last executing test programs: 1.51595862s ago: executing program 0 (id=3765): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) socket(0x2, 0x80000, 0xfffffbf9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000002c0)={r2, &(0x7f0000000180), 0x0}, 0x20) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01020000010000ecffff0600260005000400ac35000114000600626f6e643000000000000000000000001400070000000000000d00000000ffffac1e0001050005"], 0x4c}, 0x8, 0x3000000000002}, 0x0) 1.385709935s ago: executing program 2 (id=3767): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="00000900bbbbbbbbbbbbbbbbbbbbbbbbaaaaaaaaaaaa0180c2000002aaaaaaaaaaaa090000000000000000000000ffffffffffff0180c2000000"]) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x5, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket(0x15, 0x5, 0x0) getsockopt(r10, 0x200000000114, 0x270c, 0x0, &(0x7f0000000000)) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea4756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x3, r9, 0x1, 0x9, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r11, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r9, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000055002f03000000000000000007000000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) 1.313001207s ago: executing program 0 (id=3769): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 1.202630439s ago: executing program 0 (id=3772): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000300)={{r0, &(0x7f0000000080)='\x00\x00\x00\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0x10001, 0xa]}, {0xb, 0x7, 0xff, 0x7ff}}, 0x2, &(0x7f0000000100), &(0x7f0000000180)=0x3fffc000}, {[0xfffffff9, 0x308, 0xffff2e32, 0x101]}, 0x9, 0xb0, &(0x7f0000000240)=""/176}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1d, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0x2}, {}, {0x85, 0x0, 0x0, 0x31}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x6c}}}, &(0x7f0000000200)='GPL\x00'}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) (async, rerun: 32) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24008851}, 0x40040) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="300000001800dd8d0000000000000000020000000000000900000000060015000a0000000c00168008000100bc"], 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c000000640001090000000000000000021800000000fd010000000008000100ac141400080005000a"], 0x4c}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r4, &(0x7f0000001e00)=[{{&(0x7f0000000200)=@un=@abs={0x0, 0x0, 0x4e20}, 0x80, 0x0}}, {{&(0x7f0000000a00)=@in6={0xa, 0x4e22, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x80, 0x0}}], 0x2, 0x4000040) (async) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000040)=0x7, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000002e00010026bdf000fcdbdf250400000004000d8008000c"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) ioctl$BTRFS_IOC_DEV_REPLACE(r5, 0xca289435, &(0x7f0000000580)={0x1, 0x80000000, @start={0x0, 0x0, "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", "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"}, [0x10001, 0x1ff, 0x3, 0x3, 0x3, 0x1, 0x1, 0x8000, 0x9, 0xcb, 0x100000001, 0x9, 0x2, 0x5, 0x9, 0x8, 0x40, 0x49, 0x2, 0x8001, 0x9, 0xfffffffffffffffa, 0x9, 0x6c24, 0x6, 0x7, 0x1, 0xfffffffffffffffa, 0x6, 0x8, 0x1, 0x5ec, 0x0, 0x6, 0xe938f0c, 0x4, 0x6272, 0x7ff, 0x2, 0x2, 0x8, 0x4, 0x2ac, 0x8, 0x8000000000000000, 0x9, 0x9, 0x5, 0x0, 0x0, 0x0, 0xf0, 0xfffffffffffffffe, 0x6, 0x2f, 0x7, 0x758e, 0x6, 0x3ff, 0x80, 0x2, 0x82, 0x1, 0x100000000]}) 1.066743752s ago: executing program 4 (id=3774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0xffffffffffff86dd, 0x0, 0x800}, 0x84) 1.010724864s ago: executing program 0 (id=3776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x24048058) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x15, 0x9}, {0xf, 0xf}, {0xffe0, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff0100000000000000000000000000010600040001"], 0x58}}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4085) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000400)={'mangle\x00', 0xc4, "f3f41eda8b3e036ad0e3ca00cde7fc79934ff57d3666863c70ed2bc55e672bcc9f8b6699b7ac7ca97e46cb536b545458374dad9107e808073545c79af3f1de42553288b7abfc56e390ee5b8a6b37553d823c7c8cf59dcd3a9d257bbcdf38fbf21097f009f8a88a9247aea3253ed3a98ee2d7c9979f33feb5a24766f319d3fcc730a13b4c519ada7d2cb2cb5773059d6e0631613435e5130f683df5e79055d4378209c84cff97a699cc40f717d829d8f0446c432fefb3fc0b50bbc1a68da6152475a484d4"}, &(0x7f0000000500)=0xe8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="54000000020601030000000000000000000000000900020073797a30000000000500010006000000050005800000000005000400000000000c00078008000600000000010d000300686173683a6d616300"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3200000000a0000000060a010400000000000000000100000008000b400000000078000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000400001800c00010062697477697365003000028008000340000000040800014000000014080002400000001208000580040001000c000480080001006eee7e000900010073797a30"], 0x114}}, 0x800) 932.907434ms ago: executing program 4 (id=3778): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r3, r1, 0x25, 0x8, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8, 0x0, 0x1}}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6006}]}]}], {0x14}}, 0xa0}}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x7, r1, 0x5}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000003c0)={0x0, @multicast1, @empty}, &(0x7f0000000400)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f00000004c0)={0x260, 0x0, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_MODES_OURS={0x18c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'syz2\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffd}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe27}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x5e, 0x4, "dd73ba8ee6a9c76e9aed00899efe64a4f5faf52223e8f9267ebe7a2e6a422127e09cae64071839a5888ccdfa50eae66e1abe969779edad55d5ddb2c310447de8005db3c9753a13fe6c426c09cfa7c7ae29f91f4445b3a92e115d"}, @ETHTOOL_A_BITSET_VALUE={0x97, 0x4, "0d42700f96fe4628318d50bd3d7d799a5826cd1b8ea975a8faf46909203e51fd4651376eec77e6358d6b840c18fe54b4e33eb5e3627a76176d99956a1a6eab1f79857482d5c3fa9c93993ce30cab6ae3247eed4297eac70cdd003aa91088bc2b454fbbbea31b87bc29922ba54b9ad41afc695863932b406c634c37d161da767a3733d2c9db9aab5669132d7b085edb95fdaaa4"}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x260}, 0x1, 0x0, 0x0, 0x4040010}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000071042b000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 922.544759ms ago: executing program 2 (id=3779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)={0x24, 0x0, 0xccd495925cefb39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x2000400c) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl1\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8, 0x80, 0x10001, 0x2, {{0x23, 0x4, 0x2, 0x8, 0x8c, 0x68, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xf}, @multicast1, {[@cipso={0x86, 0x78, 0x3, [{0x5, 0x12, "7e29ad62f5dc57975b3b2734c6f4b03f"}, {0x2, 0xb, "db573fe91ede3efff9"}, {0x6, 0xd, "96aa03cb0648d78ad62fa2"}, {0x1, 0xa, "9e97392146caa720"}, {0x5, 0x2}, {0x6, 0x11, "f3d7a9e7de513d37f909d6248738f4"}, {0x85814206e517fa64, 0x4, "bcd3"}, {0x2, 0xe, "7f62df9507c92c2878071488"}, {0x6, 0xd, "b2004a59b892c6e266230d"}, {0x7, 0xc, "4801c5337db513101876"}]}]}}}}}) sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x110, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2c}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) 893.181229ms ago: executing program 3 (id=3780): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)="b7028d7a89a1a9e34b7acba3d9bff1ab77e1", 0x12}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x5000009, 0x10012, r0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendto$inet6(r2, &(0x7f0000000100)="b8", 0xfef4, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6f95}, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={0x0, 0xd}, &(0x7f00000001c0)=0x8) sendmsg$inet_sctp(r3, &(0x7f00000002c0)={&(0x7f0000000080)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)="daf7b8f8558e59307f66", 0xa}, {&(0x7f00000004c0)="606d03ae5b1586ca9faa8177ac022b90b353c6e5935f20e0ad49fab539465b5b7b4139bca6d3f5a8beacfff0eb59b193ff26d75886ccfe8d999bf7cc8710be75cb3d74df8e92cc002572f893103b68e7b5f552d5f8e59eec2e37b66f8cde3a9e79f11c8e0a098b4c6f49feab1d579c9cbbba58b05782c5a4027cc1bd1921994576b5081f5acfefc6481ef5977f6e0ecb9ed7f0d29be154e4a4fd9aebe29fe2af9336300dd9f99d98ee6791beb4d1939a182bb1bdf6144737e57feddc7b40aebcb9813c5a749bd2bff3fe303e0b06ba8c11787d3d3d5fec57f558c531a52e67277530283c22ebcb6c3ed8f6743f8511ca5bdc63eab752d1c0f97bc0a6180d805148e90bf229832e26ec0997451f5f1a72f04ccdd3ae1adc4ade04b1bc304eb44c8cbc71d0dcac5e2886b3c5df5b1fa39d10980799f87d92724718816a8ec21df5979a0127d731f0ba4355476c0b99e785507b60a4e7453e141f63ef5413687b010faf73fc80fa712d628a846ce825a253479e18d31e2c4d507546bfb0ed34fc1c9ea65440f106b4e883ea57b0de58a4939408dd1d3cbf587f8867bb44239b8f30b67193b464a21d1bab313bbb1701aee33f7a819786bbeda56cbd95c604484a3c8fd698456498ffda81b4f1d1ed02c49db5530514046695c684321516fc4655a92f6216133e3d342e928e11d9cefd9f4eabfdc7602d951f94db2d2d99f1911a11bde6e68c5504ac9714be95b1a13fbfa0513ce142aec901c4cc591e9847215e6c3582ceecee8789347bbd3aa43acddb2a8cf9879fe39d02a65fa10d2181e25f6bebce086bfe727900b7afd61040065e301ca274f9dfcf867f1374d4ad452f3848f2532abbba6d0fddbea0db9b573ff92e55d695075ca0db1f765d3fbdb243811d94805abfa614d40cfc7536ab0a9fc8fb4375ffda0def944e847bb7dec19dce70d008e76baf09bf7df180facc7f8b82452509468c9a028e4c5262a1c79a52a027d55c088ca112075cef6b68b31da1e406f6e787efc8293d015643710af387483a53be7360e3f42cdee47ac994850b12f3802035b2f59321d82c2d79f478b1ad3284dc0ba05aca2e0dfc6debe16b852b333d6fa3dda19c3c9116029a11f24ffb79218d9756dd8188f4c2fd972a9e02ae70e5b3bf0c4cdadf7e8d41efe0d3a2f5515bb436aa8aae0a417f55164ca692adba474eb9c0becf32737c7856ee1ec058a61928949e7d0df67389abbaf40d60a12995c027d8d696b8eee2705d0cea0c8c85ebc6a671b3bac962d33c3c9bdc56e192b69c19533c38861b247ee0c56e27945f96449cd60cfdaad7a3cbe8c278a8221eeb31adcfb0ee1ddee1e0d40e34fa8d92f59906c6870b2ff1d6d7ce89ed3ca5e7c6ed2f26b8ee627da3ae1b55e819bd82ac4a2878f67d12c1ecaef35063971bdd4330dbb01f3b74b445a0beec30153bc96514d59a5412aecd0a67e991f52795edad0673925b47709acb9133f029b5c1bb0ad5b50776a076bd4607d48713b6ecb0cd26a19cbc73470d26d7149470f4abddd3fbc6fe498009710d9e1abdde72f0a04f23156340aa43e56eacef08dec1a36aa12edb0ec56a674631112af72ede60a9e3fb6a43687ed2c2cca84301156ccdd7ac63ac15605fcb33ab1d1497d9c636187e73658a0fb6612804e05dbd7d3cc1cc60be0818c5b6393dcbfb8e20cbcc58b0020b3d7ba6927dbd4c78792ef2b1f1157216ec673dc0ccdc7fbc7c2c4d2d29e3698ba06267632ba64f159481cd6e59396821acd63a8dfb5ff3d95925f5b01500f7ac2535688bcb963da38cb4ed3107ece52a9c8bb9deb966353f6c3d78b25a61d2aca06f9ce35f012fac2e83e3954e6a49b59215a563a45f06344450910ebcb7a391c57d31b4a2cd00b812c70f5cf1406e41878491e9522c87f06b99a082e82cfe09adbc916b59359f8792926e8ba5757d5bc3702e6eb73f535a8d5a8d0af5e1da440c7daa01fc7e49cb221c46295782367b5148c4f07294bf64d2e204c3ddb28a6b6ff9f03fde58759afee739ce1792cdb51df03919f7e07e1a2d04502bf7091b197fc6e8f829b5b622eaace0247271d896a9ba899c050668066c878e94da86d599eec2fdf5aeae4ddcc86738dab314a90ffc531d31c5fee28bb071d7ae000fd68175e80fc0a920ddd39fc74d890fab459482313312636f622566045d0f4ff31d92f94c79d7bd9a470a4ea138054550fad973287bccd435d8fe351bc0887d155778db4b0408e1470d22892c694e916902cb0abcfa43768e7bf408765e2a3934704af1a6c0059e97cd45dc9baedc4b4d40d3a302ce3f38639d891887ba0478527cf1ed1fb89e0883d1864ab7104ec5ffb68f4c821d21bf42851d5336d333da24a9d8170ebc0cfe996cd3f943d7afa1b0ad516ab979f9b1ebf68f58dc5a2a6f67b5e2185d9a7cfe668d6d220bc6f4959837f72744314f3f5ac6e019188a41cd566d43da11395b5fd2afac0882f35b6b86ea82af4f22c8295acc6274a22d6ff231870f9a0c097e59c9de40492eae997b60cede9a3b9f49fe741b6cf36b93a53a12b6830f28c4b0d0afe8dc5358b54e25c10909f9360d45b43c57c3369ccf61e8aedb9a3bda8ba673234b6d7f038a19c2e536044f16d8ff67d42167477fdc7e4f891527007347c6dab43208a8f5a766161f5f0cd5aa85796bd3d73a83544e083d1efae1423fe52e41670fcb0dfc1d096ec1070f0692825dfe0fb716d7dbc6cc0668917c0d7e37bfefc0fb98e46292c4744965305ca8f70e388589d86d9ac5bfdc9fba5b0efb24d22f51728922c768ff9fedc2795346cb52bc52c01ac7af16bbd570dd4374d2452dcd8826e9fd6041e2c304d1be8b9e02abf01f37818f0c45d00df6f25a7b9f8e00209ef5ca4aad714502bfe7a4ffd325015fd8e40b449959a5a2977a4da48233c8feb5970518d48f061712a95f3e99c5cab739b55563e2ec90d5fb5bf7ccf72cbcf401191f2b6f76827592bed7ee580c51a556affcdf57b28a299867aced5fd7811f45a7c12e9508ec2a951d97593386aa353cda980c0505f75933b159594e824213b2dd25dbbc5a945837f76d09be0cba63196645e7cd859a1ec63ae35a0a9a64a40c314143412a573508349c3807c1ad4e6bb4030f438dcbf9e49357d61dad95a606cb66741b76110d1d735d5edd3b5d36ccda8b11dccbe1521bdeb0980ce5d4d58ed80ad2d7fedcba8b002ac692f4047053a57a1fd1941b076ddce8cc48aa00445df331c466bce781bb485c14f5993feb172e4da6a4d7e1acb8a2ff029a502467ec4506170b8def3dda8ea191d5d17223c596b01da3155d5d8456837177f4249d66e5bed7563d5817c07e0a46eec05616c0638dc258df68b3fda258e4f8d7661a8396f82a8df02debf77701e78ca8d6f63bb19b2cc23b42ffe0182dbf1de4575a1d182df1c2542ab9623dab906694367f6b7614c2aa1d434233d1334895647fdeae87e54871e6477f55ca8afa33090238c67379c020bf79e04a30350f7fcd9b6281735cf8b6a9a4ea58f168015b9619687e404ebbc324b33008feb69d440b7cc54598e7882ee539a3592ae4421a69e4e38da4b0e699a404444c070da8fd51e4c46bec8addb29608646d9d3991c456e385ce3560cb8a2698863b17565839c8c8905ea050140ea477ce6f31f546cdec0d7627070db62dc662601a1d0274d7039efa49ae93115f86d9612e43e2217423e543d4e875ca1d264b4e091bfaaad5eee1f50b8aad3b339ee1279ba1a22b09f9363eff8fdb92843293c465451c831a54a78b8d41ca6fbbc95255a84057c684e79b9010737b10de522a26155a09a3bc238837998ba184382c93d5010bbf8c54e609d58daa663dfafc10e0e601b8ead1b52947e087a20ec80ce90ffde28969962a03d83c1a8062feae02d79cb24bb7839eaacc46a41b0b15577dea28750874a9fe6e962b8a7fb40dc904ffdd3d85efdd7f0df015cee7f110f0da0d79e840146aaba04f796efbcd6a7d8fedf8c474563f59fcea5034a97b419c34b5f99876339496fe946beab22ddff0f692ac1fc9022ca2c29b4f32dae5b40981ee6044e39468dc73f1a0c4ce64a67b8d473d17102acc7468423606acdc8704a80796662fef4415daf92358305113154a99ca9aa33c7c2d60238305a7e61f746f6d5206d7f2548d786c213e5e6e851826d7ab2bb2cebaa9840276ce4ad14d3669eba420a1f863133a489a274dfa63a0e0907859f0b763ba018d6c86d5f32d28e70857e7e84492a7ab64f97cb465490b0cca272ba1a74ded8421f0690b42b7296865154842b24bba1d16425b66c629589ab1bb5bbe9dd829dc1d1d11d3f19b544959ca6837b8f9e0b7d4648e8e07b08ad1243daef7bfe2060d21c2d567b2770e68e8df60c6d0ed58c27a2a9fef6da0f4cc3cb4b035ba3e105b432d5272e01219934fbd9162e46b10854f3fff187389b84ecdf66dede1e64ca1dfdd2aa180faaee0fae477a9d480b0fa367797d13702208ae31fecbf68b70ca6389a746d3ff68ae3b9cabfe0712989a4882a91bbd4ad82d48a8a557baef5f387c21bb550bef45f7a551a8e4c26f1a0ec59eaeb9967f8998573069eca76e6450845d24762819845c87b321a85f9b19af9001c48185a25c1ec4c4d746a0399393239a5c3ec6f2e9c60b40b7ef1268ee97d94946c79ea95e14f7dc01febffd5d3f1b7a1e4df9ef3bc2e9bbd7be81283e2ff6ac7844eceeeac352f5b8252086e2227985c079c57149a99cf06c7178eeae5de493c423865607ae6049a2a174a6e9824091f46aa05c41ddff5b1bc24dfb8aca787cead077faa1619718d42803f6379019a1d27f0296363c6c8b53682578d879b1a4dd9f80bfe8a9cd8bf59cde82e7d9a4b6a211313d337d5847c951f53feb5a111234ca14c30ec1d90d994c10c13eb24f3bb047670de2f7135cf6ee9e38b69e42886e91af63a81a6b76c2bb8199a5ae2235f97c8206ba0a11bda358e0e8cc03e2b9e03997596e3df9216d657012712bd7c05c32f38ce952e3f532466bf9011a654780431728855740cdfbd4daccf13ecf463de3ec720feccf49d61174f120f1b8bdeeede423ed34da7f5ad334bcd856f6bf19d777cf6d5b48d1744c7e5b01a872115106ce6622065c1faa86e657b6e07cfb34785ef8fc9dffb4ddddc62048cae6764850cd35d5fce9a516f5afc0895c9c498a29ea3d4f370e3d9c4fb7a1f1b4d6529ac2ea1b334880376adf6645d9ba95ef0b58b6f1a66737b398529bb41f1f8c5eb5a8eb307a0738a34b14f5e645af9cf64952db466c33cda213b782d1d993a63f2d47700292dfd67a2bc50d0302c48c253276a15a51a7c8b2e150038ca95905aba31ceca41f684c1089a9d451b32f9d89f0c4390007a9daa52f748808acb9ae70ec198dcbaa320b995ced35cb218d4c109c8c326d103aa8f9a2ce33f4cbc6dd6e0fc463661a572d39368d8fe941a55eed340707787064f80c17aa6e4e6c6858cb409f79d3de32202018247601ee3532de501809a83c3d47040ebcffd4ef9039b3b2d321ad1de46a01a39dcb236f5434f4b4323ff908cfa8b163982dedf07009148e6708d4f0923cb662ccd699c47b4a96cc503423c4d038fca8d3ce04a3ce4e5a1281bece9006b0da551cf985366fa170b965f53d0e69625475991080a0be1c87c6c15d7cb7f34c91da27bdca61e34578ae2fddb63eff5b39e2514dd57cc46969b4b33689f41f33ce4fcfe2eb665e0fb7ccd44a201177b005628ed9cfbbd441c244059737c1d0a763e13045b6baebe56ec8432770c2bd8f027", 0x1000}], 0x2, &(0x7f0000000200)=[@sndinfo={0x20, 0x84, 0x2, {0x9, 0x200, 0x7, 0x10, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @private2}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x8206, 0x3ff, 0x80000000}}, @dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x90, 0x4004}, 0x2000000) 813.204188ms ago: executing program 0 (id=3781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ec0000000102030000000000000000001d000005d00001800c000280050001002f0000002c00018014000300fc02000000000000000000000000000014000400ff0100000000000000000000000000012c00018014000300ff01000000000000000000000000000114000400fc020000000000000000000000000001060003400000000006000340000300001400018008000100ac1e010108000200ac1e01010c00028005000100010000002c000180140003002001000000000000000000000000000014000400fe8800000000000000000000100000010c00028005000100210000000600074000000000"], 0xec}, 0x1, 0x0, 0x0, 0x24040080}, 0x4040000) 812.952274ms ago: executing program 1 (id=3782): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 786.716406ms ago: executing program 4 (id=3783): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x90) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a20000000000a030000000000000000000a00ecff0800010073797a300000000074000000160a010100000000000000000a00000008000740000000014000038008000140000000002c000380140001006e657464657673696d300000000000001400010076657468305f766c616e00000000000008000240000000070900010073797a3000000000090002"], 