec+0x13a/0x180 [ 984.241223][T26790] ____sys_sendmsg+0x54e/0x850 [ 984.241298][T26790] ? __pfx_____sys_sendmsg+0x10/0x10 [ 984.241439][T26790] ? import_iovec+0x73/0xa0 [ 984.241512][T26790] ___sys_sendmsg+0x2a5/0x360 [ 984.241566][T26790] ? __lock_acquire+0x6df/0x2e50 [ 984.241637][T26790] ? __pfx____sys_sendmsg+0x10/0x10 [ 984.241787][T26790] ? __fget_files+0x2a/0x420 [ 984.241858][T26790] ? __fget_files+0x3a2/0x420 [ 984.241958][T26790] __x64_sys_sendmsg+0x1b1/0x290 [ 984.242048][T26790] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 984.242145][T26790] do_syscall_64+0x166/0x520 [ 984.242225][T26790] ? trace_irq_disable+0x3b/0x140 [ 984.242283][T26790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.242343][T26790] ? clear_bhb_loop+0x70/0xc0 [ 984.242414][T26790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.242460][T26790] RIP: 0033:0x7fb0cb39e159 [ 984.242511][T26790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 984.242565][T26790] RSP: 002b:00007fb0cc285028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 984.242659][T26790] RAX: ffffffffffffffda RBX: 00007fb0cb625fa0 RCX: 00007fb0cb39e159 [ 984.242701][T26790] RDX: 0000000004008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 984.242742][T26790] RBP: 00007fb0cc285090 R08: 0000000000000000 R09: 0000000000000000 [ 984.242781][T26790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 984.242814][T26790] R13: 00007fb0cb626038 R14: 00007fb0cb625fa0 R15: 00007ffd4a453718 [ 984.242906][T26790] [ 984.548983][T26794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6218'. [ 984.549048][T26794] netlink: 'syz.1.6218': attribute type 10 has an invalid length. [ 984.549083][T26794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6218'. [ 984.588431][T26794] geneve2: entered promiscuous mode [ 984.594202][T26794] geneve2: entered allmulticast mode [ 984.639359][T26803] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6220'. [ 984.645516][T26800] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6220'. [ 984.697266][ T1657] hid-generic 0005:16C0:0003.0002: item fetching failed at offset 0/1 [ 984.718915][ T1657] hid-generic 0005:16C0:0003.0002: probe with driver hid-generic failed with error -22 [ 985.045498][T26823] ip_tables: iptables: counters copy to user failed while replacing table [ 985.216498][T26827] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6224'. [ 985.237084][T26827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6224'. [ 985.292622][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6224'. [ 985.292674][T26827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6224'. [ 985.566809][T26850] syzkaller0: left promiscuous mode [ 985.566845][T26850] syzkaller0: left allmulticast mode [ 985.740216][T26341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 985.991011][T26341] veth0_vlan: entered promiscuous mode [ 986.027648][T26341] veth1_vlan: entered promiscuous mode [ 986.316257][T26341] veth0_macvtap: entered promiscuous mode [ 986.372428][T26341] veth1_macvtap: entered promiscuous mode [ 986.475233][T26341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 986.522217][T26341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 986.646110][T26904] validate_nla: 1 callbacks suppressed [ 986.646167][T26904] netlink: 'syz.4.6240': attribute type 29 has an invalid length. [ 986.662613][T26403] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.670299][T26374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.702319][T26909] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 986.868464][T26383] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.868544][T26383] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 986.946048][T26403] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 986.946096][T26403] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.000641][T26369] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 987.000681][T26369] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.459771][ T4936] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 987.475006][ T4936] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 987.484700][ T4936] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 987.501679][ T4936] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 987.511243][ T4936] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 987.692342][T26943] netlink: 'syz.1.6247': attribute type 1 has an invalid length. [ 987.779106][T26943] veth3: entered allmulticast mode [ 987.789718][T26943] bond0: (slave veth3): Enslaving as an active interface with a down link [ 987.812508][T26943] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 987.906048][T26949] FAULT_INJECTION: forcing a failure. [ 987.906048][T26949] name failslab, interval 1, probability 0, space 0, times 0 [ 987.906113][T26949] CPU: 0 UID: 0 PID: 26949 Comm: syz.3.6249 Not tainted syzkaller #0 PREEMPT(full) [ 987.906150][T26949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 987.906162][T26949] Call Trace: [ 987.906211][T26949] [ 987.906237][T26949] dump_stack_lvl+0xe8/0x150 [ 987.906356][T26949] should_fail_ex+0x410/0x560 [ 987.906471][T26949] should_failslab+0xa8/0x100 [ 987.906547][T26949] ? skb_clone+0x212/0x3a0 [ 987.906614][T26949] kmem_cache_alloc_noprof+0xa1/0x600 [ 987.906704][T26949] ? skb_clone+0x212/0x3a0 [ 987.906778][T26949] skb_clone+0x212/0x3a0 [ 987.906856][T26949] __netlink_deliver_tap+0x413/0x860 [ 987.906958][T26949] ? netlink_deliver_tap+0x2e/0x1b0 [ 987.907036][T26949] netlink_deliver_tap+0x19c/0x1b0 [ 987.907096][T26949] netlink_unicast+0x781/0x940 [ 987.907187][T26949] netlink_sendmsg+0x813/0xb40 [ 987.907278][T26949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.907368][T26949] ? apparmor_socket_sendmsg+0x98/0x360 [ 987.907452][T26949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 987.907552][T26949] sock_sendmsg_nosec+0x13a/0x180 [ 987.907649][T26949] ____sys_sendmsg+0x54e/0x850 [ 987.907777][T26949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.907862][T26949] ? import_iovec+0x73/0xa0 [ 987.907934][T26949] ___sys_sendmsg+0x2a5/0x360 [ 987.907987][T26949] ? __lock_acquire+0x6df/0x2e50 [ 987.908050][T26949] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.908205][T26949] ? __fget_files+0x2a/0x420 [ 987.908278][T26949] ? __fget_files+0x3a2/0x420 [ 987.908386][T26949] __x64_sys_sendmsg+0x1b1/0x290 [ 987.908458][T26949] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 987.908581][T26949] do_syscall_64+0x166/0x520 [ 987.908660][T26949] ? trace_irq_disable+0x3b/0x140 [ 987.908717][T26949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.908777][T26949] ? clear_bhb_loop+0x70/0xc0 [ 987.908841][T26949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.908908][T26949] RIP: 0033:0x7efe26f9e159 [ 987.908959][T26949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.909010][T26949] RSP: 002b:00007efe27f43028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.909072][T26949] RAX: ffffffffffffffda RBX: 00007efe27225fa0 RCX: 00007efe26f9e159 [ 987.909119][T26949] RDX: 0000000004008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 987.909165][T26949] RBP: 00007efe27f43090 R08: 0000000000000000 R09: 0000000000000000 [ 987.909206][T26949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.909244][T26949] R13: 00007efe27226038 R14: 00007efe27225fa0 R15: 00007ffd8ba569b8 [ 987.909334][T26949] [ 988.364147][T26955] atomic_op ffff8880543209e0 conn xmit_atomic 0000000000000000 [ 988.391044][T26956] __nla_validate_parse: 4 callbacks suppressed [ 988.391108][T26956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6250'. [ 988.469066][T26403] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.486636][T26383] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.503914][T26959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6252'. [ 