last executing test programs: 15m53.225512642s ago: executing program 4 (id=40): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x4, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, 0x0, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff1100000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 15m48.495821445s ago: executing program 4 (id=47): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@private0, 0x0}, &(0x7f0000000080)=0x14) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000003c0)={r0, &(0x7f00000000c0)='-\x00', 0x200, &(0x7f0000000100)={@_ha_fsid={[0x5, 0x6]}, {0x4, 0x5, 0x5, 0x8000}}, 0x1000, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000380)=0x7}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x80, 0x0, r2, 0xb6, '\x00', r3, r4, 0x1, 0x5, 0x2}, 0x50) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) 15m48.242146214s ago: executing program 4 (id=50): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x4, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00073c002400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 15m47.868215365s ago: executing program 4 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x3c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000600)=0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fbffffff00000000fdfffdff18110000", @ANYRES64=r1, @ANYBLOB="0000000000000000b70200008d4fea338500000086010000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0xf1cf, 0x0, 0x0, 0x41000, 0x6e, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(sha1-asm,ecb(arc4))\x00'}, 0x58) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd708afb15e1c5a61e0d56d66e73696d0000000f000255c1731864657673696d3000000800030007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40848}, 0x4004810) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x30, r6, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) 15m46.858054482s ago: executing program 4 (id=64): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1, 0x0, 0x500}, 0x0) 15m46.74189791s ago: executing program 4 (id=65): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x7fffffe, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000012000080000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000"]}, 0x108) 15m31.538835717s ago: executing program 32 (id=65): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x7fffffe, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000012000080000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff01000000"]}, 0x108) 20.521469535s ago: executing program 2 (id=8714): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002940)=ANY=[@ANYBLOB="000086dd0200110000080000000060ec97000f982c00fe8000000000000000000000000000aaff02000000000000000000000200000133"], 0xfce) 20.092286855s ago: executing program 2 (id=8721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x704) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) splice(r3, 0x0, r2, 0x0, 0x1100000000f336, 0x8) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008d26200b704000000800000850000003300000085000000a000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_opts(r6, 0x0, 0xb, &(0x7f0000000000)="89", 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @random="4489a2bc242d", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @broadcast=0xac14140a, @broadcast=0xac1414bb, {[@timestamp_addr={0x44, 0x34, 0x0, 0x1, 0x0, [{@local}, {@loopback}, {@local}, {@dev}, {@dev}, {@broadcast}]}, @cipso={0x86, 0xa, 0x0, [{0x0, 0x2}, {0x0, 0x2}]}]}}}}}}}, 0x0) r7 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r7, 0x89ef, &(0x7f0000000000)=0x8) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) (rerun: 32) 19.855024625s ago: executing program 2 (id=8725): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth1_to_bridge\x00'}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0xc0041, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000002080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r3, 0x301, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0xc0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'ip6erspan0\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="6ab964ac4223"], 0xfdef) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x6, &(0x7f00000001c0)=[{0xa365, 0xc, 0xe, 0x4}, {0x3, 0x1, 0x27, 0x10}, {0x0, 0x5, 0x6, 0x7}, {0x5, 0x9, 0x1, 0x10}, {0x8, 0x4, 0x9, 0x2}, {0xf2, 0x2, 0x8, 0x3}]}, 0x10) syz_emit_ethernet(0x26, &(0x7f00000003c0)={@local, @multicast, @val={@val={0x88a8, 0x7, 0x1, 0x2}, {0x8100, 0x0, 0x1, 0x4}}, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "8b3e9057ab80ea46"}}}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='fq_codel\x00', 0x80400, &(0x7f0000000080)={@_ha_fsid={[0x7f, 0x7f55d1df]}, {0x5, 0x9, 0x800000, 0x7c5d8b1b}}, 0x1395, &(0x7f00000000c0), &(0x7f0000000140)=0xc8}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) 16.54121488s ago: executing program 2 (id=8736): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="5000000002060300000073683a697000050001000700000005"], 0x50}, 0x1, 0x0, 0x0, 0x2c0c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c0000000a000000000000000000000202000000000000000300000d000000000300000003000000000000000300000004000020030000000000000000000005000000000000005f"], 0x0, 0x5e, 0x0, 0x1}, 0x28) 16.373796972s ago: executing program 2 (id=8741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc0000000000000080ff00000000000000000000000000000a0030"], 0xb8}}, 0x4000) 16.168037238s ago: executing program 2 (id=8745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000002010000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000007080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.47290175s ago: executing program 1 (id=8809): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f0000000100)=""/7}, 0x20) r1 = socket$inet(0x2, 0x2, 0x1) getpeername$inet(r1, &(0x7f0000000080), &(0x7f0000000100)=0x10) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a400fe0000000071107d00000000001d300200000000004704000001ed030407030000060000001d440000000000006b0a20fe0301000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdec86f9b1eb93d491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f806694d461b76a58d88cf0f520310a1e80dc18cde9ad662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a090f3b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000900)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000001c0)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x20040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYRESDEC=r1, @ANYRES32, @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) 4.348047403s ago: executing program 0 (id=8810): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) getpeername(r0, 0x0, &(0x7f0000000180)) 4.231386898s ago: executing program 1 (id=8812): recvmmsg(0xffffffffffffffff, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/60}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f0000001b00)=""/118}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f00000014c0)=""/101}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x15cbc1ab4c0933f, 0x0, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r0, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK/file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b5982}, 0x20008840) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="fbde07ce", @ANYRES16=r5, @ANYBLOB="010000002000fbdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="1400238005001d000000000005001f0000000000"], 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_POWER_SAVE(r7, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000036c0)=ANY=[@ANYBLOB="1c00000007656ee2d9499fba3e2fc358fa80ccd9e3b5371133f6d18890b44691f2d9588d268d4eef3e98d7da0b662e677a04ad2ce1d79a12bd64c7986d379040f4863587126ac3c219b3aa16e1f97c15453d34a8c6e82f3cf13d9c662a6f0b5ffa6cfdc9c47400cde069a8af571df160396538afaded6326cf56f6a28fc25b5670cc5464fca49c98518dbdfeef9af77cc77af9fb28076b503c", @ANYRES16=r9, @ANYBLOB="010000040000fdffffff3d00000008000300", @ANYBLOB="ef1d51a4d994c73925d050638ad716cbc417875df1e97c755f3584aa04822277a73b86664e4630e6c32ec3300f0e2547e291b904d2bea46f5164834bf17d8ea4feea9fa5a68d3fe16ab9f6a030ec60f4c6ae0e4d299dc14ecd76659c1336927af1aacfcdd81c2b10f6661fc4516dfcb7b027f9", @ANYBLOB], 0x1c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r7, &(0x7f0000003380)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003340)={&(0x7f0000003280)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="0b000300"/18, @ANYRES32=r8, @ANYBLOB="0c009900010001005a00000011000700ab9ac083dc231879c7501e940500000004000b00050008000300000009000700a0efd0a50e0000000800090005ac0f00090007004a7fd25bec00000005000800030000001c006e800400020004000100040002000400020004000200040001000a000600ffffffffffff0000"], 0x98}, 0x1, 0x0, 0x0, 0x4010}, 0x4008080) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r10, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r3, 0xef, 0x6}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x14, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000f0ff17110200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000001a40)={r3, @in6={{0xa, 0x4e22, 0x6, @private0, 0xa}}, 0x9, 0x9, 0x3, 0x7, 0x4, 0x26d, 0x14}, 0x9c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r10, 0x6, 0x14, &(0x7f0000001740)=0x2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000012c0)=0x44fb, 0x4) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x3ffffffffffff2e, 0x1000400000de, 0x0) sendmsg$rds(r10, &(0x7f0000003200)={&(0x7f0000001b80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003540)=[{&(0x7f0000001bc0)=""/23, 0x17}, {&(0x7f0000001c00)=""/214, 0xd6}, {&(0x7f0000001d00)=""/63, 0x3f}, {&(0x7f00000035c0)=""/208, 0xd0}, {&(0x7f0000001e40)=""/162, 0xa2}, {&(0x7f0000001f00)=""/4094, 0xffe}, {&(0x7f00000034c0)=""/84, 0x54}], 0x7, &(0x7f0000003140)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000002f80)=""/231, 0xe7}, &(0x7f0000003080), 0x10}}, @mask_cswp={0x58, 0x114, 0x9, {{0xfffff000, 0x6}, &(0x7f00000030c0)=0x6, &(0x7f0000003100)=0x101, 0x5, 0x5, 0xa, 0xffffffffffffffff, 0x38}}], 0x88, 0x4040896}, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000)=0x401, 0x4) ioctl$FIBMAP(r0, 0x1, &(0x7f0000001700)=0xa85) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) 3.788714955s ago: executing program 3 (id=8815): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010040000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) 3.62847017s ago: executing program 3 (id=8816): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0x4, 0x3}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000007c0)=[@in6={0xa, 0x4e23, 0x98, @remote, 0x1}, @in={0x2, 0x4e23, @loopback}], 0x2c) sendmmsg$inet6(r0, &(0x7f0000002580)=[{{&(0x7f00000004c0)={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000380)="98", 0x1}], 0x1}}], 0x1, 0x4000040) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000140)=0x1, 0x4) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000007c40)=0x1, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x14, 0x10, 0x701, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='c ', @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49ccadc2a07460e46e35eabfb48a4cd9cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}}, 0x20044900) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 3.553472166s ago: executing program 1 (id=8817): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000ac1e0001821501f63ed02a170000000000000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040804) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d333000000e000000100000000000000000000000003000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="06"], 0x158}}, 0x0) 3.355442875s ago: executing program 3 (id=8819): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r5, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x300, 0x17e05}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4000, 0x640}}}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001640)={0xffffffffffffffff, 0x20, &(0x7f0000001600)={&(0x7f0000000100), 0x0, 0x0, &(0x7f0000000600)=""/4096, 0x1000}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) socket$kcm(0xa, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd27, 0x25dfdbff, {0x2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x16}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e20}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508) r12 = socket$inet6(0xa, 0x3, 0x3a) connect$inet6(r12, &(0x7f0000000a40)={0xa, 0x4e23, 0x7fff, @loopback, 0x9}, 0x1c) sendmsg(r12, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r13 = socket(0x2, 0x80805, 0x0) r14 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010100, 0x4e22, 0x3, 'lc\x00', 0xb, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r13, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) 3.225564507s ago: executing program 1 (id=8820): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r1, @ANYBLOB="80e7890f241154ac60e74ec0f9f6bafff68c2f287dcb9aba6870558bbb42c8e1f07380163c2fe4c3dc15b71fdf8ab27d1d4a36e0bf4ec353e53c5e4fc116e2dd0e0c57c1d4ac830c673438a2e1ccfaa836486364822b0029e84e5c4fe28733420c0000bdf913948a25eba0994d91181228c043d1c81e50b64946969ea6f46b93bc651fb79219da3112b6339e01c1f84fa3bb8f4a4c92f174a94d9d0c0b426058c408a0d910134ef7d8"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0xff6c}, 0x48) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r3], 0x28}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x7b, &(0x7f0000000000), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000380)=ANY=[@ANYBLOB="2b03edd276f2926885bfb1f92702d803d4ff644c4c1d6436fc1faad9e4a2b8be5806bee2c831287d39aa050b969c393826b7dd3768e6162ab90e7c3d1b5724b0bcba256ec735a5bde731a879f74cb68131ed923a9d0e372cbeca20bd83683e09a520b3b05f4bbf36f3eb757b0392388eae80dca52244c56f3317499c6736f0b113d683ad0d84f3fefe9614f21313"], 0x9) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009500)=@newtaction={0xe68, 0x30, 0x0, 0x70bd27, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x401, 0x20000000, 0x1, 0x4}, 0x3c, 0x9}, [{0x10000, 0x80000001, 0x90b71e2, 0x6, 0x6, 0x9}, {0xb943, 0x0, 0x8, 0x7, 0x1, 0x6}, {0x4, 0x80000001, 0x9cb, 0x9, 0x4b, 0x3}, {0x80000000, 0x272f8ca0, 0x0, 0x400, 0x8, 0xde}, {0x9, 0x9, 0x1, 0xfffffff7, 0x9, 0x800000}, {0xa, 0xa, 0x1000, 0x7, 0x2, 0x2000}, {0x63, 0x1, 0x2, 0x1, 0x6, 0x301}, {0x4757, 0x5, 0x8, 0xbc64, 0x5b, 0x45ef}, {0x1f, 0xfffffffc, 0x1, 0x3, 0x2, 0x2}, {0x7ff, 0x400, 0x10000, 0x9, 0x1, 0x4}, {0x8, 0xa7, 0x40, 0x6, 0x2, 0x9}, {0x2, 0x6, 0x81, 0x7f, 0x2, 0xa}, {0x40, 0x1ff, 0xa, 0x3, 0x6, 0xbebd}, {0x8, 0x3ff, 0x0, 0x8, 0x7, 0x5}, {0x0, 0x4206, 0x7, 0x1, 0x9, 0xdf99caf9}, {0x1, 0x2, 0x9, 0xfffffffd, 0x8, 0x4}, {0xffff, 0x7, 0x9, 0xd, 0x7, 0xc}, {0x8, 0x6d4c, 0x2, 0x2, 0x7, 0x3}, {0x4, 0x8000, 0x3, 0xfffffff4, 0x0, 0x7}, {0x0, 0x424, 0x4, 0xffff0001, 0x2, 0xfffffffb}, {0x6d, 0x4, 0x3b79, 0x2, 0x4, 0x7ff}, {0x90e9, 0xc1e8, 0x80, 0x15, 0x8, 0xc79}, {0x398, 0x4, 0x8, 0x9, 0x8b1, 0xd8}, {0xc9, 0x9, 0x6, 0xf, 0x0, 0x28}, {0xa9, 0x0, 0x81, 0x800, 0x100, 0x7}, {0xfffffff8, 0x7, 0x0, 0x0, 0xab}, {0xc10b, 0x2191, 0x6, 0x9, 0x0, 0xbe}, {0x80000000, 0x2c2d, 0x400, 0x2, 0x3, 0x7}, {0xfe, 0x9, 0x9, 0x9, 0x7, 0x80}, {0x10000, 0x3, 0x7, 0x800, 0xffffffff, 0x1}, {0x7, 0x6, 0x7ffa328c, 0x2, 0x7b51, 0x8ce6}, {0x8, 0x212626f5, 0x2, 0x2, 0x8001, 0x2}, {0x7, 0x2, 0x7fff, 0x4, 0x7, 0x9}, {0x9, 0x3, 0x2, 0x4, 0x9, 0xe}, {0xfffffffe, 0x2, 0x354a657a, 0x7, 0x8, 0x8}, {0x1, 0x5, 0x9e2a, 0x0, 0x7, 0x3}, {0x7f, 0x5, 0x57b, 0x2, 0x0, 0x5}, {0x3, 0x3, 0x1, 0x3, 0x5, 0x9}, {0xff, 0x0, 0xfff, 0x8, 0x4, 0x9}, {0x2c, 0x2, 0x6, 0x10001, 0x2, 0x101}, {0x2, 0x0, 0x4, 0x6, 0x3, 0x10001}, {0xd, 0xfff, 0x5, 0x94, 0x2, 0x6}, {0x5d, 0x80, 0x4, 0x7, 0x11, 0x6}, {0x3, 0x5, 0xc8, 0x5, 0x18000000, 0x6}, {0xfffffffb, 0x7, 0x3, 0x9, 0x8001, 0x6}, {0x1, 0xb94, 0x800, 0xffffff49, 0x5, 0x9}, {0x95d5, 0x8, 0x8, 0x9, 0x1, 0x89bc}, {0x24, 0x1000, 0x7, 0x400040, 0x1, 0x1}, {0x6, 0x800, 0x0, 0x400, 0x10, 0x1}, {0x29a, 0x3, 0x4, 0x6, 0x7, 0x3}, {0x38000000, 0x5, 0x3e690dd2, 0x0, 0x49f, 0x8}, {0x9, 0x8, 0x7f, 0x9, 0x8, 0x8}, {0xfffffff6, 0x0, 0x2, 0x8, 0x1ff, 0x4}, {0xfffffff8, 0x6, 0xfffffffc, 0x7, 0x7, 0x1}, {0xc, 0x70c, 0xad8, 0x7, 0x355e7bd2, 0x7}, {0x5, 0x5, 0x1, 0xe3, 0x6ec, 0x3}, {0xff, 0x7, 0x66, 0xe, 0x9, 0x9}, {0x0, 0x0, 0x2, 0x1, 0x200, 0x8}, {0x32db, 0x1, 0x1, 0xffffffff, 0xe790, 0x9}, {0x2, 0x400, 0xfa, 0x9, 0x6, 0x1}, {0x7f, 0x1, 0x5, 0x8000, 0xffffffff, 0x8}, {0x1, 0xfff, 0x7f, 0x8000, 0xe, 0xc44}, {0x80000000, 0x9, 0x0, 0xf98, 0x9, 0x8}, {0x5, 0x1, 0x18, 0x0, 0x80000001, 0x9}, {0x0, 0x8, 0x3, 0x200, 0x5, 0x7}, {0x80000001, 0x2, 0x9, 0xc8, 0xfffffffc}, {0x5, 0x3b, 0x400, 0x4, 0x4, 0x403}, {0x7, 0x8, 0x1, 0x400, 0x9, 0x529}, {0x9, 0x16, 0x10001, 0x3, 0x1, 0xfffffffa}, {0x6, 0x74, 0xffffffff, 0x3, 0x1, 0x7ff}, {0x80000000, 0x9, 0x9, 0x0, 0x9}, {0xffffff97, 0xc, 0x9, 0x3, 0x1, 0x5}, {0xd, 0x4, 0xd, 0x3f, 0x2, 0x7}, {0xa, 0x4, 0x2, 0x3, 0x5}, {0x0, 0x283, 0x4, 0x6, 0x8, 0xee7}, {0x6, 0x7, 0x3, 0x0, 0x7f, 0x9}, {0x8, 0xe, 0x100, 0x8, 0x4, 0x5}, {0x1, 0xfffffffc, 0x2, 0x4, 0x100, 0x80000001}, {0x4, 0xfffb, 0x2a, 0xf24d, 0xffff8001, 0x5}, {0xd6b, 0x7b8c3976, 0x1, 0x0, 0xf7d9, 0x1}, {0xae9, 0x6, 0xfffffffe, 0x6e53de2f, 0x4, 0xe2758a}, {0x7, 0x8, 0x7, 0x9, 0x8, 0x7fff}, {0xff, 0x1, 0x4, 0x8, 0x1, 0x9}, {0x0, 0x3, 0x8a, 0x6, 0x10, 0x5}, {0x2, 0xe24, 0x5, 0x96, 0x7, 0xd859}, {0x6, 0x6, 0x7, 0x400, 0xfff, 0x2}, {0x3, 0xb, 0x6f70, 0x3, 0xe, 0x6}, {0x0, 0x8, 0xdd1d8af, 0xd1e, 0x4dd, 0x7}, {0x9, 0x1, 0x9, 0x1000000, 0x4, 0x81}, {0xfffffffc, 0xad, 0x9, 0x7, 0x8000, 0x6}, {0x5, 0x6, 0x5, 0x2, 0x7f, 0x7}, {0x8, 0x6, 0xe79, 0x10f, 0x80, 0x3}, {0x9404, 0x4d, 0x8, 0xc63, 0x475, 0x9}, {0xc4c3, 0x4, 0x1, 0xfadc, 0x8, 0x5}, {0x4, 0x1, 0x3, 0x8, 0x10, 0xfffeffff}, {0x9, 0x5, 0x14, 0x1, 0x7, 0x1}, {0x5, 0xed40, 0x8000, 0x7cf, 0x10, 0xe}, {0x3, 0x0, 0x1c7b, 0x9fc3, 0x57c4, 0x800}, {0x5, 0xfffeffff, 0x4, 0x1, 0x0, 0x3}, {0x6, 0x9, 0x8, 0x3, 0x5, 0x7}, {0x6, 0x2, 0x4, 0x9, 0x7fff, 0x5}, {0x7fff, 0x8, 0x0, 0x9, 0xced, 0x80000000}, {0x7ff, 0x3, 0x6, 0x7fff, 0x9, 0xd}, {0x3, 0x5, 0xb, 0x8001, 0x9, 0x1}, {0x0, 0x2, 0x6, 0x2, 0x9, 0x8}, {0x0, 0x7, 0xae6ad9f, 0x9, 0x7, 0x6}, {0x6, 0x200, 0x81, 0xfffffff7, 0x6, 0x4}, {0x0, 0x4, 0x546, 0x6, 0x7, 0x1}, {0xad03, 0x81, 0x7, 0x6, 0x5, 0x9}, {0x4, 0xfff, 0x2, 0x3, 0x9, 0xd}, {0xe, 0x2d4, 0x5, 0x40, 0x1c7a3607, 0xcb2d}, {0x7, 0x9, 0x3, 0x2, 0x4, 0x7fffffff}, {0x0, 0x3, 0x3, 0x8, 0x6}, {0x91, 0x8, 0xfffffffc, 0x8, 0x10000, 0x1}, {0x9, 0x5, 0x8, 0x2, 0x7, 0x8d}, {0x4, 0xb, 0xfffff364, 0x4, 0x400, 0x4}, {0x81, 0x4, 0x1, 0x80000000, 0xbf1}, {0x8, 0x6, 0xd4, 0x1, 0x6, 0x1}, {0x3ff, 0x1, 0x1, 0x800, 0x800, 0xa4}, {0x8, 0x0, 0xfffffff7, 0xfffffffc, 0x4, 0xad5f}, {0x62, 0xe, 0x0, 0x7f7, 0x3, 0x3ff}, {0x100, 0xfffffff9, 0x5, 0xd, 0x84, 0xc20e}, {0xc, 0x6c, 0x2, 0x4, 0x7, 0xea}, {0x8, 0x0, 0x8, 0x0, 0xb2, 0x3}, {0x7, 0x3, 0xec, 0x5, 0x8, 0x1}, {0x8, 0x3000000, 0xffff, 0x81, 0xfffffff6, 0x9}, {0x1, 0xda, 0x5, 0x3, 0x6553, 0x4}, {0xfffffff9, 0x6, 0x7, 0x4, 0xa6, 0x50d8a0cf}], [{0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x5}, {0x3}, {}, {0x5, 0x1}, {0x3}, {0x4}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x4}, {0x4, 0x1}, {0x4}, {0x3}, {0x3}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x3}, {0x3}, {0x2}, {0x4, 0x1}, {}, {0x5}, {0xbc772ccd0a61e388, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x4}, {}, {0x0, 0x1}, {}, {0x1}, {0x3}, {0x1}, {0x1, 0x1}, {}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2}, {0x3, 0x1}, {0x2}, {0x2}, {0x4}, {0x5}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5}, {0x2}, {0x1, 0x1}, {0x3}, {0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x2}, {}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x0, 0x1}, {}, {0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000094c0)=ANY=[@ANYBLOB="8c45000043000701fefffffffcdbdf25017c000004004580744501"], 0x458c}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r9, 0x401054d5, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) bind$bt_hci(r10, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r10, &(0x7f0000000040)=ANY=[], 0x6) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) socket$nl_route(0x10, 0x3, 0x0) 3.224941214s ago: executing program 0 (id=8821): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 2.788142409s ago: executing program 0 (id=8823): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)="b93fbde5c00a7c9da8e4d06d3a9bf999ce46276119b07bd77b9662", 0x1b}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r1, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r1, 0x0, 0x2, 0x12) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000030683510000000000000000010000030500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x800) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$BTRFS_IOC_DEFRAG_RANGE(r4, 0x40309410, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000000400)={r8, 