0xbc}}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_IKEY={0x8, 0x4, 0x40000}]}}}]}, 0x48}}, 0x88890) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[], 0x18}}, 0x0) getsockopt(r2, 0x200000000114, 0x271e, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f00000195c0)={0x6, 'macsec0\x00', {0x1}, 0x9}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000100)={@remote, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2000000, 0x0, 0x7d, 0x200, 0x0, 0x930311, r9}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x803, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x86dd}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x240440d4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', 0x0, 0x1, 0x1, 0x6, 0x9, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x68, 0x0, 0x5, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @end]}}}}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)={@private, @empty, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x81, 0x7f, 0x10, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x700, 0x10, 0x43, 0xfffffff7}}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000540)={'ip6_vti0\x00', &(0x7f00000004c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x2, 0xb, 0x100, 0x1, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast1, 0x1, 0x7, 0x0, 0x93e1}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r2, &(0x7f0000000700)={&(0x7f0000019580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="24010000", @ANYRES16=r3, @ANYBLOB="020027bd7000fbdbdf250d0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3800018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="14000280697036677265300000000000000000000800030003000000080003000300000048000180080003000100000008000300005efc6ffebff68a", @ANYRES32=r11, @ANYBLOB="1400020076657468310000000000000000000000080003000200000008000100", @ANYRES32=r12, @ANYBLOB="080003000200000050000180140002006772657461703000000000000000000008000100", @ANYRES32=r14, @ANYBLOB="140002007663616e3000000000000000000000001400020069703665727370616e3000000000000008000100", @ANYRES32=r15, @ANYBLOB="340001801400020076657468305f746f5f626174616476000800030003000000140002006d616376746170300000000000000000"], 0x124}, 0x1, 0x0, 0x0, 0x8090}, 0xc2) 740.294039ms ago: executing program 2 (id=3784): syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611"], 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xc38b227de5ff813c, &(0x7f0000000080)}, 0x80) syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb5500450000a1000400000073737800000000e00000014e20ffff008d9078b4e1fa95765798262e83e352be08f88858937290daa680842f452c30d6040000000000000038848cde35b72a6259f080b611ec951e601467dd381201b1a8402587b51fe0ecbb44d049159db7957b28fbe8c64d72d611"], 0x0) (async) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000000901000000000000000000000000010800054046ac9c05cb6d69a073797a31000000000c000480080001400051fe"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x2000000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c00018006000600800e0000100002800c0015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000002100000426b17000fedbdf2502142000050000081400000008000200ffffffff08000d0400000008000200c00000020c000c4000ffff00000000"], 0x40}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x6, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc11}]}, 0x3c}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0xc38b227de5ff813c, &(0x7f0000000080)}, 0x80) (async) 689.19571ms ago: executing program 3 (id=3785): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x8000000, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}]}]}, 0x2c}}, 0x0) 688.807292ms ago: executing program 0 (id=3786): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x204400, &(0x7f0000000040)={@align=0x7, {0x6, 0x9, 0x80000001}}, 0xfff, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xda25}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0xf, 0x6, 0x5, 0x0, 0x0, {0xb, 0x0, 0x5}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}]}, 0x34}, 0x1, 0x0, 0x0, 0x401}, 0x20040000) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)={0x27c, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x158, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x64, 0x3, "6c542d8c2ddadd4b8a64c82b5b0b630a55e93247370114d497d177ea5b038001767da60c6e10c091e0e46a7980b56f515f7bc40bb21c1e90470ca7b362da721f98a5e217fcc4e295d70d1511abff3471107d21bf40e050b40e3fff121f4feda6"}, @TIPC_NLA_NODE_ID={0xea, 0x3, "04db2e49b3b23e1a7d6a040a0e23e3468a8032b2a3c21d0273983d9ea961c0662cfc2d0b2f46ebeaf91b391f4ea361c2fd1d037c919475b6aa963a779ef13ed62e51be317bfe624e000c13e66dfd37c2c6697b526c937fda9671ce5ca41cb2315c549ffeb1366bd2f596ba4b46af24a08ae4e2a065dd0a142353c607d396f4f202904d47587faa31e95393bb3a922ca4d65dfaec798bf57669fa7874de11557195cdc7039fc4f8c12f79231225313e5803fd1cc89e017e2def3150d5418b457d2752efa19b6fd01e3141b5347c4a97932d5e613fff080a37e0e16cbe5a4cc41be202dc4aa027"}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3eb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf53f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x28fb}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7ff}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x8000}, 0x20048800) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x15, 0xa, 0x201, 0x0, 0x0, {0x9, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x38, r2, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x4}, {0x1, 0x5}, {0x9}, {0x5}, {0x3, 0x2}, {0x7, 0x4}, {0x81, 0x5}, {0xfc}], "b3934f56b3a6c438"}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc004}, 0xc041) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x28, r2, 0x0, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r2, 0x100, 0x70bd2a, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x4008000) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x2c, 0xc, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000cc0), r0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000d80)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x40, r5, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) recvmsg(r4, &(0x7f0000001140)={&(0x7f0000000dc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000e40)=""/209, 0xd1}, {&(0x7f0000000f40)=""/216, 0xd8}, {&(0x7f0000001040)=""/187, 0xbb}], 0x3}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001180)=0xdb09736b3b2b892c, 0x4) r7 = accept$inet6(0xffffffffffffffff, &(0x7f00000011c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000001200)=0x1c) sendto$inet6(r7, &(0x7f0000001240)="b142a635d8fec6b1b5630944641f2531351598a2420c4c5198267eb4fae9d0f8b32441e3d7d5b23e6d318605073daf1a524eae6704c4107c2c63f3692ab80a3eb1fcb6c55312246fc86273fe4859b1081862575c10040442807afdc4ef97131d3b6181bf4eee6112b10530e93ea4ef2ccd2590636a22de0566f7173487c3e250c52a64f2c6e54b72999c664f6da70220d1826e0996c7880bf4ce7c21fb8a6123b63f3154cf804032ab418c58f526411df96adc292212ca2b3830522a40e54b006c2dc7941c610cb46de620ab66", 0xcd, 0x4000090, &(0x7f0000001340)={0xa, 0x4e23, 0x4, @remote, 0x8}, 0x1c) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x28, r2, 0x20, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x73e, 0x41}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x8401}, 0x8000) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001480)={0x0, 0xa3, "fdfae739189a384ca89f43d489aa8a7e63da8b79e7a70ab6a3617582195e8fe43ffac8dd68176a610e80f6e24961ed6d4de0b905cea67da3a64a817ca3396bbfbeba9f537f5d3f8a2896cb3c191f80c88231367a0d2d4b929778618cd180a6a51f62f9cfcd9265c29a59ebbd0179d07420cc02185ce39c928964df31cef6b2a50d2bf7c37a81bd353b547c5081db09f8c7d8653cd011e43d0a4b559629aaadf98201cb"}, &(0x7f0000001540)=0xab) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000001580)={r8, 0x6}, &(0x7f00000015c0)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000001600), r1) r9 = socket$netlink(0x10, 0x3, 0x7) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001680), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r9, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x88, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfffffff9, 0x28}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x41}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xe}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}]}, 0x88}}, 0x4001) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r11, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001940)={&(0x7f0000001880)={0xac, r12, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x78, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, '\x00', 0x22}}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x401}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7fffffff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3e}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x48040) 644.998157ms ago: executing program 1 (id=3787): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) 574.738537ms ago: executing program 3 (id=3788): r0 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) epoll_create1(0x0) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$int_in(r2, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) (async) socket$inet(0x2, 0x2, 0x1) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r1, 0x0, 0x1, 0x16f}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x6c, r5, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x6c}, 0x1, 0x620b}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r5, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4048081) socket$nl_route(0x10, 0x3, 0x0) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x8a3, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) (async, rerun: 64) bind$unix(r0, &(0x7f0000000440)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (rerun: 64) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) 492.791676ms ago: executing program 1 (id=3789): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600156f00000000000000000a000000", @ANYRES32=0x0, @ANYRES16=r0], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff8}, {0xffff, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c044}, 0x40) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x800, 0x70bd26, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x48080) 428.233081ms ago: executing program 2 (id=3790): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@volatile={0x4, 0x0, 0x0, 0x9, 0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0xa, 0x2}, {0x9, 0x3508}, {0xd, 0x4000800}, {0x1, 0x1}]}]}, {0x0, [0x61, 0x2e]}}, &(0x7f0000000680)=""/108, 0x60, 0x6c, 0x0, 0x4}, 0x28) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e"], 0x44}}, 0x0) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, 0x25, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x5, 0xe, 0x0, &(0x7f0000000000)="251200d800"/14, 0x0, 0x7ff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r6) sendmsg$IEEE802154_ASSOCIATE_REQ(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000f6", @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf250100000006000a0000000000050007000c0000000c0009000202aaaaaaaaaaaa0500110003000000"], 0x38}, 0x1, 0x0, 0x0, 0x45}, 0xc400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r10, 0x5, 0xe, 0x0, &(0x7f0000000440)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000400)=r11, 0x4) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRES64=r8], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4040800) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r12 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_MCAST_JOIN_GROUP(r12, 0x29, 0x2a, &(0x7f0000000540)={0x80000001, {{0xa, 0x4e21, 0x400, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}}, 0x88) 414.788322ms ago: executing program 3 (id=3791): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="caffd30700a195b83290edf10087baeb7e30c16fde4746a92a45949e4cecee91fe90b7450d76a76a21060eb19162cf194e0a72a763f301fc5eb978ad1cee0212aa44ca7895a23e56e50ce09ef77f7445bd38772e6e9d609945b1daa49f1e9c8e59f676797ed9a719b4fe383062152ec871df85c84aac6dd66966f4c23aef94be3afa7c85da72c08b3e9d1abde11a76a0de2b98f48354791ac245540bf15706bdddbeb449620d95c21c831d95ebe36cec175d1af523449929b6548872a382346afcd428b423070dc839299c1a6def798d4ab12e401b2a6e3c080ac5e73943aa44604c9b7252eee44e", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 403.33125ms ago: executing program 4 (id=3792): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x594b, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000000)={&(0x7f0000000480)=@can={{0x3, 0x1}, 0x0, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x24048015}, 0x811) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="63a02a3a34097772"], 0xa) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x6}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 265.16383ms ago: executing program 2 (id=3793): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0x9, 0x0, 0x0, 0x800000}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {0x0, 0x0, 0xf0}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) 263.347525ms ago: executing program 1 (id=3794): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r4, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r1, &(0x7f0000000680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="6e0e08d8a6433cecc6cd71e906ae64bb84c400006e29fbff932d3ee606d7f709ecba7d1ead34fa5f4547b336ce76f8e1a4e92480069e381672ae044268c702db18ecd93f0c235f96df31916b54ab7f44f2058781aed048d05abef164b5acab9fcdd955b5fe253bc1458b1f136f8f1a573a95372ec4e895fbc0b3a82216c8e21cb1e629034b4eecb62e9b0a287f9ad264694b60e72ff7866540afdd414379094e872518d687b401459da81d3c98c98a4f196834a52ef6cc24d79fbfa829bc8b9714d2c7c32a461f3cdbd21b1f715186ea068fef12b0f57a90ec4310b0a5a648eb11a26068e5eaa126b71fc38f7414b3db7d02f73f9613", @ANYRES16=r6, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x80}, 0xc0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x20}}, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='htcp', 0x4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r8, 0x7}, 0x8) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffdffffd, {0x0, 0x0, 0x0, r10, {0x3}, {0x2, 0xffff}, {0xe, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc804) socket$kcm(0x10, 0x2, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x8400, 0x0) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f00000000c0)=""/75, 0x100000, 0x800, 0x5, 0x3}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 263.227892ms ago: executing program 4 (id=3795): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = gettid() r2 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fffffffedbdf2500070000", @ANYRES32=r0, @ANYBLOB="089805000750050008001300", @ANYRES32=r1, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 160.849447ms ago: executing program 3 (id=3796): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071187f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @none, 0x4}, 0xe) connect$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r6, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x39a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x2c}}, 0x800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000400)=0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000840)={0x18c, r6, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IE={0x10f, 0x2a, [@peer_mgmt={0x75, 0x18, {0x0, 0x7f, @val=0x9, @val=0x2a, @val="c7e00073bee5343e20d66122af05db7e"}}, @fast_bss_trans={0x37, 0xb5, {0x0, 0x6, "72b2ea8593fd02ba3bf4e73cc94c9749", "7d53209495900ee9a66fbe7f2c49d1ad65d761a621c21f07807f5b07fb89a805", "c9b1ad7ae9aed7ed8a1f752a92629ca1826c0e8c8b9565fa389a190e40109155", [{0x3, 0x16, "3e77b7333e15f2a793ce5b92cf463db33cbc24284a37"}, {0x3, 0x19, "243ee9604fae072d8268531de16a6cc04f99fee167fe4e373f"}, {0x2, 0x6, "93f118b16153"}, {0x1, 0x1a, "9163b6c312bba675f17714303b9e7a9719e15e71e419732b06e8"}, {0x2, 0x3, "d4da86"}, {0x4, 0x5, "688397691f"}]}}, @mic={0x8c, 0x18, {0x808, "94eff097c9a5", @long="c730e7b317738ee536795fad2b554cd0"}}, @mic={0x8c, 0x18, {0xd96, "7d98c08393fd", @long="c6ab0f672cb6ee38dba4acc97bf9deff"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0xb3, 0xb}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_IE={0x35, 0x2a, [@random_vendor={0xdd, 0x13, "ad4a719e3441f7c34c546f3a41f4367d550c14"}, @ht={0x2d, 0x1a, {0x10, 0x0, 0x0, 0x0, {0x60, 0xd54, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x1, 0x200, 0x81}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x5}, @NL80211_ATTR_MDID={0x6, 0xb1, 0xfffa}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x80}]}, 0x18c}, 0x1, 0x0, 0x0, 0x800}, 0x4) sendto$inet6(r3, &(0x7f00000007c0)="7800000018002502b9409b02ffff48000203be04020406050a08040c5c000900580004000a0000000d0085a168d0bf46d32345653600648d270005000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a000f4a32000407160012000a0000000000e000e218d1dd3b6ed538f2523250", 0x78, 0x0, 0x0, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="04002bbd7000fcdbdf251200cc4e0800118004000300"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x20004010) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r11, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYRESOCT=r7, @ANYRESDEC=r11, @ANYRES8=0x0, @ANYRES8, @ANYRESDEC], 0x40}, 0x1, 0x0, 0x0, 0x40440c0}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62", 0x28, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r9, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 140.318476ms ago: executing program 1 (id=3797): r0 = socket$inet(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x56, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "170100", 0x20, 0x2b, 0x0, @remote, @local, {[@dstopts={0x89}], {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) 110.44864ms ago: executing program 2 (id=3798): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000500010004000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x2, 0x0, 0x6, 0x0, 0x2}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x40) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xd}, {[@lsrr={0x83, 