988.518578][T26403] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 988.567345][T15636] syz_tun (unregistering): left allmulticast mode [ 988.639408][T26369] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.641091][T26374] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 988.716261][T26966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6253'. [ 988.803047][T26974] netlink: 277 bytes leftover after parsing attributes in process `syz.3.6256'. [ 989.021727][T26991] netlink: 'syz.3.6259': attribute type 1 has an invalid length. [ 989.261925][T26978] veth19: entered allmulticast mode [ 989.272251][T26978] bond13: (slave veth19): Enslaving as an active interface with a down link [ 989.272822][T26997] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6260'. [ 989.296234][T26995] bond12: (slave veth0_to_bond): Releasing active interface [ 989.321097][T26995] bond13: (slave veth0_to_bond): making interface the new active one [ 989.329475][T26995] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 989.371233][T27003] FAULT_INJECTION: forcing a failure. [ 989.371233][T27003] name failslab, interval 1, probability 0, space 0, times 0 [ 989.390942][T27003] CPU: 0 UID: 0 PID: 27003 Comm: syz.0.6262 Not tainted syzkaller #0 PREEMPT(full) [ 989.390973][T27003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 989.390987][T27003] Call Trace: [ 989.390997][T27003] [ 989.391007][T27003] dump_stack_lvl+0xe8/0x150 [ 989.391046][T27003] should_fail_ex+0x410/0x560 [ 989.391086][T27003] should_failslab+0xa8/0x100 [ 989.391113][T27003] ? skb_clone+0x212/0x3a0 [ 989.391139][T27003] kmem_cache_alloc_noprof+0xa1/0x600 [ 989.391174][T27003] ? skb_clone+0x212/0x3a0 [ 989.391206][T27003] skb_clone+0x212/0x3a0 [ 989.391234][T27003] __netlink_deliver_tap+0x413/0x860 [ 989.391274][T27003] ? netlink_deliver_tap+0x2e/0x1b0 [ 989.391303][T27003] netlink_deliver_tap+0x19c/0x1b0 [ 989.391332][T27003] netlink_sendskb+0x68/0x140 [ 989.391360][T27003] netlink_rcv_skb+0x2a4/0x4a0 [ 989.391388][T27003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 989.391445][T27003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 989.391484][T27003] ? netlink_deliver_tap+0x2e/0x1b0 [ 989.391508][T27003] ? netlink_deliver_tap+0x2e/0x1b0 [ 989.391540][T27003] netlink_unicast+0x7bd/0x940 [ 989.391573][T27003] netlink_sendmsg+0x813/0xb40 [ 989.391608][T27003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.391642][T27003] ? apparmor_socket_sendmsg+0x98/0x360 [ 989.391677][T27003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 989.391701][T27003] sock_sendmsg_nosec+0x13a/0x180 [ 989.391732][T27003] ____sys_sendmsg+0x54e/0x850 [ 989.391760][T27003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.391792][T27003] ? import_iovec+0x73/0xa0 [ 989.391818][T27003] ___sys_sendmsg+0x2a5/0x360 [ 989.391839][T27003] ? __lock_acquire+0x6df/0x2e50 [ 989.391865][T27003] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.391923][T27003] ? __fget_files+0x2a/0x420 [ 989.391948][T27003] ? __fget_files+0x3a2/0x420 [ 989.391985][T27003] __x64_sys_sendmsg+0x1b1/0x290 [ 989.392011][T27003] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 989.392055][T27003] do_syscall_64+0x166/0x520 [ 989.392085][T27003] ? trace_irq_disable+0x3b/0x140 [ 989.392105][T27003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.392130][T27003] ? clear_bhb_loop+0x70/0xc0 [ 989.392156][T27003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.392176][T27003] RIP: 0033:0x7f09cdf9e159 [ 989.392196][T27003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.392213][T27003] RSP: 002b:00007f09ceed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 989.392236][T27003] RAX: ffffffffffffffda RBX: 00007f09ce225fa0 RCX: 00007f09cdf9e159 [ 989.392252][T27003] RDX: 0000000004008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 989.392266][T27003] RBP: 00007f09ceed6090 R08: 0000000000000000 R09: 0000000000000000 [ 989.392279][T27003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.392292][T27003] R13: 00007f09ce226038 R14: 00007f09ce225fa0 R15: 00007ffdb6da14b8 [ 989.392325][T27003] [ 989.619610][ T5626] Bluetooth: hci4: command tx timeout [ 989.969866][T27007] netlink: Failed to add € helper -22 [ 989.969948][T27007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 990.251652][T27039] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6269'. [ 990.265900][T27039] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6269'. [ 990.287406][T27042] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6269'. [ 990.314772][T27047] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6269'. [ 990.326663][T27048] netlink: 830 bytes leftover after parsing attributes in process `syz.1.6269'. [ 990.681712][T27060] netlink: 'syz.3.6275': attribute type 1 has an invalid length. [ 990.806404][T26934] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.806635][T26934] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.807129][T26934] bridge_slave_0: entered allmulticast mode [ 990.812362][T26934] bridge_slave_0: entered promiscuous mode [ 990.916161][T27067] veth21: entered allmulticast mode [ 990.927142][T27067] bond14: (slave veth21): Enslaving as an active interface with a down link [ 990.930712][T26934] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.931117][T26934] bridge0: port 2(bridge_slave_1) entered disabled state [ 990.931510][T26934] bridge_slave_1: entered allmulticast mode [ 990.937144][T26934] bridge_slave_1: entered promiscuous mode [ 990.975779][T27060] bond13: (slave veth0_to_bond): Releasing active interface [ 990.991580][T27060] bond14: (slave veth0_to_bond): making interface the new active one [ 990.999850][T27060] bond14: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 991.013691][T27073] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.051795][T27073] bridge_slave_0 (unregistering): left allmulticast mode [ 991.064298][T27073] bridge_slave_0 (unregistering): left promiscuous mode [ 991.072265][T27073] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.261369][T26934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 991.284610][T26934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 991.367041][T26934] team0: Port device team_slave_0 added [ 991.391617][T26934] team0: Port device team_slave_1 added [ 991.576717][T26934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.585073][T26934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.585138][T26934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.614887][T26934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.614907][T26934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.614937][T26934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 991.700468][ T5626] Bluetooth: hci4: command tx timeout [ 991.888747][T26934] hsr_slave_0: entered promiscuous mode [ 991.897349][T26934] hsr_slave_1: entered promiscuous mode [ 991.906904][T26934] debugfs: 'hsr0' already exists in 'hsr' [ 991.906954][T26934] Cannot create hsr debugfs directory [ 992.014853][T27111] veth3: entered allmulticast mode [ 992.437343][T27124] openvswitch: netlink: IPv4 frag type 32 is out of range max 2 [ 992.783593][T27135] bridge6: entered promiscuous mode [ 992.783661][T27135] bridge6: entered allmulticast mode [ 993.017225][T26934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.041688][T26934] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.065531][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.356728][T27184] team0: Device veth1_macvtap failed to register rx_handler [ 993.383742][T27189] geneve2: entered promiscuous mode [ 993.383788][T27189] geneve2: entered allmulticast mode [ 993.609552][T26934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.609617][T26934] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 993.769957][T27200] __nla_validate_parse: 7 callbacks suppressed [ 