0xa}, &(0x7f0000000440)=0x8) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0xffffff7f, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.617697739s ago: executing program 3 (id=8825): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c0000140002800600130000000000080014"], 0x44}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4000000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv', 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000400)={@multicast, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0xc, 0x28, 0x67, 0x0, 0x4, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}, {{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x40, 0xb, 0x0, 0x8b}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xf8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 2.297588864s ago: executing program 5 (id=8826): getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @broadcast}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}, 0x8, {0x2, 0x0, @empty}, 'lo\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 1.992230719s ago: executing program 3 (id=8827): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x13, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x17}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.909988926s ago: executing program 5 (id=8828): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x40, 0x2, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x24000000) close(0x3) 1.819504259s ago: executing program 3 (id=8829): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') pipe(&(0x7f0000000080)) socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x82, 0x0, 0x0) unshare(0x6a040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x42, 0x4, 0x3b0, 0xffffffff, 0x0, 0x280, 0x280, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x2f}, @empty, 0x0, 0x0, 'ip6gre0\x00', 'vlan1\x00', {}, {0xff}, 0x5c, 0x3, 0x6c}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x1c0, 0x1e8, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'dvmrp0\x00', {0x0, 0x8, 0x51, 0x100001, 0xfffffff9, 0x29568e77, 0x3}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r2) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f00000016c0)) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="38000000100037040000800000000000000000", @ANYRES32=r5, @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 1.770844118s ago: executing program 0 (id=8830): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r1, 0x100000000) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x320, 0x18c, 0x203, 0x0, 0x19030000, 0x450, 0x2e0, 0x2e0, 0x450, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x5, 0x4}, {0x0, 0x6, 0x2}, {0xffffffffffffffff, 0x1, 0x4}, 0x9, 0x80}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000023c0)}, 0x20001) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB="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", @ANYBLOB="0500530001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$netlink(0x10, 0x3, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_SIOCDELRT(r6, 0x890c, &(0x7f0000000580)={0x0, @nfc={0x27, 0x0, 0xffffffffffffffff, 0x3}, @rc={0x1f, @none}, @hci={0x1f, 0x2, 0x2}, 0x2, 0x0, 0x0, 0x0, 0x8008, 0x0, 0x10001, 0xbed, 0x8}) r8 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, 0x0) writev(r8, 0x0, 0x0) epoll_create1(0x0) 1.689688028s ago: executing program 5 (id=8831): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000002000010000000000fbdbdf250a4010000100002ce6998e0014000200fc02000000000000000000000000000014000100200100000000000000000000000000000c00140085251932542e615310"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001007fff000000000000000000000214000200fc"], 0x5c}}, 0x0) 1.465879599s ago: executing program 5 (id=8832): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000003400), r6) sendmsg$NFC_CMD_START_POLL(r6, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8, 0xd, 0x60}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x802) setsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r5, 0x81}, 0x8) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x3c, r8, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x3c}}, 0x4) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000400)=[{&(0x7f0000000000)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000a0003002e372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 1.079492527s ago: executing program 5 (id=8833): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000070000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000bf080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf9100000000000007080000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.032028865s ago: executing program 1 (id=8834): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000003010000000900010073797a30000000002c0000001b0a05000001000000000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40810) 804.237038ms ago: executing program 5 (id=8835): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000cc0)}, 0x8bb3a301eb08db) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x14, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x2000c091}, 0xd7217ddc72af9551) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r6, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)={0x2c, r5, 0x200, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_MATCH={0x12, 0x5b, "597d90ea87944f7657bee1fb52ca"}]}, 0x2c}}, 0x0) poll(&(0x7f0000000040)=[{}], 0x20000000000002d6, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r3, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x10}, @val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x44810) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0xffffff7f}, 0x80) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=0xffffffffffffffff, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xd, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@tail_call, @btf_id={0x18, 0x4, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xad}, @cb_func={0x18, 0x7, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000006c0)='GPL\x00', 0x2, 0x82, &(0x7f0000000700)=""/130, 0x41000, 0x21, '\x00', 0x0, @fallback=0x16, r10, 0x8, &(0x7f0000000800)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xa, 0x2727, 0x3c}, 0x10, 0xffffffffffffffff, r11, 0x8, 0x0, &(0x7f0000000880)=[{0x2, 0x3, 0x3, 0x9}, {0x2, 0x5, 0x7, 0x5}, {0x3, 0x5, 0x7}, {0x2, 0x2, 0x10, 0x8}, {0x4, 0x1, 0x10, 0x9}, {0x2, 0x2, 0x3, 0x5}, {0x0, 0x3, 0xf, 0xc}, {0x4, 0x1, 0x6, 0x6}], 0x10, 0x1}, 0x94) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="5401000018002902000000000000000002000000080000008002010030aa8f3801098008", @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x7}}) (fail_nth: 1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x5, 0x6e81, 0x0, {0x0, 0xea60}, {0x0, 0xea60}, {}, 0x1, @can={{0x3, 0x1}, 0x8, 0x3, 0x0, 0x0, "6ee7ba2197db18bc"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 697.665959ms ago: executing program 1 (id=8836): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$key(0xffffffffffffffff, 0x0, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000440)={@map, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0xa, 0x1}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0xfff8}, {0xffff, 0xffff}, {0x16, 0xa}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "09000020000000008f29d158039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c76000067af25166c2f0f85f36aa8867406119c010400002e31dea98204000000d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b5142ddf36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459ac3ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1008000"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0xd, 0x81, 0x16, 0x2, 0x12, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x80}]}}]}, 0x150}, 0x1, 0x0, 0x0, 0x4040004}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0xef, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x44f81}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x80c0) 332.720509ms ago: executing program 0 (id=8837): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000300)}}, 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010016000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) 0s ago: executing program 0 (id=8838): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000000c0)={0x7, 0x7, 0x1, 0x7}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x2f, 0x5, 0x22, 0x7, 0x10, @private2, @private2, 0x8000, 0x8, 0x4, 0x1}}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@gettclass={0x24, 0x2a, 0x220, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0x1}, {0xfff2, 0xfff3}, {0xffff, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4004811}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_RESET_STATS(r3, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000300)={0x2b8, 0x0, 0x41d, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x10}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_LINK={0x5c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa89b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x214, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x7f, 0x3, "79fac644f61a1eed6a146b735b3f346c0ae45886a2558753002508ff270c3034819179d2c7847a2877f10b2445b2ff2684f798f4ad831ccb3ca681af48d04f34a00fca1c43fa48c4fb7b0005f5324ba20cab1f957f74b3ef5ffa2c0cdefb7713a556e02f2bcd031014ec96982e0d654228e5c6dc345dd62a184676"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "05e3beec3b8c5f36f6bc89eece187b76594fa01e532ed3a1e4b463bbec2e57b0dd5b6b73b1fe6b64efd089f05c848af033c0f7607474a8be1cfbf1756ab4a9f666bbb7f0b5f85ecff95e359a0e406de53e467d1ffccd73e36b3b43fb55379fe4fefae375c24af37935d66eb08c75bb01300b3e3d065be6e46eacd60cf5d54efe9f568e6d30d102e3af833281aee64a2107697ceef2fd7204e80f64e40d1f550585cccd815d2d02b21fc72d2405a51b5e6c8a14599f86153981"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ID={0xbd, 0x3, "30370eb8cef9f6aeefbb1ccf70aaa3d10f3ec67e80f3ed686db7ea95027a0f744e824e9c5e6e46dc3a846826d73131d441a77ca37bd0bfcc4b751083cd2955e2cf087e37dd14253b57588fb4b548e0fc1492b0ac2dda9105e6e4b26a0e709106ac0aaced64d640a28c59cb91b0cd8ff987618f936950f59de2bd1d6fbb6489172851a5c53bad5d383fa04725ec1589fc8d71f86e7a1563f0ddfd98415abab462588ec4f69932a106ba1ab6f869f440cd41339d301950aae62d"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}]}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000840) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000680), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000700)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000007c0)={'ip6tnl0\x00', &(0x7f0000000740)={'ip6_vti0\x00', r2, 0x2f, 0xd, 0xa, 0x10000, 0x70, @mcast2, @empty, 0x7800, 0x40, 0x800, 0xfffff3b2}}) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000d00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000800)={0x4b4, r4, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r2}, {0x228, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x10000}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffff000}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r2}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5d}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x38d}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x13dc}}, {0x8, 0x6, r6}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x4b4}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d80), r1) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x88, r7, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffff9a2, 0x24}}}}, [@mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "08d32f8edaecba7aaa7f6337a108628474d8ecb61688488f"}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001}, 0x48000) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f40), r3) sendmsg$DEVLINK_CMD_SB_GET(r3, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x3c, r8, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7b93}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000002) r9 = accept(r0, &(0x7f0000001040)=@ax25={{0x3, @null}, [@default, @rose, @remote, @rose, @remote, @null, @remote, @netrom]}, &(0x7f00000010c0)=0x80) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001140)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x44, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x90) connect$unix(r1, &(0x7f0000001280)=@abs={0x0, 0x0, 0x4e23}, 0x6e) socket$kcm(0x29, 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001340), r3) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000001700)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001380)={0x328, r11, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x194, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3e, 0x4, {'gcm(aes)\x00', 0x16, "6430aeed6e46de87741e0b15d8bb1cc67ac442d6ae65"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ID={0x3f, 0x3, "ce9b36ab27315ba499e160e980809ddf2f6a1df404a0725be89e3f0ee27c4aa23d34b7f682c2d43d3a53880a1650e02b4e40d8bd74479fa358a2f8"}, @TIPC_NLA_NODE_ID={0xfe, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}]}, @TIPC_NLA_NODE={0x180, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "2cf27f330f08fd2cb4b30f9985f31d4a2cce5ab17f0fe2"}}, @TIPC_NLA_NODE_KEY={0x3f, 0x4, {'gcm(aes)\x00', 0x17, "dede4d63aa7b8a15f8c100076cc9ec72324a1249739b88"}}, @TIPC_NLA_NODE_ID={0xa7, 0x3, "1504657754e8e02472e86c71a1e118b12ca961d2724f7271732134780f18f800518792d6095dcf857d90c06f89bc6987bb8da91d2c9055fc818cd764752c10602e9c715f996f1204dbeafd0db185eacb6a81b867c5c7c1154e296419318067b08c5405591a6617cc6e38eb07d58eeb4c8e325a9028890d129c7cb4174f4d6dd0a7f35a9c87677c09d4a1b2c9d120136e92c8196f33b2007a6135512b9a19a22b2516d4"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "d6f2e1135493e1f4a18358d37177e5196a57b4511340ed0762f044629ea6"}}]}]}, 0x328}, 0x1, 0x0, 0x0, 0x80}, 0x20040850) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r12, &(0x7f0000001840)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x14, r13, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x20000000) getsockopt$inet6_tcp_buf(r9, 0x6, 0x1c, &(0x7f0000001880)=""/24, &(0x7f00000018c0)=0x18) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000001940), r12) sendmsg$NFC_CMD_DISABLE_SE(r12, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r14, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40088c4}, 0x4004c005) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000001a40)='veth0_virt_wifi\x00', 0x10) sendmmsg(r9, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001a80)="79bffd3301df07326b46ae9aff64af8c53e77b81606d88f39faef25789101b12fa9754b1e7107d2055c01f46eac0a6da1bdb0025c053976257828b3937ad045ffaa04e6a1e1e02fcfd9bf2dcef6aef228ec9", 0x52}], 0x1, &(0x7f0000001b40)=[{0xb0, 0x10a, 0x10001, "c4954f8c8c2299bb5add20dda59ac54556a80ea89d15a45f7dd77047d65ed3c32b38aa75337c199e25ff646d4c24d51970ed54853d8f044d81473c00137d84be2332fe64b9232cdd42e29196eb7b20c5c4281826b3038ad8e511a47ac046ae3722f2a52216c971a98f961e6ad18b524c9f55063134a903f2622fe65155797bbf78106ba97d7957d131f948b18b15f5ec3d48d22211329deec107532bd5"}, {0x48, 0x107, 0x2, "8a025bdfd1b25a409c3c1d4e256caa67c263ff0422bb63c12297cde9d127bcd43daacdb001a1d18e35c95510eb131a5bba"}, {0x1010, 0x119, 0x9, "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"}, {0xa0, 0x111, 0x3, "fbd8320708d710678063e096c9cdf8135d582d7a58d1d37840eeaf8441270da32f8b09d92caf515619390c157ac687ec5697ff4be69ca9ffbcb0c0a374713d6f5563d16d95055c71c949a338de511c676cb0002a996df8013c85349e17863b08582c8557b46ffcf81583035496170e109730aa0eb1cbc6fa9f98bbb14ca6bba9c1613dc59a8e550ae5767583050d"}, {0xb8, 0xd1fb9c67fdb79138, 0x2, "d3ef66b4c993b82309a10a34958509771a1fb04c0d4ab81019c46240549ede2a4fac4c8b0be47d4af54044a27766aceef5d4c0846014ca0c389c167720a5dd7f66a4fe82e460154d58960db51ce195760b3feb622e985ee5df18da2ce57efd4345f78db0ff1c23fe29d28d6ba102e9f8110789b60a3fd6fa26abe6a2f82426909e5a19bac8c543cc41116e7f6e5f4674eaa62f52172d78b77bc712dde38ad6440a6188"}, {0xa8, 0xff, 0x7, "4b5c3b7f72205d41237d1849c46709568df7df86429dd387c74103299552dcf8af528c7d62e40e1c3381daf34e89c061db57f5fa171bcb921d4b7c237f00b7f0d70e06229426acb5a60bae39d8bc19c2d54bc287d376083f838c6926350474e30859cea1c4a8ee56194f9095ac0c68f9c518ef03c922dee7feb3fce5d43cbd38a7e3636f73b71bf50224ca353e3a5833436f7436"}], 0x1308}}, {{&(0x7f0000002e80)=@ll={0x11, 0x19, r2, 0x1, 0x8, 0x6, @random="b17b0c3909f3"}, 0x80, &(0x7f0000003000)=[{&(0x7f0000002f00)="fa2366f737443eb02b338d3cd60bcd5bbc566c8f0a6f57c9fa4ae21a2f62682796fa7affe954073c3e41e0cad281a65e270135d290c3853b762bfe5e2111005afd3499277b77401b1e8392", 0x4b}, {&(0x7f0000002f80)="0f0c9c75ed3d86c8e85efafc28490b1321f66e112d9e5e60e922339d54c0556081c2cd34ca82cacd6c1268504440250a7e5762ec102cae0f3424314659a437d3ba7f4c9d8d800ec3d355", 0x4a}], 0x2, &(0x7f0000003040)=[{0xe8, 0x10e, 0x3ff, "76aee6909ff3d5d7352f0e50005a0a26f84606dc5557e8c231641d69c1100587cd7775fe0dc393157f4b6f046ede03072f69689cbece8c977c00f3c1987a5aace27ec5b64a95df48031e7b529e3c4427abbcc1ca28642dbbd45d4538215cd02c594653acbde93e12599f99019147e390c9bb10b0d732165070d223025b84df30dc2a0e15ef52cc78e0473cd8fa668e5389219f562e22698f5b7a0897abddcfafe7690e8ae33d39eb2c3f7b31dd6c7304f01a3ba691d27ed87aae9f5ee64e8d529f693ad3226fb6fac4ef9338bd3db979a3"}, {0x80, 0x115, 0x7c5, "fdbe2996c9fcbcec1c5b3becc255361097be6fa60970b97c014b1397fac80080e33097ed9d3e2d3f6ba601b7a6a7b7ff29a4fe752893c88928b32ede60dd7ebdef35157a88b748a67282933f755fbc2821536094c17b304393cc6f227e0b91722ab3e40f744af7a748b03ed53f84204d"}, {0x38, 0x117, 0xffffffff, "d5203f00ec1602d6115abe103923ce225d282525f30b404506a8a3bd7bd092477c6500ba9babbe"}, {0x1010, 0x116, 0x180000, "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"}], 0x11b0}}, {{&(0x7f0000004200)=@ethernet={0x6, @remote}, 0x80, &(0x7f0000004440)=[{&(0x7f0000004280)="90f2eab6b196a991d8e39a0c3db491206619c4ce2d71980702fdc85258ed67062fb47a0ddbe4bb3b72ad9eff45a47ffc3f400523405f8adc80fb2e5af4eedd32514e17f6e1f573e6e3c19bc64956dd2d96b9b37789aa329b5038f0051a3b3e55311efe7e9e1568f536f036a324ec80c680472c8e9b0776ff92cdd947f7d47d8b5060834070c201bd47bb2d8b3abc4cf0a68fcdd3566d271e89", 0x99}, {&(0x7f0000004340)="a41f", 0x2}, {&(0x7f0000004380)="d297a5c0d931e60e92f69359c25b9f743e3b747da5b2b78ab5a2a13fe5b01f31b8926c91ad6906e85527250be090aee0d1c11e", 0x33}, {&(0x7f00000043c0)="7d16b451ae061f328722f6553ba61174bd75ed07a8e4f508db33ebe6e87de4978350ec9c518096909a3078660e4b15edada30d1fd2400fbe269fe870a02ec6b7c74523c862ae536c9d49423d2590902840dd11392cb694", 0x57}], 0x4, &(0x7f0000004480)=[{0x88, 0x10a, 0xf, "7f1f45128a170a160aac4c69236a6b305d41f292c7bd8e113bcb8e2bf82e89df8f8405e91a36e75801dd5c7606241414cce746fac3b2f471b88100bd208d9bbc2da15258d495c7d694c0384c75c7242f7db66fd84ed1004c3b0acb634657bd12153deb2afb24c50860a03754d9a34e276b348e24"}, {0x88, 0x29, 0x1, "b72062d146868ca9444cac69e9e080715a219d96090407fa27a1dfd207a6bbdf21596ef98393998a8a334f12ebdf9ba7c28a854b0e63ac72be8cdf9880259dce1fa2eb4f3c33fad671a4e79be0cdf82198804371700a5fb7b922702845391442d42c20a504d7fa1807cb979b9b19e6a67da0e25af7"}, {0x50, 0x11, 0xa9, "5c9f1de045f3afd7e9a60f4db0e69334e0c3b55f05db8ea517c539f41c9af7d2e57c7e6e24bacda371c5056b3d71b0eb1fade86459f009df5a3e587c027bd217"}], 0x160}}, {{&(0x7f0000004600)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f0000004700)=[{&(0x7f0000004680)="d23f3c29e0925ef7d627607040337acfbb130cb008beef44b3f6bf22ed8dfe", 0x1f}, {&(0x7f00000046c0)="ef42d3a5de73ae703afcf07045debe8966c165ad", 0x14}], 0x2, &(0x7f0000004740)=[{0x68, 0x107, 0xc, "8db31a454bc3abfbb6b9c7692e9f29e66987476be9a29c19c3d34619dea65ea012616de1f85a6d9bcd9e9d4ce1855d7fe0fa523398bec5a6131b3128e1fd8bc47b6e6f5317579f25966f99607d3063a3299d"}, {0x28, 0x10c, 0x5224def5, "55312214b2506a94ac9dd3697ced2ce39b127fdd1b6f808a"}, {0x10, 0x10f, 0x7a8}, {0x58, 0x102, 0x6, "d20175f38831b337987a03dac196bb551cac34db8212c63a28b3bfaa0ef92d5cd379f48231e6f1936b0e10fc35c22f0f0e93ca4043b9fc99cb93525e813b6aaa680ee1d4add9"}, {0x90, 0x0, 0x3ff, "7e56eec14e4ee6bb88ed3198f52beedbc5cbaf4d9772f7945af28a71acbc296018093022cbc41af20a69c745f38026237af1d90bfcf8717edef7e6e50f01343b8794a7f46d00601b90592e1b91899c372776419891c27471ecc5b816138299ba84b4445c33feb088d3518bb344115025b2bb0081407fa507cabbfe"}, {0xa8, 0x119, 0x4, "1dcc7a8393bbaf40622060234ca4430ef44df82d1e32e9e1cd2860eb6f7aaa0002b83e9f2d4f987a3a1802b42c825fbd44f8e61d77d356b18b236400f5729e39c246f50bc59aa9de9891d35de844d0779bf96db8c99519a1e5a0225ede999904aac86fe7a039fb3c91614df054877a172d5f0ce77b7ae59261ff200a6ee96f79c49e9d92029a1027e4bf4eeaa211bc65c013eb27"}], 0x230}}], 0x4, 0x1) kernel console output (not intermixed with test programs): sercopy, interval 1, probability 0, space 0, times 0 [ 884.885513][T29856] CPU: 1 UID: 0 PID: 29856 Comm: syz.5.7330 Not tainted syzkaller #0 PREEMPT(full) [ 884.885544][T29856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.885558][T29856] Call Trace: [ 884.885578][T29856] [ 884.885588][T29856] dump_stack_lvl+0xe8/0x150 [ 