0x7, 0xd7, [@multicast2]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = epoll_create1(0x0) r12 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r12, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r12, &(0x7f0000000100)={0xa0028000}) ioctl$XFS_IOC_FSINUMBERS(r4, 0xc0205867, &(0x7f0000000240)={&(0x7f0000000140)=0x5, 0x9, &(0x7f0000000640)=[{}, {}, {}], &(0x7f00000001c0)}) socket$igmp6(0xa, 0x3, 0x2) 58.25285ms ago: executing program 4 (id=3799): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, 0x0) 1.064085ms ago: executing program 3 (id=3800): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000000)=0x9, 0x4) sendmmsg$inet6(r2, &(0x7f00000027c0)=[{{&(0x7f00000002c0)={0xa, 0x4e20, 0x0, @mcast2, 0x41}, 0x1c, 0x0}}], 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x5b, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, 0x5f) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) accept4$inet6(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x5, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="7e97cc9aa3f88a11ab0150fb8f29bce795e9b5529f8b9d3f9585ea28f71dff", @ANYBLOB="63401aa08d7ddbc93c44bc973775d2855c424b51f1bd5e04fe1a1632916aa33b9b6b41c7c531b30b919cca29cb0e9b500a70898f36f71320b5699acf3deae42489f54304914ff2a06c245c988eaa354b716a47e07dfe0b839f0855fe3fc2ae0468", @ANYRESHEX=r4], 0x1c}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r6, 0x89e2, &(0x7f0000000000)=@null) ioctl$sock_rose_SIOCADDRT(r6, 0x890b, &(0x7f0000000080)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @null, @rose={'rose', 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r7 = socket$inet6(0xa, 0x5, 0x0) getsockopt$sock_buf(r7, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x1c) connect$rose(r6, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, 0x1, @default}, 0x1c) bind$rose(r6, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x2, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) recvfrom(0xffffffffffffffff, &(0x7f0000000500)=""/148, 0x94, 0x10001, &(0x7f00000005c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x2}, 0x4}}, 0x80) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r6, &(0x7f0000000180)={0xa}) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f00000001c0)) connect$rose(r6, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) connect$rose(r6, &(0x7f0000000280)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x0, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) socket$inet_icmp(0x2, 0x2, 0x1) 0s ago: executing program 1 (id=3801): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@snprintf={{}, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x15, 0x0, 0x0, 0x76}}], {{}, {0x5}, {0x28}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000004000400240012800c0001006d6163766c616e00140002800800010010000000080003000000b30e02000500f2d8a266c925f12332f5bd278c7fb3af358d", @ANYRES32=r4, @ANYRES64=r5], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): lan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 348.689000][T13864] xt_limit: Overflow, try lower: 604147548/4200216962 [ 349.071223][T13887] openvswitch: netlink: IP tunnel dst address not specified [ 349.298708][T13895] __nla_validate_parse: 8 callbacks suppressed [ 349.298732][T13895] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2341'. [ 349.348738][T13899] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 349.370443][T13898] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2342'. [ 349.919765][T13930] openvswitch: netlink: IP tunnel dst address not specified [ 350.135722][T13936] syz_tun: left allmulticast mode [ 350.382628][T13949] veth0: entered promiscuous mode [ 350.456917][T13948] veth0: left promiscuous mode [ 350.522865][T13957] openvswitch: netlink: IP tunnel dst address not specified [ 350.679660][T13967] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2364'. [ 350.771924][T13971] syzkaller0: entered promiscuous mode [ 350.782248][T13971] syzkaller0: entered allmulticast mode [ 350.790455][T13971] 0: reclassify loop, rule prio 0, protocol 800 [ 351.510422][T13984] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2369'. [ 352.442007][T13904] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 352.456117][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 352.748103][T14004] netlink: 'syz.3.2375': attribute type 10 has an invalid length. [ 352.759042][T14004] team0: Device vxcan1 is of different type [ 352.961321][T14017] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 353.283560][T14039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 353.379047][T14046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2392'. [ 353.599059][T14043] tipc: Started in network mode [ 353.604831][T14043] tipc: Node identity ac14140f, cluster identity 4711 [ 353.605424][T14061] netlink: 'syz.2.2390': attribute type 30 has an invalid length. [ 353.621395][T14043] tipc: New replicast peer: 255.255.255.255 [ 353.628783][T14043] tipc: Enabled bearer , priority 10 [ 353.637144][T14046] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 353.693826][T14046] team1: entered promiscuous mode [ 353.706470][T14046] team1: entered allmulticast mode [ 353.749192][T14063] openvswitch: netlink: IP tunnel dst address not specified [ 354.110470][T14079] netlink: 'syz.3.2401': attribute type 3 has an invalid length. [ 354.489366][T14092] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20002 [ 354.608103][T14098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2406'. [ 354.639252][T14098] l2tp_ppp: sess 2/0: no socket in recv [ 354.814612][T14104] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2408'. [ 354.886700][ T5916] tipc: Node number set to 2886997007 [ 354.906915][T14102] ip6gre1: entered allmulticast mode [ 354.954244][T14105] veth0: entered promiscuous mode [ 354.975987][T14105] veth0: left promiscuous mode [ 355.122776][T14117] gtp0: entered promiscuous mode [ 355.132337][T14117] gtp0: entered allmulticast mode [ 357.737905][T14102] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 357.887407][T14143] openvswitch: netlink: EtherType 50a is less than min 600 [ 357.980451][T14154] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2419'. [ 358.089417][T14159] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2420'. [ 358.136736][T14159] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2420'. [ 358.173330][T14162] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2425'. [ 358.215402][T14166] syzkaller0: entered promiscuous mode [ 358.248404][T14166] syzkaller0: entered allmulticast mode [ 358.338631][T14171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 359.087592][T14193] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2436'. [ 359.146375][T14197] netlink: 'syz.0.2437': attribute type 4 has an invalid length. [ 359.812317][T14235] syzkaller0: entered promiscuous mode [ 359.828666][T14235] syzkaller0: entered allmulticast mode [ 359.998333][T14247] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 360.021117][T14247] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 360.322617][T14269] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 361.749169][T14341] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 361.759274][T14341] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 361.768718][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2490'. [ 361.778337][T14341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2490'. [ 361.796703][T14341] dummy0: entered promiscuous mode [ 361.807164][T14341] dummy0: left promiscuous mode [ 362.052677][T14363] ipt_REJECT: TCP_RESET invalid for non-tcp [ 362.399397][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2503'. [ 362.410461][T14380] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2503'. [ 362.435146][T14380] syzkaller0: entered promiscuous mode [ 362.440698][T14380] syzkaller0: entered allmulticast mode [ 362.605409][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2508'. [ 362.722776][T14391] bond6: entered promiscuous mode [ 362.729457][T14391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 362.761723][T14391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2508'. [ 363.027056][T14414] FAULT_INJECTION: forcing a failure. [ 363.027056][T14414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.067214][T14412] netlink: 'syz.3.2514': attribute type 13 has an invalid length. [ 363.075104][T14414] CPU: 1 UID: 0 PID: 14414 Comm: syz.4.2517 Not tainted syzkaller #0 PREEMPT(full) [ 363.075137][T14414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 363.075152][T14414] Call Trace: [ 363.075160][T14414] [ 363.075170][T14414] dump_stack_lvl+0xe8/0x150 [ 363.075207][T14414] should_fail_ex+0x412/0x560 [ 363.075247][T14414] _copy_from_user+0x2d/0xb0 [ 363.075273][T14414] __sys_sendto+0x2b0/0x710 [ 363.075301][T14414] ? __pfx___sys_sendto+0x10/0x10 [ 363.075322][T14414] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 363.075363][T14414] ? __fget_files+0x3a0/0x420 [ 363.075417][T14414] ? ksys_write+0x242/0x270 [ 363.075443][T14414] ? __pfx_ksys_write+0x10/0x10 [ 363.075473][T14414] __x64_sys_sendto+0xde/0x100 [ 363.075499][T14414] do_syscall_64+0x14d/0xf80 [ 363.075522][T14414] ? trace_irq_disable+0x3b/0x150 [ 363.075540][T14414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.075560][T14414] ? clear_bhb_loop+0x40/0x90 [ 363.075594][T14414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.075615][T14414] RIP: 0033:0x7fdf8119c819 [ 363.075637][T14414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 363.075654][T14414] RSP: 002b:00007fdf8213b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 363.075678][T14414] RAX: ffffffffffffffda RBX: 00007fdf81415fa0 RCX: 00007fdf8119c819 [ 363.075694][T14414] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 363.075706][T14414] RBP: 00007fdf8213b090 R08: 0000200000000100 R09: 000000000000006f [ 363.075720][T14414] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 363.075733][T14414] R13: 00007fdf81416038 R14: 00007fdf81415fa0 R15: 00007ffe7efe9a38 [ 363.075768][T14414] [ 363.341844][T14412] netlink: 'syz.3.2514': attribute type 58 has an invalid length. [ 363.376367][T14412] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2514'. [ 363.836353][T14452] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2528'. [ 364.298069][T14476] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 364.896243][T14519] netlink: 'syz.3.2554': attribute type 3 has an invalid length. [ 365.108945][T14532] netlink: 'syz.4.2559': attribute type 61 has an invalid length. [ 365.119983][T14532] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2559'. [ 365.132500][T14533] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2560'. [ 365.666801][T14558] netlink: 'syz.4.2567': attribute type 1 has an invalid length. [ 365.703653][T14558] netlink: 'syz.4.2567': attribute type 3 has an invalid length. [ 366.127857][T14595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.150584][T14595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.878669][T14647] __nla_validate_parse: 7 callbacks suppressed [ 366.878690][T14647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2599'. [ 367.002055][T14654] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 367.011853][T14654] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.078012][T14659] openvswitch: netlink: Key 17 has unexpected len 20 expected 4 [ 369.742766][T14705] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 369.753233][T14705] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 370.193233][ T1250] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.222533][ T1250] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.249713][ T1250] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.361838][ T1250] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 370.690007][T14761] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2637'. [ 370.778635][T14764] netlink: 'syz.2.2637': attribute type 4 has an invalid length. [ 370.797284][T14764] netlink: 17 bytes leftover after parsing attributes in process `syz.2.2637'. [ 372.426042][T14758] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 372.437097][T14758] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 372.750576][T14781] bond7: invalid ARP target 0.0.0.0 specified for addition [ 372.774121][T14781] bond7: option arp_ip_target: invalid value (0) [ 372.785046][T14781] bond7 (unregistering): Released all slaves [ 372.945609][T14789] gretap0: entered promiscuous mode [ 372.951413][T14789] vlan3: entered promiscuous mode [ 373.158042][T14806] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.2652'. [ 373.468655][T14822] delete_channel: no stack [ 373.595311][T14831] openvswitch: netlink: Tunnel attr 60 out of range max 16 [ 373.670042][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2660'. [ 373.818160][T14843] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 373.934693][T14851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2666'. [ 373.990597][T14847] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2666'. [ 374.159365][T14864] FAULT_INJECTION: forcing a failure. [ 374.159365][T14864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.187966][T14864] CPU: 0 UID: 0 PID: 14864 Comm: syz.0.2672 Not tainted syzkaller #0 PREEMPT(full) [ 374.188004][T14864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.188023][T14864] Call Trace: [ 374.188032][T14864] [ 374.188041][T14864] dump_stack_lvl+0xe8/0x150 [ 374.188080][T14864] should_fail_ex+0x412/0x560 [ 374.188120][T14864] _copy_from_iter+0x1d3/0x1670 [ 374.188159][T14864] ? rcu_is_watching+0x15/0xb0 [ 374.188197][T14864] ? __pfx__copy_from_iter+0x10/0x10 [ 374.188240][T14864] ? netlink_sendmsg+0x650/0xb40 [ 374.188261][T14864] ? skb_put+0x11b/0x210 [ 374.188288][T14864] netlink_sendmsg+0x6c0/0xb40 [ 374.188320][T14864] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.188345][T14864] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.188378][T14864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.188407][T14864] ____sys_sendmsg+0x972/0x9f0 [ 374.188445][T14864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.188494][T14864] ? import_iovec+0x73/0xa0 [ 374.188521][T14864] ___sys_sendmsg+0x2a5/0x360 [ 374.188553][T14864] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.188620][T14864] ? __fget_files+0x2a/0x420 [ 374.188660][T14864] ? __fget_files+0x3a0/0x420 [ 374.188703][T14864] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.188732][T14864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.188769][T14864] ? __pfx_ksys_write+0x10/0x10 [ 374.188807][T14864] do_syscall_64+0x14d/0xf80 [ 374.188833][T14864] ? trace_irq_disable+0x3b/0x150 [ 374.188852][T14864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.188875][T14864] ? clear_bhb_loop+0x40/0x90 [ 374.188903][T14864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.188931][T14864] RIP: 0033:0x7fd022b9c819 [ 374.188952][T14864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.188970][T14864] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.188993][T14864] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 374.189008][T14864] RDX: 0000000028040010 RSI: 0000200000000280 RDI: 0000000000000005 [ 374.189022][T14864] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 374.189035][T14864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.189046][T14864] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 374.189079][T14864] [ 374.789909][T14892] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2681'. [ 374.916508][T14897] FAULT_INJECTION: forcing a failure. [ 374.916508][T14897] name failslab, interval 1, probability 0, space 0, times 0 [ 374.942565][T14897] CPU: 0 UID: 0 PID: 14897 Comm: syz.4.2686 Not tainted syzkaller #0 PREEMPT(full) [ 374.942597][T14897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 374.942609][T14897] Call Trace: [ 374.942617][T14897] [ 374.942626][T14897] dump_stack_lvl+0xe8/0x150 [ 374.942662][T14897] should_fail_ex+0x412/0x560 [ 374.942700][T14897] should_failslab+0xa8/0x100 [ 374.942729][T14897] __kmalloc_noprof+0xe8/0x760 [ 374.942754][T14897] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 374.942790][T14897] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 374.942827][T14897] genl_family_rcv_msg_doit+0xd9/0x330 [ 374.942922][T14897] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 374.942958][T14897] ? apparmor_capable+0x126/0x170 [ 374.942984][T14897] ? bpf_lsm_capable+0x9/0x20 [ 374.943013][T14897] ? security_capable+0x7e/0x2c0 [ 374.943057][T14897] genl_rcv_msg+0x61c/0x7a0 [ 374.943092][T14897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.943116][T14897] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 374.943144][T14897] ? __pfx_nl80211_set_wiphy+0x10/0x10 [ 374.943171][T14897] ? __pfx_nl80211_post_doit+0x10/0x10 [ 374.943198][T14897] ? __lock_acquire+0x6b5/0x2cf0 [ 374.943239][T14897] netlink_rcv_skb+0x232/0x4b0 [ 374.943274][T14897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 374.943301][T14897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 374.943353][T14897] ? down_read+0x272/0x2e0 [ 374.943380][T14897] ? genl_rcv+0xd/0x40 [ 374.943407][T14897] genl_rcv+0x28/0x40 [ 374.943431][T14897] netlink_unicast+0x80f/0x9b0 [ 374.943471][T14897] ? __pfx_netlink_unicast+0x10/0x10 [ 374.943503][T14897] ? netlink_sendmsg+0x650/0xb40 [ 374.943522][T14897] ? skb_put+0x11b/0x210 [ 374.943550][T14897] netlink_sendmsg+0x813/0xb40 [ 374.943582][T14897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 374.943606][T14897] ? aa_sock_msg_perm+0xf1/0x1b0 [ 374.943640][T14897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 374.943668][T14897] ____sys_sendmsg+0x972/0x9f0 [ 374.943705][T14897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 374.943741][T14897] ? import_iovec+0x73/0xa0 [ 374.943769][T14897] ___sys_sendmsg+0x2a5/0x360 [ 