993.776377][T27200] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6304'. [ 993.795412][ T5626] Bluetooth: hci4: command tx timeout [ 993.807326][T26934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 993.820248][T26934] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.247107][T27215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6308'. [ 994.271153][T27215] vlan2: entered promiscuous mode [ 994.276467][T27215] bridge0: entered promiscuous mode [ 995.858197][ T5626] Bluetooth: hci4: command tx timeout [ 995.863789][T27159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 995.906399][T26934] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 995.939539][T26934] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 995.946251][T26934] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 995.975070][T26934] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 995.985360][T26934] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 996.013957][T26934] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 996.024779][T26934] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 996.075588][T26934] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 996.481188][T26934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.555562][T26934] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.580991][ T31] audit: type=1800 audit(1789029278.927:5): pid=27258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6322" name=0A dev="tmpfs" ino=303 res=0 errno=0 [ 996.611618][T26369] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.611713][T26369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 996.667691][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.667909][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.758914][T27264] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6323'. [ 996.883075][T27276] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6327'. [ 996.962768][T27279] Bluetooth: hci0: unsupported parameter 5135 [ 996.969898][T27279] Bluetooth: hci0: unsupported parameter 8192 [ 996.976095][T27279] Bluetooth: hci0: unsupported parameter 5135 [ 996.976116][T27279] Bluetooth: hci0: unsupported parameter 8192 [ 997.196815][T27290] sctp: [Deprecated]: syz.2.6331 (pid 27290) Use of struct sctp_assoc_value in delayed_ack socket option. [ 997.196815][T27290] Use struct sctp_sack_info instead [ 997.927379][T27320] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6338'. [ 997.951925][T27320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6338'. [ 998.057300][T27329] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6339'. [ 998.207257][T26934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.473356][T27355] xt_TCPMSS: Only works on TCP SYN packets [ 998.493280][T27353] vlan3: entered promiscuous mode [ 998.493323][T27353] hsr0: entered promiscuous mode [ 998.493612][T27353] vlan3: entered allmulticast mode [ 998.493631][T27353] hsr0: entered allmulticast mode [ 998.493649][T27353] hsr_slave_0: entered allmulticast mode [ 998.493669][T27353] hsr_slave_1: entered allmulticast mode [ 998.670656][T27370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6348'. [ 999.035130][T26934] veth0_vlan: entered promiscuous mode [ 999.060147][T26934] veth1_vlan: entered promiscuous mode [ 999.213353][T26934] veth0_macvtap: entered promiscuous mode [ 999.223224][T26934] veth1_macvtap: entered promiscuous mode [ 999.344728][T26934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 999.385625][T26934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 999.476400][T26374] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.476732][T26374] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.477031][T26370] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.513462][T26401] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 999.724732][T27410] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6358'. [ 999.743250][T26383] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.743289][T26383] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 999.800969][T26401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 999.801010][T26401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1000.539760][ T4936] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1000.552405][ T4936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1000.560373][ T4936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1000.572319][ T4936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1000.581884][ T4936] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1000.641740][T27446] netlink: 'syz.2.6370': attribute type 16 has an invalid length. [ 1000.641791][T27446] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6370'. [ 1000.644223][T27446] veth0_macvtap: entered allmulticast mode [ 1000.896145][T27454] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1000.937585][T27459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6372'. [ 1000.954537][T27456] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1000.954620][T27456] gretap2: entered promiscuous mode [ 1000.954650][T27456] gretap2: entered allmulticast mode [ 1001.065486][T27466] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6375'. [ 1001.304141][T27479] FAULT_INJECTION: forcing a failure. [ 1001.304141][T27479] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.320885][T27479] CPU: 0 UID: 0 PID: 27479 Comm: syz.2.6376 Not tainted syzkaller #0 PREEMPT(full) [ 1001.320918][T27479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.320933][T27479] Call Trace: [ 1001.320943][T27479] [ 1001.320954][T27479] dump_stack_lvl+0xe8/0x150 [ 1001.320998][T27479] should_fail_ex+0x410/0x560 [ 1001.321038][T27479] ? __alloc_skb+0x1db/0x7a0 [ 1001.321073][T27479] should_failslab+0xa8/0x100 [ 1001.321102][T27479] ? __alloc_skb+0x1db/0x7a0 [ 1001.321134][T27479] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1001.321167][T27479] ? __alloc_skb+0x18d/0x7a0 [ 1001.321201][T27479] ? __alloc_skb+0x1db/0x7a0 [ 1001.321243][T27479] __alloc_skb+0x1db/0x7a0 [ 1001.321282][T27479] netlink_sendmsg+0x5d4/0xb40 [ 1001.321333][T27479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.321371][T27479] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1001.321409][T27479] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.321435][T27479] sock_sendmsg_nosec+0x13a/0x180 [ 1001.321469][T27479] ____sys_sendmsg+0x54e/0x850 [ 1001.321508][T27479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.321542][T27479] ? import_iovec+0x73/0xa0 [ 1001.321570][T27479] ___sys_sendmsg+0x2a5/0x360 [ 1001.321594][T27479] ? __lock_acquire+0x6df/0x2e50 [ 1001.321620][T27479] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.321681][T27479] ? __fget_files+0x2a/0x420 [ 1001.321711][T27479] ? __fget_files+0x3a2/0x420 [ 1001.321751][T27479] __x64_sys_sendmsg+0x1b1/0x290 [ 1001.321779][T27479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1001.321827][T27479] do_syscall_64+0x166/0x520 [ 1001.321859][T27479] ? trace_irq_disable+0x3b/0x140 [ 1001.321881][T27479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.321905][T27479] ? clear_bhb_loop+0x70/0xc0 [ 1001.321933][T27479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.321955][T27479] RIP: 0033:0x7fe0f259e159 [ 1001.321976][T27479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.321995][T27479] RSP: 002b:00007fe0f3531028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.322019][T27479] RAX: ffffffffffffffda RBX: 00007fe0f2826090 RCX: 00007fe0f259e159 [ 1001.322036][T27479] RDX: 0000000020040854 RSI: 0000200000000180 RDI: 0000000000000003 [ 1001.322051][T27479] RBP: 00007fe0f3531090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.322066][T27479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.322080][T27479] R13: 00007fe0f2826128 R14: 00007fe0f2826090 R15: 00007ffcc615fd58 [ 1001.322116][T27479] [ 