884.885619][T29856] should_fail_ex+0x412/0x560 [ 884.885654][T29856] _copy_from_iter+0x3b0/0x1670 [ 884.885701][T29856] ? __pfx__copy_from_iter+0x10/0x10 [ 884.885727][T29856] ? trace_kmalloc+0x2a/0xf0 [ 884.885761][T29856] ? __kmalloc_noprof+0x37d/0x760 [ 884.885801][T29856] bcm_tx_setup+0x6d9/0x1bd0 [ 884.885853][T29856] bcm_sendmsg+0x46e/0x6c0 [ 884.885890][T29856] ? __pfx_bcm_sendmsg+0x10/0x10 [ 884.885926][T29856] ? aa_sock_msg_perm+0xf1/0x1b0 [ 884.885958][T29856] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 884.885993][T29856] ____sys_sendmsg+0x972/0x9f0 [ 884.886025][T29856] ? __might_fault+0xaf/0x130 [ 884.886061][T29856] ? __pfx_____sys_sendmsg+0x10/0x10 [ 884.886104][T29856] ? import_iovec+0x73/0xa0 [ 884.886139][T29856] ___sys_sendmsg+0x2a5/0x360 [ 884.886169][T29856] ? __lock_acquire+0x6b5/0x2cf0 [ 884.886200][T29856] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.886273][T29856] ? __fget_files+0x2a/0x420 [ 884.886299][T29856] ? __fget_files+0x3a0/0x420 [ 884.886337][T29856] __x64_sys_sendmsg+0x1bd/0x2a0 [ 884.886373][T29856] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 884.886416][T29856] ? __pfx_ksys_write+0x10/0x10 [ 884.886458][T29856] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.886483][T29856] do_syscall_64+0x15f/0xf80 [ 884.886514][T29856] ? trace_irq_disable+0x3b/0x140 [ 884.886547][T29856] ? clear_bhb_loop+0x40/0x90 [ 884.886581][T29856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.886602][T29856] RIP: 0033:0x7fdfc3f9cdd9 [ 884.886623][T29856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 884.886641][T29856] RSP: 002b:00007fdfc4f31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 884.886664][T29856] RAX: ffffffffffffffda RBX: 00007fdfc4215fa0 RCX: 00007fdfc3f9cdd9 [ 884.886680][T29856] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 884.886693][T29856] RBP: 00007fdfc4f31090 R08: 0000000000000000 R09: 0000000000000000 [ 884.886707][T29856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 884.886721][T29856] R13: 00007fdfc4216038 R14: 00007fdfc4215fa0 R15: 00007ffc72f34b48 [ 884.886755][T29856] [ 885.179050][T29858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7331'. [ 885.205733][ T30] audit: type=1800 audit(1778143575.743:55): pid=29836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7319" name="memory.events" dev="tmpfs" ino=1168 res=0 errno=0 [ 885.251364][T29861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7332'. [ 885.535222][T29870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7334'. [ 885.874819][T29889] FAULT_INJECTION: forcing a failure. [ 885.874819][T29889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 885.942607][T29889] CPU: 1 UID: 0 PID: 29889 Comm: syz.1.7343 Not tainted syzkaller #0 PREEMPT(full) [ 885.942638][T29889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 885.942652][T29889] Call Trace: [ 885.942662][T29889] [ 885.942672][T29889] dump_stack_lvl+0xe8/0x150 [ 885.942703][T29889] should_fail_ex+0x412/0x560 [ 885.942738][T29889] _copy_from_iter+0x3b0/0x1670 [ 885.942793][T29889] ? __pfx__copy_from_iter+0x10/0x10 [ 885.942820][T29889] ? trace_kmalloc+0x2a/0xf0 [ 885.942851][T29889] ? __kmalloc_noprof+0x37d/0x760 [ 885.942889][T29889] bcm_tx_setup+0x6d9/0x1bd0 [ 885.942958][T29889] bcm_sendmsg+0x46e/0x6c0 [ 885.942994][T29889] ? __pfx_bcm_sendmsg+0x10/0x10 [ 885.943031][T29889] ? aa_sock_msg_perm+0xf1/0x1b0 [ 885.943063][T29889] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 885.943097][T29889] ____sys_sendmsg+0x972/0x9f0 [ 885.943129][T29889] ? __might_fault+0xaf/0x130 [ 885.943164][T29889] ? __pfx_____sys_sendmsg+0x10/0x10 [ 885.943206][T29889] ? import_iovec+0x73/0xa0 [ 885.943241][T29889] ___sys_sendmsg+0x2a5/0x360 [ 885.943271][T29889] ? __lock_acquire+0x6b5/0x2cf0 [ 885.943314][T29889] ? __pfx____sys_sendmsg+0x10/0x10 [ 885.943383][T29889] ? __fget_files+0x2a/0x420 [ 885.943408][T29889] ? __fget_files+0x3a0/0x420 [ 885.943461][T29889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 885.943496][T29889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 885.943537][T29889] ? __pfx_ksys_write+0x10/0x10 [ 885.943591][T29889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.943616][T29889] do_syscall_64+0x15f/0xf80 [ 885.943645][T29889] ? trace_irq_disable+0x3b/0x140 [ 885.943679][T29889] ? clear_bhb_loop+0x40/0x90 [ 885.943707][T29889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.943730][T29889] RIP: 0033:0x7f0d3219cdd9 [ 885.943750][T29889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.943770][T29889] RSP: 002b:00007f0d33017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 885.943794][T29889] RAX: ffffffffffffffda RBX: 00007f0d32415fa0 RCX: 00007f0d3219cdd9 [ 885.943811][T29889] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 885.943826][T29889] RBP: 00007f0d33017090 R08: 0000000000000000 R09: 0000000000000000 [ 885.943840][T29889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 885.943853][T29889] R13: 00007f0d32416038 R14: 00007f0d32415fa0 R15: 00007fffefae1c78 [ 885.943889][T29889] [ 886.544752][T29903] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7348'. [ 886.602334][T29899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7346'. [ 886.672829][T29899] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7346'. [ 886.948703][T29919] netlink: 560 bytes leftover after parsing attributes in process `syz.1.7354'. [ 887.108700][T29928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7358'. [ 887.235057][T29931] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 887.469236][T19607] Bluetooth: hci1: command 0x0406 tx timeout [ 887.735076][T29952] netlink: 560 bytes leftover after parsing attributes in process `syz.2.7368'. [ 888.516962][T29975] team0: entered promiscuous mode [ 888.548059][T29975] ip6gre1: entered promiscuous mode [ 888.570065][T29975] netlink: 11 bytes leftover after parsing attributes in process `syz.5.7376'. [ 888.601751][T29975] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 888.623781][T29983] nbd: socks must be embedded in a SOCK_ITEM attr [ 888.632877][T29983] block nbd4: shutting down sockets [ 888.638280][T29974] netlink: 11 bytes leftover after parsing attributes in process `syz.5.7376'. [ 888.638305][T29974] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 888.849721][T29990] FAULT_INJECTION: forcing a failure. [ 888.849721][T29990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.895022][T29990] CPU: 0 UID: 0 PID: 29990 Comm: syz.5.7382 Not tainted syzkaller #0 PREEMPT(full) [ 888.895054][T29990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.895068][T29990] Call Trace: [ 888.895077][T29990] [ 888.895087][T29990] dump_stack_lvl+0xe8/0x150 [ 888.895119][T29990] should_fail_ex+0x412/0x560 [ 888.895154][T29990] _copy_from_iter+0x3b0/0x1670 [ 888.895197][T29990] ? __pfx__copy_from_iter+0x10/0x10 [ 888.895224][T29990] ? trace_kmalloc+0x2a/0xf0 [ 888.895258][T29990] ? __kmalloc_noprof+0x37d/0x760 [ 888.895297][T29990] bcm_tx_setup+0x6d9/0x1bd0 [ 888.895355][T29990] bcm_sendmsg+0x46e/0x6c0 [ 888.895392][T29990] ? __pfx_bcm_sendmsg+0x10/0x10 [ 888.895427][T29990] ? aa_sock_msg_perm+0xf1/0x1b0 [ 888.895458][T29990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.895493][T29990] ____sys_sendmsg+0x972/0x9f0 [ 888.895524][T29990] ? __might_fault+0xaf/0x130 [ 888.895561][T29990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.895603][T29990] ? import_iovec+0x73/0xa0 [ 888.895643][T29990] ___sys_sendmsg+0x2a5/0x360 [ 888.895673][T29990] ? __lock_acquire+0x6b5/0x2cf0 [ 888.895703][T29990] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.895776][T29990] ? __fget_files+0x2a/0x420 [ 888.895802][T29990] ? __fget_files+0x3a0/0x420 [ 888.895839][T29990] __x64_sys_sendmsg+0x1bd/0x2a0 [ 888.895874][T29990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 888.895916][T29990] ? __pfx_ksys_write+0x10/0x10 [ 888.895957][T29990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.895982][T29990] do_syscall_64+0x15f/0xf80 [ 888.896011][T29990] ? trace_irq_disable+0x3b/0x140 [ 888.896044][T29990] ? clear_bhb_loop+0x40/0x90 [ 888.896073][T29990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.896095][T29990] RIP: 0033:0x7fdfc3f9cdd9 [ 888.896116][T29990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.896136][T29990] RSP: 002b:00007fdfc4f31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 888.896160][T29990] RAX: ffffffffffffffda RBX: 00007fdfc4215fa0 RCX: 00007fdfc3f9cdd9 [ 888.896177][T29990] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 888.896191][T29990] RBP: 00007fdfc4f31090 R08: 0000000000000000 R09: 0000000000000000 [ 888.896205][T29990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.896218][T29990] R13: 00007fdfc4216038 R14: 00007fdfc4215fa0 R15: 00007ffc72f34b48 [ 888.896255][T29990] [ 889.320676][T30000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7386'. [ 889.406664][T30001] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7388'. [ 890.148764][T30030] syzkaller0: entered promiscuous mode [ 890.154652][T30030] syzkaller0: entered allmulticast mode [ 890.748977][T30049] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7406'. [ 891.002020][T30062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7409'. [ 891.041141][T30062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7409'. [ 892.049261][T30083] FAULT_INJECTION: forcing a failure. [ 892.049261][T30083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.099134][T30083] CPU: 1 UID: 0 PID: 30083 Comm: syz.3.7416 Not tainted syzkaller #0 PREEMPT(full) [ 892.099171][T30083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 892.099185][T30083] Call Trace: [ 892.099194][T30083] [ 892.099204][T30083] dump_stack_lvl+0xe8/0x150 [ 892.099235][T30083] should_fail_ex+0x412/0x560 [ 892.099269][T30083] _copy_from_iter+0x3b0/0x1670 [ 892.099314][T30083] ? __pfx__copy_from_iter+0x10/0x10 [ 892.099340][T30083] ? trace_kmalloc+0x2a/0xf0 [ 892.099374][T30083] ? __kmalloc_noprof+0x37d/0x760 [ 892.099421][T30083] bcm_tx_setup+0x6d9/0x1bd0 [ 892.099472][T30083] bcm_sendmsg+0x46e/0x6c0 [ 892.099508][T30083] ? __pfx_bcm_sendmsg+0x10/0x10 [ 892.099544][T30083] ? aa_sock_msg_perm+0xf1/0x1b0 [ 892.099576][T30083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 892.099609][T30083] ____sys_sendmsg+0x972/0x9f0 [ 892.099641][T30083] ? __might_fault+0xaf/0x130 [ 892.099676][T30083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 892.099718][T30083] ? import_iovec+0x73/0xa0 [ 892.099753][T30083] ___sys_sendmsg+0x2a5/0x360 [ 892.099784][T30083] ? __lock_acquire+0x6b5/0x2cf0 [ 892.099813][T30083] ? __pfx____sys_sendmsg+0x10/0x10 [ 892.099885][T30083] ? __fget_files+0x2a/0x420 [ 892.099910][T30083] ? __fget_files+0x3a0/0x420 [ 892.099946][T30083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 892.099981][T30083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 892.100025][T30083] ? __pfx_ksys_write+0x10/0x10 [ 892.100066][T30083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.100091][T30083] do_syscall_64+0x15f/0xf80 [ 892.100130][T30083] ? trace_irq_disable+0x3b/0x140 [ 892.100171][T30083] ? clear_bhb_loop+0x40/0x90 [ 892.100200][T30083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.100222][T30083] RIP: 0033:0x7fde4a79cdd9 [ 892.100244][T30083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 892.100264][T30083] RSP: 002b:00007fde4b630028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 892.100287][T30083] RAX: ffffffffffffffda RBX: 00007fde4aa15fa0 RCX: 00007fde4a79cdd9 [ 892.100303][T30083] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 892.100317][T30083] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 892.100331][T30083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 892.100343][T30083] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 892.100378][T30083] [ 892.471817][T30096] netlink: 'syz.1.7418': attribute type 1 has an invalid length. [ 892.530440][T30096] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7418'. [ 893.190409][T30119] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7428'. [ 893.713294][T30143] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7437'. [ 894.164145][T30162] xt_bpf: check failed: parse error [ 894.610760][T30171] netlink: 312 bytes leftover after parsing attributes in process `syz.3.7446'. [ 894.624723][T30173] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7447'. [ 894.924958][T30185] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7452'. [ 895.412125][T30198] bridge_slave_0: left allmulticast mode [ 895.436572][T30198] bridge_slave_0: left promiscuous mode [ 895.454353][T30198] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.491092][T30202] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7457'. [ 895.525939][T30202] netlink: 'syz.0.7457': attribute type 1 has an invalid length. [ 895.556981][T30202] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7457'. [ 895.568537][T30205] FAULT_INJECTION: forcing a failure. [ 895.568537][T30205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 895.586128][T30198] bridge_slave_1: left allmulticast mode [ 895.640455][T30198] bridge_slave_1: left promiscuous mode [ 895.645958][T30205] CPU: 0 UID: 0 PID: 30205 Comm: syz.3.7459 Not tainted syzkaller #0 PREEMPT(full) [ 895.646033][T30205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 895.646074][T30205] Call Trace: [ 895.646083][T30205] [ 895.646092][T30205] dump_stack_lvl+0xe8/0x150 [ 895.646122][T30205] should_fail_ex+0x412/0x560 [ 895.646156][T30205] _copy_from_iter+0x3b0/0x1670 [ 895.646198][T30205] ? __pfx__copy_from_iter+0x10/0x10 [ 895.646224][T30205] ? trace_kmalloc+0x2a/0xf0 [ 895.646256][T30205] ? __kmalloc_noprof+0x37d/0x760 [ 895.646295][T30205] bcm_tx_setup+0x6d9/0x1bd0 [ 895.646345][T30205] bcm_sendmsg+0x46e/0x6c0 [ 895.646381][T30205] ? __pfx_bcm_sendmsg+0x10/0x10 [ 895.646417][T30205] ? aa_sock_msg_perm+0xf1/0x1b0 [ 895.646448][T30205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 895.646482][T30205] ____sys_sendmsg+0x972/0x9f0 [ 895.646514][T30205] ? __might_fault+0xaf/0x130 [ 895.646585][T30205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 895.646725][T30205] ? import_iovec+0x73/0xa0 [ 895.646806][T30205] ___sys_sendmsg+0x2a5/0x360 [ 895.646888][T30205] ? __lock_acquire+0x6b5/0x2cf0 [ 895.646973][T30205] ? __pfx____sys_sendmsg+0x10/0x10 [ 895.647153][T30205] ? __fget_files+0x2a/0x420 [ 895.647219][T30205] ? __fget_files+0x3a0/0x420 [ 895.647317][T30205] __x64_sys_sendmsg+0x1bd/0x2a0 [ 895.647404][T30205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 895.647518][T30205] ? __pfx_ksys_write+0x10/0x10 [ 895.647627][T30205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.647684][T30205] do_syscall_64+0x15f/0xf80 [ 895.647759][T30205] ? trace_irq_disable+0x3b/0x140 [ 895.647832][T30205] ? clear_bhb_loop+0x40/0x90 [ 895.647906][T30205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.647961][T30205] RIP: 0033:0x7fde4a79cdd9 [ 895.648022][T30205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.648087][T30205] RSP: 002b:00007fde4b630028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 895.648164][T30205] RAX: ffffffffffffffda RBX: 00007fde4aa15fa0 RCX: 00007fde4a79cdd9 [ 895.648201][T30205] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 895.648234][T30205] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 895.648261][T30205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 895.648294][T30205] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 895.648390][T30205] [ 895.710986][T30202] netlink: 252 bytes leftover after parsing attributes in process `syz.0.7457'. [ 895.763483][T30198] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.970133][T30198] bond0: (slave bond_slave_0): Releasing backup interface [ 896.053076][T30198] bond0: (slave bond_slave_1): Releasing backup interface [ 896.073369][T30218] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7461'. [ 896.110580][T30202] netlink: 'syz.0.7457': attribute type 1 has an invalid length. [ 896.133000][T30198] team0: Port device team_slave_0 removed [ 896.186668][T30198] team0: Port device team_slave_1 removed [ 896.197442][T30198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.210049][T30198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.235455][T30198] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 896.426017][T30224] rdma_rxe: rxe_newlink: failed to add team0 [ 896.810261][T30241] netlink: 'syz.0.7472': attribute type 4 has an invalid length. [ 896.877867][T30245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 896.889008][T30245] openvswitch: netlink: VXLAN extension message has 3 unknown bytes. [ 896.949143][T30247] netlink: 'syz.2.7474': attribute type 8 has an invalid length. [ 897.035561][T30249] netlink: 'syz.0.7475': attribute type 1 has an invalid length. [ 897.185731][T30260] netlink: 'syz.1.7478': attribute type 13 has an invalid length. [ 897.201547][T30250] gretap1: entered allmulticast mode [ 897.252333][T30250] bond2: (slave gretap1): making interface the new active one [ 897.286400][T30250] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 898.367202][T30302] __nla_validate_parse: 4 callbacks suppressed [ 898.367223][T30302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7495'. [ 898.422951][T30302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7495'. [ 898.449687][T30309] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20003 [ 899.835940][T30368] ªªªªª: renamed from virt_wifi0 [ 900.044060][T30376] openvswitch: netlink: IP tunnel dst address not specified [ 900.244087][T30390] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7526'. [ 900.486147][T30403] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 901.012389][T30421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7537'. [ 901.083318][T30427] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7537'. [ 901.105928][T30426] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7540'. [ 901.211487][T30431] xt_bpf: check failed: parse error [ 901.443904][T30443] netlink: 'syz.3.7544': attribute type 4 has an invalid length. [ 901.818780][ T30] audit: type=1800 audit(1778143592.363:56): pid=30429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7538" name="memory.events" dev="tmpfs" ino=1341 res=0 errno=0 [ 902.240793][T30470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.673921][T30483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7560'. [ 903.117712][T30495] netlink: 560 bytes leftover after parsing attributes in process `syz.1.7566'. [ 903.178617][T30497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7565'. [ 903.201673][T30500] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7567'. [ 903.425467][T30511] netlink: 'syz.5.7570': attribute type 4 has an invalid length. [ 903.654801][T30520] xt_bpf: check failed: parse error [ 904.046345][T30534] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 904.069489][T30536] FAULT_INJECTION: forcing a failure. [ 904.069489][T30536] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 904.082757][T30536] CPU: 1 UID: 0 PID: 30536 Comm: syz.3.7582 Not tainted syzkaller #0 PREEMPT(full) [ 904.082786][T30536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 904.082800][T30536] Call Trace: [ 904.082809][T30536] [ 904.082818][T30536] dump_stack_lvl+0xe8/0x150 [ 904.082849][T30536] should_fail_ex+0x412/0x560 [ 904.082884][T30536] _copy_from_iter+0x3b0/0x1670 [ 904.082925][T30536] ? __pfx__copy_from_iter+0x10/0x10 [ 904.082951][T30536] ? trace_kmalloc+0x2a/0xf0 [ 904.082984][T30536] ? __kmalloc_noprof+0x37d/0x760 [ 904.083039][T30536] bcm_tx_setup+0x6d9/0x1bd0 [ 904.083090][T30536] bcm_sendmsg+0x46e/0x6c0 [ 904.083126][T30536] ? __pfx_bcm_sendmsg+0x10/0x10 [ 904.083174][T30536] ? aa_sock_msg_perm+0xf1/0x1b0 [ 904.083204][T30536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 904.083237][T30536] ____sys_sendmsg+0x972/0x9f0 [ 904.083274][T30536] ? __might_fault+0xaf/0x130 [ 904.083309][T30536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 904.083350][T30536] ? import_iovec+0x73/0xa0 [ 904.083384][T30536] ___sys_sendmsg+0x2a5/0x360 [ 904.083413][T30536] ? __lock_acquire+0x6b5/0x2cf0 [ 904.083441][T30536] ? __pfx____sys_sendmsg+0x10/0x10 [ 904.083513][T30536] ? __fget_files+0x2a/0x420 [ 904.083538][T30536] ? __fget_files+0x3a0/0x420 [ 904.083574][T30536] __x64_sys_sendmsg+0x1bd/0x2a0 [ 904.083608][T30536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 904.083648][T30536] ? __pfx_ksys_write+0x10/0x10 [ 904.083689][T30536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.083712][T30536] do_syscall_64+0x15f/0xf80 [ 904.083740][T30536] ? trace_irq_disable+0x3b/0x140 [ 904.083772][T30536] ? clear_bhb_loop+0x40/0x90 [ 904.083799][T30536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 904.083820][T30536] RIP: 0033:0x7fde4a79cdd9 [ 904.083839][T30536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 