374.943802][T14897] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.943874][T14897] ? __fget_files+0x2a/0x420 [ 374.943906][T14897] ? __fget_files+0x3a0/0x420 [ 374.943950][T14897] __x64_sys_sendmsg+0x1bd/0x2a0 [ 374.943985][T14897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.944022][T14897] ? __pfx_ksys_write+0x10/0x10 [ 374.944058][T14897] do_syscall_64+0x14d/0xf80 [ 374.944083][T14897] ? trace_irq_disable+0x3b/0x150 [ 374.944101][T14897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.944123][T14897] ? clear_bhb_loop+0x40/0x90 [ 374.944154][T14897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.944176][T14897] RIP: 0033:0x7fdf8119c819 [ 374.944196][T14897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.944214][T14897] RSP: 002b:00007fdf8213b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.944236][T14897] RAX: ffffffffffffffda RBX: 00007fdf81415fa0 RCX: 00007fdf8119c819 [ 374.944252][T14897] RDX: 0000000028040010 RSI: 0000200000000280 RDI: 0000000000000005 [ 374.944266][T14897] RBP: 00007fdf8213b090 R08: 0000000000000000 R09: 0000000000000000 [ 374.944279][T14897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.944292][T14897] R13: 00007fdf81416038 R14: 00007fdf81415fa0 R15: 00007ffe7efe9a38 [ 374.944325][T14897] [ 375.499327][T14913] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2690'. [ 375.556298][T14916] netlink: 'syz.4.2694': attribute type 4 has an invalid length. [ 375.566560][T14917] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2692'. [ 375.586377][T14922] block nbd0: not configured, cannot reconfigure [ 376.516678][T14960] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2705'. [ 376.627679][T14963] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2706'. [ 376.654857][T14965] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2705'. [ 378.029320][T15020] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000 [ 378.381345][T15044] __nla_validate_parse: 1 callbacks suppressed [ 378.381364][T15044] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2734'. [ 378.696234][T15064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2741'. [ 378.738215][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.750284][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.790882][T15072] netlink: 'syz.3.2744': attribute type 1 has an invalid length. [ 378.902042][T15078] team0: Device gtp1 is up. Set it down before adding it as a team port [ 379.032638][T15088] netlink: 'syz.2.2747': attribute type 1 has an invalid length. [ 379.079370][T15091] syzkaller0: entered promiscuous mode [ 379.087877][T15091] syzkaller0: entered allmulticast mode [ 379.215528][T15096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2749'. [ 379.399460][T15104] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2752'. [ 379.705451][T15119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2759'. [ 379.744171][T15121] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2760'. [ 379.755930][T15124] syzkaller0: entered promiscuous mode [ 379.761566][T15124] syzkaller0: entered allmulticast mode [ 380.076818][T15137] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2763'. [ 380.109927][T15139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.149844][T15139] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.265646][T15152] openvswitch: netlink: Flow actions attr not present in new flow. [ 380.306999][T15150] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 380.403346][T15158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2773'. [ 380.528175][T15164] syzkaller0: entered promiscuous mode [ 380.534298][T15164] syzkaller0: entered allmulticast mode [ 380.786721][T15174] netlink: 'syz.0.2780': attribute type 16 has an invalid length. [ 380.814294][T15174] netlink: 'syz.0.2780': attribute type 17 has an invalid length. [ 380.860864][T15174] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 380.914051][T15178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2781'. [ 381.385691][T15203] syzkaller0: entered promiscuous mode [ 381.391461][T15203] syzkaller0: entered allmulticast mode [ 381.465902][T15211] FAULT_INJECTION: forcing a failure. [ 381.465902][T15211] name failslab, interval 1, probability 0, space 0, times 0 [ 381.507663][T15211] CPU: 0 UID: 0 PID: 15211 Comm: syz.0.2793 Not tainted syzkaller #0 PREEMPT(full) [ 381.507697][T15211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 381.507711][T15211] Call Trace: [ 381.507719][T15211] [ 381.507729][T15211] dump_stack_lvl+0xe8/0x150 [ 381.507765][T15211] should_fail_ex+0x412/0x560 [ 381.507803][T15211] should_failslab+0xa8/0x100 [ 381.507831][T15211] ? skb_clone+0x212/0x3a0 [ 381.507857][T15211] kmem_cache_alloc_noprof+0x87/0x650 [ 381.507880][T15211] ? apparmor_capable+0x126/0x170 [ 381.507911][T15211] skb_clone+0x212/0x3a0 [ 381.507935][T15211] ? nfnetlink_rcv+0x4b0/0x27b0 [ 381.507969][T15211] nfnetlink_rcv+0x4e2/0x27b0 [ 381.508010][T15211] ? lockdep_hardirqs_on+0x7a/0x110 [ 381.508035][T15211] ? __dev_queue_xmit+0x277/0x3890 [ 381.508061][T15211] ? __local_bh_enable_ip+0xd0/0x130 [ 381.508102][T15211] ? __dev_queue_xmit+0x1e78/0x3890 [ 381.508129][T15211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.508159][T15211] ? __dev_queue_xmit+0x277/0x3890 [ 381.508192][T15211] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 381.508239][T15211] ? ref_tracker_free+0x693/0x840 [ 381.508270][T15211] ? __copy_skb_header+0xa3/0x4a0 [ 381.508298][T15211] ? __pfx_ref_tracker_free+0x10/0x10 [ 381.508348][T15211] ? skb_clone+0x246/0x3a0 [ 381.508377][T15211] ? __netlink_deliver_tap+0x807/0x850 [ 381.508411][T15211] ? netlink_deliver_tap+0x2e/0x1b0 [ 381.508469][T15211] netlink_unicast+0x80f/0x9b0 [ 381.508509][T15211] ? __pfx_netlink_unicast+0x10/0x10 [ 381.508542][T15211] ? netlink_sendmsg+0x650/0xb40 [ 381.508560][T15211] ? skb_put+0x11b/0x210 [ 381.508587][T15211] netlink_sendmsg+0x813/0xb40 [ 381.508618][T15211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 381.508648][T15211] ? aa_sock_msg_perm+0xf1/0x1b0 [ 381.508681][T15211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 381.508710][T15211] ____sys_sendmsg+0x972/0x9f0 [ 381.508747][T15211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 381.508782][T15211] ? import_iovec+0x73/0xa0 [ 381.508810][T15211] ___sys_sendmsg+0x2a5/0x360 [ 381.508843][T15211] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.508906][T15211] ? __fget_files+0x2a/0x420 [ 381.508937][T15211] ? __fget_files+0x3a0/0x420 [ 381.508981][T15211] __x64_sys_sendmsg+0x1bd/0x2a0 [ 381.509010][T15211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 381.509047][T15211] ? __pfx_ksys_write+0x10/0x10 [ 381.509090][T15211] do_syscall_64+0x14d/0xf80 [ 381.509116][T15211] ? trace_irq_disable+0x3b/0x150 [ 381.509134][T15211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.509156][T15211] ? clear_bhb_loop+0x40/0x90 [ 381.509183][T15211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.509205][T15211] RIP: 0033:0x7fd022b9c819 [ 381.509225][T15211] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.509244][T15211] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.509268][T15211] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 381.509284][T15211] RDX: 0000000000000004 RSI: 0000200000007880 RDI: 0000000000000003 [ 381.509297][T15211] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 381.509310][T15211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.509323][T15211] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 381.509357][T15211] [ 382.308745][T15244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.355281][T15244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.355826][T15250] FAULT_INJECTION: forcing a failure. [ 382.355826][T15250] name failslab, interval 1, probability 0, space 0, times 0 [ 382.397780][T15250] CPU: 1 UID: 0 PID: 15250 Comm: syz.0.2807 Not tainted syzkaller #0 PREEMPT(full) [ 382.397815][T15250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 382.397829][T15250] Call Trace: [ 382.397837][T15250] [ 382.397846][T15250] dump_stack_lvl+0xe8/0x150 [ 382.397881][T15250] should_fail_ex+0x412/0x560 [ 382.397918][T15250] should_failslab+0xa8/0x100 [ 382.397946][T15250] ? skb_clone+0x212/0x3a0 [ 382.397973][T15250] kmem_cache_alloc_noprof+0x87/0x650 [ 382.397995][T15250] ? apparmor_capable+0x126/0x170 [ 382.398026][T15250] skb_clone+0x212/0x3a0 [ 382.398051][T15250] ? nfnetlink_rcv+0x4b0/0x27b0 [ 382.398083][T15250] nfnetlink_rcv+0x4e2/0x27b0 [ 382.398124][T15250] ? lockdep_hardirqs_on+0x7a/0x110 [ 382.398149][T15250] ? __dev_queue_xmit+0x277/0x3890 [ 382.398175][T15250] ? __local_bh_enable_ip+0xd0/0x130 [ 382.398204][T15250] ? __dev_queue_xmit+0x1e78/0x3890 [ 382.398229][T15250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.398260][T15250] ? __dev_queue_xmit+0x277/0x3890 [ 382.398292][T15250] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 382.398339][T15250] ? ref_tracker_free+0x693/0x840 [ 382.398379][T15250] ? __copy_skb_header+0xa3/0x4a0 [ 382.398406][T15250] ? __pfx_ref_tracker_free+0x10/0x10 [ 382.398456][T15250] ? skb_clone+0x246/0x3a0 [ 382.398485][T15250] ? __netlink_deliver_tap+0x807/0x850 [ 382.398518][T15250] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.398570][T15250] netlink_unicast+0x80f/0x9b0 [ 382.398609][T15250] ? __pfx_netlink_unicast+0x10/0x10 [ 382.398641][T15250] ? netlink_sendmsg+0x650/0xb40 [ 382.398660][T15250] ? skb_put+0x11b/0x210 [ 382.398686][T15250] netlink_sendmsg+0x813/0xb40 [ 382.398717][T15250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.398742][T15250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 382.398774][T15250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 382.398803][T15250] ____sys_sendmsg+0x972/0x9f0 [ 382.398839][T15250] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.398874][T15250] ? import_iovec+0x73/0xa0 [ 382.398902][T15250] ___sys_sendmsg+0x2a5/0x360 [ 382.398934][T15250] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.398998][T15250] ? __fget_files+0x2a/0x420 [ 382.399029][T15250] ? __fget_files+0x3a0/0x420 [ 382.399071][T15250] __x64_sys_sendmsg+0x1bd/0x2a0 [ 382.399101][T15250] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.399138][T15250] ? __pfx_ksys_write+0x10/0x10 [ 382.399174][T15250] do_syscall_64+0x14d/0xf80 [ 382.399199][T15250] ? trace_irq_disable+0x3b/0x150 [ 382.399217][T15250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.399239][T15250] ? clear_bhb_loop+0x40/0x90 [ 382.399266][T15250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.399288][T15250] RIP: 0033:0x7fd022b9c819 [ 382.399307][T15250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.399326][T15250] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.399349][T15250] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 382.399371][T15250] RDX: 0000000000000004 RSI: 0000200000007880 RDI: 0000000000000003 [ 382.399385][T15250] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 382.399398][T15250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.399410][T15250] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 382.399444][T15250] [ 382.866398][T15246] syzkaller0: entered promiscuous mode [ 382.872027][T15246] syzkaller0: entered allmulticast mode [ 382.962352][T15244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 382.973953][T15244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.045582][T15268] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2811'. [ 384.646728][T15263] 8021q: VLANs not supported on ip6_vti0 [ 384.736703][T15244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.757615][T15244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.844355][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 384.873799][T15284] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2816'. [ 384.905030][T15244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.926642][T15244] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.985022][T15293] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.157082][ T137] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.184275][ T137] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.241074][ T137] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.266116][ T137] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.308135][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2824'. [ 385.340608][ T137] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.351914][ T137] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.373058][ T137] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 385.382089][ T137] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.529804][T15315] syzkaller0: entered promiscuous mode [ 385.535854][T15315] syzkaller0: entered allmulticast mode [ 385.608043][T15324] netlink: 'syz.2.2833': attribute type 1 has an invalid length. [ 385.650270][T15324] bond10: entered promiscuous mode [ 385.658009][T15324] 8021q: adding VLAN 0 to HW filter on device bond10 [ 385.674222][T15328] unsupported nla_type 33542 [ 385.695729][T15324] macvtap1: entered allmulticast mode [ 385.719043][T15324] bond10: (slave bridge5): making interface the new active one [ 385.727064][T15324] bridge5: entered promiscuous mode [ 385.734548][T15324] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 385.899948][T15340] netlink: 'syz.0.2837': attribute type 10 has an invalid length. [ 385.937193][T15340] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 385.968282][T15343] netlink: 'syz.2.2838': attribute type 58 has an invalid length. [ 386.029939][T15345] FAULT_INJECTION: forcing a failure. [ 386.029939][T15345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.044042][T15343] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2838'. [ 386.057887][T15345] CPU: 1 UID: 0 PID: 15345 Comm: syz.0.2839 Not tainted syzkaller #0 PREEMPT(full) [ 386.057918][T15345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.057932][T15345] Call Trace: [ 386.057940][T15345] [ 386.057949][T15345] dump_stack_lvl+0xe8/0x150 [ 386.057984][T15345] should_fail_ex+0x412/0x560 [ 386.058024][T15345] _copy_to_user+0x31/0xb0 [ 386.058052][T15345] simple_read_from_buffer+0xe1/0x170 [ 386.058091][T15345] proc_fail_nth_read+0x1bb/0x230 [ 386.058126][T15345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.058162][T15345] ? rw_verify_area+0x2a6/0x4d0 [ 386.058186][T15345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 386.058219][T15345] vfs_read+0x20c/0xa70 [ 386.058240][T15345] ? fdget_pos+0x246/0x320 [ 386.058265][T15345] ? __pfx___mutex_lock+0x10/0x10 [ 386.058291][T15345] ? __pfx_vfs_read+0x10/0x10 [ 386.058314][T15345] ? __fget_files+0x2a/0x420 [ 386.058350][T15345] ? __fget_files+0x3a0/0x420 [ 386.058382][T15345] ? __fget_files+0x2a/0x420 [ 386.058422][T15345] ksys_read+0x150/0x270 [ 386.058449][T15345] ? __pfx_ksys_read+0x10/0x10 [ 386.058484][T15345] do_syscall_64+0x14d/0xf80 [ 386.058509][T15345] ? trace_irq_disable+0x3b/0x150 [ 386.058527][T15345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.058549][T15345] ? clear_bhb_loop+0x40/0x90 [ 386.058575][T15345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.058597][T15345] RIP: 0033:0x7fd022b5d04e [ 386.058617][T15345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 386.058634][T15345] RSP: 002b:00007fd023a2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 386.058658][T15345] RAX: ffffffffffffffda RBX: 00007fd023a2c6c0 RCX: 00007fd022b5d04e [ 386.058673][T15345] RDX: 000000000000000f RSI: 00007fd023a2c0a0 RDI: 0000000000000004 [ 386.058687][T15345] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 386.058700][T15345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.058713][T15345] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 386.058759][T15345] [ 386.128405][T15347] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 387.290518][T15388] FAULT_INJECTION: forcing a failure. [ 387.290518][T15388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.305172][T15388] CPU: 1 UID: 0 PID: 15388 Comm: syz.0.2851 Not tainted syzkaller #0 PREEMPT(full) [ 387.305204][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.305216][T15388] Call Trace: [ 387.305223][T15388] [ 387.305232][T15388] dump_stack_lvl+0xe8/0x150 [ 387.305266][T15388] should_fail_ex+0x412/0x560 [ 387.305300][T15388] _copy_from_user+0x2d/0xb0 [ 387.305322][T15388] ___sys_sendmsg+0x1c6/0x360 [ 387.305352][T15388] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.305407][T15388] ? __fget_files+0x2a/0x420 [ 387.305435][T15388] ? __fget_files+0x3a0/0x420 [ 387.305472][T15388] __x64_sys_sendmsg+0x1bd/0x2a0 [ 387.305497][T15388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.305529][T15388] ? __pfx_ksys_write+0x10/0x10 [ 387.305561][T15388] do_syscall_64+0x14d/0xf80 [ 387.305583][T15388] ? trace_irq_disable+0x3b/0x150 [ 387.305599][T15388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.305619][T15388] ? clear_bhb_loop+0x40/0x90 [ 387.305642][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.305660][T15388] RIP: 0033:0x7fd022b9c819 [ 387.305679][T15388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.305695][T15388] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.305716][T15388] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 387.305729][T15388] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 387.305741][T15388] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 387.305752][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.305762][T15388] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 387.305792][T15388] [ 387.599797][T15390] FAULT_INJECTION: forcing a failure. [ 387.599797][T15390] name failslab, interval 1, probability 0, space 0, times 0 [ 387.615977][T15390] CPU: 1 UID: 0 PID: 15390 Comm: syz.0.2852 Not tainted syzkaller #0 PREEMPT(full) [ 387.616009][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 387.616032][T15390] Call Trace: [ 387.616041][T15390] [ 387.616050][T15390] dump_stack_lvl+0xe8/0x150 [ 387.616095][T15390] should_fail_ex+0x412/0x560 [ 387.616133][T15390] should_failslab+0xa8/0x100 [ 387.616162][T15390] ? skb_clone+0x212/0x3a0 [ 387.616191][T15390] kmem_cache_alloc_noprof+0x87/0x650 [ 387.616219][T15390] skb_clone+0x212/0x3a0 [ 387.616245][T15390] __netlink_deliver_tap+0x404/0x850 [ 387.616285][T15390] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.616315][T15390] netlink_deliver_tap+0x19c/0x1b0 [ 387.616344][T15390] __netlink_sendskb+0x47/0x90 [ 387.616370][T15390] netlink_dump+0xa6f/0xe80 [ 387.616407][T15390] ? __pfx_netlink_dump+0x10/0x10 [ 387.616458][T15390] __netlink_dump_start+0x5cb/0x7e0 [ 387.616493][T15390] inet_diag_handler_cmd+0x1e0/0x2c0 [ 387.616519][T15390] ? __pfx_inet_diag_handler_cmd+0x10/0x10 [ 387.616540][T15390] ? __pfx_inet_diag_dump_start+0x10/0x10 [ 387.616560][T15390] ? __pfx_inet_diag_dump+0x10/0x10 [ 387.616578][T15390] ? __pfx_inet_diag_dump_done+0x10/0x10 [ 387.616602][T15390] ? sock_diag_lock_handler+0x19/0x290 [ 387.616630][T15390] ? sock_diag_lock_handler+0x19/0x290 [ 387.616663][T15390] sock_diag_rcv_msg+0x4cc/0x600 [ 387.616695][T15390] netlink_rcv_skb+0x232/0x4b0 [ 387.616723][T15390] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 387.616753][T15390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.616794][T15390] ? netlink_deliver_tap+0x2e/0x1b0 [ 387.616832][T15390] netlink_unicast+0x80f/0x9b0 [ 387.616867][T15390] ? __pfx_netlink_unicast+0x10/0x10 [ 387.616894][T15390] ? netlink_sendmsg+0x650/0xb40 [ 387.616910][T15390] ? skb_put+0x11b/0x210 [ 387.616932][T15390] netlink_sendmsg+0x813/0xb40 [ 387.616957][T15390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.616977][T15390] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.617007][T15390] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 387.617029][T15390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.617046][T15390] sock_write_iter+0x49b/0x4f0 [ 387.617075][T15390] ? __pfx_sock_write_iter+0x10/0x10 [ 387.617113][T15390] ? trace_irq_disable+0x3b/0x150 [ 387.617140][T15390] do_iter_readv_writev+0x619/0x8c0 [ 387.617165][T15390] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 387.617191][T15390] ? bpf_lsm_file_permission+0x9/0x20 [ 387.617214][T15390] ? security_file_permission+0x75/0x260 [ 387.617237][T15390] ? rw_verify_area+0x255/0x4d0 [ 387.617260][T15390] vfs_writev+0x33c/0x990 [ 387.617293][T15390] ? __pfx_vfs_writev+0x10/0x10 [ 387.617331][T15390] ? __fget_files+0x2a/0x420 [ 387.617363][T15390] ? __fget_files+0x3a0/0x420 [ 387.617388][T15390] ? __fget_files+0x2a/0x420 [ 387.617423][T15390] do_writev+0x154/0x2e0 [ 387.617449][T15390] ? __pfx_do_writev+0x10/0x10 [ 387.617485][T15390] do_syscall_64+0x14d/0xf80 [ 387.617507][T15390] ? trace_irq_disable+0x3b/0x150 [ 387.617522][T15390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.617541][T15390] ? clear_bhb_loop+0x40/0x90 [ 387.617563][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.617581][T15390] RIP: 0033:0x7fd022b9c819 [ 387.617600][T15390] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.617616][T15390] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 387.617636][T15390] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 387.617649][T15390] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 387.617660][T15390] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 387.617671][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.617682][T15390] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 387.617710][T15390] [ 389.066782][T15403] syzkaller0: entered promiscuous mode [ 389.072338][T15403] syzkaller0: entered allmulticast mode [ 389.204096][T15414] SET target dimension over the limit! [ 390.815960][T15433] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 390.824099][T15433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2865'. [ 390.853640][T15433] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2865'. [ 391.039997][T15448] syzkaller0: entered promiscuous mode [ 391.058382][T15448] syzkaller0: entered allmulticast mode [ 391.377977][T15455] syzkaller0: entered promiscuous mode [ 391.384289][T15455] syzkaller0: entered allmulticast mode [ 395.037499][T15521] syzkaller0: entered promiscuous mode [ 395.062342][T15521] syzkaller0: entered allmulticast mode [ 395.089131][T15529] workqueue: name exceeds WQ_NAME_LEN. Truncating to: KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼Ú [ 397.274998][T15589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2904'. [ 397.370657][ T146] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.382303][T15591] syzkaller0: entered promiscuous mode [ 397.391215][T15591] syzkaller0: entered allmulticast mode [ 397.408509][ T146] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.471721][ T146] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.526326][ T146] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.617009][T15610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2909'. [ 399.528738][T15665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2924'. [ 399.958754][T15693] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2934'. [ 400.040906][T15698] netlink: 'syz.3.2936': attribute type 1 has an invalid length. [ 400.108256][T15702] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 400.183992][T15711] netlink: 'syz.2.2938': attribute type 1 has an invalid length. [ 400.273284][T15721] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2935'. [ 400.659889][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2946'. [ 402.012710][T15742] netlink: 'syz.1.2948': attribute type 1 has an invalid length. [ 402.020939][T15742] netlink: 216 bytes leftover after parsing attributes in process `syz.1.2948'. [ 402.399051][T15768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2957'. [ 402.493580][T15772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.505104][T15772] netlink: 'syz.2.2959': attribute type 12 has an invalid length. [ 402.714036][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 402.744453][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2962'. [ 403.116369][T15813] netlink: 'syz.0.2971': attribute type 1 has an invalid length. [ 403.201355][T15813] 8021q: adding VLAN 0 to HW filter on device bond8 [ 403.225227][T15822] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2975'. [ 403.241158][T15821] syzkaller0: entered promiscuous mode [ 403.247176][T15821] syzkaller0: entered allmulticast mode [ 403.324060][T15827] netlink: 'syz.1.2976': attribute type 1 has an invalid length. [ 403.344106][T15823] bond8: (slave veth13): Enslaving as an active interface with a down link [ 403.389580][T15831] macvlan2: entered promiscuous mode [ 403.413380][T15831] macvlan2: entered allmulticast mode [ 403.457957][T15827] 8021q: adding VLAN 0 to HW filter on device bond7 [ 403.576739][T15849] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 403.592192][T15833] bond7: (slave veth11): Enslaving as an active interface with a down link [ 403.611889][T15850] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2980'. [ 403.721927][T15857] openvswitch: netlink: IP tunnel dst address not specified [ 403.861137][T15867] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2990'. [ 404.049888][T15880] ieee802154 phy0 wpan0: encryption failed: -22 [ 404.097667][T15877] syzkaller0: entered promiscuous mode [ 404.113066][T15877] syzkaller0: entered allmulticast mode [ 404.349417][T15890] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2998'. [ 404.410877][T15900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3000'. [ 405.008120][T15919] netlink: 'syz.0.3002': attribute type 16 has an invalid length. [ 405.022299][T15919] netlink: 'syz.0.3002': attribute type 17 has an invalid length. [ 406.151960][T15915] C: renamed from lo [ 406.165440][T15915] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 406.264001][T15917] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.287553][T15917] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.438750][T15919] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 406.586021][T15938] xt_cgroup: path and classid specified [ 406.613493][T15940] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3014'. [ 406.658978][T15942] openvswitch: netlink: Unexpected mask (mask=40040, allowed=10048) [ 406.828743][T15962] ip6tnl0: entered promiscuous mode [ 406.867257][T15962] ip6tnl0: left allmulticast mode [ 406.884799][T15962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 406.929702][T15973] netlink: 'syz.1.3019': attribute type 1 has an invalid length. [ 406.942428][T15971] netlink: 'syz.0.3022': attribute type 2 has an invalid length. [ 406.945304][T15966] netlink: 'syz.3.3023': attribute type 16 has an invalid length. [ 406.959120][T15966] netlink: 'syz.3.3023': attribute type 17 has an invalid length. [ 407.004900][T15966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.015395][T15966] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.026449][T15966] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.311651][T15993] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 407.329424][T15993] bond1: (slave lo): making interface the new active one [ 407.337542][T15993] bond1: (slave lo): Enslaving as an active interface with an up link [ 407.347494][T15993] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 407.364128][T15994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.371974][T15994] batadv0: mtu less than device minimum [ 407.380479][T15994] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 407.437380][T15994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.695530][T15949] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 409.920270][T16012] __nla_validate_parse: 5 callbacks suppressed [ 409.920294][T16012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 410.190173][T16029] netlink: 'syz.4.3039': attribute type 3 has an invalid length. [ 410.209916][T16029] netlink: 'syz.4.3039': attribute type 3 has an invalid length. [ 410.349920][T16038] sctp: [Deprecated]: syz.3.3044 (pid 16038) Use of int in max_burst socket option. [ 410.349920][T16038] Use struct sctp_assoc_value instead [ 410.552032][T16051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3050'. [ 410.653559][T16054] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.3051'. [ 410.943497][T16063] bridge0: port 3(gretap0) entered blocking state [ 410.952478][T16063] bridge0: port 3(gretap0) entered disabled state [ 410.975753][T16063] gretap0: entered allmulticast mode [ 411.011617][T16063] bridge0: port 3(gretap0) entered blocking state [ 411.018279][T16063] bridge0: port 3(gretap0) entered forwarding state [ 411.178655][T16082] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3064'. [ 411.676388][T16093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3068'. [ 411.926053][T16104] netlink: 'syz.4.3072': attribute type 1 has an invalid length. [ 411.953167][T16104] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3072'. [ 412.053851][T16112] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3075'. [ 412.130500][T16110] syzkaller0: entered promiscuous mode [ 412.136620][T16110] syzkaller0: entered allmulticast mode [ 412.321732][T16093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3068'. [ 412.398258][T16126] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3080'. [ 412.407570][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3079'. [ 413.867555][T16143] syzkaller1: entered promiscuous mode [ 413.888489][T16143] syzkaller1: entered allmulticast mode [ 413.903409][T16142] netlink: 'syz.1.3083': attribute type 61 has an invalid length. [ 414.017500][T16155] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1347432550/1347432552 [ 414.027209][T16155] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1347432550/1347432551 [ 414.049991][T16155] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1347432550/1347432552 [ 414.074213][T16155] tipc: Failed to remove unknown binding: 66,0,0/2886997007:1347432550/1347432551 [ 414.339724][T16174] net_ratelimit: 18 callbacks suppressed [ 414.339747][T16174] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 414.367318][T16172] syzkaller0: entered promiscuous mode [ 414.374266][T16172] syzkaller0: entered allmulticast mode [ 416.003789][T16194] __nla_validate_parse: 2 callbacks suppressed [ 416.003810][T16194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3101'. [ 416.162404][T16207] FAULT_INJECTION: forcing a failure. [ 416.162404][T16207] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.218469][T16207] CPU: 0 UID: 0 PID: 16207 Comm: syz.4.3106 Not tainted syzkaller #0 PREEMPT(full) [ 416.218499][T16207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.218513][T16207] Call Trace: [ 416.218522][T16207] [ 416.218531][T16207] dump_stack_lvl+0xe8/0x150 [ 416.218569][T16207] should_fail_ex+0x412/0x560 [ 416.218608][T16207] _copy_from_iter+0x1d3/0x1670 [ 416.218646][T16207] ? rcu_is_watching+0x15/0xb0 [ 416.218683][T16207] ? __pfx__copy_from_iter+0x10/0x10 [ 416.218726][T16207] ? netlink_sendmsg+0x650/0xb40 [ 416.218754][T16207] ? skb_put+0x11b/0x210 [ 416.218798][T16207] netlink_sendmsg+0x6c0/0xb40 [ 416.218829][T16207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.218854][T16207] ? aa_sock_msg_perm+0xf1/0x1b0 [ 416.218889][T16207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.218918][T16207] ____sys_sendmsg+0x972/0x9f0 [ 416.218955][T16207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.218990][T16207] ? import_iovec+0x73/0xa0 [ 416.219016][T16207] ___sys_sendmsg+0x2a5/0x360 [ 416.219049][T16207] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.219112][T16207] ? __fget_files+0x2a/0x420 [ 416.219145][T16207] ? __fget_files+0x3a0/0x420 [ 416.219186][T16207] __x64_sys_sendmsg+0x1bd/0x2a0 [ 416.219213][T16207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.219248][T16207] ? __pfx_ksys_write+0x10/0x10 [ 416.219285][T16207] do_syscall_64+0x14d/0xf80 [ 416.219309][T16207] ? trace_irq_disable+0x3b/0x150 [ 416.219327][T16207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.219347][T16207] ? clear_bhb_loop+0x40/0x90 [ 416.219374][T16207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.219396][T16207] RIP: 0033:0x7fdf8119c819 [ 416.219415][T16207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.219434][T16207] RSP: 002b:00007fdf8213b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.219456][T16207] RAX: ffffffffffffffda RBX: 00007fdf81415fa0 RCX: 00007fdf8119c819 [ 416.219472][T16207] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 416.219491][T16207] RBP: 00007fdf8213b090 R08: 0000000000000000 R09: 0000000000000000 [ 416.219504][T16207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.219517][T16207] R13: 00007fdf81416038 R14: 00007fdf81415fa0 R15: 00007ffe7efe9a38 [ 416.219550][T16207] [ 416.235556][T16215] openvswitch: netlink: IP tunnel dst address not specified [ 416.770918][T16234] smc: net device team0 applied user defined pnetid SYZ2 [ 417.063102][T16257] FAULT_INJECTION: forcing a failure. [ 417.063102][T16257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.081546][T16257] CPU: 0 UID: 0 PID: 16257 Comm: syz.0.3124 Not tainted syzkaller #0 PREEMPT(full) [ 417.081578][T16257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 417.081592][T16257] Call Trace: [ 417.081600][T16257] [ 417.081609][T16257] dump_stack_lvl+0xe8/0x150 [ 417.081645][T16257] should_fail_ex+0x412/0x560 [ 417.081683][T16257] _copy_from_iter+0x1d3/0x1670 [ 417.081722][T16257] ? rcu_is_watching+0x15/0xb0 [ 417.081758][T16257] ? __pfx__copy_from_iter+0x10/0x10 [ 417.081801][T16257] ? netlink_sendmsg+0x650/0xb40 [ 417.081821][T16257] ? skb_put+0x11b/0x210 [ 417.081848][T16257] netlink_sendmsg+0x6c0/0xb40 [ 417.081879][T16257] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.081904][T16257] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.081938][T16257] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.081966][T16257] ____sys_sendmsg+0x972/0x9f0 [ 417.082002][T16257] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.082037][T16257] ? import_iovec+0x73/0xa0 [ 417.082064][T16257] ___sys_sendmsg+0x2a5/0x360 [ 417.082097][T16257] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.082159][T16257] ? __fget_files+0x2a/0x420 [ 417.082191][T16257] ? __fget_files+0x3a0/0x420 [ 417.082234][T16257] __x64_sys_sendmsg+0x1bd/0x2a0 [ 417.082264][T16257] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.082301][T16257] ? __pfx_ksys_write+0x10/0x10 [ 417.082338][T16257] do_syscall_64+0x14d/0xf80 [ 417.082363][T16257] ? trace_irq_disable+0x3b/0x150 [ 417.082383][T16257] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.082405][T16257] ? clear_bhb_loop+0x40/0x90 [ 417.082439][T16257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.082461][T16257] RIP: 0033:0x7fd022b9c819 [ 417.082482][T16257] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.082500][T16257] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.082524][T16257] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 417.082539][T16257] RDX: 00000000040080c0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 417.082553][T16257] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 417.082567][T16257] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.082580][T16257] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 417.082615][T16257] [ 417.418568][T16265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3128'. [ 417.444237][T16265] openvswitch: netlink: Flow key attr not present in new flow. [ 417.699551][T16281] netlink: 412 bytes leftover after parsing attributes in process `syz.1.3133'. [ 417.734239][T16281] netlink: 'syz.1.3133': attribute type 1 has an invalid length. [ 417.742254][T16281] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3133'. [ 417.800220][T16287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.839541][T16287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.957309][T16287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 