1001.564285][T27480] FAULT_INJECTION: forcing a failure. [ 1001.564285][T27480] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.564376][T27480] CPU: 1 UID: 0 PID: 27480 Comm: syz.0.6380 Not tainted syzkaller #0 PREEMPT(full) [ 1001.564432][T27480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.564473][T27480] Call Trace: [ 1001.564509][T27480] [ 1001.564538][T27480] dump_stack_lvl+0xe8/0x150 [ 1001.564628][T27480] should_fail_ex+0x410/0x560 [ 1001.564730][T27480] should_failslab+0xa8/0x100 [ 1001.564799][T27480] __kmalloc_cache_noprof+0xa3/0x600 [ 1001.564879][T27480] ? stack_trace_save+0xa9/0x100 [ 1001.565025][T27480] ? rtnl_newlink+0x143/0x1c30 [ 1001.565078][T27480] ? rtnl_newlink+0x143/0x1c30 [ 1001.565149][T27480] rtnl_newlink+0x143/0x1c30 [ 1001.565207][T27480] ? kasan_save_track+0x4f/0x80 [ 1001.565260][T27480] ? kasan_save_track+0x3e/0x80 [ 1001.565312][T27480] ? __kasan_slab_free+0x5c/0x80 [ 1001.565365][T27480] ? kmem_cache_free+0x182/0x650 [ 1001.565417][T27480] ? nlmon_xmit+0xb0/0x100 [ 1001.565635][T27480] ? dev_hard_start_xmit+0x2cd/0x830 [ 1001.565730][T27480] ? __dev_queue_xmit+0x14c0/0x3820 [ 1001.565792][T27480] ? __netlink_deliver_tap+0x5b4/0x860 [ 1001.565862][T27480] ? netlink_deliver_tap+0x19c/0x1b0 [ 1001.565923][T27480] ? netlink_unicast+0x781/0x940 [ 1001.565992][T27480] ? netlink_sendmsg+0x813/0xb40 [ 1001.566068][T27480] ? __pfx_rtnl_newlink+0x10/0x10 [ 1001.566119][T27480] ? do_syscall_64+0x166/0x520 [ 1001.566199][T27480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.566355][T27480] ? kasan_quarantine_put+0xbb/0x1f0 [ 1001.566441][T27480] ? lockdep_hardirqs_on+0x7b/0x110 [ 1001.566536][T27480] ? nlmon_xmit+0xb0/0x100 [ 1001.566618][T27480] ? kmem_cache_free+0x182/0x650 [ 1001.566695][T27480] ? __lock_acquire+0x6df/0x2e50 [ 1001.566751][T27480] ? __dev_queue_xmit+0x29b/0x3820 [ 1001.566839][T27480] ? __local_bh_enable_ip+0xd6/0x140 [ 1001.566927][T27480] ? lockdep_hardirqs_on+0x7b/0x110 [ 1001.567013][T27480] ? __dev_queue_xmit+0x29b/0x3820 [ 1001.567075][T27480] ? __local_bh_enable_ip+0xd6/0x140 [ 1001.567149][T27480] ? __dev_queue_xmit+0x29b/0x3820 [ 1001.567231][T27480] ? lock_acquire+0x115/0x350 [ 1001.567283][T27480] ? __pfx_rtnl_newlink+0x10/0x10 [ 1001.567371][T27480] ? __pfx_rtnl_newlink+0x10/0x10 [ 1001.567417][T27480] rtnetlink_rcv_msg+0x802/0xc00 [ 1001.567511][T27480] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1001.567592][T27480] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1001.567679][T27480] ? ref_tracker_free+0x689/0x830 [ 1001.567736][T27480] ? __pfx_ref_tracker_free+0x10/0x10 [ 1001.567808][T27480] netlink_rcv_skb+0x226/0x4a0 [ 1001.567837][T27480] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1001.567872][T27480] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1001.567988][T27480] ? netlink_deliver_tap+0x2e/0x1b0 [ 1001.568059][T27480] ? netlink_deliver_tap+0x2e/0x1b0 [ 1001.568185][T27480] netlink_unicast+0x7bd/0x940 [ 1001.568276][T27480] netlink_sendmsg+0x813/0xb40 [ 1001.568368][T27480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.568454][T27480] ? apparmor_socket_sendmsg+0x98/0x360 [ 1001.568540][T27480] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.568602][T27480] sock_sendmsg_nosec+0x13a/0x180 [ 1001.568712][T27480] ____sys_sendmsg+0x54e/0x850 [ 1001.568794][T27480] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.568889][T27480] ? import_iovec+0x73/0xa0 [ 1001.568964][T27480] ___sys_sendmsg+0x2a5/0x360 [ 1001.569026][T27480] ? __lock_acquire+0x6df/0x2e50 [ 1001.569127][T27480] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.569301][T27480] ? __fget_files+0x2a/0x420 [ 1001.569390][T27480] ? __fget_files+0x3a2/0x420 [ 1001.569504][T27480] __x64_sys_sendmsg+0x1b1/0x290 [ 1001.569577][T27480] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1001.569703][T27480] do_syscall_64+0x166/0x520 [ 1001.569819][T27480] ? trace_irq_disable+0x3b/0x140 [ 1001.569873][T27480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.569935][T27480] ? clear_bhb_loop+0x70/0xc0 [ 1001.570026][T27480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.570088][T27480] RIP: 0033:0x7f09cdf9e159 [ 1001.570143][T27480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.570194][T27480] RSP: 002b:00007f09ceed6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.570257][T27480] RAX: ffffffffffffffda RBX: 00007f09ce225fa0 RCX: 00007f09cdf9e159 [ 1001.570300][T27480] RDX: 0000000000040084 RSI: 0000200000000200 RDI: 0000000000000003 [ 1001.570340][T27480] RBP: 00007f09ceed6090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.570382][T27480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.570416][T27480] R13: 00007f09ce226038 R14: 00007f09ce225fa0 R15: 00007ffdb6da14b8 [ 1001.570507][T27480] [ 1002.384038][T27498] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6384'. [ 1002.479563][T27498] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1002.660132][ T4936] Bluetooth: hci1: command tx timeout [ 1002.701881][T27508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6387'. [ 1003.082662][T27514] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1003.173162][T27515] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1004.143611][T27442] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.152651][T27442] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.153490][T27442] bridge_slave_0: entered allmulticast mode [ 1004.174796][T27442] bridge_slave_0: entered promiscuous mode [ 1004.359766][T27442] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.359924][T27442] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.360094][T27442] bridge_slave_1: entered allmulticast mode [ 1004.397982][T27442] bridge_slave_1: entered promiscuous mode [ 1004.740276][ T4936] Bluetooth: hci1: command tx timeout [ 1004.769571][T27442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1004.805093][T27442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1004.840163][T27547] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6396'. [ 1005.005335][T27551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6398'. [ 1005.124389][T27442] team0: Port device team_slave_0 added [ 1005.155480][T27442] team0: Port device team_slave_1 added [ 1005.251656][T27553] netlink: 'syz.1.6399': attribute type 1 has an invalid length. [ 1005.421017][T27553] bond1: entered promiscuous mode [ 1005.426820][T27553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1005.441853][T27442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1005.449372][T27442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.477142][T27442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1005.479299][T27442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1005.479315][T27442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1005.479345][T27442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1005.612750][T27558] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1005.624798][T27558] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 1005.637968][T27558] bond1: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 1005.686348][T27558] bond1: (slave ipip0): making interface the new active one [ 1005.694638][T27558] ipip0: entered promiscuous mode [ 1005.718849][T27558] bond1: (slave ipip0): Enslaving as an active interface with an up link [ 1005.749388][T27564] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6401'. [ 1005.843057][T27568] syzkaller1: entered promiscuous mode [ 1005.854535][T27568] syzkaller1: entered allmulticast mode [ 1005.959941][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6405'. [ 1006.066862][T27573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6404'. [ 1006.107841][T27577] FAULT_INJECTION: forcing a failure. [ 1006.107841][T27577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.123510][T27577] CPU: 