904.083858][T30536] RSP: 002b:00007fde4b630028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 904.083881][T30536] RAX: ffffffffffffffda RBX: 00007fde4aa15fa0 RCX: 00007fde4a79cdd9 [ 904.083896][T30536] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 904.083910][T30536] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 904.083923][T30536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 904.083936][T30536] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 904.083971][T30536] [ 904.615124][T30545] netlink: 'syz.3.7586': attribute type 4 has an invalid length. [ 904.799485][T30554] nbd: socks must be embedded in a SOCK_ITEM attr [ 904.813954][T30554] block nbd4: shutting down sockets [ 905.306481][T30573] xt_bpf: check failed: parse error [ 905.613463][T30583] syz_tun: entered promiscuous mode [ 905.633797][T30583] team0: Device syz_tun is of different type [ 905.651823][T30581] __nla_validate_parse: 1 callbacks suppressed [ 905.651844][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7600'. [ 905.843172][ T30] audit: type=1800 audit(1778143596.383:57): pid=30570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7594" name="memory.events" dev="tmpfs" ino=1405 res=0 errno=0 [ 906.102389][T30599] netlink: 560 bytes leftover after parsing attributes in process `syz.0.7606'. [ 906.146717][T30598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7605'. [ 906.350269][T30612] FAULT_INJECTION: forcing a failure. [ 906.350269][T30612] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.352270][T30611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7611'. [ 906.374023][T30612] CPU: 1 UID: 0 PID: 30612 Comm: syz.1.7612 Not tainted syzkaller #0 PREEMPT(full) [ 906.374053][T30612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 906.374067][T30612] Call Trace: [ 906.374077][T30612] [ 906.374086][T30612] dump_stack_lvl+0xe8/0x150 [ 906.374118][T30612] should_fail_ex+0x412/0x560 [ 906.374153][T30612] _copy_from_iter+0x3b0/0x1670 [ 906.374196][T30612] ? __pfx__copy_from_iter+0x10/0x10 [ 906.374223][T30612] ? trace_kmalloc+0x2a/0xf0 [ 906.374265][T30612] ? __kmalloc_noprof+0x37d/0x760 [ 906.374305][T30612] bcm_tx_setup+0x6d9/0x1bd0 [ 906.374356][T30612] bcm_sendmsg+0x46e/0x6c0 [ 906.374393][T30612] ? __pfx_bcm_sendmsg+0x10/0x10 [ 906.374429][T30612] ? aa_sock_msg_perm+0xf1/0x1b0 [ 906.374460][T30612] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 906.374496][T30612] ____sys_sendmsg+0x972/0x9f0 [ 906.374527][T30612] ? __might_fault+0xaf/0x130 [ 906.374564][T30612] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.374605][T30612] ? import_iovec+0x73/0xa0 [ 906.374641][T30612] ___sys_sendmsg+0x2a5/0x360 [ 906.374671][T30612] ? __lock_acquire+0x6b5/0x2cf0 [ 906.374702][T30612] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.374775][T30612] ? __fget_files+0x2a/0x420 [ 906.374801][T30612] ? __fget_files+0x3a0/0x420 [ 906.374839][T30612] __x64_sys_sendmsg+0x1bd/0x2a0 [ 906.374889][T30612] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.374930][T30612] ? __pfx_ksys_write+0x10/0x10 [ 906.374971][T30612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.374995][T30612] do_syscall_64+0x15f/0xf80 [ 906.375026][T30612] ? clear_bhb_loop+0x40/0x90 [ 906.375053][T30612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.375079][T30612] RIP: 0033:0x7f0d3219cdd9 [ 906.375099][T30612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.375118][T30612] RSP: 002b:00007f0d33017028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.375141][T30612] RAX: ffffffffffffffda RBX: 00007f0d32415fa0 RCX: 00007f0d3219cdd9 [ 906.375157][T30612] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 906.375170][T30612] RBP: 00007f0d33017090 R08: 0000000000000000 R09: 0000000000000000 [ 906.375183][T30612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 906.375196][T30612] R13: 00007f0d32416038 R14: 00007f0d32415fa0 R15: 00007fffefae1c78 [ 906.375231][T30612] [ 906.799587][T30616] nbd: socks must be embedded in a SOCK_ITEM attr [ 906.808918][T30616] block nbd4: shutting down sockets [ 906.992009][T30624] netlink: 'syz.5.7616': attribute type 8 has an invalid length. [ 907.374719][T30645] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7623'. [ 907.445117][T30647] netlink: 'syz.5.7624': attribute type 4 has an invalid length. [ 907.513247][T30649] FAULT_INJECTION: forcing a failure. [ 907.513247][T30649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.568830][T30649] CPU: 0 UID: 0 PID: 30649 Comm: syz.0.7625 Not tainted syzkaller #0 PREEMPT(full) [ 907.568862][T30649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.568877][T30649] Call Trace: [ 907.568886][T30649] [ 907.568895][T30649] dump_stack_lvl+0xe8/0x150 [ 907.568927][T30649] should_fail_ex+0x412/0x560 [ 907.568970][T30649] _copy_from_iter+0x3b0/0x1670 [ 907.569015][T30649] ? __pfx__copy_from_iter+0x10/0x10 [ 907.569042][T30649] ? trace_kmalloc+0x2a/0xf0 [ 907.569076][T30649] ? __kmalloc_noprof+0x37d/0x760 [ 907.569115][T30649] bcm_tx_setup+0x6d9/0x1bd0 [ 907.569165][T30649] bcm_sendmsg+0x46e/0x6c0 [ 907.569201][T30649] ? __pfx_bcm_sendmsg+0x10/0x10 [ 907.569238][T30649] ? aa_sock_msg_perm+0xf1/0x1b0 [ 907.569269][T30649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 907.569303][T30649] ____sys_sendmsg+0x972/0x9f0 [ 907.569335][T30649] ? __might_fault+0xaf/0x130 [ 907.569370][T30649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 907.569416][T30649] ? import_iovec+0x73/0xa0 [ 907.569452][T30649] ___sys_sendmsg+0x2a5/0x360 [ 907.569483][T30649] ? __lock_acquire+0x6b5/0x2cf0 [ 907.569513][T30649] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.569584][T30649] ? __fget_files+0x2a/0x420 [ 907.569610][T30649] ? __fget_files+0x3a0/0x420 [ 907.569648][T30649] __x64_sys_sendmsg+0x1bd/0x2a0 [ 907.569684][T30649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.569726][T30649] ? __pfx_ksys_write+0x10/0x10 [ 907.569768][T30649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.569793][T30649] do_syscall_64+0x15f/0xf80 [ 907.569822][T30649] ? trace_irq_disable+0x3b/0x140 [ 907.569855][T30649] ? clear_bhb_loop+0x40/0x90 [ 907.569883][T30649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.569905][T30649] RIP: 0033:0x7f1ad899cdd9 [ 907.569926][T30649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.569944][T30649] RSP: 002b:00007f1ad6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.569976][T30649] RAX: ffffffffffffffda RBX: 00007f1ad8c15fa0 RCX: 00007f1ad899cdd9 [ 907.569994][T30649] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 907.570008][T30649] RBP: 00007f1ad6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 907.570022][T30649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.570035][T30649] R13: 00007f1ad8c16038 R14: 00007f1ad8c15fa0 R15: 00007fff0937f5e8 [ 907.570072][T30649] [ 907.932175][T30657] netlink: 'syz.5.7627': attribute type 1 has an invalid length. [ 907.947167][T19607] Bluetooth: hci2: command 0x0406 tx timeout [ 907.958119][T30653] xt_hashlimit: size too large, truncated to 1048576 [ 907.982135][T30657] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7627'. [ 907.989021][ T30] audit: type=1800 audit(1778143598.533:58): pid=30633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7617" name="memory.events" dev="tmpfs" ino=1079 res=0 errno=0 [ 908.545336][T30674] netlink: 'syz.5.7634': attribute type 1 has an invalid length. [ 908.778992][T30680] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7636'. [ 909.155866][T30698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7641'. [ 909.178173][T30698] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7641'. [ 909.469966][T30714] netlink: 'syz.2.7647': attribute type 1 has an invalid length. [ 909.479610][T30714] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7647'. [ 909.490299][T30714] netlink: 'syz.2.7647': attribute type 30 has an invalid length. [ 909.499288][T30714] netlink: 'syz.2.7647': attribute type 29 has an invalid length. [ 909.541189][T30709] : entered promiscuous mode [ 910.066066][T30730] syzkaller0: entered promiscuous mode [ 910.103017][T30730] syzkaller0: entered allmulticast mode [ 910.657536][T30759] __nla_validate_parse: 4 callbacks suppressed [ 910.657560][T30759] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7661'. [ 910.700828][T30761] netlink: 'syz.1.7663': attribute type 8 has an invalid length. [ 913.557611][T30771] mac80211_hwsim hwsim91 wlan0: entered promiscuous mode [ 913.679310][T30802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7669'. [ 913.708226][T30802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7669'. [ 914.013621][T30816] netlink: 'syz.5.7675': attribute type 12 has an invalid length. [ 914.341129][T30827] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7679'. [ 914.403160][T30829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7680'. [ 914.493845][T30833] syzkaller1: entered allmulticast mode [ 914.607038][T30839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7683'. [ 914.623366][T30839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7683'. [ 914.704952][T30825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7673'. [ 914.765114][T30825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7673'. [ 914.781507][T30845] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7685'. [ 914.792056][T30846] netlink: 'syz.1.7686': attribute type 8 has an invalid length. [ 915.710768][T30884] syzkaller0: entered promiscuous mode [ 915.727252][T30884] syzkaller0: entered allmulticast mode [ 915.836367][T30892] __nla_validate_parse: 3 callbacks suppressed [ 915.836414][T30892] netlink: 560 bytes leftover after parsing attributes in process `syz.0.7704'. [ 915.867149][T30893] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7700'. [ 916.012262][T30903] netlink: 'syz.1.7708': attribute type 4 has an invalid length. [ 916.144377][T30913] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7711'. [ 916.155829][T30913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7711'. [ 916.271201][T30907] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 916.634852][T30938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7719'. [ 916.669982][T30929] syzkaller0: entered promiscuous mode [ 916.683642][T30929] syzkaller0: entered allmulticast mode [ 916.885505][T30947] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7722'. [ 917.101846][T30955] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7726'. [ 917.321491][T26051] IPVS: starting estimator thread 0... [ 917.424351][T30962] IPVS: using max 37 ests per chain, 88800 per kthread [ 919.986105][T30967] netlink: 'syz.2.7729': attribute type 8 has an invalid length. [ 920.537958][T30994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7736'. [ 920.696108][T31000] netlink: 312 bytes leftover after parsing attributes in process `syz.1.7739'. [ 921.935986][T31015] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 922.372430][T31032] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7747'. [ 923.338632][T31040] netlink: 312 bytes leftover after parsing attributes in process `syz.2.7750'. [ 924.453056][T31046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7753'. [ 924.542263][T31051] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7754'. [ 924.565387][T31055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7754'. [ 924.689794][T31059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7757'. [ 924.861846][T31072] netlink: 'syz.2.7761': attribute type 8 has an invalid length. [ 924.871249][T31068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7760'. [ 924.890846][T31068] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7760'. [ 925.071046][T31078] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7764'. [ 925.089830][T31078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7764'. [ 925.642779][T31108] netlink: 'syz.5.7777': attribute type 8 has an invalid length. [ 925.658779][T31108] FAULT_INJECTION: forcing a failure. [ 925.658779][T31108] name failslab, interval 1, probability 0, space 0, times 0 [ 925.674274][T31108] CPU: 1 UID: 0 PID: 31108 Comm: syz.5.7777 Not tainted syzkaller #0 PREEMPT(full) [ 925.674306][T31108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 925.674321][T31108] Call Trace: [ 925.674330][T31108] [ 925.674340][T31108] dump_stack_lvl+0xe8/0x150 [ 925.674372][T31108] should_fail_ex+0x412/0x560 [ 925.674407][T31108] should_failslab+0xa8/0x100 [ 925.674441][T31108] ? skb_clone+0x212/0x3a0 [ 925.674473][T31108] kmem_cache_alloc_noprof+0x87/0x650 [ 925.674513][T31108] skb_clone+0x212/0x3a0 [ 925.674550][T31108] __netlink_deliver_tap+0x404/0x850 [ 925.674594][T31108] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.674635][T31108] netlink_deliver_tap+0x19c/0x1b0 [ 925.674672][T31108] netlink_sendskb+0x68/0x140 [ 925.674702][T31108] netlink_rcv_skb+0x2b6/0x4b0 [ 925.674730][T31108] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 925.674760][T31108] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 925.674802][T31108] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.674831][T31108] ? netlink_deliver_tap+0x2e/0x1b0 [ 925.674866][T31108] netlink_unicast+0x75c/0x8e0 [ 925.674904][T31108] netlink_sendmsg+0x813/0xb40 [ 925.674944][T31108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 925.674980][T31108] ? aa_sock_msg_perm+0xf1/0x1b0 [ 925.675012][T31108] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 925.675046][T31108] ____sys_sendmsg+0x972/0x9f0 [ 925.675087][T31108] ? __might_fault+0xaf/0x130 [ 925.675122][T31108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 925.675164][T31108] ? import_iovec+0x73/0xa0 [ 925.675201][T31108] ___sys_sendmsg+0x2a5/0x360 [ 925.675231][T31108] ? __lock_acquire+0x6b5/0x2cf0 [ 925.675261][T31108] ? __pfx____sys_sendmsg+0x10/0x10 [ 925.675333][T31108] ? __fget_files+0x2a/0x420 [ 925.675360][T31108] ? __fget_files+0x3a0/0x420 [ 925.675397][T31108] __x64_sys_sendmsg+0x1bd/0x2a0 [ 925.675433][T31108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 925.675473][T31108] ? __pfx_ksys_write+0x10/0x10 [ 925.675515][T31108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.675540][T31108] do_syscall_64+0x15f/0xf80 [ 925.675569][T31108] ? trace_irq_disable+0x3b/0x140 [ 925.675602][T31108] ? clear_bhb_loop+0x40/0x90 [ 925.675637][T31108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.675660][T31108] RIP: 0033:0x7fdfc3f9cdd9 [ 925.675681][T31108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 925.675702][T31108] RSP: 002b:00007fdfc4f31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 925.675726][T31108] RAX: ffffffffffffffda RBX: 00007fdfc4215fa0 RCX: 00007fdfc3f9cdd9 [ 925.675743][T31108] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 925.675758][T31108] RBP: 00007fdfc4f31090 R08: 0000000000000000 R09: 0000000000000000 [ 925.675771][T31108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.675785][T31108] R13: 00007fdfc4216038 R14: 00007fdfc4215fa0 R15: 00007ffc72f34b48 [ 925.675821][T31108] [ 926.154633][T31115] nbd: socks must be embedded in a SOCK_ITEM attr [ 926.162142][T31115] block nbd4: shutting down sockets [ 926.772888][T31144] FAULT_INJECTION: forcing a failure. [ 926.772888][T31144] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.826265][T31144] CPU: 0 UID: 0 PID: 31144 Comm: syz.3.7790 Not tainted syzkaller #0 PREEMPT(full) [ 926.826297][T31144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 926.826311][T31144] Call Trace: [ 926.826320][T31144] [ 926.826330][T31144] dump_stack_lvl+0xe8/0x150 [ 926.826361][T31144] should_fail_ex+0x412/0x560 [ 926.826396][T31144] _copy_from_user+0x2d/0xb0 [ 926.826428][T31144] ___sys_sendmsg+0x1c6/0x360 [ 926.826459][T31144] ? __lock_acquire+0x6b5/0x2cf0 [ 926.826490][T31144] ? __pfx____sys_sendmsg+0x10/0x10 [ 926.826566][T31144] ? __fget_files+0x2a/0x420 [ 926.826592][T31144] ? __fget_files+0x3a0/0x420 [ 926.826629][T31144] __x64_sys_sendmsg+0x1bd/0x2a0 [ 926.826664][T31144] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 926.826706][T31144] ? __pfx_ksys_write+0x10/0x10 [ 926.826747][T31144] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.826772][T31144] do_syscall_64+0x15f/0xf80 [ 926.826802][T31144] ? trace_irq_disable+0x3b/0x140 [ 926.826837][T31144] ? clear_bhb_loop+0x40/0x90 [ 926.826865][T31144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.826887][T31144] RIP: 0033:0x7fde4a79cdd9 [ 926.826908][T31144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 926.826927][T31144] RSP: 002b:00007fde4b630028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 926.826951][T31144] RAX: ffffffffffffffda RBX: 00007fde4aa15fa0 RCX: 00007fde4a79cdd9 [ 926.826968][T31144] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 926.826982][T31144] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 926.826996][T31144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.827010][T31144] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 926.827045][T31144] [ 927.272588][T31156] netlink: zone id is out of range [ 927.285291][T31156] netlink: get zone limit has 4 unknown bytes [ 927.457391][T31158] __nla_validate_parse: 7 callbacks suppressed [ 927.458649][T31158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7796'. [ 927.767656][T31166] netlink: 'syz.3.7798': attribute type 8 has an invalid length. [ 928.445270][T31180] xt_HMARK: spi-set and port-set can't be combined [ 928.565399][T31186] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7806'. [ 929.162454][T31204] netlink: 'syz.1.7814': attribute type 1 has an invalid length. [ 929.178994][T31204] netlink: 'syz.1.7814': attribute type 2 has an invalid length. [ 929.191395][T31204] netlink: 'syz.1.7814': attribute type 8 has an invalid length. [ 929.511611][T31223] netlink: 'syz.1.7819': attribute type 8 has an invalid length. [ 929.939926][T31247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7823'. [ 930.195427][T31232] syzkaller0: entered promiscuous mode [ 930.207467][T31232] syzkaller0: entered allmulticast mode [ 930.434528][ T5644] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 930.543355][T31267] netlink: 'syz.3.7832': attribute type 8 has an invalid length. [ 930.580458][T31267] FAULT_INJECTION: forcing a failure. [ 930.580458][T31267] name failslab, interval 1, probability 0, space 0, times 0 [ 930.599223][T31267] CPU: 0 UID: 0 PID: 31267 Comm: syz.3.7832 Not tainted syzkaller #0 PREEMPT(full) [ 930.599254][T31267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 930.599269][T31267] Call Trace: [ 930.599279][T31267] [ 930.599288][T31267] dump_stack_lvl+0xe8/0x150 [ 930.599320][T31267] should_fail_ex+0x412/0x560 [ 930.599355][T31267] should_failslab+0xa8/0x100 [ 930.599391][T31267] ? skb_clone+0x212/0x3a0 [ 930.599423][T31267] kmem_cache_alloc_noprof+0x87/0x650 [ 930.599462][T31267] skb_clone+0x212/0x3a0 [ 930.599503][T31267] __netlink_deliver_tap+0x404/0x850 [ 930.599548][T31267] ? netlink_deliver_tap+0x2e/0x1b0 [ 930.599579][T31267] netlink_deliver_tap+0x19c/0x1b0 [ 930.599611][T31267] netlink_sendskb+0x68/0x140 [ 930.599640][T31267] netlink_rcv_skb+0x2b6/0x4b0 [ 930.599671][T31267] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 930.599701][T31267] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 930.599745][T31267] ? netlink_deliver_tap+0x2e/0x1b0 [ 930.599774][T31267] ? netlink_deliver_tap+0x2e/0x1b0 [ 930.599810][T31267] netlink_unicast+0x75c/0x8e0 [ 930.599849][T31267] netlink_sendmsg+0x813/0xb40 [ 930.599890][T31267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 930.599925][T31267] ? aa_sock_msg_perm+0xf1/0x1b0 [ 930.599956][T31267] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 930.599991][T31267] ____sys_sendmsg+0x972/0x9f0 [ 930.600022][T31267] ? __might_fault+0xaf/0x130 [ 930.600058][T31267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 930.600100][T31267] ? import_iovec+0x73/0xa0 [ 930.600137][T31267] ___sys_sendmsg+0x2a5/0x360 [ 930.600167][T31267] ? __lock_acquire+0x6b5/0x2cf0 [ 930.600197][T31267] ? __pfx____sys_sendmsg+0x10/0x10 [ 930.600276][T31267] ? __fget_files+0x2a/0x420 [ 930.600301][T31267] ? __fget_files+0x3a0/0x420 [ 930.600341][T31267] __x64_sys_sendmsg+0x1bd/0x2a0 [ 930.600376][T31267] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 930.600418][T31267] ? rcu_is_watching+0x15/0xb0 [ 930.600456][T31267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.600482][T31267] do_syscall_64+0x15f/0xf80 [ 930.600512][T31267] ? trace_irq_disable+0x3b/0x140 [ 930.600546][T31267] ? clear_bhb_loop+0x40/0x90 [ 930.600574][T31267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.600596][T31267] RIP: 0033:0x7fde4a79cdd9 [ 930.600617][T31267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 930.600636][T31267] RSP: 002b:00007fde4b630028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 930.600659][T31267] RAX: ffffffffffffffda RBX: 00007fde4aa15fa0 RCX: 00007fde4a79cdd9 [ 