417.968106][T16287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.005024][T16296] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3140'. [ 418.065600][T16287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.083557][T16287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.209575][T16287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.282975][T16287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.416382][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3144'. [ 418.447476][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3144'. [ 418.468990][T16307] veth0_virt_wifi: entered promiscuous mode [ 418.550151][ T1250] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.560783][ T1250] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.653572][ T1250] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.673054][ T1250] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.716027][ T1250] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.751050][T16333] netlink: 'syz.0.3151': attribute type 1 has an invalid length. [ 418.762752][T16330] netlink: 'syz.4.3150': attribute type 6 has an invalid length. [ 418.771253][ T1250] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.795953][T16336] netlink: 'syz.4.3150': attribute type 1 has an invalid length. [ 418.804260][T16336] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3150'. [ 419.004529][T16345] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3154'. [ 419.177738][T16348] bond11: Unable to set peer notification delay as MII monitoring is disabled [ 419.261838][T16348] bond11 (unregistering): Released all slaves [ 419.512786][T16373] FAULT_INJECTION: forcing a failure. [ 419.512786][T16373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.573555][T16373] CPU: 0 UID: 0 PID: 16373 Comm: syz.4.3160 Not tainted syzkaller #0 PREEMPT(full) [ 419.573588][T16373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.573601][T16373] Call Trace: [ 419.573610][T16373] [ 419.573619][T16373] dump_stack_lvl+0xe8/0x150 [ 419.573656][T16373] should_fail_ex+0x412/0x560 [ 419.573694][T16373] _copy_to_user+0x31/0xb0 [ 419.573722][T16373] simple_read_from_buffer+0xe1/0x170 [ 419.573760][T16373] proc_fail_nth_read+0x1bb/0x230 [ 419.573796][T16373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.573832][T16373] ? rw_verify_area+0x2a6/0x4d0 [ 419.573855][T16373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.573888][T16373] vfs_read+0x20c/0xa70 [ 419.573910][T16373] ? fdget_pos+0x246/0x320 [ 419.573935][T16373] ? __pfx___mutex_lock+0x10/0x10 [ 419.573963][T16373] ? __pfx_vfs_read+0x10/0x10 [ 419.573988][T16373] ? __fget_files+0x2a/0x420 [ 419.574025][T16373] ? __fget_files+0x3a0/0x420 [ 419.574056][T16373] ? __fget_files+0x2a/0x420 [ 419.574099][T16373] ksys_read+0x150/0x270 [ 419.574126][T16373] ? __pfx_ksys_read+0x10/0x10 [ 419.574163][T16373] do_syscall_64+0x14d/0xf80 [ 419.574197][T16373] ? trace_irq_disable+0x3b/0x150 [ 419.574215][T16373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.574238][T16373] ? clear_bhb_loop+0x40/0x90 [ 419.574266][T16373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.574288][T16373] RIP: 0033:0x7fdf8115d04e [ 419.574309][T16373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.574327][T16373] RSP: 002b:00007fdf8213afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.574350][T16373] RAX: ffffffffffffffda RBX: 00007fdf8213b6c0 RCX: 00007fdf8115d04e [ 419.574366][T16373] RDX: 000000000000000f RSI: 00007fdf8213b0a0 RDI: 0000000000000004 [ 419.574380][T16373] RBP: 00007fdf8213b090 R08: 0000000000000000 R09: 0000000000000000 [ 419.574392][T16373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.574405][T16373] R13: 00007fdf81416038 R14: 00007fdf81415fa0 R15: 00007ffe7efe9a38 [ 419.574440][T16373] [ 419.878665][T16381] netlink: 'syz.1.3162': attribute type 10 has an invalid length. [ 420.039371][T16387] netlink: 'syz.0.3165': attribute type 1 has an invalid length. [ 420.081037][T16392] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3167'. [ 420.118441][T16393] sctp: [Deprecated]: syz.1.3166 (pid 16393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.118441][T16393] Use struct sctp_sack_info instead [ 420.206766][T16397] netlink: 'syz.2.3169': attribute type 4 has an invalid length. [ 420.484660][T16283] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.498412][T16283] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.600418][T16283] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.629223][T16283] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.749191][T16283] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.782034][T16283] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.905196][ T48] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.914441][ T48] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.956206][T16441] netlink: 'syz.2.3182': attribute type 4 has an invalid length. [ 420.962441][ T48] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 420.972627][ T48] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.048042][ T137] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.058417][ T137] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.116032][ T137] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.153122][ T137] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.271381][T16455] __nla_validate_parse: 2 callbacks suppressed [ 421.271407][T16455] netlink: 165 bytes leftover after parsing attributes in process `syz.4.3190'. [ 421.354738][T16462] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.466911][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3194'. [ 421.787124][T16487] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 421.805280][T16490] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3203'. [ 421.818687][T16487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3202'. [ 421.834790][T16493] atomic_op ffff88805866b198 conn xmit_atomic 0000000000000000 [ 421.883808][T16493] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3204'. [ 421.947132][T16497] netlink: 'syz.4.3205': attribute type 10 has an invalid length. [ 421.993110][T16497] vxcan1: left allmulticast mode [ 422.009226][T16497] vxcan1: entered allmulticast mode [ 422.054520][T16497] team0: Port device vxcan1 added [ 422.074581][T16508] veth0: entered promiscuous mode [ 422.085267][T16508] veth0: left promiscuous mode [ 422.263664][T16510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3210'. [ 422.439167][T16526] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3216'. [ 422.730591][T16545] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 422.902755][T16561] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3228'. [ 422.960776][T16554] geneve4: entered promiscuous mode [ 422.988343][T16554] geneve4: entered allmulticast mode [ 423.015942][T16563] xt_l2tp: v2 tid > 0xffff: 1114244 [ 423.025936][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 19999 - 0 [ 423.048455][T16554] vxcan1: left allmulticast mode [ 423.059224][T16554] team0: Port device vxcan1 removed [ 423.074184][T16554] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 423.115043][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 19999 - 0 [ 423.126705][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 19999 - 0 [ 423.155162][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 19999 - 0 [ 423.214825][T16574] netlink: 'syz.2.3231': attribute type 4 has an invalid length. [ 423.247415][T16579] 8021q: VLANs not supported on sit0 [ 423.265890][T16578] 8021q: VLANs not supported on sit0 [ 423.292110][T16579] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'. [ 423.396632][T16579] bond9: Invalid ad_actor_system MAC address. [ 423.427414][T16579] bond9: option ad_actor_system: invalid value (1) [ 423.466717][T16579] bond9 (unregistering): Released all slaves [ 423.578448][T16597] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3241'. [ 423.740360][T16607] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 423.783816][T16607] openvswitch: netlink: Message has -2 unknown bytes. [ 424.024990][T16619] netlink: 'syz.0.3250': attribute type 1 has an invalid length. [ 424.856281][T16665] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 424.945797][T16652] bridge0: entered promiscuous mode [ 424.984640][T16652] bridge0: left promiscuous mode [ 425.100562][T16673] netlink: 'syz.0.3265': attribute type 4 has an invalid length. [ 425.504553][T16691] netlink: 'syz.2.3274': attribute type 1 has an invalid length. [ 425.527762][T16691] netlink: 'syz.2.3274': attribute type 2 has an invalid length. [ 425.544483][T16691] nft_compat: unsupported protocol 0 [ 425.707077][T16702] netlink: 'syz.1.3279': attribute type 4 has an invalid length. [ 425.734654][T16700] bridge0: entered promiscuous mode [ 425.741582][T16700] bridge0: left promiscuous mode [ 425.810300][T16704] veth13: entered promiscuous mode [ 425.981261][T16717] FAULT_INJECTION: forcing a failure. [ 425.981261][T16717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.998268][T16717] CPU: 0 UID: 0 PID: 16717 Comm: syz.2.3285 Not tainted syzkaller #0 PREEMPT(full) [ 425.998299][T16717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.998312][T16717] Call Trace: [ 425.998321][T16717] [ 425.998330][T16717] dump_stack_lvl+0xe8/0x150 [ 425.998366][T16717] should_fail_ex+0x412/0x560 [ 425.998403][T16717] _copy_from_user+0x2d/0xb0 [ 425.998429][T16717] ___sys_sendmsg+0x1c6/0x360 [ 425.998461][T16717] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.998525][T16717] ? __fget_files+0x2a/0x420 [ 425.998556][T16717] ? __fget_files+0x3a0/0x420 [ 425.998600][T16717] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.998628][T16717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.998665][T16717] ? __pfx_ksys_write+0x10/0x10 [ 425.998702][T16717] do_syscall_64+0x14d/0xf80 [ 425.998726][T16717] ? trace_irq_disable+0x3b/0x150 [ 425.998745][T16717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.998767][T16717] ? clear_bhb_loop+0x40/0x90 [ 425.998794][T16717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.998815][T16717] RIP: 0033:0x7f0476f9c819 [ 425.998835][T16717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.998854][T16717] RSP: 002b:00007f0477e1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.998876][T16717] RAX: ffffffffffffffda RBX: 00007f0477215fa0 RCX: 00007f0476f9c819 [ 425.998891][T16717] RDX: 0000000004004080 RSI: 0000200000000280 RDI: 0000000000000003 [ 425.998905][T16717] RBP: 00007f0477e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 425.998918][T16717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.998932][T16717] R13: 00007f0477216038 R14: 00007f0477215fa0 R15: 00007ffee506f468 [ 425.998966][T16717] [ 426.507562][T16736] xt_hashlimit: size too large, truncated to 1048576 [ 426.937831][T16756] __nla_validate_parse: 16 callbacks suppressed [ 426.937853][T16756] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3298'. [ 427.269944][T16768] wireguard0: entered promiscuous mode [ 427.279097][T16768] wireguard0: entered allmulticast mode [ 427.297208][T16768] team0: Port device wireguard0 added [ 427.635472][T16786] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3309'. [ 427.725032][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3309'. [ 427.756243][T16786] openvswitch: netlink: Unknown nsh attribute 0 [ 427.898804][T16795] bond8: Removing last ns target with arp_interval on [ 427.976274][T16803] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3316'. [ 427.985737][T16803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3316'. [ 428.019670][T16803] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3316'. [ 428.290254][T16825] vlan3: entered promiscuous mode [ 428.303454][T16825] vlan3: entered allmulticast mode [ 428.413331][T16835] netlink: 576 bytes leftover after parsing attributes in process `syz.3.3318'. [ 428.731656][T16835] xfrm0: left promiscuous mode [ 428.747644][T16835] xfrm0: left allmulticast mode [ 429.186705][T16863] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3335'. [ 429.303147][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'. [ 429.343851][T16873] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3338'. [ 429.486598][T16885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.497806][T16886] netlink: 'syz.4.3343': attribute type 12 has an invalid length. [ 429.521625][T16890] netlink: 'syz.1.3344': attribute type 1 has an invalid length. [ 429.548219][T16885] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.584890][T16886] bond7: option primary_reselect: invalid value (255) [ 429.610069][T16886] bond7 (unregistering): Released all slaves [ 429.628741][T16894] openvswitch: netlink: IP tunnel dst address not specified [ 429.834221][T16907] FAULT_INJECTION: forcing a failure. [ 429.834221][T16907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 429.897902][T16907] CPU: 0 UID: 0 PID: 16907 Comm: syz.2.3349 Not tainted syzkaller #0 PREEMPT(full) [ 429.897934][T16907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 429.897948][T16907] Call Trace: [ 429.897957][T16907] [ 429.897966][T16907] dump_stack_lvl+0xe8/0x150 [ 429.898003][T16907] should_fail_ex+0x412/0x560 [ 429.898041][T16907] _copy_from_user+0x2d/0xb0 [ 429.898067][T16907] ax25_rt_ioctl+0x1ae/0x12d0 [ 429.898110][T16907] ? __pfx_ax25_rt_ioctl+0x10/0x10 [ 429.898145][T16907] ? do_raw_spin_lock+0x12b/0x2f0 [ 429.898181][T16907] ? bpf_lsm_capable+0x9/0x20 [ 429.898216][T16907] ? security_capable+0x7e/0x2c0 [ 429.898255][T16907] ax25_ioctl+0x8af/0xd40 [ 429.898286][T16907] ? __pfx_ax25_ioctl+0x10/0x10 [ 429.898313][T16907] ? tomoyo_path_number_perm+0x219/0x630 [ 429.898345][T16907] ? tomoyo_path_number_perm+0x219/0x630 [ 429.898378][T16907] ? do_vfs_ioctl+0x1166/0x1530 [ 429.898408][T16907] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 429.898442][T16907] sock_do_ioctl+0x101/0x320 [ 429.898477][T16907] ? __pfx_sock_do_ioctl+0x10/0x10 [ 429.898505][T16907] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 429.898551][T16907] sock_ioctl+0x5c6/0x7f0 [ 429.898583][T16907] ? __pfx_sock_ioctl+0x10/0x10 [ 429.898613][T16907] ? __fget_files+0x2a/0x420 [ 429.898645][T16907] ? __fget_files+0x3a0/0x420 [ 429.898675][T16907] ? __fget_files+0x2a/0x420 [ 429.898710][T16907] ? bpf_lsm_file_ioctl+0x9/0x20 [ 429.898739][T16907] ? __pfx_sock_ioctl+0x10/0x10 [ 429.898776][T16907] __se_sys_ioctl+0xfc/0x170 [ 429.898805][T16907] do_syscall_64+0x14d/0xf80 [ 429.898830][T16907] ? trace_irq_disable+0x3b/0x150 [ 429.898849][T16907] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.898871][T16907] ? clear_bhb_loop+0x40/0x90 [ 429.898899][T16907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.898920][T16907] RIP: 0033:0x7f0476f9c819 [ 429.898941][T16907] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.898960][T16907] RSP: 002b:00007f0477e1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.898983][T16907] RAX: ffffffffffffffda RBX: 00007f0477215fa0 RCX: 00007f0476f9c819 [ 429.898999][T16907] RDX: 0000200000000f40 RSI: 000000000000890b RDI: 0000000000000004 [ 429.899013][T16907] RBP: 00007f0477e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 429.899026][T16907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.899039][T16907] R13: 00007f0477216038 R14: 00007f0477215fa0 R15: 00007ffee506f468 [ 429.899073][T16907] [ 430.319163][T16921] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 430.458975][T16928] openvswitch: netlink: Message has 8 unknown bytes. [ 430.554792][T16933] l2tp_ppp: sess 2/0: no socket in recv [ 430.657552][T16937] pim6reg527: entered allmulticast mode [ 430.679202][T16939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.106976][T16957] team0: Port device team_slave_0 removed [ 431.627678][T16983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.673019][T16983] bond0: (slave rose0): Enslaving as an active interface with an up link [ 432.032811][T16996] FAULT_INJECTION: forcing a failure. [ 432.032811][T16996] name failslab, interval 1, probability 0, space 0, times 0 [ 432.078050][T16996] CPU: 0 UID: 0 PID: 16996 Comm: syz.1.3384 Not tainted syzkaller #0 PREEMPT(full) [ 432.078082][T16996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.078095][T16996] Call Trace: [ 432.078103][T16996] [ 432.078111][T16996] dump_stack_lvl+0xe8/0x150 [ 432.078147][T16996] should_fail_ex+0x412/0x560 [ 432.078186][T16996] should_failslab+0xa8/0x100 [ 432.078217][T16996] __kmalloc_noprof+0xe8/0x760 [ 432.078243][T16996] ? tomoyo_encode+0x28b/0x550 [ 432.078269][T16996] tomoyo_encode+0x28b/0x550 [ 432.078306][T16996] tomoyo_realpath_from_path+0x58d/0x5d0 [ 432.078339][T16996] ? tomoyo_path_number_perm+0x219/0x630 [ 432.078368][T16996] tomoyo_path_number_perm+0x246/0x630 [ 432.078400][T16996] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 432.078431][T16996] ? __lock_acquire+0x6b5/0x2cf0 [ 432.078478][T16996] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 432.078529][T16996] ? __fget_files+0x2a/0x420 [ 432.078565][T16996] ? __fget_files+0x2a/0x420 [ 432.078596][T16996] ? __fget_files+0x3a0/0x420 [ 432.078627][T16996] ? __fget_files+0x2a/0x420 [ 432.078664][T16996] security_file_ioctl+0xc3/0x2a0 [ 432.078694][T16996] __se_sys_ioctl+0x47/0x170 [ 432.078723][T16996] do_syscall_64+0x14d/0xf80 [ 432.078748][T16996] ? trace_irq_disable+0x3b/0x150 [ 432.078767][T16996] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.078790][T16996] ? clear_bhb_loop+0x40/0x90 [ 432.078816][T16996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.078838][T16996] RIP: 0033:0x7fdf3df9c819 [ 432.078858][T16996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.078877][T16996] RSP: 002b:00007fdf3ed81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.078900][T16996] RAX: ffffffffffffffda RBX: 00007fdf3e215fa0 RCX: 00007fdf3df9c819 [ 432.078915][T16996] RDX: 0000200000000180 RSI: 00000000800448f0 RDI: 0000000000000004 [ 432.078929][T16996] RBP: 00007fdf3ed81090 R08: 0000000000000000 R09: 0000000000000000 [ 