1 UID: 0 PID: 27577 Comm: syz.1.6406 Not tainted syzkaller #0 PREEMPT(full) [ 1006.123542][T27577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1006.123557][T27577] Call Trace: [ 1006.123566][T27577] [ 1006.123576][T27577] dump_stack_lvl+0xe8/0x150 [ 1006.123616][T27577] should_fail_ex+0x410/0x560 [ 1006.123657][T27577] _copy_from_iter+0x1d3/0x1660 [ 1006.123694][T27577] ? __alloc_skb+0x27a/0x7a0 [ 1006.123730][T27577] ? __alloc_skb+0x27a/0x7a0 [ 1006.123767][T27577] ? __alloc_skb+0x27a/0x7a0 [ 1006.123802][T27577] ? __pfx__copy_from_iter+0x10/0x10 [ 1006.123835][T27577] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1006.123869][T27577] ? __alloc_skb+0x27a/0x7a0 [ 1006.123900][T27577] ? __alloc_skb+0x27a/0x7a0 [ 1006.123941][T27577] ? netlink_sendmsg+0x650/0xb40 [ 1006.123970][T27577] ? skb_put+0x112/0x210 [ 1006.123994][T27577] netlink_sendmsg+0x6c0/0xb40 [ 1006.124044][T27577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.124082][T27577] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1006.124121][T27577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.124148][T27577] sock_sendmsg_nosec+0x13a/0x180 [ 1006.124182][T27577] ____sys_sendmsg+0x54e/0x850 [ 1006.124213][T27577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.124253][T27577] ? import_iovec+0x73/0xa0 [ 1006.124281][T27577] ___sys_sendmsg+0x2a5/0x360 [ 1006.124305][T27577] ? __lock_acquire+0x6df/0x2e50 [ 1006.124333][T27577] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.124396][T27577] ? __fget_files+0x2a/0x420 [ 1006.124426][T27577] ? __fget_files+0x3a2/0x420 [ 1006.124466][T27577] __x64_sys_sendmsg+0x1b1/0x290 [ 1006.124495][T27577] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1006.124544][T27577] do_syscall_64+0x166/0x520 [ 1006.124577][T27577] ? trace_irq_disable+0x3b/0x140 [ 1006.124600][T27577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.124623][T27577] ? clear_bhb_loop+0x70/0xc0 [ 1006.124652][T27577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.124676][T27577] RIP: 0033:0x7ff9e939e159 [ 1006.124698][T27577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.124718][T27577] RSP: 002b:00007ff9ea19d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.124742][T27577] RAX: ffffffffffffffda RBX: 00007ff9e9625fa0 RCX: 00007ff9e939e159 [ 1006.124759][T27577] RDX: 0000000020040854 RSI: 0000200000000180 RDI: 0000000000000003 [ 1006.124775][T27577] RBP: 00007ff9ea19d090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.124790][T27577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.124804][T27577] R13: 00007ff9e9626038 R14: 00007ff9e9625fa0 R15: 00007ffec2dc7118 [ 1006.124840][T27577] [ 1006.802560][T27587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1006.822317][ T4936] Bluetooth: hci1: command tx timeout [ 1007.161356][T27442] hsr_slave_0: entered promiscuous mode [ 1007.176393][T27442] hsr_slave_1: entered promiscuous mode [ 1007.188453][T27442] debugfs: 'hsr0' already exists in 'hsr' [ 1007.188487][T27442] Cannot create hsr debugfs directory [ 1007.636787][T27616] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6416'. [ 1007.720888][T27619] netlink: 'syz.0.6415': attribute type 15 has an invalid length. [ 1007.720935][T27619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6415'. [ 1007.816854][T27623] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6418'. [ 1007.827597][T27623] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6418'. [ 1008.031521][T27442] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.202975][T27442] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.329682][T27442] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.392064][T27654] netlink: 'syz.0.6425': attribute type 4 has an invalid length. [ 1008.412742][T27654] netlink: 'syz.0.6425': attribute type 4 has an invalid length. [ 1008.564542][T27442] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.898439][ T4936] Bluetooth: hci1: command tx timeout [ 1010.881602][T27627] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1010.902808][T27442] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1010.930390][T27442] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1010.938622][T27442] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1010.971945][T27442] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1010.981195][T27442] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1011.017000][T27442] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1011.028754][T27442] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1011.057967][T27442] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.173488][T27684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6431'. [ 1011.257707][T27676] bond2: entered promiscuous mode [ 1011.263088][T27676] bond2: entered allmulticast mode [ 1011.263582][T27676] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1011.534074][T27442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1011.567803][T27442] 8021q: adding VLAN 0 to HW filter on device team0 [ 1011.583021][T26374] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.583145][T26374] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.605771][T27687] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6433'. [ 1011.641228][T26370] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.641350][T26370] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.924676][T27707] netlink: 'syz.0.6437': attribute type 1 has an invalid length. [ 1012.099666][T27707] veth3: entered allmulticast mode [ 1012.143812][T27707] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1012.185524][T27713] bond1: (slave veth0_to_bond): making interface the new active one [ 1012.195130][T27713] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1012.457440][T27728] syzkaller1: entered promiscuous mode [ 1012.457482][T27728] syzkaller1: entered allmulticast mode [ 1013.108232][T27746] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6447'. [ 1013.113064][T27751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6449'. [ 1013.176599][T27442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1013.319407][T27757] netlink: 546 bytes leftover after parsing attributes in process `syz.4.6452'. [ 1013.347213][T27442] veth0_vlan: entered promiscuous mode [ 1013.411461][T27442] veth1_vlan: entered promiscuous mode [ 1013.494711][T27442] veth0_macvtap: entered promiscuous mode [ 1013.510459][T27442] veth1_macvtap: entered promiscuous mode [ 1013.570526][T27442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1013.587507][T27442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1013.729578][T27771] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6457'. [ 1013.769959][T26369] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.770104][T26369] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.770273][T26369] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.770357][T26369] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.926258][T24968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.926302][T24968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.997580][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.997620][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1014.096227][T27778] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6460'. [ 1014.096270][T27778] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6460'. [ 1014.181287][T26369] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.184730][T26405] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.203925][T26405] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.209956][T26373] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1014.426514][T27797] bridge1: entered promiscuous mode [ 1014.432156][T27797] bridge1: entered allmulticast mode [ 1014.446319][T27797] team0: Port device bridge1 added [ 