930.600675][T31267] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 930.600689][T31267] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 930.600702][T31267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.600715][T31267] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 930.600751][T31267] [ 931.957123][T31293] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7842'. [ 933.580878][T31299] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7844'. [ 934.020475][T31325] netlink: 212088 bytes leftover after parsing attributes in process `syz.0.7857'. [ 934.205586][T31333] netlink: 312 bytes leftover after parsing attributes in process `syz.0.7860'. [ 934.348402][T31338] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7862'. [ 934.546999][T31351] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.7867'. [ 934.809020][T31326] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 935.695895][T31416] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7893'. [ 935.950250][T31429] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7898'. [ 936.013972][T31427] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 936.029900][T31430] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7898'. [ 937.679927][T31493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7921'. [ 937.740694][T31493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7921'. [ 938.629892][T31530] __nla_validate_parse: 1 callbacks suppressed [ 938.629913][T31530] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7940'. [ 938.812503][T31536] wg1 speed is unknown, defaulting to 1000 [ 938.848307][T31536] wg1 speed is unknown, defaulting to 1000 [ 938.872453][T31536] wg1 speed is unknown, defaulting to 1000 [ 939.349582][T31556] tipc: Started in network mode [ 939.363749][T31556] tipc: Node identity 566be25a1fc2, cluster identity 4711 [ 939.390927][T31556] tipc: Enabled bearer , priority 0 [ 939.441357][T31561] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7951'. [ 939.562688][T31560] syzkaller0: entered promiscuous mode [ 939.590397][T31560] syzkaller0: entered allmulticast mode [ 939.627358][T31560] tipc: Resetting bearer [ 939.662591][T31577] netlink: 560 bytes leftover after parsing attributes in process `syz.0.7955'. [ 939.708421][T31578] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7951'. [ 939.712195][T31536] infiniband syz0: set active [ 939.722447][T31536] infiniband syz0: added wg1 [ 939.760363][T31536] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 939.775885][T31536] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 939.793861][T31536] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 939.850779][T31536] RDS/IB: syz0: added [ 939.880204][T31536] smc: adding ib device syz0 with port count 1 [ 939.908544][T31536] smc: ib device syz0 port 1 has no pnetid [ 939.947516][ T6474] tipc: Resetting bearer [ 939.954445][T20408] wg1 speed is unknown, defaulting to 1000 [ 939.963629][T31554] tipc: Resetting bearer [ 939.979633][ T5644] Bluetooth: hci5: link tx timeout [ 939.986989][ T5644] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 942.030761][ T5644] Bluetooth: hci5: command 0x0405 tx timeout [ 942.185383][T31554] tipc: Disabling bearer [ 942.196583][T31581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7956'. [ 942.216104][ T5814] wg1 speed is unknown, defaulting to 1000 [ 942.217726][T26051] tipc: Node number set to 1235870298 [ 942.246164][T31536] wg1 speed is unknown, defaulting to 1000 [ 942.385692][T31561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 942.795714][T31613] block nbd0: NBD_DISCONNECT [ 942.805739][T31613] block nbd0: Send disconnect failed -32 [ 942.853192][T31613] block nbd0: shutting down sockets [ 942.908600][T31623] IPv6: sit1: Disabled Multicast RS [ 942.916703][T31623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7966'. [ 943.053100][ T6603] bridge5: left allmulticast mode [ 943.129964][T31631] netlink: 'syz.1.7967': attribute type 4 has an invalid length. [ 943.679623][ T6603] team0: Port device bridge3 removed [ 943.889811][ T6603] bond1 (unregistering): Released all slaves [ 943.905955][ T6603] bond2 (unregistering): Released all slaves [ 943.922261][ T6603] bond3 (unregistering): Released all slaves [ 943.939292][ T6603] bond4 (unregistering): Released all slaves [ 943.957919][ T6603] bond5 (unregistering): Released all slaves [ 943.977340][ T6603] bond6 (unregistering): left allmulticast mode [ 943.983865][ T6603] bond6 (unregistering): left promiscuous mode [ 943.992667][ T6603] team0: Port device macvlan4 removed [ 944.004499][ T6603] bond6 (unregistering): Released all slaves [ 944.031991][ T6603] bond7 (unregistering): Released all slaves [ 944.051789][T31536] wg1 speed is unknown, defaulting to 1000 [ 944.054288][T31649] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7974'. [ 944.256855][ T6603] hmó3)ó: left promiscuous mode [ 944.617847][ T6603] tipc: Disabling bearer [ 944.651375][ T6603] tipc: Left network mode [ 945.018077][T31683] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7986'. [ 945.042264][T31683] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7986'. [ 945.102556][T31536] wg1 speed is unknown, defaulting to 1000 [ 945.499782][T31701] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7991'. [ 945.795723][T31711] netlink: 560 bytes leftover after parsing attributes in process `syz.1.7996'. [ 945.826418][T31536] wg1 speed is unknown, defaulting to 1000 [ 946.016393][T31719] nbd: socks must be embedded in a SOCK_ITEM attr [ 946.028259][T31719] block nbd0: shutting down sockets [ 946.393404][T31723] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.400928][T31723] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.824027][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 946.996086][T31723] ip6gretap1: left promiscuous mode [ 947.011882][T31723] ªªªªª: left promiscuous mode [ 947.056077][T31676] wg1 speed is unknown, defaulting to 1000 [ 947.081312][ T6474] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.106135][ T6474] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.128376][ T6474] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.219442][ T6474] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 947.467028][T31536] wg1 speed is unknown, defaulting to 1000 [ 947.522784][T31740] netlink: 'syz.5.8004': attribute type 4 has an invalid length. [ 947.770338][T31747] xt_bpf: check failed: parse error [ 947.898193][T31753] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8008'. [ 947.923418][T31536] wg1 speed is unknown, defaulting to 1000 [ 948.175278][T31536] wg1 speed is unknown, defaulting to 1000 [ 948.415634][T31766] nbd: socks must be embedded in a SOCK_ITEM attr [ 948.424502][T31766] block nbd0: shutting down sockets [ 948.486678][T31536] wg1 speed is unknown, defaulting to 1000 [ 948.501770][T31770] tipc: Can't bind to reserved service type 1 [ 948.511377][T31770] bond0: Caught tx_queue_len zero misconfig [ 948.522629][T31770] tipc: Failed to remove unknown binding: 66,0,0/0:1130756841/1130756842 [ 948.534636][T31770] Cannot find del_set index 0 as target [ 948.618310][T31772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8016'. [ 948.630104][T31772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8016'. [ 948.716612][T31774] netlink: 'syz.1.8017': attribute type 4 has an invalid length. [ 948.790928][T31536] wg1 speed is unknown, defaulting to 1000 [ 948.890434][T31778] team_slave_1: Caught tx_queue_len zero misconfig [ 949.053555][T31536] wg1 speed is unknown, defaulting to 1000 [ 949.245498][T31784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8022'. [ 949.346472][T31536] wg1 speed is unknown, defaulting to 1000 [ 949.471104][T31798] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8026'. [ 950.142509][T31822] Cannot find del_set index 0 as target [ 950.458599][ T30] audit: type=1800 audit(1778143641.003:59): pid=31819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8031" name="memory.events" dev="tmpfs" ino=1980 res=0 errno=0 [ 950.675253][T31840] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8038'. [ 951.708000][ T6603] IPVS: stop unused estimator thread 0... [ 951.944529][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 953.277398][T31828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 954.235207][T31883] xt_bpf: check failed: parse error [ 955.103937][T31892] openvswitch: netlink: Flow actions attr not present in new flow. [ 955.342775][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.401475][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.438154][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.452446][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.470325][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.481659][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.493158][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.509479][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.520895][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.532714][T31909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8058'. [ 955.568014][T31909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 955.577993][T31909] 8021q: adding VLAN 0 to HW filter on device team0 [ 955.591618][T31909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 955.671150][T31909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 955.682272][T31909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 955.699580][T31909] veth0_macvtap: left promiscuous mode [ 955.706772][T31909] veth0_macvtap: entered promiscuous mode [ 955.721416][T31909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 955.730771][T31909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 955.739867][T31909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 955.749168][T31909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 955.761394][T31909] macvlan2: left allmulticast mode [ 955.769552][T31909] macvlan0: left allmulticast mode [ 955.775039][T31909] hsr0: left allmulticast mode [ 955.779882][T31909] hsr_slave_0: left allmulticast mode [ 955.785955][T31909] hsr_slave_1: left allmulticast mode [ 955.796976][T31909] macsec1: left promiscuous mode [ 955.803398][T31909] ip6erspan0: left allmulticast mode [ 955.815511][T31909] 8021q: adding VLAN 0 to HW filter on device bond2 [ 955.823080][T31909] gretap1: left allmulticast mode [ 955.870759][T31912] syzkaller0: entered promiscuous mode [ 955.876404][T31912] syzkaller0: entered allmulticast mode [ 955.920577][ T3362] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 955.929611][ T3362] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.180795][T31896] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 958.880702][ T3362] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.889865][ T3362] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.898882][ T3362] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.908535][ T3362] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.928848][ T3362] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 958.960033][ T3362] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 959.118187][T31943] xt_bpf: check failed: parse error [ 959.448019][T31963] team0: Port device syz_tun removed [ 959.498640][T31963] bridge_slave_0: left allmulticast mode [ 959.509550][T31963] bridge_slave_0: left promiscuous mode [ 959.514886][T31973] openvswitch: netlink: Flow key attr not present in new flow. [ 959.520854][T31963] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.607708][T31963] bridge_slave_1: left allmulticast mode [ 959.680097][T31963] bridge_slave_1: left promiscuous mode [ 959.711750][T31963] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.805279][T31963] bond0: (slave bond_slave_0): Releasing backup interface [ 959.850460][T31963] bond0: (slave bond_slave_1): Releasing backup interface [ 959.890009][T31963] team0: Port device team_slave_0 removed [ 959.935694][T31963] team0: Port device team_slave_1 removed [ 959.953750][T31963] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 960.136711][T31994] tipc: Enabling of bearer rejected, failed to enable media [ 960.290933][T31966] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 960.361883][T32001] __nla_validate_parse: 71 callbacks suppressed [ 960.361907][T32001] netlink: 560 bytes leftover after parsing attributes in process `syz.0.8090'. [ 960.500981][T32009] team0: Port device syz_tun added [ 960.756587][T32011] syzkaller0: entered promiscuous mode [ 960.776538][T32011] syzkaller0: entered allmulticast mode [ 961.492165][T32048] netlink: 560 bytes leftover after parsing attributes in process `syz.0.8105'. [ 961.707801][T32051] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8106'. [ 964.360233][T32055] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8107'. [ 964.517413][T32067] sctp: [Deprecated]: syz.1.8112 (pid 32067) Use of struct sctp_assoc_value in delayed_ack socket option. [ 964.517413][T32067] Use struct sctp_sack_info instead [ 964.582543][T32067] netlink: 'syz.1.8112': attribute type 21 has an invalid length. [ 964.612902][T32067] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8112'. [ 964.663299][T32067] netlink: 'syz.1.8112': attribute type 4 has an invalid length. [ 964.701983][T32067] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8112'. [ 964.863239][T32085] wg1 speed is unknown, defaulting to 1000 [ 965.693093][ T30] audit: type=1800 audit(1778143656.233:60): pid=32096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.8119" name="memory.events" dev="tmpfs" ino=1594 res=0 errno=0 [ 966.975510][T32147] netlink: 'syz.2.8141': attribute type 1 has an invalid length. [ 967.010974][T32147] bond7: entered promiscuous mode [ 967.017978][T32147] 8021q: adding VLAN 0 to HW filter on device bond7 [ 967.030284][T32147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8141'. [ 967.080798][T32147] 8021q: adding VLAN 0 to HW filter on device bond7 [ 967.113677][T32147] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 967.157513][T32147] bond7: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 967.194071][T32147] bond7: (slave wireguard0): making interface the new active one [ 967.225844][T32147] wireguard0: entered promiscuous mode [ 967.253403][T32147] bond7: (slave wireguard0): Enslaving as an active interface with an up link [ 967.381624][T32162] xt_bpf: check failed: parse error [ 967.506028][T32164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8146'. [ 967.564350][T32166] netlink: 'syz.1.8147': attribute type 6 has an invalid length. [ 967.708045][T32168] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8148'. [ 967.918958][T32170] syzkaller0: entered promiscuous mode [ 967.935307][T32170] syzkaller0: entered allmulticast mode [ 968.029576][T32179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8152'. [ 968.054810][T32179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8152'. [ 968.401376][T32186] wg1 speed is unknown, defaulting to 1000 [ 968.436116][T32191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8155'. [ 968.486938][T32189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.497124][T32189] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.675163][T32189] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 968.705167][T32189] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 968.760178][T32189] veth1_macvtap: left promiscuous mode [ 968.778136][T32189] veth0_macvtap: left promiscuous mode [ 968.795200][T32189] veth0_macvtap: entered promiscuous mode [ 968.805796][T32189] veth1_macvtap: entered promiscuous mode [ 968.840328][T32189] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.855145][T32189] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 968.875538][T32189] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 968.895075][T32189] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.909928][T32189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 968.932386][T32189] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 968.954804][T32189] ªªªªª: entered promiscuous mode [ 969.014837][T20408] ip6gretap1: entered promiscuous mode [ 969.026682][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.033935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 969.049875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.057161][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.150495][ T6474] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.166354][ T6474] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.291114][ T6474] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.301343][ T6474] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.392919][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 969.436145][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 969.473439][T32209] netlink: 312 bytes leftover after parsing attributes in process `syz.1.8161'. [ 969.559339][ T13] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 969.702157][T32218] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8165'. [ 970.132201][T32233] FAULT_INJECTION: forcing a failure. [ 970.132201][T32233] name failslab, interval 1, probability 0, space 0, times 0 [ 970.173740][T32233] CPU: 0 UID: 0 PID: 32233 Comm: syz.0.8170 Not tainted syzkaller #0 PREEMPT(full) [ 970.173772][T32233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 970.173786][T32233] Call Trace: [ 970.173796][T32233] [ 970.173806][T32233] dump_stack_lvl+0xe8/0x150 [ 970.173838][T32233] should_fail_ex+0x412/0x560 [ 970.173873][T32233] should_failslab+0xa8/0x100 [ 970.173909][T32233] __kmalloc_cache_noprof+0x88/0x660 [ 970.173941][T32233] ? nft_pernet+0x23/0x240 [ 970.173964][T32233] ? nf_tables_newtable+0x435/0x1910 [ 970.173993][T32233] nf_tables_newtable+0x435/0x1910 [ 970.174014][T32233] ? nfnetlink_subsys_unregister+0x1a1/0x1b0 [ 970.174063][T32233] nfnetlink_rcv+0x123e/0x27b0 [ 970.174138][T32233] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 970.174186][T32233] ? ref_tracker_free+0x693/0x840 [ 970.174249][T32233] ? __netlink_deliver_tap+0x807/0x850 [ 970.174290][T32233] ? netlink_deliver_tap+0x2e/0x1b0 [ 970.174319][T32233] ? netlink_deliver_tap+0x2e/0x1b0 [ 970.174356][T32233] netlink_unicast+0x75c/0x8e0 [ 970.174403][T32233] netlink_sendmsg+0x813/0xb40 [ 970.174445][T32233] ? __pfx_netlink_sendmsg+0x10/0x10 [ 970.174486][T32233] ? aa_sock_msg_perm+0xf1/0x1b0 [ 970.174523][T32233] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 970.174563][T32233] ____sys_sendmsg+0x972/0x9f0 [ 970.174603][T32233] ? __might_fault+0xaf/0x130 [ 970.174638][T32233] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.174681][T32233] ? import_iovec+0x73/0xa0 [ 970.174716][T32233] ___sys_sendmsg+0x2a5/0x360 [ 970.174746][T32233] ? __lock_acquire+0x6b5/0x2cf0 [ 970.174780][T32233] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.174852][T32233] ? __fget_files+0x2a/0x420 [ 970.174878][T32233] ? __fget_files+0x3a0/0x420 [ 970.174916][T32233] __x64_sys_sendmsg+0x1bd/0x2a0 [ 970.174951][T32233] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 970.174993][T32233] ? __pfx_ksys_write+0x10/0x10 [ 970.175035][T32233] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.175059][T32233] do_syscall_64+0x15f/0xf80 [ 970.175089][T32233] ? trace_irq_disable+0x3b/0x140 [ 970.175122][T32233] ? clear_bhb_loop+0x40/0x90 [ 970.175150][T32233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.175173][T32233] RIP: 0033:0x7f1ad899cdd9 [ 970.175194][T32233] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.175214][T32233] RSP: 002b:00007f1ad6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.175238][T32233] RAX: ffffffffffffffda RBX: 00007f1ad8c15fa0 RCX: 00007f1ad899cdd9 [ 970.175255][T32233] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 970.175269][T32233] RBP: 00007f1ad6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 970.175283][T32233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 970.175296][T32233] R13: 00007f1ad8c16038 R14: 00007f1ad8c15fa0 R15: 00007fff0937f5e8 [ 970.175358][T32233] [ 970.521397][T32240] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8173'. [ 970.554071][T32242] rdma_rxe: rxe_newlink: failed to add wg1 [ 970.707379][T32249] netlink: 312 bytes leftover after parsing attributes in process `syz.1.8176'. [ 971.431845][T32292] netlink: 'syz.5.8190': attribute type 7 has an invalid length. [ 971.535667][T32291] wg1 speed is unknown, defaulting to 1000 [ 971.631656][T32297] FAULT_INJECTION: forcing a failure. [ 971.631656][T32297] name failslab, interval 1, probability 0, space 0, times 0 [ 971.661742][T32297] CPU: 1 UID: 0 PID: 32297 Comm: syz.0.8191 Not tainted syzkaller #0 PREEMPT(full) [ 971.661772][T32297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 971.661785][T32297] Call Trace: [ 971.661794][T32297] [ 971.661804][T32297] dump_stack_lvl+0xe8/0x150 [ 971.661834][T32297] should_fail_ex+0x412/0x560 [ 