432.078942][T16996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.078955][T16996] R13: 00007fdf3e216038 R14: 00007fdf3e215fa0 R15: 00007ffcb60095b8 [ 432.078988][T16996] [ 432.079009][T16996] ERROR: Out of memory at tomoyo_realpath_from_path. [ 432.389055][T16996] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 432.521261][T17013] __nla_validate_parse: 12 callbacks suppressed [ 432.521285][T17013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3389'. [ 432.543139][T17015] netlink: 'syz.4.3388': attribute type 64 has an invalid length. [ 432.569212][T17015] netlink: 5 bytes leftover after parsing attributes in process `syz.4.3388'. [ 432.932048][T17031] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3397'. [ 433.033186][T17031] syzkaller0: entered promiscuous mode [ 433.043125][T17031] syzkaller0: entered allmulticast mode [ 433.605706][T17069] netlink: 'syz.0.3409': attribute type 1 has an invalid length. [ 433.654255][T17071] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.671973][T17069] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3409'. [ 433.686236][T17071] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.010872][T17084] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3416'. [ 434.085986][T17091] netlink: 'syz.2.3418': attribute type 1 has an invalid length. [ 434.094146][T17091] nbd: error processing sock list [ 434.125375][T17094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3417'. [ 434.302728][T17086] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 434.339924][T17092] syzkaller0: entered promiscuous mode [ 434.360542][T17092] syzkaller0: entered allmulticast mode [ 434.425984][T17103] tipc: Enabled bearer , priority 0 [ 434.644419][T17108] syzkaller0: entered promiscuous mode [ 434.650081][T17108] syzkaller0: entered allmulticast mode [ 434.657056][T17108] tipc: Resetting bearer [ 434.734244][T17129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.793824][ T13] tipc: Resetting bearer [ 434.799276][T17129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.842608][T17089] tipc: Resetting bearer [ 436.440530][T17089] tipc: Disabling bearer [ 436.618486][T17169] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3431'. [ 436.931029][T17193] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3436'. [ 437.479562][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3443'. [ 437.537088][T17220] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3443'. [ 437.743731][T17232] netlink: 'syz.3.3446': attribute type 23 has an invalid length. [ 437.999096][T17246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.021361][T17246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.613139][T17272] netlink: 'syz.0.3454': attribute type 4 has an invalid length. [ 439.660073][T17272] netlink: 'syz.0.3454': attribute type 4 has an invalid length. [ 439.747322][T17283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3459'. [ 439.778248][T17283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3459'. [ 439.940735][T17291] "syz.4.3462" (17291) uses obsolete ecb(arc4) skcipher [ 439.993271][T17293] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3463'. [ 440.041755][T17303] netlink: 404 bytes leftover after parsing attributes in process `syz.3.3465'. [ 440.057909][T17293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3463'. [ 440.091460][T17305] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 440.170159][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.176714][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.383267][T17320] netlink: 'syz.3.3472': attribute type 10 has an invalid length. [ 440.540231][T17330] netlink: 'syz.4.3476': attribute type 4 has an invalid length. [ 440.570216][T17330] netlink: 'syz.4.3476': attribute type 1 has an invalid length. [ 440.588674][T17330] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3476'. [ 440.851246][T17347] netlink: 'syz.1.3482': attribute type 1 has an invalid length. [ 441.173087][T17363] tunl0: entered promiscuous mode [ 441.181235][T17363] netlink: 'syz.1.3489': attribute type 3 has an invalid length. [ 441.190135][T17363] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3489'. [ 441.213854][T17363] tipc: Failed to remove unknown binding: 66,0,0/0:2777189807/2777189808 [ 441.289454][T17369] tipc: Failed to remove unknown binding: 66,0,0/0:2777189807/2777189808 [ 441.529933][T17383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3497'. [ 441.918930][T17408] netlink: 'syz.1.3505': attribute type 4 has an invalid length. [ 441.927432][T17408] netlink: 17 bytes leftover after parsing attributes in process `syz.1.3505'. [ 442.287778][T17429] tipc: Enabling of bearer rejected, failed to enable media [ 442.460857][T17435] netlink: 'syz.4.3513': attribute type 16 has an invalid length. [ 442.479971][T17435] C: left allmulticast mode [ 442.524751][T17435] tunl0: left allmulticast mode [ 442.542115][T17435] gre0: left allmulticast mode [ 442.577256][T17435] gretap0: left allmulticast mode [ 442.596618][T17435] erspan0: left allmulticast mode [ 442.604954][T17435] ip_vti0: left allmulticast mode [ 442.611744][T17435] ip6_vti0: left allmulticast mode [ 442.627736][T17435] sit0: left allmulticast mode [ 442.640026][T17435] ip6tnl0: left promiscuous mode [ 442.654756][T17435] ip6gre0: left allmulticast mode [ 442.662809][T17435] syz_tun: left allmulticast mode [ 442.677945][T17435] .`: left allmulticast mode [ 442.686157][T17435] 8021q: adding VLAN 0 to HW filter on device .` [ 442.704965][T17435] team0: left allmulticast mode [ 442.711132][T17435] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.727559][T17435] dummy0: left allmulticast mode [ 442.743883][T17435] nlmon0: left allmulticast mode [ 442.763655][T17435] caif0: left allmulticast mode [ 442.771057][T17435] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.807761][T17450] __nla_validate_parse: 3 callbacks suppressed [ 442.807782][T17450] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3519'. [ 443.108843][T17468] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 443.377151][T17477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3530'. [ 443.413448][T17480] validate_nla: 1 callbacks suppressed [ 443.413470][T17480] netlink: 'syz.1.3531': attribute type 1 has an invalid length. [ 443.430052][T17479] netlink: 'syz.3.3528': attribute type 3 has an invalid length. [ 443.453921][T17479] netlink: 'syz.3.3528': attribute type 1 has an invalid length. [ 443.471765][T17480] 8021q: adding VLAN 0 to HW filter on device bond8 [ 443.491930][T17479] netlink: 204 bytes leftover after parsing attributes in process `syz.3.3528'. [ 443.505967][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3528'. [ 443.515724][T17479] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3528'. [ 443.528753][T17479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3528'. [ 443.539583][T17480] veth0_to_bond: left promiscuous mode [ 443.564264][T17480] veth0_to_bond: entered promiscuous mode [ 443.570937][T17487] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3528'. [ 443.611618][T17480] bond8: (slave veth0_to_bond): making interface the new active one [ 443.647167][T17480] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 443.661967][T17484] bond8: entered promiscuous mode [ 443.667602][T17484] bond8: entered allmulticast mode [ 443.678550][T17489] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3531'. [ 443.780676][T17493] netlink: 'syz.3.3533': attribute type 1 has an invalid length. [ 443.825016][T17493] 8021q: adding VLAN 0 to HW filter on device bond9 [ 443.840061][T17500] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3533'. [ 443.859075][T17498] vlan4: entered allmulticast mode [ 443.871543][T17498] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3534'. [ 443.907101][T17498] .` (unregistering): Released all slaves [ 443.921488][T17493] bridge0: port 3(syz_tun) entered blocking state [ 443.929100][T17493] bridge0: port 3(syz_tun) entered disabled state [ 443.936764][T17493] syz_tun: entered allmulticast mode [ 443.946605][T17493] syz_tun: entered promiscuous mode [ 444.438825][T17528] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 444.589387][T17538] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_cmd_wq": -EINTR [ 445.153737][T17581] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 445.161208][T17581] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 445.430076][T17601] tipc: Enabled bearer , priority 0 [ 445.446937][T17601] syzkaller0: entered promiscuous mode [ 445.474261][T17601] syzkaller0: entered allmulticast mode [ 445.493760][T17601] tipc: Resetting bearer [ 445.521627][T17600] tipc: Resetting bearer [ 445.544608][T17609] netlink: 'syz.4.3575': attribute type 1 has an invalid length. [ 445.569391][T17600] tipc: Disabling bearer [ 445.734408][T17618] FAULT_INJECTION: forcing a failure. [ 445.734408][T17618] name failslab, interval 1, probability 0, space 0, times 0 [ 445.757432][T17618] CPU: 1 UID: 0 PID: 17618 Comm: syz.1.3578 Not tainted syzkaller #0 PREEMPT(full) [ 445.757464][T17618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.757478][T17618] Call Trace: [ 445.757486][T17618] [ 445.757496][T17618] dump_stack_lvl+0xe8/0x150 [ 445.757533][T17618] should_fail_ex+0x412/0x560 [ 445.757571][T17618] should_failslab+0xa8/0x100 [ 445.757602][T17618] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 445.757628][T17618] ? __alloc_skb+0x186/0x7d0 [ 445.757650][T17618] ? __alloc_skb+0x1d0/0x7d0 [ 445.757669][T17618] ? __local_bh_enable_ip+0xd0/0x130 [ 445.757703][T17618] __alloc_skb+0x1d0/0x7d0 [ 445.757732][T17618] netlink_sendmsg+0x5d4/0xb40 [ 445.757764][T17618] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.757790][T17618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 445.757824][T17618] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 445.757852][T17618] ____sys_sendmsg+0x972/0x9f0 [ 445.757887][T17618] ? __pfx_____sys_sendmsg+0x10/0x10 [ 445.757924][T17618] ? import_iovec+0x73/0xa0 [ 445.757953][T17618] ___sys_sendmsg+0x2a5/0x360 [ 445.757985][T17618] ? __pfx____sys_sendmsg+0x10/0x10 [ 445.758051][T17618] ? __fget_files+0x2a/0x420 [ 445.758083][T17618] ? __fget_files+0x3a0/0x420 [ 445.758126][T17618] __x64_sys_sendmsg+0x1bd/0x2a0 [ 445.758156][T17618] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 445.758193][T17618] ? __pfx_ksys_write+0x10/0x10 [ 445.758231][T17618] do_syscall_64+0x14d/0xf80 [ 445.758256][T17618] ? trace_irq_disable+0x3b/0x150 [ 445.758276][T17618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.758298][T17618] ? clear_bhb_loop+0x40/0x90 [ 445.758325][T17618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.758347][T17618] RIP: 0033:0x7fdf3df9c819 [ 445.758377][T17618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.758396][T17618] RSP: 002b:00007fdf3ed81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.758418][T17618] RAX: ffffffffffffffda RBX: 00007fdf3e215fa0 RCX: 00007fdf3df9c819 [ 445.758434][T17618] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 445.758448][T17618] RBP: 00007fdf3ed81090 R08: 0000000000000000 R09: 0000000000000000 [ 445.758461][T17618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.758473][T17618] R13: 00007fdf3e216038 R14: 00007fdf3e215fa0 R15: 00007ffcb60095b8 [ 445.758508][T17618] [ 445.865862][T17620] delete_channel: no stack [ 446.053632][T17620] openvswitch: netlink: Key 2 has unexpected len 1092 expected 4 [ 446.834713][T17661] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.867105][T17687] FAULT_INJECTION: forcing a failure. [ 446.867105][T17687] name failslab, interval 1, probability 0, space 0, times 0 [ 446.913024][T17687] CPU: 1 UID: 0 PID: 17687 Comm: syz.3.3601 Not tainted syzkaller #0 PREEMPT(full) [ 446.913054][T17687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 446.913068][T17687] Call Trace: [ 446.913077][T17687] [ 446.913086][T17687] dump_stack_lvl+0xe8/0x150 [ 446.913122][T17687] should_fail_ex+0x412/0x560 [ 446.913161][T17687] should_failslab+0xa8/0x100 [ 446.913191][T17687] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 446.913226][T17687] ? __alloc_skb+0x1d0/0x7d0 [ 446.913246][T17687] ? __local_bh_enable_ip+0xd0/0x130 [ 446.913280][T17687] __alloc_skb+0x1d0/0x7d0 [ 446.913308][T17687] rtmsg_ifinfo_build_skb+0x84/0x260 [ 446.913348][T17687] rtmsg_ifinfo+0x8c/0x1a0 [ 446.913386][T17687] netif_state_change+0x297/0x3a0 [ 446.913421][T17687] ? __pfx_netif_state_change+0x10/0x10 [ 446.913461][T17687] ? netif_change_flags+0xe8/0x1a0 [ 446.913492][T17687] do_setlink+0xbf6/0x4590 [ 446.913520][T17687] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 446.913556][T17687] ? __pfx_do_setlink+0x10/0x10 [ 446.913581][T17687] ? __lock_acquire+0x6b5/0x2cf0 [ 446.913619][T17687] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 446.913656][T17687] ? __mutex_trylock_common+0x158/0x260 [ 446.913694][T17687] ? __pfx___mutex_trylock_common+0x10/0x10 [ 446.913730][T17687] ? rcu_is_watching+0x15/0xb0 [ 446.913761][T17687] ? trace_contention_end+0x3d/0x150 [ 446.913797][T17687] ? __mutex_lock+0x319/0x1300 [ 446.913823][T17687] ? __pfx___nla_validate_parse+0x10/0x10 [ 446.913857][T17687] ? rtnl_newlink+0x8a1/0x1be0 [ 446.913883][T17687] ? __pfx___mutex_lock+0x10/0x10 [ 446.913922][T17687] ? ns_capable+0x89/0xe0 [ 446.913957][T17687] rtnl_newlink+0x147a/0x1be0 [ 446.913994][T17687] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.914012][T17687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.914076][T17687] ? kasan_quarantine_put+0xbb/0x1f0 [ 446.914100][T17687] ? lockdep_hardirqs_on+0x7a/0x110 [ 446.914130][T17687] ? kmem_cache_free+0x187/0x630 [ 446.914155][T17687] ? nlmon_xmit+0xb0/0x100 [ 446.914195][T17687] ? __lock_acquire+0x6b5/0x2cf0 [ 446.914235][T17687] ? __local_bh_enable_ip+0xd0/0x130 [ 446.914264][T17687] ? lockdep_hardirqs_on+0x7a/0x110 [ 446.914288][T17687] ? __dev_queue_xmit+0x277/0x3890 [ 446.914314][T17687] ? __local_bh_enable_ip+0xd0/0x130 [ 446.914340][T17687] ? __dev_queue_xmit+0x277/0x3890 [ 446.914396][T17687] ? __pfx_rtnl_newlink+0x10/0x10 [ 446.914417][T17687] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 446.914443][T17687] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 446.914463][T17687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.914483][T17687] ? ref_tracker_free+0x693/0x840 [ 446.914514][T17687] ? __copy_skb_header+0xa3/0x4a0 [ 446.914542][T17687] ? __pfx_ref_tracker_free+0x10/0x10 [ 446.914588][T17687] netlink_rcv_skb+0x232/0x4b0 [ 446.914623][T17687] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 446.914647][T17687] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 446.914693][T17687] ? netlink_deliver_tap+0x2e/0x1b0 [ 446.914735][T17687] netlink_unicast+0x80f/0x9b0 [ 446.914775][T17687] ? __pfx_netlink_unicast+0x10/0x10 [ 446.914814][T17687] ? netlink_sendmsg+0x650/0xb40 [ 446.914833][T17687] ? skb_put+0x11b/0x210 [ 446.914860][T17687] netlink_sendmsg+0x813/0xb40 [ 446.914892][T17687] ? __pfx_netlink_sendmsg+0x10/0x10 [ 446.914917][T17687] ? aa_sock_msg_perm+0xf1/0x1b0 [ 446.914952][T17687] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 446.914980][T17687] ____sys_sendmsg+0x972/0x9f0 [ 446.915015][T17687] ? __pfx_____sys_sendmsg+0x10/0x10 [ 446.915052][T17687] ? import_iovec+0x73/0xa0 [ 446.915080][T17687] ___sys_sendmsg+0x2a5/0x360 [ 446.915112][T17687] ? __pfx____sys_sendmsg+0x10/0x10 [ 446.915180][T17687] ? __fget_files+0x2a/0x420 [ 446.915216][T17687] ? __fget_files+0x3a0/0x420 [ 446.915260][T17687] __x64_sys_sendmsg+0x1bd/0x2a0 [ 446.915288][T17687] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 446.915326][T17687] ? __pfx_ksys_write+0x10/0x10 [ 446.915364][T17687] do_syscall_64+0x14d/0xf80 [ 446.915389][T17687] ? trace_irq_disable+0x3b/0x150 [ 446.915407][T17687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.915429][T17687] ? clear_bhb_loop+0x40/0x90 [ 446.915456][T17687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.915478][T17687] RIP: 0033:0x7f0b74f9c819 [ 446.915499][T17687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.915518][T17687] RSP: 002b:00007f0b75e14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 446.915541][T17687] RAX: ffffffffffffffda RBX: 00007f0b75215fa0 RCX: 00007f0b74f9c819 [ 446.915557][T17687] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 446.915571][T17687] RBP: 00007f0b75e14090 R08: 0000000000000000 R09: 0000000000000000 [ 446.915584][T17687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 446.915597][T17687] R13: 00007f0b75216038 R14: 00007f0b75215fa0 R15: 00007ffdb33173a8 [ 446.915633][T17687] [ 447.708400][T17706] FAULT_INJECTION: forcing a failure. [ 447.708400][T17706] name failslab, interval 1, probability 0, space 0, times 0 [ 447.721998][T17706] CPU: 1 UID: 0 PID: 17706 Comm: syz.0.3608 Not tainted syzkaller #0 PREEMPT(full) [ 447.722028][T17706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 447.722041][T17706] Call Trace: [ 447.722049][T17706] [ 447.722058][T17706] dump_stack_lvl+0xe8/0x150 [ 447.722093][T17706] should_fail_ex+0x412/0x560 [ 447.722131][T17706] should_failslab+0xa8/0x100 [ 447.722158][T17706] ? skb_clone+0x212/0x3a0 [ 447.722185][T17706] kmem_cache_alloc_noprof+0x87/0x650 [ 447.722206][T17706] ? __netlink_lookup+0xc6/0x8b0 [ 447.722236][T17706] skb_clone+0x212/0x3a0 [ 447.722265][T17706] __netlink_deliver_tap+0x404/0x850 [ 447.722311][T17706] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.722346][T17706] netlink_deliver_tap+0x19c/0x1b0 [ 447.722382][T17706] netlink_unicast+0x7e3/0x9b0 [ 447.722433][T17706] ? __pfx_netlink_unicast+0x10/0x10 [ 447.722466][T17706] ? netlink_sendmsg+0x650/0xb40 [ 447.722485][T17706] ? skb_put+0x11b/0x210 [ 447.722512][T17706] netlink_sendmsg+0x813/0xb40 [ 447.722544][T17706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.722568][T17706] ? aa_sock_msg_perm+0xf1/0x1b0 [ 447.722602][T17706] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 447.722630][T17706] ____sys_sendmsg+0x972/0x9f0 [ 