1014.523373][T27797] bridge0: port 3(team0) entered blocking state [ 1014.532221][T27797] bridge0: port 3(team0) entered disabled state [ 1014.539283][T27797] team0: entered allmulticast mode [ 1014.545548][T27797] team_slave_0: entered allmulticast mode [ 1014.545575][T27797] team_slave_1: entered allmulticast mode [ 1014.579572][T27797] team0: entered promiscuous mode [ 1014.584912][T27797] team_slave_0: entered promiscuous mode [ 1014.592659][T27797] team_slave_1: entered promiscuous mode [ 1014.601673][T27797] bridge0: port 3(team0) entered blocking state [ 1014.601814][T27797] bridge0: port 3(team0) entered forwarding state [ 1014.840584][T27811] set match dimension is over the limit! [ 1015.064430][T27822] netlink: 'syz.1.6476': attribute type 3 has an invalid length. [ 1015.064472][T27822] netlink: 'syz.1.6476': attribute type 4 has an invalid length. [ 1015.064515][T27822] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.6476'. [ 1015.310287][T27827] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1015.444132][T27837] netlink: 9 bytes leftover after parsing attributes in process `syz.0.6480'. [ 1015.490837][T27837] netlink: 'syz.0.6480': attribute type 4 has an invalid length. [ 1015.493106][T27836] netlink: 'syz.0.6480': attribute type 4 has an invalid length. [ 1015.746418][T27849] syzkaller0: entered promiscuous mode [ 1015.746465][T27849] syzkaller0: entered allmulticast mode [ 1015.809239][T27861] netlink: 'syz.0.6491': attribute type 83 has an invalid length. [ 1016.317651][T27887] __nla_validate_parse: 5 callbacks suppressed [ 1016.317712][T27887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6498'. [ 1016.359971][T27891] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6501'. [ 1016.401281][T27889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6500'. [ 1016.401326][T27889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6500'. [ 1016.604299][T27901] nicvf0: entered promiscuous mode [ 1016.623381][T27901] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6503'. [ 1016.915432][T27920] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1016.923668][T27919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6511'. [ 1016.923775][T27919] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6511'. [ 1016.954522][T27920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1016.965461][T27920] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1017.084666][T27925] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1017.303583][T27933] geneve3: entered promiscuous mode [ 1017.303628][T27933] geneve3: entered allmulticast mode [ 1017.319340][T26374] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1017.319401][T26374] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1017.319485][T26374] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1017.319601][T26374] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1017.441177][T27940] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1017.452070][T27937] bond1: entered promiscuous mode [ 1017.854141][T27952] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1024.975045][ C0] sched: DL replenish lagged too much [ 1036.770214][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 1064.195805][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1105.582426][T28001] Bluetooth: hci5: command tx timeout [ 1116.147698][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 1126.577995][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1126.585005][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P27977/3:b..l [ 1126.593076][ C0] rcu: (detected by 0, t=10503 jiffies, g=178805, q=890287 ncpus=2) [ 1126.601260][ C0] task:syz.3.6526 state:R running task stack:24456 pid:27977 tgid:27972 ppid:27442 task_flags:0x400040 flags:0x00080002 [ 1126.614818][ C0] Call Trace: [ 1126.618126][ C0] [ 1126.621112][ C0] __schedule+0x17db/0x58f0 [ 1126.625687][ C0] ? irqentry_exit+0x218/0x910 [ 1126.630595][ C0] ? irqentry_exit+0x218/0x910 [ 1126.635411][ C0] ? trace_irq_disable+0x3b/0x140 [ 1126.640484][ C0] ? __pfx___schedule+0x10/0x10 [ 1126.645382][ C0] ? xas_find+0x843/0x980 [ 1126.649768][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1126.655202][ C0] preempt_schedule_common+0x7f/0xd0 [ 1126.660531][ C0] preempt_schedule_thunk+0x16/0x40 [ 1126.665770][ C0] _raw_spin_unlock+0x41/0x50 [ 1126.670482][ C0] filemap_map_pages+0x1aba/0x2170 [ 1126.675694][ C0] ? page_table_check_set+0x4c8/0x530 [ 1126.681199][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 1126.686453][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1126.691941][ C0] ? lock_acquire+0x115/0x350 [ 1126.696660][ C0] ? lock_acquire+0x115/0x350 [ 1126.701367][ C0] ? do_pte_missing+0x140c/0x34b0 [ 1126.706439][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1126.711949][ C0] ? do_pte_missing+0x140c/0x34b0 [ 1126.717018][ C0] do_pte_missing+0x20ae/0x34b0 [ 1126.721925][ C0] ? handle_mm_fault+0xf1/0x3750 [ 1126.726901][ C0] handle_mm_fault+0x1a53/0x3750 [ 1126.731883][ C0] ? handle_mm_fault+0xf1/0x3750 [ 1126.736871][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1126.742193][ C0] ? follow_page_pte+0x748/0xf10 [ 1126.747176][ C0] ? __pfx_follow_page_pte+0x10/0x10 [ 1126.752511][ C0] __get_user_pages+0x1675/0x2750 [ 1126.757624][ C0] populate_vma_page_range+0x2be/0x3c0 [ 1126.763151][ C0] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1126.769173][ C0] ? down_read+0x2be/0x330 [ 1126.773613][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1126.779124][ C0] __mm_populate+0x25f/0x390 [ 1126.783779][ C0] ? __pfx___mm_populate+0x10/0x10 [ 1126.788940][ C0] vm_mmap_pgoff+0x353/0x4e0 [ 1126.793569][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1126.798844][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1126.803994][ C0] ? exc_page_fault+0x6a/0xc0 [ 1126.808730][ C0] ? ksys_mmap_pgoff+0xf3/0x760 [ 1126.813616][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 1126.818469][ C0] do_syscall_64+0x166/0x520 [ 1126.823136][ C0] ? trace_irq_disable+0x3b/0x140 [ 1126.828187][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.834306][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1126.839164][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.845096][ C0] RIP: 0033:0x7f4d94d9e159 [ 1126.849533][ C0] RSP: 002b:00007f4d92ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1126.857988][ C0] RAX: ffffffffffffffda RBX: 00007f4d95026180 RCX: 00007f4d94d9e159 [ 1126.866068][ C0] RDX: b635773f04ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 1126.874063][ C0] RBP: 00007f4d94e3503b R08: ffffffffffffffff R09: 0000000000000000 [ 1126.882064][ C0] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 1126.890143][ C0] R13: 00007f4d95026218 R14: 00007f4d95026180 R15: 00007ffdd07ac898 [ 1126.898172][ C0] [ 1126.901237][ C0] rcu: rcu_preempt kthread starved for 1596 jiffies! g178805 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1126.912285][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1126.922283][ C0] rcu: RCU grace-period kthread stack dump: [ 1126.928200][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1126.941738][ C0] Call Trace: [ 1126.945032][ C0] [ 1126.947989][ C0] __schedule+0x17db/0x58f0 [ 1126.952536][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1126.957521][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1126.962674][ C0] ? __pfx___schedule+0x10/0x10 [ 1126.967553][ C0] ? lock_acquire+0x115/0x350 [ 1126.972271][ C0] ? schedule+0x90/0x2b0 [ 1126.976544][ C0] schedule+0x164/0x2b0 [ 1126.980744][ C0] schedule_timeout+0x152/0x2c0 [ 