971.661868][T32297] should_failslab+0xa8/0x100 [ 971.661903][T32297] __kmalloc_cache_noprof+0x88/0x660 [ 971.661933][T32297] ? nft_pernet+0x23/0x240 [ 971.661957][T32297] ? nf_tables_newtable+0x435/0x1910 [ 971.661985][T32297] nf_tables_newtable+0x435/0x1910 [ 971.662005][T32297] ? nfnetlink_subsys_unregister+0x1a1/0x1b0 [ 971.662054][T32297] nfnetlink_rcv+0x123e/0x27b0 [ 971.662118][T32297] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 971.662163][T32297] ? ref_tracker_free+0x693/0x840 [ 971.662232][T32297] ? __netlink_deliver_tap+0x807/0x850 [ 971.662272][T32297] ? netlink_deliver_tap+0x2e/0x1b0 [ 971.662300][T32297] ? netlink_deliver_tap+0x2e/0x1b0 [ 971.662336][T32297] netlink_unicast+0x75c/0x8e0 [ 971.662374][T32297] netlink_sendmsg+0x813/0xb40 [ 971.662412][T32297] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.662445][T32297] ? aa_sock_msg_perm+0xf1/0x1b0 [ 971.662477][T32297] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 971.662511][T32297] ____sys_sendmsg+0x972/0x9f0 [ 971.662541][T32297] ? __might_fault+0xaf/0x130 [ 971.662576][T32297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.662615][T32297] ? import_iovec+0x73/0xa0 [ 971.662649][T32297] ___sys_sendmsg+0x2a5/0x360 [ 971.662683][T32297] ? __lock_acquire+0x6b5/0x2cf0 [ 971.662730][T32297] ? __pfx____sys_sendmsg+0x10/0x10 [ 971.662802][T32297] ? __fget_files+0x2a/0x420 [ 971.662828][T32297] ? __fget_files+0x3a0/0x420 [ 971.662866][T32297] __x64_sys_sendmsg+0x1bd/0x2a0 [ 971.662902][T32297] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 971.662944][T32297] ? __pfx_ksys_write+0x10/0x10 [ 971.662985][T32297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.663009][T32297] do_syscall_64+0x15f/0xf80 [ 971.663039][T32297] ? clear_bhb_loop+0x40/0x90 [ 971.663067][T32297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.663088][T32297] RIP: 0033:0x7f1ad899cdd9 [ 971.663110][T32297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.663129][T32297] RSP: 002b:00007f1ad6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.663153][T32297] RAX: ffffffffffffffda RBX: 00007f1ad8c15fa0 RCX: 00007f1ad899cdd9 [ 971.663170][T32297] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 971.663184][T32297] RBP: 00007f1ad6bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 971.663205][T32297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.663230][T32297] R13: 00007f1ad8c16038 R14: 00007f1ad8c15fa0 R15: 00007fff0937f5e8 [ 971.663265][T32297] [ 972.397592][T32303] __nla_validate_parse: 3 callbacks suppressed [ 972.397614][T32303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8193'. [ 972.499319][T32303] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8193'. [ 972.544163][T32312] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8196'. [ 972.551444][T32303] netlink: 6 bytes leftover after parsing attributes in process `syz.5.8193'. [ 972.601182][T32303] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 972.740066][T32314] syzkaller1: entered promiscuous mode [ 972.746015][T32314] syzkaller1: entered allmulticast mode [ 972.920538][T32328] netlink: 'syz.5.8201': attribute type 4 has an invalid length. [ 972.938704][T32326] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8202'. [ 973.143679][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 973.301742][T32333] syzkaller0: entered promiscuous mode [ 973.307900][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 973.325042][T32333] syzkaller0: entered allmulticast mode [ 973.953864][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 974.563221][T32364] netlink: 'syz.1.8213': attribute type 1 has an invalid length. [ 974.615522][T32365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8213'. [ 976.990876][T32364] 8021q: adding VLAN 0 to HW filter on device bond3 [ 977.015625][T32369] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8215'. [ 977.033267][T32373] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.8216'. [ 977.043586][T32373] openvswitch: netlink: Key type 769 is out of range max 32 [ 977.068451][T32374] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8214'. [ 977.114673][T32375] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8216'. [ 977.159129][T32373] : entered promiscuous mode [ 977.230287][T32379] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.717374][T32410] __nla_validate_parse: 1 callbacks suppressed [ 977.717395][T32410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8223'. [ 977.860081][T32390] bond8: option downdelay: invalid value (18446744073709547521) [ 977.902201][T32390] bond8: option downdelay: allowed values 0 - 2147483647 [ 977.974688][T32390] bond8 (unregistering): Released all slaves [ 978.070186][T32420] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8223'. [ 978.345368][T32425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8228'. [ 978.439500][T32430] netlink: 312 bytes leftover after parsing attributes in process `syz.0.8229'. [ 978.721134][T32442] wg1 speed is unknown, defaulting to 1000 [ 978.774829][T32449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8236'. [ 978.909294][T32449] vlan0: entered promiscuous mode [ 978.914546][T32449] bridge0: entered promiscuous mode [ 979.054454][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 979.081991][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 979.208496][T32458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8240'. [ 979.223170][T32458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8240'. [ 979.301886][T32462] FAULT_INJECTION: forcing a failure. [ 979.301886][T32462] name failslab, interval 1, probability 0, space 0, times 0 [ 979.345968][T32462] CPU: 0 UID: 0 PID: 32462 Comm: syz.2.8241 Not tainted syzkaller #0 PREEMPT(full) [ 979.345999][T32462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 979.346013][T32462] Call Trace: [ 979.346022][T32462] [ 979.346031][T32462] dump_stack_lvl+0xe8/0x150 [ 979.346063][T32462] should_fail_ex+0x412/0x560 [ 979.346096][T32462] should_failslab+0xa8/0x100 [ 979.346133][T32462] __kvmalloc_node_noprof+0x178/0x8a0 [ 979.346171][T32462] ? __fget_files+0x2a/0x420 [ 979.346195][T32462] ? vmemdup_user+0x2b/0xd0 [ 979.346229][T32462] vmemdup_user+0x2b/0xd0 [ 979.346249][T32462] map_lookup_and_delete_elem+0x349/0xa50 [ 979.346275][T32462] ? bpf_lsm_bpf+0x9/0x20 [ 979.346298][T32462] __sys_bpf+0x77c/0x950 [ 979.346329][T32462] ? __pfx___sys_bpf+0x10/0x10 [ 979.346376][T32462] ? ksys_write+0x242/0x270 [ 979.346407][T32462] ? __pfx_ksys_write+0x10/0x10 [ 979.346439][T32462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.346462][T32462] __x64_sys_bpf+0x7c/0x90 [ 979.346489][T32462] do_syscall_64+0x15f/0xf80 [ 979.346515][T32462] ? trace_irq_disable+0x3b/0x140 [ 979.346546][T32462] ? clear_bhb_loop+0x40/0x90 [ 979.346572][T32462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 979.346593][T32462] RIP: 0033:0x7f277bd9cdd9 [ 979.346613][T32462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 979.346631][T32462] RSP: 002b:00007f277ccb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 979.346692][T32462] RAX: ffffffffffffffda RBX: 00007f277c016090 RCX: 00007f277bd9cdd9 [ 979.346708][T32462] RDX: 0000000000000020 RSI: 00002000000001c0 RDI: 0000000000000015 [ 979.346722][T32462] RBP: 00007f277ccb2090 R08: 0000000000000000 R09: 0000000000000000 [ 979.346736][T32462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 979.346749][T32462] R13: 00007f277c016128 R14: 00007f277c016090 R15: 00007ffe768f3688 [ 979.346792][T32462] [ 980.197685][T32470] syzkaller0: entered promiscuous mode [ 980.204108][T32468] xt_bpf: check failed: parse error [ 980.210611][T32470] syzkaller0: entered allmulticast mode [ 980.236748][T32473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8244'. [ 980.743764][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 980.755102][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 980.850367][T32487] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8251'. [ 980.870320][T32487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8251'. [ 981.446958][T32512] netlink: 'syz.3.8260': attribute type 1 has an invalid length. [ 982.894536][ T6911] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 982.918301][ T5725] wg1 speed is unknown, defaulting to 1000 [ 982.979760][T32547] wg1 speed is unknown, defaulting to 1000 [ 983.303881][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 983.485149][ T5725] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 984.149622][T32579] __nla_validate_parse: 6 callbacks suppressed [ 984.149644][T32579] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8279'. [ 984.172904][T32581] bridge0: port 2(bridge_slave_1) entered disabled state [ 984.180492][T32581] bridge0: port 1(bridge_slave_0) entered disabled state [ 984.206593][T32594] netlink: 'syz.5.8284': attribute type 1 has an invalid length. [ 984.215198][T32594] netlink: 248 bytes leftover after parsing attributes in process `syz.5.8284'. [ 984.374598][T32581] ip6gretap1: left promiscuous mode [ 984.430173][ T6463] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.459592][ T6463] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.487585][T32582] wg1 speed is unknown, defaulting to 1000 [ 984.540326][ T6463] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.561693][ T6463] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.571048][T32589] syz.0.8282 (32589) used obsolete PPPIOCDETACH ioctl [ 984.602758][T32602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8285'. [ 985.452774][T32635] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8292'. [ 985.837549][T32645] netlink: 'syz.5.8297': attribute type 1 has an invalid length. [ 985.949294][T32645] bond3: entered promiscuous mode [ 985.972662][T32645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 986.001780][T32653] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8299'. [ 986.053193][T32645] 8021q: adding VLAN 0 to HW filter on device bond3 [ 986.065870][T32645] bond3: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 986.076818][T32645] bond3: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 986.120968][T32645] bond3: (slave ip6gre2): making interface the new active one [ 986.128783][T32645] ip6gre2: entered promiscuous mode [ 986.138570][T32645] bond3: (slave ip6gre2): Enslaving as an active interface with an up link [ 987.149688][T32680] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8306'. [ 987.910484][ T1108] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.919574][ T1108] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.937614][ T1108] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 987.947057][ T1108] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.982593][ T1108] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.002901][ T1108] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.014953][ T1108] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.026348][ T1108] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 988.036712][T32667] wg1 speed is unknown, defaulting to 1000 [ 988.278908][T32691] FAULT_INJECTION: forcing a failure. [ 988.278908][T32691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 988.352829][T32691] CPU: 0 UID: 0 PID: 32691 Comm: syz.5.8309 Not tainted syzkaller #0 PREEMPT(full) [ 988.352860][T32691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 988.352874][T32691] Call Trace: [ 988.352883][T32691] [ 988.352893][T32691] dump_stack_lvl+0xe8/0x150 [ 988.352922][T32691] should_fail_ex+0x412/0x560 [ 988.352956][T32691] _copy_to_user+0x31/0xb0 [ 988.353003][T32691] simple_read_from_buffer+0xe1/0x170 [ 988.353033][T32691] proc_fail_nth_read+0x1bb/0x230 [ 988.353065][T32691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.353097][T32691] ? rw_verify_area+0x2a6/0x4d0 [ 988.353126][T32691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 988.353156][T32691] vfs_read+0x20c/0xa70 [ 988.353192][T32691] ? __pfx___mutex_lock+0x10/0x10 [ 988.353301][T32691] ? __pfx_vfs_read+0x10/0x10 [ 988.353343][T32691] ? __fget_files+0x2a/0x420 [ 988.353376][T32691] ? __fget_files+0x3a0/0x420 [ 988.353419][T32691] ? __fget_files+0x2a/0x420 [ 988.353456][T32691] ksys_read+0x150/0x270 [ 988.353489][T32691] ? __pfx_ksys_read+0x10/0x10 [ 988.353527][T32691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.353553][T32691] do_syscall_64+0x15f/0xf80 [ 988.353583][T32691] ? trace_irq_disable+0x3b/0x140 [ 988.353616][T32691] ? clear_bhb_loop+0x40/0x90 [ 988.353644][T32691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 988.353666][T32691] RIP: 0033:0x7fdfc3f5d60e [ 988.353688][T32691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 988.353708][T32691] RSP: 002b:00007fdfc4f0ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 988.353731][T32691] RAX: ffffffffffffffda RBX: 00007fdfc4f106c0 RCX: 00007fdfc3f5d60e [ 988.353748][T32691] RDX: 000000000000000f RSI: 00007fdfc4f100a0 RDI: 0000000000000008 [ 988.353762][T32691] RBP: 00007fdfc4f10090 R08: 0000000000000000 R09: 0000000000000000 [ 988.353775][T32691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 988.353789][T32691] R13: 00007fdfc4216128 R14: 00007fdfc4216090 R15: 00007ffc72f34b48 [ 988.353825][T32691] [ 988.613832][T32694] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8310'. [ 988.971843][T32697] netlink: 'syz.2.8311': attribute type 3 has an invalid length. [ 989.001822][T32697] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8311'. [ 989.269743][T32705] wg1 speed is unknown, defaulting to 1000 [ 990.468418][T32726] syzkaller0: entered promiscuous mode [ 990.480563][T32726] syzkaller0: entered allmulticast mode [ 990.532480][T20408] IPVS: starting estimator thread 0... [ 990.625793][T32738] IPVS: using max 27 ests per chain, 64800 per kthread [ 990.635404][T32742] nbd: socks must be embedded in a SOCK_ITEM attr [ 990.648788][T32742] block nbd0: shutting down sockets [ 992.921928][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 993.165684][T32748] kthread_run failed with err -4 [ 993.327397][T32761] netlink: 'syz.1.8326': attribute type 2 has an invalid length. [ 993.376770][T32766] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8328'. [ 993.570692][ T308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8331'. [ 993.580837][ T308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8331'. [ 993.755996][ T313] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8333'. [ 993.906125][ T317] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8335'. [ 993.930593][ T317] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8335'. [ 994.011024][ T322] nbd: socks must be embedded in a SOCK_ITEM attr [ 994.034484][ T322] block nbd0: shutting down sockets [ 994.263424][ T337] xt_TPROXY: Can be used only with -p tcp or -p udp [ 994.283954][ T339] xt_bpf: check failed: parse error [ 994.336118][ T341] netlink: 'syz.3.8343': attribute type 5 has an invalid length. [ 994.731132][ T345] wg1 speed is unknown, defaulting to 1000 [ 994.776669][ T356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8348'. [ 994.817795][ T355] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8348'. [ 994.854459][ T355] tipc: Failed to obtain node identity [ 994.870175][ T355] tipc: Enabling of bearer rejected, failed to enable media [ 994.967139][ T356] syz_tun: entered promiscuous mode [ 994.981015][ T356] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8348'. [ 995.007021][ T370] netlink: 'syz.5.8352': attribute type 1 has an invalid length. [ 995.119187][ T378] netlink: 560 bytes leftover after parsing attributes in process `syz.3.8355'. [ 995.150111][ T370] bond4: entered promiscuous mode [ 995.174849][ T370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 995.784884][ T411] netlink: 'syz.1.8365': attribute type 10 has an invalid length. [ 995.796851][ T411] syz_tun: entered promiscuous mode [ 995.833007][ T411] team0: Port device syz_tun removed [ 995.894587][ T411] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 997.117363][ T466] syzkaller1: entered promiscuous mode [ 997.133150][ T466] syzkaller1: entered allmulticast mode [ 998.075364][ T484] xt_bpf: check failed: parse error [ 998.401207][ T501] netlink: 'syz.5.8394': attribute type 1 has an invalid length. [ 998.437963][ T501] __nla_validate_parse: 9 callbacks suppressed [ 998.437986][ T501] netlink: 240 bytes leftover after parsing attributes in process `syz.5.8394'. [ 998.521239][ T510] netlink: 72 bytes leftover after parsing attributes in process `syz.2.8398'. [ 998.705138][ T516] netlink: 277 bytes leftover after parsing attributes in process `syz.2.8400'. [ 998.731655][ T516] x_tables: duplicate underflow at hook 1 [ 998.785300][ T520] xt_bpf: check failed: parse error [ 998.850684][ T525] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8401'. [ 998.977851][ T529] PKCS7: Unknown OID: [4] (bad) [ 998.984132][ T529] PKCS7: Only support pkcs7_signedData type [ 1001.531102][ T553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8413'. [ 1001.585904][ T560] FAULT_INJECTION: forcing a failure. [ 1001.585904][ T560] name failslab, interval 1, probability 0, space 0, times 0 [ 1001.599508][ T560] CPU: 1 UID: 0 PID: 560 Comm: syz.3.8417 Not tainted syzkaller #0 PREEMPT(full) [ 1001.599538][ T560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1001.599552][ T560] Call Trace: [ 1001.599561][ T560] [ 1001.599570][ T560] dump_stack_lvl+0xe8/0x150 [ 1001.599600][ T560] should_fail_ex+0x412/0x560 [ 1001.599634][ T560] should_failslab+0xa8/0x100 [ 1001.599671][ T560] __kmalloc_noprof+0xe8/0x760 [ 1001.599702][ T560] ? alloc_port_data+0xfb/0x360 [ 1001.599738][ T560] alloc_port_data+0xfb/0x360 [ 1001.599774][ T560] ib_device_set_netdev+0xd3/0x6d0 [ 1001.599812][ T560] ? mutex_init_lockdep+0xdf/0x110 [ 1001.599839][ T560] ? ib_set_device_ops+0x407b/0x41c0 [ 1001.599871][ T560] rxe_register_device+0x1bb/0x350 [ 1001.599898][ T560] rxe_net_add+0x81/0x110 [ 1001.599923][ T560] rxe_newlink+0xf4/0x1c0 [ 1001.599944][ T560] nldev_newlink+0x5bc/0x650 [ 1001.599968][ T560] ? __pfx_nldev_newlink+0x10/0x10 [ 1001.600115][ T560] ? bpf_lsm_capable+0x9/0x20 [ 1001.600136][ T560] ? security_capable+0x7e/0x2c0 [ 1001.600165][ T560] ? __pfx_nldev_newlink+0x10/0x10 [ 1001.600195][ T560] rdma_nl_rcv+0x6d1/0xa10 [ 1001.600245][ T560] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1001.600299][ T560] ? netlink_deliver_tap+0x2e/0x1b0 [ 1001.600326][ T560] ? netlink_deliver_tap+0x2e/0x1b0 [ 1001.600359][ T560] netlink_unicast+0x75c/0x8e0 [ 1001.600396][ T560] netlink_sendmsg+0x813/0xb40 [ 1001.600434][ T560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.600465][ T560] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1001.600494][ T560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1001.600524][ T560] ____sys_sendmsg+0x972/0x9f0 [ 1001.600553][ T560] ? __might_fault+0xaf/0x130 [ 1001.600585][ T560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.600623][ T560] ? import_iovec+0x73/0xa0 [ 1001.600656][ T560] ___sys_sendmsg+0x2a5/0x360 [ 1001.600683][ T560] ? __lock_acquire+0x6b5/0x2cf0 [ 1001.600709][ T560] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.600775][ T560] ? __fget_files+0x2a/0x420 [ 1001.600798][ T560] ? __fget_files+0x3a0/0x420 [ 1001.600832][ T560] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1001.600864][ T560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1001.600903][ T560] ? __pfx_ksys_write+0x10/0x10 [ 1001.600941][ T560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.600981][ T560] do_syscall_64+0x15f/0xf80 [ 1001.601009][ T560] ? trace_irq_disable+0x3b/0x140 [ 1001.601042][ T560] ? clear_bhb_loop+0x40/0x90 [ 1001.601068][ T560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.601090][ T560] RIP: 0033:0x7fde4a79cdd9 [ 1001.601110][ T560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.601127][ T560] RSP: 002b:00007fde4b630028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.601149][ T560] RAX: ffffffffffffffda RBX: 00007fde4aa15fa0 RCX: 00007fde4a79cdd9 [ 1001.601165][ T560] RDX: edbde134798091f0 RSI: 0000200000000380 RDI: 0000000000000003 [ 1001.601179][ T560] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.601193][ T560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.601206][ T560] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 1001.601240][ T560] [ 1001.601349][ T560] rdma_rxe: rxe_newlink: failed to add wg1 [ 1001.980529][ T562] openvswitch: netlink: IP tunnel dst address not specified [ 1002.082605][ T567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8420'. [ 1002.590031][ T593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8429'. [ 1002.640365][ T593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8429'. [ 1002.651142][ T601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8432'. [ 1002.692468][ T602] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8431'. [ 1002.740056][ T604] team0: Device