1126.985647][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1126.991059][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1126.996424][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1127.002265][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1127.007896][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1127.012802][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1127.018990][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1127.024312][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1127.029717][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1127.035560][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1127.040184][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1127.045408][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1127.050379][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1127.055440][ C0] kthread+0x38b/0x480 [ 1127.059557][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1127.064802][ C0] ? __pfx_kthread+0x10/0x10 [ 1127.069425][ C0] ret_from_fork+0x514/0xb70 [ 1127.074049][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1127.079259][ C0] ? __switch_to+0xc89/0x1420 [ 1127.083986][ C0] ? __pfx_kthread+0x10/0x10 [ 1127.088610][ C0] ret_from_fork_asm+0x1a/0x30 [ 1127.093433][ C0] [ 1127.096475][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1127.102848][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1127.108078][ C1] NMI backtrace for cpu 1 [ 1127.108096][ C1] CPU: 1 UID: 0 PID: 26395 Comm: kworker/u8:45 Not tainted syzkaller #0 PREEMPT(full) [ 1127.108128][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1127.108146][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 1127.108238][ C1] RIP: 0010:__lock_acquire+0x3e2/0x2e50 [ 1127.108257][ C1] Code: c7 c6 ae d7 59 8e 67 48 0f b9 3a 90 31 c0 48 8b 3c 24 0f b6 98 c4 00 00 00 49 8b 46 20 25 ff 1f 00 00 48 0f a3 05 fe 03 f7 12 <73> 17 48 69 c0 c8 00 00 00 48 8d 88 d0 24 3b 94 84 db 75 4e e9 24 [ 1127.108271][ C1] RSP: 0018:ffffc90000a16d18 EFLAGS: 00000003 [ 1127.108285][ C1] RAX: 0000000000000007 RBX: 0000000000000003 RCX: 0000000000000007 [ 1127.108296][ C1] RDX: 0000000000026000 RSI: 0000000000006000 RDI: ffff888059fd5dc0 [ 1127.108308][ C1] RBP: 0000000000000000 R08: cf00000000000000 R09: 0000000000080000 [ 1127.108319][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: 0000000000000007 [ 1127.108330][ C1] R13: ffff888059fd6970 R14: ffff888059fd6ad8 R15: 0000000000000009 [ 1127.108341][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 1127.108355][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1127.108366][ C1] CR2: 00007f6a96400218 CR3: 000000002c256000 CR4: 00000000003526f0 [ 1127.108382][ C1] Call Trace: [ 1127.108388][ C1] [ 1127.108396][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1127.108419][ C1] ? __ip_queue_xmit+0x10df/0x1b10 [ 1127.108486][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.108504][ C1] ? __tcp_transmit_skb+0x2d18/0x47c0 [ 1127.108571][ C1] ? lock_acquire+0x115/0x350 [ 1127.108588][ C1] lock_acquire+0x115/0x350 [ 1127.108602][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.108624][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.108642][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1127.108667][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.108685][ C1] unwind_next_frame+0xac/0x2550 [ 1127.108703][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.108722][ C1] ? ret_from_fork+0x514/0xb70 [ 1127.108736][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.108756][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1127.108781][ C1] arch_stack_walk+0x11b/0x150 [ 1127.108802][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1127.108826][ C1] ? fill_pool+0x163/0x610 [ 1127.108845][ C1] stack_trace_save+0xa9/0x100 [ 1127.108869][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1127.108895][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1127.108912][ C1] kasan_save_track+0x3e/0x80 [ 1127.108928][ C1] ? kasan_save_track+0x3e/0x80 [ 1127.108942][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 1127.108958][ C1] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1127.108981][ C1] ? fill_pool+0x163/0x610 [ 1127.108997][ C1] ? debug_object_activate+0x38d/0x420 [ 1127.109013][ C1] ? enqueue_hrtimer+0xa9/0x2c0 [ 1127.109036][ C1] ? __hrtimer_run_queues+0x4ce/0xa10 [ 1127.109071][ C1] ? hrtimer_interrupt+0x4cd/0xaa0 [ 1127.109091][ C1] ? __sysvec_apic_timer_interrupt+0x102/0x430 [ 1127.109117][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 1127.109144][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1127.109162][ C1] ? unwind_next_frame+0xb04/0x2550 [ 1127.109179][ C1] ? arch_stack_walk+0x11b/0x150 [ 1127.109196][ C1] ? stack_trace_save+0xa9/0x100 [ 1127.109219][ C1] ? kasan_save_track+0x3e/0x80 [ 1127.109234][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1127.109250][ C1] ? __kmalloc_cache_noprof+0x321/0x600 [ 1127.109274][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 1127.109290][ C1] ? dst_init+0xbe/0x470 [ 1127.109310][ C1] ? dst_alloc+0x12a/0x170 [ 1127.109328][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1127.109372][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 1127.109393][ C1] ? ip_route_output_flow+0x2a/0x150 [ 1127.109411][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 1127.109473][ C1] ? synproxy_send_tcp+0x332/0x670 [ 1127.109517][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 1127.109541][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1127.109592][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 1127.109607][ C1] ? nft_do_chain+0x48d/0x1b10 [ 1127.109644][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1127.109682][ C1] ? nf_hook_slow+0xc5/0x220 [ 1127.109740][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1127.109755][ C1] ? NF_HOOK+0x336/0x3c0 [ 1127.109768][ C1] ? process_backlog+0xa6b/0x18b0 [ 1127.109791][ C1] ? __napi_poll+0xaa/0x330 [ 1127.109812][ C1] ? net_rx_action+0x61d/0xf50 [ 1127.109834][ C1] ? handle_softirqs+0x226/0x860 [ 1127.109855][ C1] ? do_softirq+0x77/0xd0 [ 1127.109874][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 1127.109894][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 1127.109968][ C1] ? ieee80211_iface_work+0x78a/0x1010 [ 1127.109985][ C1] ? cfg80211_wiphy_work+0x29e/0x420 [ 1127.110004][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 1127.110025][ C1] ? worker_thread+0xa47/0xfb0 [ 1127.110045][ C1] ? kthread+0x38b/0x480 [ 1127.110059][ C1] ? ret_from_fork+0x514/0xb70 [ 1127.110072][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1127.110103][ C1] __kasan_slab_alloc+0x6c/0x80 [ 1127.110120][ C1] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1127.110148][ C1] ? fill_pool+0x163/0x610 [ 1127.110163][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1127.110186][ C1] ? fill_pool+0x163/0x610 [ 1127.110204][ C1] ? debug_object_activate+0x364/0x420 [ 1127.110221][ C1] fill_pool+0x163/0x610 [ 1127.110236][ C1] ? lock_acquire+0x115/0x350 [ 1127.110252][ C1] ? __pfx_fill_pool+0x10/0x10 [ 1127.110269][ C1] ? hrtimer_forward+0x16e/0x290 [ 1127.110291][ C1] ? debug_object_activate+0x364/0x420 [ 1127.110307][ C1] debug_object_activate+0x38d/0x420 [ 1127.110328][ C1] enqueue_hrtimer+0xa9/0x2c0 [ 1127.110352][ C1] __hrtimer_run_queues+0x4ce/0xa10 [ 1127.110381][ C1] hrtimer_interrupt+0x4cd/0xaa0 [ 1127.110414][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1127.110434][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1127.110456][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1127.110473][ C1] RIP: 0010:unwind_next_frame+0xb04/0x2550 [ 1127.110493][ C1] Code: 8b 44 24 30 42 0f b6 04 20 84 c0 4c 89 04 24 0f 85 26 14 00 00 48 89 dd 48 c1 ed 03 42 0f b6 44 25 00 84 c0 0f 85 3b 14 00 00 <0f> b6 72 01 83 e6 07 83 fe 04 0f 84 39 04 00 00 83 fe 03 0f 84 f1 [ 1127.110507][ C1] RSP: 0018:ffffc90000a17860 EFLAGS: 00000246 [ 1127.110521][ C1] RAX: 0000000000000000 RBX: ffffffff91b4a323 RCX: ffffffff90ffbfdc [ 1127.110533][ C1] RDX: ffffffff91b4a322 RSI: ffffffff91b4a31e RDI: ffffffff8c6d9420 [ 