syz_tun is of different type [ 1003.083879][ T617] FAULT_INJECTION: forcing a failure. [ 1003.083879][ T617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1003.099831][ T617] CPU: 1 UID: 0 PID: 617 Comm: syz.3.8439 Not tainted syzkaller #0 PREEMPT(full) [ 1003.099861][ T617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1003.099874][ T617] Call Trace: [ 1003.099883][ T617] [ 1003.099892][ T617] dump_stack_lvl+0xe8/0x150 [ 1003.099924][ T617] should_fail_ex+0x412/0x560 [ 1003.099959][ T617] _copy_to_user+0x31/0xb0 [ 1003.100001][ T617] simple_read_from_buffer+0xe1/0x170 [ 1003.100036][ T617] proc_fail_nth_read+0x1bb/0x230 [ 1003.100069][ T617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1003.100101][ T617] ? rw_verify_area+0x2a6/0x4d0 [ 1003.100132][ T617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1003.100163][ T617] vfs_read+0x20c/0xa70 [ 1003.100199][ T617] ? __pfx___mutex_lock+0x10/0x10 [ 1003.100232][ T617] ? __pfx_vfs_read+0x10/0x10 [ 1003.100264][ T617] ? __fget_files+0x2a/0x420 [ 1003.100294][ T617] ? __fget_files+0x3a0/0x420 [ 1003.100319][ T617] ? __fget_files+0x2a/0x420 [ 1003.100352][ T617] ksys_read+0x150/0x270 [ 1003.100384][ T617] ? __pfx_ksys_read+0x10/0x10 [ 1003.100422][ T617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.100446][ T617] do_syscall_64+0x15f/0xf80 [ 1003.100473][ T617] ? trace_irq_disable+0x3b/0x140 [ 1003.100505][ T617] ? clear_bhb_loop+0x40/0x90 [ 1003.100531][ T617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1003.100552][ T617] RIP: 0033:0x7fde4a75d60e [ 1003.100572][ T617] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1003.100591][ T617] RSP: 002b:00007fde4b62ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1003.100613][ T617] RAX: ffffffffffffffda RBX: 00007fde4b6306c0 RCX: 00007fde4a75d60e [ 1003.100628][ T617] RDX: 000000000000000f RSI: 00007fde4b6300a0 RDI: 0000000000000004 [ 1003.100642][ T617] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 1003.100655][ T617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1003.100668][ T617] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 1003.100703][ T617] [ 1003.380401][ T623] netlink: 'syz.0.8440': attribute type 7 has an invalid length. [ 1003.666797][ T629] __nla_validate_parse: 1 callbacks suppressed [ 1003.666815][ T629] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8443'. [ 1003.810431][ T636] netlink: 312 bytes leftover after parsing attributes in process `syz.5.8444'. [ 1004.317326][ T633] wg1 speed is unknown, defaulting to 1000 [ 1004.329773][ T638] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8445'. [ 1004.420677][ T640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8446'. [ 1004.590371][ T3362] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.617296][ T3362] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.640879][ T3362] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.653850][ T3362] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1004.942115][ T658] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8453'. [ 1005.352808][ T674] netlink: 632 bytes leftover after parsing attributes in process `syz.1.8456'. [ 1005.384246][ T676] xt_bpf: check failed: parse error [ 1005.392195][ T674] netlink: 84 bytes leftover after parsing attributes in process `syz.1.8456'. [ 1005.612010][ T682] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8459'. [ 1005.690318][ T686] xt_cgroup: xt_cgroup: no path or classid specified [ 1005.712504][ T686] netlink: 'syz.2.8461': attribute type 8 has an invalid length. [ 1005.733617][ T686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8461'. [ 1005.813090][ T686] bond0: entered promiscuous mode [ 1005.824628][ T686] bond_slave_0: entered promiscuous mode [ 1005.839673][ T686] bond_slave_1: entered promiscuous mode [ 1005.875766][ T686] gretap0: entered promiscuous mode [ 1005.912309][ T686] debugfs: 'hsr1' already exists in 'hsr' [ 1005.940081][ T695] netlink: 312 bytes leftover after parsing attributes in process `syz.5.8463'. [ 1005.950292][ T686] Cannot create hsr debugfs directory [ 1005.967993][ T686] hsr1: entered promiscuous mode [ 1006.477806][ T721] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1006.497775][ T721] syzkaller1: linktype set to 805 [ 1006.631989][ T731] bond5 (unregistering): Released all slaves [ 1006.947502][ T751] FAULT_INJECTION: forcing a failure. [ 1006.947502][ T751] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.960662][ T751] CPU: 1 UID: 0 PID: 751 Comm: syz.5.8484 Not tainted syzkaller #0 PREEMPT(full) [ 1006.960691][ T751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1006.960707][ T751] Call Trace: [ 1006.960716][ T751] [ 1006.960725][ T751] dump_stack_lvl+0xe8/0x150 [ 1006.960767][ T751] should_fail_ex+0x412/0x560 [ 1006.960799][ T751] should_failslab+0xa8/0x100 [ 1006.960830][ T751] ? sk_prot_alloc+0x57/0x210 [ 1006.960857][ T751] kmem_cache_alloc_noprof+0x87/0x650 [ 1006.960894][ T751] sk_prot_alloc+0x57/0x210 [ 1006.960919][ T751] ? sk_alloc+0x27/0x390 [ 1006.960948][ T751] sk_alloc+0x3a/0x390 [ 1006.960978][ T751] inet6_create+0x7f0/0x1260 [ 1006.961017][ T751] ? inet6_create+0x83/0x1260 [ 1006.961047][ T751] __sock_create+0x4b2/0x9d0 [ 1006.961082][ T751] udp_sock_create6+0xd6/0x6b0 [ 1006.961103][ T751] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1006.961136][ T751] ? __pfx_udp_sock_create6+0x10/0x10 [ 1006.961163][ T751] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.961198][ T751] rxe_setup_udp_tunnel+0x129/0x7b0 [ 1006.961226][ T751] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1006.961255][ T751] ? __pfx_rxe_setup_udp_tunnel+0x10/0x10 [ 1006.961289][ T751] ? rxe_ns_pernet_sk6+0x2d/0x220 [ 1006.961328][ T751] ? rxe_ns_pernet_sk6+0x2d/0x220 [ 1006.961354][ T751] ? rxe_ns_pernet_sk6+0x2d/0x220 [ 1006.961379][ T751] ? rxe_ns_pernet_sk6+0x2d/0x220 [ 1006.961410][ T751] rxe_net_init+0x157/0x300 [ 1006.961439][ T751] rxe_newlink+0xd3/0x1c0 [ 1006.961461][ T751] nldev_newlink+0x5bc/0x650 [ 1006.961488][ T751] ? __pfx_nldev_newlink+0x10/0x10 [ 1006.961648][ T751] ? bpf_lsm_capable+0x9/0x20 [ 1006.961670][ T751] ? security_capable+0x7e/0x2c0 [ 1006.961700][ T751] ? __pfx_nldev_newlink+0x10/0x10 [ 1006.961726][ T751] rdma_nl_rcv+0x6d1/0xa10 [ 1006.961768][ T751] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1006.961817][ T751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1006.961846][ T751] ? netlink_deliver_tap+0x2e/0x1b0 [ 1006.961881][ T751] netlink_unicast+0x75c/0x8e0 [ 1006.961920][ T751] netlink_sendmsg+0x813/0xb40 [ 1006.961960][ T751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1006.961993][ T751] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1006.962022][ T751] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1006.962055][ T751] ____sys_sendmsg+0x972/0x9f0 [ 1006.962084][ T751] ? __might_fault+0xaf/0x130 [ 1006.962119][ T751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1006.962160][ T751] ? import_iovec+0x73/0xa0 [ 1006.962211][ T751] ___sys_sendmsg+0x2a5/0x360 [ 1006.962241][ T751] ? __lock_acquire+0x6b5/0x2cf0 [ 1006.962269][ T751] ? __pfx____sys_sendmsg+0x10/0x10 [ 1006.962342][ T751] ? __fget_files+0x2a/0x420 [ 1006.962380][ T751] ? __fget_files+0x3a0/0x420 [ 1006.962417][ T751] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1006.962451][ T751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1006.962493][ T751] ? __pfx_ksys_write+0x10/0x10 [ 1006.962534][ T751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.962559][ T751] do_syscall_64+0x15f/0xf80 [ 1006.962588][ T751] ? trace_irq_disable+0x3b/0x140 [ 1006.962627][ T751] ? clear_bhb_loop+0x40/0x90 [ 1006.962654][ T751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.962676][ T751] RIP: 0033:0x7fdfc3f9cdd9 [ 1006.962697][ T751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.962717][ T751] RSP: 002b:00007fdfc4f31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1006.962742][ T751] RAX: ffffffffffffffda RBX: 00007fdfc4215fa0 RCX: 00007fdfc3f9cdd9 [ 1006.962758][ T751] RDX: edbde134798091f0 RSI: 0000200000000380 RDI: 0000000000000003 [ 1006.962773][ T751] RBP: 00007fdfc4f31090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.962787][ T751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1006.962799][ T751] R13: 00007fdfc4216038 R14: 00007fdfc4215fa0 R15: 00007ffc72f34b48 [ 1006.962834][ T751] [ 1007.339760][ T751] rdma_rxe: Failed to create IPv6 UDP tunnel [ 1007.771189][ T761] bond4: entered promiscuous mode [ 1008.064025][ T795] rdma_rxe: rxe_newlink: failed to add wg1 [ 1008.079132][ T795] FAULT_INJECTION: forcing a failure. [ 1008.079132][ T795] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.114532][ T795] CPU: 0 UID: 0 PID: 795 Comm: syz.3.8501 Not tainted syzkaller #0 PREEMPT(full) [ 1008.114562][ T795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1008.114576][ T795] Call Trace: [ 1008.114585][ T795] [ 1008.114595][ T795] dump_stack_lvl+0xe8/0x150 [ 1008.114628][ T795] should_fail_ex+0x412/0x560 [ 1008.114664][ T795] _copy_from_user+0x2d/0xb0 [ 1008.114698][ T795] kstrtouint_from_user+0xd6/0x180 [ 1008.114729][ T795] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1008.114783][ T795] proc_fail_nth_write+0x8e/0x210 [ 1008.114814][ T795] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1008.114848][ T795] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1008.114878][ T795] vfs_write+0x29a/0xb90 [ 1008.114920][ T795] ? __pfx_vfs_write+0x10/0x10 [ 1008.114952][ T795] ? __fget_files+0x2a/0x420 [ 1008.114983][ T795] ? __fget_files+0x3a0/0x420 [ 1008.115009][ T795] ? __fget_files+0x2a/0x420 [ 1008.115045][ T795] ksys_write+0x150/0x270 [ 1008.115080][ T795] ? __pfx_ksys_write+0x10/0x10 [ 1008.115120][ T795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.115146][ T795] do_syscall_64+0x15f/0xf80 [ 1008.115176][ T795] ? trace_irq_disable+0x3b/0x140 [ 1008.115210][ T795] ? clear_bhb_loop+0x40/0x90 [ 1008.115239][ T795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.115261][ T795] RIP: 0033:0x7fde4a75d60e [ 1008.115283][ T795] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1008.115303][ T795] RSP: 002b:00007fde4b62ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1008.115327][ T795] RAX: ffffffffffffffda RBX: 00007fde4b6306c0 RCX: 00007fde4a75d60e [ 1008.115344][ T795] RDX: 0000000000000001 RSI: 00007fde4b6300a0 RDI: 0000000000000004 [ 1008.115358][ T795] RBP: 00007fde4b630090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.115372][ T795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1008.115385][ T795] R13: 00007fde4aa16038 R14: 00007fde4aa15fa0 R15: 00007ffc8a9be968 [ 1008.115422][ T795] [ 1008.553959][ T804] xt_bpf: check failed: parse error [ 1008.823070][ T813] netlink: 'syz.0.8507': attribute type 64 has an invalid length. [ 1009.021483][ T824] __nla_validate_parse: 11 callbacks suppressed [ 1009.021503][ T824] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8511'. [ 1009.051593][ T824] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8511'. [ 1009.081571][ T831] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1009.099969][ T823] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1009.117509][ T823] bond5 (unregistering): Released all slaves [ 1009.216797][ T839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1009.263610][ T836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8512'. [ 1009.740284][ T859] netlink: 'syz.3.8521': attribute type 1 has an invalid length. [ 1009.752918][ T859] netlink: 936 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1009.767431][ T859] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1009.780212][ T859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1009.799006][ T861] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8522'. [ 1009.811549][ T859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8521'. [ 1010.194343][ T882] nbd: socks must be embedded in a SOCK_ITEM attr [ 1010.201243][ T882] block nbd0: shutting down sockets [ 1010.885318][ T914] rdma_rxe: rxe_newlink: failed to add wg1 [ 1011.085539][ T921] m1Ie5nè‹Ò: entered promiscuous mode [ 1011.350095][ T937] xt_bpf: check failed: parse error [ 1011.530146][ T954] rdma_rxe: rxe_newlink: failed to add wg1 [ 1011.701125][ T965] nbd: socks must be embedded in a SOCK_ITEM attr [ 1011.728112][ T965] block nbd0: shutting down sockets [ 1011.975672][ T984] netlink: 'syz.3.8560': attribute type 33 has an invalid length. [ 1012.498006][ T996] syz0: rxe_newlink: already configured on wg1 [ 1012.613935][ T994] syzkaller0: entered promiscuous mode [ 1012.627330][ T994] syzkaller0: entered allmulticast mode [ 1013.112636][ T1011] Cannot find del_set index 14804 as target [ 1014.397384][ T1036] __nla_validate_parse: 13 callbacks suppressed [ 1014.397405][ T1036] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8581'. [ 1016.584456][ T1000] wg1 speed is unknown, defaulting to 1000 [ 1017.038665][ T1022] wg1 speed is unknown, defaulting to 1000 [ 1017.185825][ T1069] netlink: 'syz.3.8589': attribute type 1 has an invalid length. [ 1017.266982][ T1069] bond2: entered promiscuous mode [ 1017.272561][ T1069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.509779][ T1069] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1017.530399][ T1069] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1017.556547][ T1069] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1017.594190][ T1069] bond2: (slave vti0): making interface the new active one [ 1017.614486][ T1069] vti0: entered promiscuous mode [ 1017.633917][ T1069] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1017.654647][ T1077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8589'. [ 1017.676156][ T1077] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8589'. [ 1017.689130][ T1077] netlink: 31 bytes leftover after parsing attributes in process `syz.3.8589'. [ 1017.924192][ T1085] syzkaller0: entered promiscuous mode [ 1017.933381][ T1085] syzkaller0: entered allmulticast mode [ 1021.052253][ T1101] ip6erspan0: entered promiscuous mode [ 1021.061044][ T1101] ip6erspan0: entered allmulticast mode [ 1021.847248][ T1140] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8610'. [ 1021.931754][ T1142] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8611'. [ 1021.942254][ T1142] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8611'. [ 1021.959153][ T1105] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.172742][ T1151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8615'. [ 1022.230584][ T1153] netlink: 312 bytes leftover after parsing attributes in process `syz.2.8616'. [ 1022.510743][ T1174] netlink: 60 bytes leftover after parsing attributes in process `syz.5.8622'. [ 1022.541045][ T1174] unsupported nlmsg_type 40 [ 1022.582228][ T1175] wg1 speed is unknown, defaulting to 1000 [ 1023.248491][ T1182] Cannot find add_set index 2 as target [ 1023.303968][ T1185] netlink: 'syz.2.8626': attribute type 1 has an invalid length. [ 1023.317750][ T1183] netlink: 312 bytes leftover after parsing attributes in process `syz.1.8623'. [ 1023.449287][ T1185] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1023.532286][ T1185] netlink: 'syz.2.8626': attribute type 10 has an invalid length. [ 1023.565674][ T1185] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8626'. [ 1023.601456][ T1187] bond8: (slave veth11): Enslaving as an active interface with a down link [ 1023.641071][ T1191] batman_adv: batadv0: Interface deactivated: dummy0 [ 1023.681845][ T1191] batman_adv: batadv0: Removing interface: dummy0 [ 1023.727275][ T1191] bond8: (slave dummy0): making interface the new active one [ 1023.739782][ T1191] dummy0: entered promiscuous mode [ 1023.749511][ T1191] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 1023.772426][ T1185] bond8: (slave dummy0): Releasing active interface [ 1023.895775][ T1205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8631'. [ 1024.000477][ T1208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8634'. [ 1024.259510][ T1215] netlink: 'syz.2.8635': attribute type 29 has an invalid length. [ 1024.286659][ T1215] netlink: 'syz.2.8635': attribute type 29 has an invalid length. [ 1024.670239][ T1233] bond0: (slave syz_tun): Releasing backup interface [ 1024.736669][ T1233] team0: Port device syz_tun added [ 1024.757256][ T1243] netlink: 'syz.5.8647': attribute type 1 has an invalid length. [ 1024.939909][ T1254] netlink: 'syz.2.8650': attribute type 1 has an invalid length. [ 1025.060785][ T1254] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1025.103017][ T1261] bond9: (slave veth13): Enslaving as an active interface with a down link [ 1025.137534][ T1266] ip6gretap2: entered promiscuous mode [ 1025.143343][ T1266] ip6gretap2: entered allmulticast mode [ 1025.149421][ T1265] dummy0: left promiscuous mode [ 1025.166879][ T1265] bond9: (slave dummy0): making interface the new active one [ 1025.176178][ T1265] dummy0: entered promiscuous mode [ 1025.182255][ T1265] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 1025.234914][ T1254] bond9: (slave dummy0): Releasing active interface [ 1025.262518][ T1254] dummy0 (unregistering): left promiscuous mode [ 1026.188321][ T1322] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 1027.131548][ T1372] __nla_validate_parse: 13 callbacks suppressed [ 1027.131570][ T1372] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8689'. [ 1027.796567][ T1394] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8696'. [ 1027.844456][ T1398] netlink: 560 bytes leftover after parsing attributes in process `syz.1.8698'. [ 1027.878173][ T1401] xt_l2tp: v2 doesn't support IP mode [ 1028.006160][ T1406] IPVS: set_ctl: invalid protocol: 46 172.20.20.39:20004 [ 1028.060609][ T1407] IPVS: set_ctl: invalid protocol: 33 224.0.0.1:20004 [ 1029.267551][ T1465] syzkaller0: entered promiscuous mode [ 1029.273315][ T1465] syzkaller0: entered allmulticast mode [ 1029.286662][ T1471] syz_tun: left promiscuous mode [ 1029.314105][ T5288] ip6gretap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1029.638230][ T1493] netlink: 560 bytes leftover after parsing attributes in process `syz.3.8728'. [ 1029.928029][ T1505] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8730'. [ 1032.713974][ T1502] netlink: 'syz.3.8730': attribute type 29 has an invalid length. [ 1032.732455][ T1510] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8733'. [ 1032.973060][ T1533] netlink: 560 bytes leftover after parsing attributes in process `syz.0.8739'. [ 1033.329013][ T1556] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8746'. [ 1033.731504][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1033.745751][ T5644] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1033.760705][ T5644] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1033.784809][ T5644] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1033.798888][ T5644] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1034.791727][T24513] team0: Port device syz_tun removed [ 1035.192337][ T6603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.218152][ T6603] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.328401][ T1574] wg1 speed is unknown, defaulting to 1000 [ 1035.455158][ T6603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.493642][ T6603] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.691801][ T1628] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8760'. [ 1035.743761][ T6603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1035.763920][ T6603] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1035.864081][T19607] Bluetooth: hci4: command tx timeout [ 1035.969497][ T1623] wg1 speed is unknown, defaulting to 1000 [ 1036.082140][ T6603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1036.110575][ T6603] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.559218][ T1570] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.998672][ T6603] bridge_slave_1: left allmulticast mode [ 1037.021396][ T6603] bridge_slave_1: left promiscuous mode [ 1037.047374][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 1037.082880][ T6603] bridge_slave_0: left allmulticast mode [ 1037.095093][ T6603] bridge_slave_0: left promiscuous mode [ 1037.113110][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.832056][ T6603] gretap0 (unregistering): left promiscuous mode [ 1037.900517][ T6603] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1037.944104][T19607] Bluetooth: hci4: command tx timeout [ 1038.063197][ T6603] bond0 (unregistering): left promiscuous mode [ 1038.070106][ T6603] bond_slave_0: left promiscuous mode [ 1038.076505][ T6603] bond_slave_1: left promiscuous mode [ 1038.096079][ T6603] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.120132][ T6603] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1038.132005][ T6603] bond0 (unregistering): Released all slaves [ 1038.150108][ T6603] bond1 (unregistering): Released all slaves [ 1038.174288][ T6603] bond2 (unregistering): Released all slaves [ 1038.198083][ T6603] bond3 (unregistering): Released all slaves [ 1038.235119][ T6603] bond4 (unregistering): Released all slaves [ 1038.262618][ T6603] bond5 (unregistering): (slave bond6): Releasing backup interface [ 1038.276563][ T6603] bond5 (unregistering): Released all slaves [ 1038.298550][ T6603] bond6 (unregistering): Released all slaves [ 1038.321661][ T6603] bond7 (unregistering): (slave wireguard0): Releasing backup interface [ 1038.345438][ T6603] wireguard0: left promiscuous mode [ 1038.354477][ T6603] bond7 (unregistering): Released all slaves [ 1038.377660][ T6603] bond8 (unregistering): (slave veth11): Releasing active interface [ 1038.390573][ T6603] bond8 (unregistering): Released all slaves [ 1038.418025][ T6603] bond9 (unregistering): (slave veth13): Releasing active interface [ 1038.429124][ T6603] bond9 (unregistering): Released all slaves [ 1038.508879][ T1663] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1038.580214][ T5288] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1038.588593][T16285] syz1: Port: 1 Link DOWN [ 1038.600063][ T5725] wg1 speed is unknown, defaulting to 1000 [ 1038.640310][ T5725] syz0: Port: 1 Link DOWN [ 1038.655658][ T5725] wg1 speed is unknown, defaulting to 1000 [ 1038.664436][ T6603] tipc: Left network mode [ 1039.092248][ T1684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8772'. [ 1039.104613][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8771'. [ 1039.167985][ T1684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8772'. [ 1039.179226][ T1680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8771'. [ 1039.715626][ T1694] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8774'. [ 1039.730626][ T1574] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.746329][ T1574] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.763144][ T1703] xt_bpf: check failed: parse error [ 1039.768996][ T1574] bridge_slave_0: entered allmulticast mode [ 1039.784280][ T1574] bridge_slave_0: entered promiscuous mode [ 1039.844766][ T1574] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.880158][ T1574] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.895060][ T1574] bridge_slave_1: entered allmulticast mode [ 1039.908855][ T1574] bridge_slave_1: entered promiscuous mode [ 1040.026093][T19607] Bluetooth: hci4: command tx timeout [ 1040.077576][ T1574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.165913][ T1574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.379731][ T1574] team0: Port device team_slave_0 added [ 1040.419982][ T1574] team0: Port device team_slave_1 added [ 1040.859532][ T1743] netlink: 560 bytes leftover after parsing attributes in process `syz.3.8790'. [ 1040.930232][ T1574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.969694][ T1574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.998861][ T1574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.034877][ T6603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1041.065866][ T6603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1041.095865][ T1753] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8795'. [ 1041.121936][ T6603] veth0_to_hsr: left promiscuous mode [ 1041.136742][ T6603] veth1_macvtap: left promiscuous mode [ 1041.142737][ T6603] veth0_macvtap: left promiscuous mode [ 1041.403259][ T6603] team0 (unregistering): Port device macvlan2 removed [ 1041.541170][ T6603] team0 (unregistering): Port device team_slave_1 removed [ 1041.588096][ T6603] team0 (unregistering): Port device team_slave_0 removed [ 1041.643511][ T1108] smbdirect: ib_dev[syz1] removed [ 1041.707004][ T12] smc: removing ib device syz0 [ 1041.779324][ T12] smbdirect: ib_dev[syz0] removed [ 1041.944059][ T5288] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1041.962957][ T1574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.991388][ T1574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1042.066271][ T1574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.104004][T19607] Bluetooth: hci4: command tx timeout [ 1042.110747][ T1764] netdevsim netdevsim1: Direct firmware load for .. @ failed with error -2 [ 1042.129628][ T1764] netdevsim netdevsim1: Falling back to sysfs fallback for: .. @ [ 1042.540611][ T1574] hsr_slave_0: entered promiscuous mode [ 1042.554827][ T1574] hsr_slave_1: entered promiscuous mode [ 1044.082194][ T1749] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.371421][ T1772] netlink: 312 bytes leftover after parsing attributes in process `syz.1.8800'. [ 1044.479880][ T1574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1044.548949][ T1574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1044.564536][ T1574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1044.605232][ T1574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1044.689016][ T1574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1044.710572][ T1790] xt_bpf: check failed: parse error [ 1044.749980][ T1574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1044.758653][ T1574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1044.769859][ T1574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1045.157935][ T1574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.206015][ T1574] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.206390][ T1813] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8811'. [ 1045.234621][ T3362] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.241872][ T3362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.265793][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.273081][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.648318][ T1830] netlink: 312 bytes leftover after parsing attributes in process `syz.5.8814'. [ 1045.861420][ T1836] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.8816'. [ 1046.068712][ T1847] netlink: 'syz.3.8819': attribute type 1 has an invalid length. [ 1046.228001][ T1847] veth5: entered allmulticast mode [ 1046.248628][ T1847] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 1046.363180][ T1849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8819'. [ 1046.407265][ T5814] IPVS: starting estimator thread 0... [ 1046.516246][ T1868] IPVS: using max 26 ests per chain, 62400 per kthread [ 1046.778771][ T1881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1046.809924][ T1881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8825'. [ 1046.851428][ T1881] netlink: 'syz.3.8825': attribute type 19 has an invalid length. [ 1046.889085][ T1881] netlink: 'syz.3.8825': attribute type 20 has an invalid length. [ 1047.129846][ T1574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1047.192625][ T1896] netlink: 'syz.5.8826': attribute type 4 has an invalid length. [ 1047.416005][ T1574] veth0_vlan: entered promiscuous mode [ 1047.469705][ T1574] veth1_vlan: entered promiscuous mode [ 1047.577656][ T1574] veth0_macvtap: entered promiscuous mode [ 1047.610606][ T1574] veth1_macvtap: entered promiscuous mode [ 1047.646123][ T1852] netlink: zone id is out of range [ 1047.670484][ T1852] netlink: zone id is out of range [ 1047.688742][ T1852] netlink: zone id is out of range [ 1047.698342][ T1574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.712250][ T1852] netlink: zone id is out of range [ 1047.738778][ T1852] netlink: zone id is out of range [ 1047.760909][ T1852] netlink: zone id is out of range [ 1047.768941][ T1574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.789168][ T1852] netlink: zone id is out of range [ 1047.815323][ T1852] netlink: zone id is out of range [ 1047.834452][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.857077][ T1852] netlink: zone id is out of range [ 1047.866998][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.876090][ T1908] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8829'. [ 1047.897083][ T1852] netlink: zone id is out of range [ 1047.934993][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.956732][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.991421][ T1922] Cannot find del_set index 0 as target [ 1048.817854][ T30] audit: type=1800 audit(1778143739.363:61): pid=1918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.8830" name="memory.events" dev="tmpfs" ino=2602 res=0 errno=0 [ 1048.849636][ T1943] tunl0: Caught tx_queue_len zero misconfig [ 1048.858236][ T1939] netlink: 312 bytes leftover after parsing attributes in process `syz.5.8835'. [ 1048.909104][ T1944] FAULT_INJECTION: forcing a failure. [ 1048.909104][ T1944] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.932117][ T1947] macvlan0: entered promiscuous mode [ 1048.941561][ T1944] CPU: 0 UID: 0 PID: 1944 Comm: syz.5.8835 Not tainted syzkaller #0 PREEMPT(full) [ 1048.941592][ T1944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1048.941606][ T1944] Call Trace: [ 1048.941615][ T1944] [ 1048.941624][ T1944] dump_stack_lvl+0xe8/0x150 [ 1048.941656][ T1944] should_fail_ex+0x412/0x560 [ 1048.941691][ T1944] should_failslab+0xa8/0x100 [ 1048.941730][ T1944] __kmalloc_noprof+0xe8/0x760 [ 1048.941762][ T1944] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1048.941801][ T1944] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1048.941844][ T1944] ? tomoyo_domain+0xd7/0x130 [ 1048.941879][ T1944] ? tomoyo_path_number_perm+0x219/0x630 [ 1048.941901][ T1944] tomoyo_path_number_perm+0x246/0x630 [ 1048.941927][ T1944] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1048.941950][ T1944] ? __lock_acquire+0x6b5/0x2cf0 [ 1048.941989][ T1944] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1048.942042][ T1944] ? __fget_files+0x2a/0x420 [ 1048.942073][ T1944] ? __fget_files+0x2a/0x420 [ 1048.942097][ T1944] ? __fget_files+0x3a0/0x420 [ 1048.942120][ T1944] ? __fget_files+0x2a/0x420 [ 1048.942149][ T1944] security_file_ioctl+0xc3/0x2a0 [ 1048.942175][ T1944] __se_sys_ioctl+0x47/0x170 [ 1048.942207][ T1944] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.942231][ T1944] do_syscall_64+0x15f/0xf80 [ 1048.942258][ T1944] ? trace_irq_disable+0x3b/0x140 [ 1048.942290][ T1944] ? clear_bhb_loop+0x40/0x90 [ 1048.942318][ T1944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.942340][ T1944] RIP: 0033:0x7fdfc3f9cdd9 [ 1048.942360][ T1944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.942378][ T1944] RSP: 002b:00007fdfc4f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1048.942401][ T1944] RAX: ffffffffffffffda RBX: 00007fdfc4216090 RCX: 00007fdfc3f9cdd9 [ 1048.942417][ T1944] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000005 [ 1048.942430][ T1944] RBP: 00007fdfc4f10090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.942443][ T1944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.942473][ T1944] R13: 00007fdfc4216128 R14: 00007fdfc4216090 R15: 00007ffc72f34b48 [ 1048.942510][ T1944] [ 1048.942560][ T1944] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1049.034391][ T1947] dummy0: entered promiscuous mode [ 1049.193834][ T1947] debugfs: 'hsr1' already exists in 'hsr' [ 1049.199801][ T1947] Cannot create hsr debugfs directory [ 1049.212646][ T1947] hsr1: entered promiscuous mode [ 1049.226813][ T1947] hsr1: entered allmulticast mode [ 1049.236348][ T1947] dummy0: entered allmulticast mode [ 1049.320227][ T6474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1049.352659][ T6474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.363957][ C0] [ 1049.366352][ C0] ============================================ [ 1049.372548][ C0] WARNING: possible recursive locking detected [ 1049.378829][ C0] syzkaller #0 Not tainted [ 1049.383283][ C0] -------------------------------------------- [ 1049.389460][ C0] syz.5.8835/1944 is trying to acquire lock: [ 1049.395504][ C0] ffff88802b6dcff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 1049.404704][ C0] [ 1049.404704][ C0] but task is already holding lock: [ 1049.412109][ C0] ffff88807b7ccff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1049.422441][ C0] [ 1049.422441][ C0] other info that might help us debug this: [ 1049.430587][ C0] Possible unsafe locking scenario: [ 1049.430587][ C0] [ 1049.438075][ C0] CPU0 [ 1049.441381][ C0] ---- [ 1049.444674][ C0] lock(&hsr->seqnr_lock); [ 1049.449201][ C0] lock(&hsr->seqnr_lock); [ 1049.453724][ C0] [ 1049.453724][ C0] *** DEADLOCK *** [ 1049.453724][ C0] [ 1049.461988][ C0] May be due to missing lock nesting notation [ 1049.461988][ C0] [ 1049.470500][ C0] 9 locks held by syz.5.8835/1944: [ 1049.475625][ C0] #0: ffff88807a4358f8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x194/0x9e0 [ 1049.484907][ C0] #1: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1049.494422][ C0] #2: ffffc90000007cc0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 1049.504458][ C0] #3: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 1049.513626][ C0] #4: ffff88807b7ccff0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 1049.524366][ C0] #5: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 1049.533881][ C0] #6: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1049.543834][ C0] #7: ffffffff8e95cdc0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 1049.553873][ C0] #8: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 1049.563037][ C0] [ 1049.563037][ C0] stack backtrace: [ 1049.569311][ C0] CPU: 0 UID: 0 PID: 1944 Comm: syz.5.8835 Not tainted syzkaller #0 PREEMPT(full) [ 1049.569331][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1049.569343][ C0] Call Trace: [ 1049.569351][ C0] [ 1049.569360][ C0] dump_stack_lvl+0xe8/0x150 [ 1049.569381][ C0] print_deadlock_bug+0x279/0x290 [ 1049.569405][ C0] __lock_acquire+0x253f/0x2cf0 [ 1049.569427][ C0] ? __siphash_unaligned+0x25f/0x3b0 [ 1049.569452][ C0] ? skb_network_protocol+0x234/0x400 [ 1049.569499][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1049.569514][ C0] lock_acquire+0x106/0x350 [ 1049.569531][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1049.569550][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1049.569575][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1049.569590][ C0] _raw_spin_lock_bh+0x36/0x50 [ 1049.569609][ C0] ? hsr_dev_xmit+0x237/0x360 [ 1049.569625][ C0] hsr_dev_xmit+0x237/0x360 [ 1049.569640][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 1049.569656][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1049.569688][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1049.569716][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1049.569742][ C0] ? unwind_next_frame+0xa6/0x2550 [ 1049.569764][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1049.569782][ C0] ? lock_acquire+0x106/0x350 [ 1049.569800][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1049.569826][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1049.569844][ C0] ? skb_network_protocol+0x234/0x400 [ 1049.569876][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1049.569902][ C0] macvlan_start_xmit+0x3ba/0x600 [ 1049.569925][ C0] dev_hard_start_xmit+0x2cd/0x830 [ 1049.569956][ C0] __dev_queue_xmit+0x14d9/0x3950 [ 1049.569980][ C0] ? handle_softirqs+0x22a/0x840 [ 1049.569998][ C0] ? __schedule+0x17bc/0x5680 [ 1049.570019][ C0] ? __dev_queue_xmit+0x2b6/0x3950 [ 1049.570043][ C0] ? __mmput+0x118/0x430 [ 1049.570058][ C0] ? do_group_exit+0x21b/0x2d0 [ 1049.570079][ C0] ? arch_do_signal_or_restart+0xbc/0x830 [ 1049.570105][ C0] ? exit_to_user_mode_loop+0x86/0x480 [ 1049.570126][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1049.570154][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 1049.570183][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 1049.570212][ C0] ? skb_clone+0x246/0x3a0 [ 1049.570237][ C0] hsr_forward_skb+0x167e/0x2a80 [ 1049.570261][ C0] ? hsr_forward_skb+0xbb/0x2a80 [ 1049.570281][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 1049.570299][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1049.570325][ C0] ? __asan_memset+0x22/0x50 [ 1049.570345][ C0] ? __skb_pad+0x405/0x610 [ 1049.570372][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 1049.570395][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 1049.570414][ C0] hsr_announce+0x1db/0x370 [ 1049.570430][ C0] ? hsr_announce+0x89/0x370 [ 1049.570446][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1049.570460][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1049.570494][ C0] call_timer_fn+0x192/0x5e0 [ 1049.570513][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1049.570528][ C0] ? call_timer_fn+0xd4/0x5e0 [ 1049.570546][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 1049.570569][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1049.570588][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 1049.570605][ C0] __run_timer_base+0x652/0x8b0 [ 1049.570621][ C0] ? ktime_get+0x45/0x220 [ 1049.570651][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1049.570674][ C0] run_timer_softirq+0xb7/0x170 [ 1049.570692][ C0] handle_softirqs+0x22a/0x840 [ 1049.570710][ C0] ? __irq_exit_rcu+0xca/0x220 [ 1049.570730][ C0] __irq_exit_rcu+0xca/0x220 [ 1049.570748][ C0] irq_exit_rcu+0x9/0x30 [ 1049.570763][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1049.570786][ C0] [ 1049.570792][ C0] [ 1049.570798][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1049.570817][ C0] RIP: 0010:finish_task_switch+0x427/0xbe0 [ 1049.570835][ C0] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 c6 da 16 0a e8 c1 f3 38 00 fb 49 8d bd a8 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80 [ 1049.570850][ C0] RSP: 0018:ffffc900053df090 EFLAGS: 00000206 [ 1049.570866][ C0] RAX: 0000000000000c99 RBX: 1ffff110170c7784 RCX: 0000000080000001 [ 1049.570878][ C0] RDX: 0000000000000007 RSI: ffffffff8dfa8825 RDI: ffff888032f416a8 [ 1049.570890][ C0] RBP: ffffc900053df0f0 R08: ffffffff9030cef7 R09: 1ffffffff20619de [ 1049.570903][ C0] R10: dffffc0000000000 R11: fffffbfff20619df R12: ffff8880b863ae88 [ 1049.570917][ C0] R13: ffff888032f40000 R14: ffff888034970000 R15: dffffc0000000000 [ 1049.570941][ C0] __schedule+0x17bc/0x5680 [ 1049.570965][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1049.570994][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1049.571018][ C0] ? __pfx___schedule+0x10/0x10 [ 1049.571042][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 1049.571067][ C0] preempt_schedule_common+0x82/0xd0 [ 1049.571088][ C0] preempt_schedule_thunk+0x16/0x30 [ 1049.571114][ C0] _raw_spin_unlock+0x3f/0x50 [ 1049.571133][ C0] __zap_vma_range+0x3d17/0x4b40 [ 1049.571179][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 1049.571209][ C0] ? mas_find+0xb0e/0xd30 [ 1049.571230][ C0] ? unmap_vmas+0x1bd/0x530 [ 1049.571257][ C0] unmap_vmas+0x379/0x530 [ 1049.571285][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1049.571320][ C0] exit_mmap+0x280/0x9e0 [ 1049.571343][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1049.571368][ C0] ? uprobe_clear_state+0x53/0x3f0 [ 1049.571397][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1049.571424][ C0] ? uprobe_clear_state+0x2bc/0x3f0 [ 1049.571449][ C0] __mmput+0x118/0x430 [ 1049.571465][ C0] exit_mm+0x18e/0x250 [ 1049.571493][ C0] do_exit+0x6a2/0x22c0 [ 1049.571518][ C0] ? __pfx_do_exit+0x10/0x10 [ 1049.571540][ C0] ? cgroup1_freezing+0x20/0x350 [ 1049.571562][ C0] ? cgroup1_freezing+0x20/0x350 [ 1049.571586][ C0] do_group_exit+0x21b/0x2d0 [ 1049.571608][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1049.571629][ C0] get_signal+0x1284/0x1330 [ 1049.571654][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 1049.571682][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1049.571712][ C0] ? sock_ioctl+0x775/0x7f0 [ 1049.571734][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.571753][ C0] exit_to_user_mode_loop+0x86/0x480 [ 1049.571769][ C0] ? rcu_is_watching+0x15/0xb0 [ 1049.571790][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.571807][ C0] do_syscall_64+0x33e/0xf80 [ 1049.571836][ C0] ? trace_irq_disable+0x3b/0x140 [ 1049.571862][ C0] ? clear_bhb_loop+0x40/0x90 [ 1049.571881][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.571898][ C0] RIP: 0033:0x7fdfc3f9cdd9 [ 1049.571911][ C0] Code: Unable to access opcode bytes at 0x7fdfc3f9cdaf. [ 1049.571920][ C0] RSP: 002b:00007fdfc4f10028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1049.571936][ C0] RAX: ffffffffffffffed RBX: 00007fdfc4216090 RCX: 00007fdfc3f9cdd9 [ 1049.571949][ C0] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000005 [ 1049.571959][ C0] RBP: 00007fdfc4f10090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.571970][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.571980][ C0] R13: 00007fdfc4216128 R14: 00007fdfc4216090 R15: 00007ffc72f34b48 [ 1049.572000][ C0] [ 1050.359454][ T6474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1050.383868][ T6474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50