1127.110546][ C1] RBP: 1ffffffff2369464 R08: ffffc90006cbfa10 R09: 0000000000000000 [ 1127.110558][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: dffffc0000000000 [ 1127.110569][ C1] R13: ffffffff91b4a31e R14: ffffc90000a17908 R15: 1ffff92000142f21 [ 1127.110591][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 1127.110616][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.110636][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1127.110661][ C1] arch_stack_walk+0x11b/0x150 [ 1127.110681][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 1127.110708][ C1] stack_trace_save+0xa9/0x100 [ 1127.110732][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1127.110756][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 1127.110776][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 1127.110800][ C1] kasan_save_track+0x3e/0x80 [ 1127.110815][ C1] ? kasan_save_track+0x3e/0x80 [ 1127.110829][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 1127.110845][ C1] ? __kmalloc_cache_noprof+0x321/0x600 [ 1127.110869][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 1127.110884][ C1] ? dst_init+0xbe/0x470 [ 1127.110901][ C1] ? dst_alloc+0x12a/0x170 [ 1127.110919][ C1] ? ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1127.110940][ C1] ? ip_route_output_key_hash+0x18d/0x2a0 [ 1127.110961][ C1] ? ip_route_output_flow+0x2a/0x150 [ 1127.110979][ C1] ? ip_route_me_harder+0x762/0xfe0 [ 1127.110998][ C1] ? synproxy_send_tcp+0x332/0x670 [ 1127.111020][ C1] ? synproxy_send_client_synack+0x89b/0xde0 [ 1127.111043][ C1] ? nft_synproxy_eval_v4+0x362/0x4e0 [ 1127.111058][ C1] ? nft_synproxy_do_eval+0x335/0x550 [ 1127.111072][ C1] ? nft_do_chain+0x48d/0x1b10 [ 1127.111088][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1127.111102][ C1] ? nf_hook_slow+0xc5/0x220 [ 1127.111123][ C1] ? NF_HOOK+0x21f/0x3c0 [ 1127.111143][ C1] ? NF_HOOK+0x336/0x3c0 [ 1127.111156][ C1] ? process_backlog+0xa6b/0x18b0 [ 1127.111179][ C1] ? __napi_poll+0xaa/0x330 [ 1127.111199][ C1] ? net_rx_action+0x61d/0xf50 [ 1127.111221][ C1] ? handle_softirqs+0x226/0x860 [ 1127.111241][ C1] ? do_softirq+0x77/0xd0 [ 1127.111260][ C1] ? __local_bh_enable_ip+0x100/0x140 [ 1127.111280][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 1127.111315][ C1] ? rcu_is_watching+0x16/0xb0 [ 1127.111335][ C1] __kasan_kmalloc+0x93/0xb0 [ 1127.111353][ C1] __kmalloc_cache_noprof+0x321/0x600 [ 1127.111378][ C1] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1127.111402][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 1127.111416][ C1] ? ref_tracker_alloc+0x15b/0x4b0 [ 1127.111434][ C1] ref_tracker_alloc+0x15b/0x4b0 [ 1127.111450][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1127.111468][ C1] ? rcu_is_watching+0x16/0xb0 [ 1127.111487][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1127.111509][ C1] ? dst_alloc+0x105/0x170 [ 1127.111528][ C1] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 1127.111551][ C1] ? dst_alloc+0x105/0x170 [ 1127.111569][ C1] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1127.111593][ C1] dst_init+0xbe/0x470 [ 1127.111611][ C1] ? dst_alloc+0x112/0x170 [ 1127.111631][ C1] dst_alloc+0x12a/0x170 [ 1127.111652][ C1] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 1127.111677][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1127.111699][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 1127.111721][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1127.111744][ C1] ? lock_acquire+0x115/0x350 [ 1127.111763][ C1] ip_route_output_flow+0x2a/0x150 [ 1127.111780][ C1] ? ip_route_me_harder+0x74b/0xfe0 [ 1127.111801][ C1] ip_route_me_harder+0x762/0xfe0 [ 1127.111825][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 1127.111848][ C1] ? __alloc_skb+0x27a/0x7a0 [ 1127.111875][ C1] ? __cookie_v4_init_sequence+0x273/0x510 [ 1127.111905][ C1] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1127.111932][ C1] synproxy_send_tcp+0x332/0x670 [ 1127.111957][ C1] synproxy_send_client_synack+0x89b/0xde0 [ 1127.112009][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1127.112037][ C1] ? nft_symhash_dump+0x8/0x290 [ 1127.112094][ C1] ? synproxy_pernet+0x45/0x270 [ 1127.112115][ C1] nft_synproxy_eval_v4+0x362/0x4e0 [ 1127.112146][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1127.112167][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1127.112188][ C1] nft_synproxy_do_eval+0x335/0x550 [ 1127.112206][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1127.112228][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1127.112247][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1127.112271][ C1] nft_do_chain+0x48d/0x1b10 [ 1127.112297][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1127.112319][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1127.112360][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1127.112380][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1127.112398][ C1] ? ipt_do_table+0x2b9/0x15d0 [ 1127.112429][ C1] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1127.112454][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1127.112474][ C1] nf_hook_slow+0xc5/0x220 [ 1127.112502][ C1] NF_HOOK+0x21f/0x3c0 [ 1127.112520][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1127.112539][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1127.112556][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1127.112574][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1127.112596][ C1] ? ip_local_deliver+0x113/0x190 [ 1127.112616][ C1] NF_HOOK+0x336/0x3c0 [ 1127.112635][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1127.112653][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1127.112670][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1127.112688][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1127.112706][ C1] ? ip_rcv_core+0x88d/0xd50 [ 1127.112726][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1127.112744][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1127.112761][ C1] process_backlog+0xa6b/0x18b0 [ 1127.112792][ C1] ? process_backlog+0x3de/0x18b0 [ 1127.112826][ C1] __napi_poll+0xaa/0x330 [ 1127.112852][ C1] net_rx_action+0x61d/0xf50 [ 1127.112886][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1127.112926][ C1] handle_softirqs+0x226/0x860 [ 1127.112952][ C1] ? do_softirq+0x77/0xd0 [ 1127.112977][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 1127.113007][ C1] do_softirq+0x77/0xd0 [ 1127.113030][ C1] [ 1127.113037][ C1] [ 1127.113044][ C1] __local_bh_enable_ip+0x100/0x140 [ 1127.113069][ C1] ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 1127.113103][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 1127.113129][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 1127.113164][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1127.113183][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1127.113224][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1127.113249][ C1] ? kcov_remote_start+0x9c/0x7e0 [ 1127.113294][ C1] ? kcov_remote_start+0x1a6/0x7e0 [ 1127.113326][ C1] ieee80211_iface_work+0x78a/0x1010 [ 1127.113351][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 1127.113375][ C1] ? process_scheduled_works+0x97a/0x1630 [ 1127.113399][ C1] process_scheduled_works+0xc3d/0x1630 [ 1127.113438][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1127.113466][ C1] ? assign_work+0x3cf/0x5d0 [ 1127.113492][ C1] worker_thread+0xa47/0xfb0 [ 1127.113529][ C1] kthread+0x38b/0x480 [ 1127.113547][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1127.113571][ C1] ? __pfx_kthread+0x10/0x10 [ 1127.113589][ C1] ret_from_fork+0x514/0xb70 [ 1127.113608][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1127.113638][ C1] ? __switch_to+0xc89/0x1420 [ 1127.113665][ C1] ? __pfx_kthread+0x10/0x10 [ 1127.113683][ C1] ret_from_fork_asm+0x1a/0x30 [ 1127.113719][ C1]