447.722666][T17706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.722707][T17706] ? import_iovec+0x73/0xa0 [ 447.722732][T17706] ___sys_sendmsg+0x2a5/0x360 [ 447.722763][T17706] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.722825][T17706] ? __fget_files+0x2a/0x420 [ 447.722862][T17706] ? __fget_files+0x3a0/0x420 [ 447.722905][T17706] __x64_sys_sendmsg+0x1bd/0x2a0 [ 447.722934][T17706] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.722971][T17706] ? __pfx_ksys_write+0x10/0x10 [ 447.723009][T17706] do_syscall_64+0x14d/0xf80 [ 447.723035][T17706] ? trace_irq_disable+0x3b/0x150 [ 447.723054][T17706] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.723076][T17706] ? clear_bhb_loop+0x40/0x90 [ 447.723103][T17706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.723124][T17706] RIP: 0033:0x7fd022b9c819 [ 447.723145][T17706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.723164][T17706] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.723187][T17706] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 447.723203][T17706] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 447.723218][T17706] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 447.723231][T17706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.723244][T17706] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 447.723279][T17706] [ 448.119800][T17715] __nla_validate_parse: 5 callbacks suppressed [ 448.119819][T17715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3611'. [ 448.398508][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3616'. [ 448.426756][T17729] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3616'. [ 448.548700][T17737] batadv_slave_1: default FDB implementation only supports local addresses [ 448.560123][T17735] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3619'. [ 448.565414][T17737] netlink: 'syz.0.3620': attribute type 1 has an invalid length. [ 448.587585][T17735] netlink: 'syz.2.3619': attribute type 16 has an invalid length. [ 448.602513][T17735] netlink: 'syz.2.3619': attribute type 17 has an invalid length. [ 448.608642][T17737] netlink: 'syz.0.3620': attribute type 11 has an invalid length. [ 448.636613][T17737] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3620'. [ 448.659004][T17735] bond0: left promiscuous mode [ 448.670416][T17735] bond_slave_0: left promiscuous mode [ 448.684882][T17735] bond_slave_1: left promiscuous mode [ 448.713459][T17735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.748328][T17735] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 448.817228][T17746] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3624'. [ 448.869231][ T6658] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.878280][ T6658] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.934868][ T6658] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.953723][ T6658] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 449.281170][T17781] netlink: 'syz.4.3638': attribute type 32 has an invalid length. [ 449.294251][T17781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 449.322648][T17781] bond7: Setting coupled_control to off (0) [ 449.387417][T17790] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3640'. [ 449.439528][T17791] netlink: 'syz.2.3637': attribute type 11 has an invalid length. [ 449.452793][T17793] netlink: 165 bytes leftover after parsing attributes in process `syz.3.3642'. [ 449.543233][T17791] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3637'. [ 449.545580][T17795] netlink: 'syz.2.3637': attribute type 4 has an invalid length. [ 449.608677][T17801] ip6gre1: entered allmulticast mode [ 449.663017][T17795] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 449.926191][T17825] bond1: (slave lo): Releasing active interface [ 449.953737][T17825] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 450.019337][T17828] FAULT_INJECTION: forcing a failure. [ 450.019337][T17828] name failslab, interval 1, probability 0, space 0, times 0 [ 450.043829][T17828] CPU: 0 UID: 0 PID: 17828 Comm: syz.2.3653 Not tainted syzkaller #0 PREEMPT(full) [ 450.043859][T17828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.043872][T17828] Call Trace: [ 450.043880][T17828] [ 450.043889][T17828] dump_stack_lvl+0xe8/0x150 [ 450.043925][T17828] should_fail_ex+0x412/0x560 [ 450.043962][T17828] should_failslab+0xa8/0x100 [ 450.043991][T17828] ? skb_clone+0x212/0x3a0 [ 450.044019][T17828] kmem_cache_alloc_noprof+0x87/0x650 [ 450.044042][T17828] ? __netlink_lookup+0xc6/0x8b0 [ 450.044072][T17828] skb_clone+0x212/0x3a0 [ 450.044098][T17828] __netlink_deliver_tap+0x404/0x850 [ 450.044140][T17828] ? netlink_deliver_tap+0x2e/0x1b0 [ 450.044172][T17828] netlink_deliver_tap+0x19c/0x1b0 [ 450.044201][T17828] netlink_unicast+0x7e3/0x9b0 [ 450.044234][T17828] ? __pfx_netlink_unicast+0x10/0x10 [ 450.044272][T17828] ? netlink_sendmsg+0x650/0xb40 [ 450.044287][T17828] ? skb_put+0x11b/0x210 [ 450.044309][T17828] netlink_sendmsg+0x813/0xb40 [ 450.044334][T17828] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.044354][T17828] ? aa_sock_msg_perm+0xf1/0x1b0 [ 450.044382][T17828] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 450.044406][T17828] ____sys_sendmsg+0x972/0x9f0 [ 450.044435][T17828] ? __pfx_____sys_sendmsg+0x10/0x10 [ 450.044465][T17828] ? import_iovec+0x73/0xa0 [ 450.044487][T17828] ___sys_sendmsg+0x2a5/0x360 [ 450.044514][T17828] ? __pfx____sys_sendmsg+0x10/0x10 [ 450.044573][T17828] ? __fget_files+0x2a/0x420 [ 450.044599][T17828] ? __fget_files+0x3a0/0x420 [ 450.044634][T17828] __x64_sys_sendmsg+0x1bd/0x2a0 [ 450.044658][T17828] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 450.044688][T17828] ? __pfx_ksys_write+0x10/0x10 [ 450.044719][T17828] do_syscall_64+0x14d/0xf80 [ 450.044740][T17828] ? trace_irq_disable+0x3b/0x150 [ 450.044755][T17828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.044773][T17828] ? clear_bhb_loop+0x40/0x90 [ 450.044795][T17828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.044813][T17828] RIP: 0033:0x7f0476f9c819 [ 450.044830][T17828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.044845][T17828] RSP: 002b:00007f0477e1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.044865][T17828] RAX: ffffffffffffffda RBX: 00007f0477215fa0 RCX: 00007f0476f9c819 [ 450.044878][T17828] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000003 [ 450.044889][T17828] RBP: 00007f0477e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 450.044900][T17828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.044910][T17828] R13: 00007f0477216038 R14: 00007f0477215fa0 R15: 00007ffee506f468 [ 450.044938][T17828] [ 450.329435][T17825] bridge0: port 3(syz_tun) entered disabled state [ 450.337340][T17825] syz_tun: left allmulticast mode [ 450.342603][T17825] syz_tun: left promiscuous mode [ 450.347912][T17825] bridge0: port 3(syz_tun) entered disabled state [ 450.371778][T17825] ú1¾x9ÿ: left allmulticast mode [ 450.382987][T17825] ú1¾x9ÿ: left promiscuous mode [ 450.388140][T17825] bridge0: port 1(ú1¾x9ÿ) entered disabled state [ 450.415502][T17825] bridge_slave_1: left allmulticast mode [ 450.425601][T17825] bridge_slave_1: left promiscuous mode [ 450.431633][T17825] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.450382][T17825] bond0: (slave bond_slave_0): Releasing backup interface [ 450.470882][T17825] bond0: (slave bond_slave_1): Releasing backup interface [ 450.491345][T17825] team0: Port device team_slave_1 removed [ 450.503801][T17825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.512810][T17825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.530049][T17825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.593313][T17827] bridge6: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 450.614617][T17825] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 450.747297][T17844] ip6gre1: entered allmulticast mode [ 450.770492][T17822] workqueue: Failed to create a rescuer kthread for wq "bond11": -EINTR [ 450.958847][T17860] FAULT_INJECTION: forcing a failure. [ 450.958847][T17860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.003994][T17860] CPU: 1 UID: 0 PID: 17860 Comm: syz.3.3664 Not tainted syzkaller #0 PREEMPT(full) [ 451.004029][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.004044][T17860] Call Trace: [ 451.004053][T17860] [ 451.004062][T17860] dump_stack_lvl+0xe8/0x150 [ 451.004099][T17860] should_fail_ex+0x412/0x560 [ 451.004138][T17860] _copy_from_iter+0x1d3/0x1670 [ 451.004177][T17860] ? rcu_is_watching+0x15/0xb0 [ 451.004214][T17860] ? __pfx__copy_from_iter+0x10/0x10 [ 451.004245][T17860] ? __kmalloc_node_track_caller_noprof+0x4f9/0x7b0 [ 451.004280][T17860] ? netlink_sendmsg+0x650/0xb40 [ 451.004299][T17860] ? skb_put+0x11b/0x210 [ 451.004327][T17860] netlink_sendmsg+0x6c0/0xb40 [ 451.004358][T17860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 451.004383][T17860] ? aa_sock_msg_perm+0xf1/0x1b0 [ 451.004415][T17860] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 451.004444][T17860] ____sys_sendmsg+0x972/0x9f0 [ 451.004480][T17860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 451.004516][T17860] ? import_iovec+0x73/0xa0 [ 451.004543][T17860] ___sys_sendmsg+0x2a5/0x360 [ 451.004576][T17860] ? __pfx____sys_sendmsg+0x10/0x10 [ 451.004641][T17860] ? __fget_files+0x2a/0x420 [ 451.004672][T17860] ? __fget_files+0x3a0/0x420 [ 451.004715][T17860] __x64_sys_sendmsg+0x1bd/0x2a0 [ 451.004745][T17860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 451.004782][T17860] ? __pfx_ksys_write+0x10/0x10 [ 451.004820][T17860] do_syscall_64+0x14d/0xf80 [ 451.004845][T17860] ? trace_irq_disable+0x3b/0x150 [ 451.004864][T17860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.004886][T17860] ? clear_bhb_loop+0x40/0x90 [ 451.004919][T17860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.004941][T17860] RIP: 0033:0x7f0b74f9c819 [ 451.004961][T17860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.004981][T17860] RSP: 002b:00007f0b75e14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 451.005004][T17860] RAX: ffffffffffffffda RBX: 00007f0b75215fa0 RCX: 00007f0b74f9c819 [ 451.005020][T17860] RDX: 0000000000048090 RSI: 0000200000000480 RDI: 0000000000000003 [ 451.005034][T17860] RBP: 00007f0b75e14090 R08: 0000000000000000 R09: 0000000000000000 [ 451.005048][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.005060][T17860] R13: 00007f0b75216038 R14: 00007f0b75215fa0 R15: 00007ffdb33173a8 [ 451.005095][T17860] [ 452.118603][T17918] FAULT_INJECTION: forcing a failure. [ 452.118603][T17918] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.165358][T17918] CPU: 0 UID: 0 PID: 17918 Comm: syz.2.3686 Not tainted syzkaller #0 PREEMPT(full) [ 452.165390][T17918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.165403][T17918] Call Trace: [ 452.165412][T17918] [ 452.165422][T17918] dump_stack_lvl+0xe8/0x150 [ 452.165458][T17918] should_fail_ex+0x412/0x560 [ 452.165496][T17918] _copy_from_user+0x2d/0xb0 [ 452.165521][T17918] kstrtouint_from_user+0xd6/0x180 [ 452.165556][T17918] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 452.165607][T17918] proc_fail_nth_write+0x8e/0x210 [ 452.165639][T17918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.165678][T17918] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 452.165713][T17918] vfs_write+0x29a/0xb90 [ 452.165748][T17918] ? __pfx_vfs_write+0x10/0x10 [ 452.165774][T17918] ? __fget_files+0x2a/0x420 [ 452.165823][T17918] ? __fget_files+0x3a0/0x420 [ 452.165855][T17918] ? __fget_files+0x2a/0x420 [ 452.165899][T17918] ksys_write+0x150/0x270 [ 452.165927][T17918] ? __pfx_ksys_write+0x10/0x10 [ 452.165965][T17918] do_syscall_64+0x14d/0xf80 [ 452.165991][T17918] ? trace_irq_disable+0x3b/0x150 [ 452.166011][T17918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.166034][T17918] ? clear_bhb_loop+0x40/0x90 [ 452.166061][T17918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.166083][T17918] RIP: 0033:0x7f0476f5d04e [ 452.166110][T17918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 452.166130][T17918] RSP: 002b:00007f0477e1afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 452.166153][T17918] RAX: ffffffffffffffda RBX: 00007f0477e1b6c0 RCX: 00007f0476f5d04e [ 452.166169][T17918] RDX: 0000000000000001 RSI: 00007f0477e1b0a0 RDI: 0000000000000004 [ 452.166182][T17918] RBP: 00007f0477e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 452.166195][T17918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.166208][T17918] R13: 00007f0477216038 R14: 00007f0477215fa0 R15: 00007ffee506f468 [ 452.166244][T17918] [ 452.582503][T17939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.822758][T17952] 0·: renamed from hsr_slave_1 (while UP) [ 452.861000][T17952] 0·: entered allmulticast mode [ 452.868388][T17952] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 453.201948][T17977] __nla_validate_parse: 10 callbacks suppressed [ 453.201971][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3706'. [ 453.236424][T17977] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3706'. [ 453.401428][T17983] netlink: 'syz.1.3708': attribute type 1 has an invalid length. [ 453.433018][T17983] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3708'. [ 453.724354][T17990] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3711'. [ 453.767758][T17988] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 454.000202][T18007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3717'. [ 454.019248][T18007] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3717'. [ 454.090700][T18009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3718'. [ 454.223931][T18009] macvtap2: entered promiscuous mode [ 454.229600][T18009] vlan0: entered promiscuous mode [ 454.235580][T18009] macvtap2: entered allmulticast mode [ 454.241566][T18009] vlan0: entered allmulticast mode [ 454.252546][T18009] veth0_vlan: entered allmulticast mode [ 454.501258][T18042] netlink: 165 bytes leftover after parsing attributes in process `syz.1.3726'. [ 454.531877][T18042] FAULT_INJECTION: forcing a failure. [ 454.531877][T18042] name failslab, interval 1, probability 0, space 0, times 0 [ 454.547807][T18042] CPU: 1 UID: 0 PID: 18042 Comm: syz.1.3726 Not tainted syzkaller #0 PREEMPT(full) [ 454.547836][T18042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 454.547850][T18042] Call Trace: [ 454.547858][T18042] [ 454.547867][T18042] dump_stack_lvl+0xe8/0x150 [ 454.547903][T18042] should_fail_ex+0x412/0x560 [ 454.547942][T18042] should_failslab+0xa8/0x100 [ 454.547973][T18042] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 454.548001][T18042] ? __alloc_skb+0x1d0/0x7d0 [ 454.548022][T18042] ? __local_bh_enable_ip+0xd0/0x130 [ 454.548056][T18042] __alloc_skb+0x1d0/0x7d0 [ 454.548083][T18042] xfrm_alloc_compat+0x1a6/0x16f0 [ 454.548123][T18042] ? xfrm_get_translator+0x1b/0x240 [ 454.548156][T18042] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 454.548191][T18042] xfrm_nlmsg_multicast+0xda/0x1f0 [ 454.548224][T18042] xfrm_send_policy_notify+0xb54/0x1bf0 [ 454.548261][T18042] ? __xfrm_policy_bysel_ctx+0xdbf/0xdd0 [ 454.548290][T18042] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 454.548331][T18042] ? __local_bh_enable_ip+0xd0/0x130 [ 454.548359][T18042] ? lockdep_hardirqs_on+0x7a/0x110 [ 454.548385][T18042] ? km_policy_notify+0x28/0x200 [ 454.548414][T18042] ? __pfx_xfrm_send_policy_notify+0x10/0x10 [ 454.548443][T18042] km_policy_notify+0x121/0x200 [ 454.548470][T18042] ? km_policy_notify+0x28/0x200 [ 454.548503][T18042] km_policy_expired+0xc5/0x120 [ 454.548533][T18042] ? __pfx_xfrm_policy_bysel_ctx+0x10/0x10 [ 454.548564][T18042] ? __pfx_km_policy_expired+0x10/0x10 [ 454.548601][T18042] ? __lock_acquire+0x6b5/0x2cf0 [ 454.548635][T18042] xfrm_add_pol_expire+0x526/0x940 [ 454.548686][T18042] ? __pfx_xfrm_add_pol_expire+0x10/0x10 [ 454.548719][T18042] ? apparmor_capable+0x126/0x170 [ 454.548751][T18042] ? __nla_parse+0x40/0x60 [ 454.548779][T18042] xfrm_user_rcv_msg+0x7ae/0xc40 [ 454.548816][T18042] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 454.548845][T18042] ? is_bpf_text_address+0x26/0x2b0 [ 454.548910][T18042] ? __pfx___mutex_trylock_common+0x10/0x10 [ 454.548949][T18042] ? rcu_is_watching+0x15/0xb0 [ 454.548980][T18042] ? trace_contention_end+0x3d/0x150 [ 454.549017][T18042] ? __mutex_lock+0x319/0x1300 [ 454.549053][T18042] netlink_rcv_skb+0x232/0x4b0 [ 454.549088][T18042] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 454.549120][T18042] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 454.549171][T18042] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.549204][T18042] ? netlink_deliver_tap+0x2e/0x1b0 [ 454.549240][T18042] xfrm_netlink_rcv+0x79/0x90 [ 454.549271][T18042] netlink_unicast+0x80f/0x9b0 [ 454.549312][T18042] ? __pfx_netlink_unicast+0x10/0x10 [ 454.549346][T18042] ? netlink_sendmsg+0x650/0xb40 [ 454.549365][T18042] ? skb_put+0x11b/0x210 [ 454.549392][T18042] netlink_sendmsg+0x813/0xb40 [ 454.549424][T18042] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.549450][T18042] ? aa_sock_msg_perm+0xf1/0x1b0 [ 454.549483][T18042] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 454.549512][T18042] ____sys_sendmsg+0x972/0x9f0 [ 454.549550][T18042] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.549585][T18042] ? import_iovec+0x73/0xa0 [ 454.549613][T18042] ___sys_sendmsg+0x2a5/0x360 [ 454.549645][T18042] ? __pfx____sys_sendmsg+0x10/0x10 [ 454.549720][T18042] ? __fget_files+0x2a/0x420 [ 454.549751][T18042] ? __fget_files+0x3a0/0x420 [ 454.549796][T18042] __x64_sys_sendmsg+0x1bd/0x2a0 [ 454.549825][T18042] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 454.549862][T18042] ? __pfx_ksys_write+0x10/0x10 [ 454.549902][T18042] do_syscall_64+0x14d/0xf80 [ 454.549927][T18042] ? trace_irq_disable+0x3b/0x150 [ 454.549946][T18042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.549968][T18042] ? clear_bhb_loop+0x40/0x90 [ 454.549995][T18042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.550017][T18042] RIP: 0033:0x7fdf3df9c819 [ 454.550037][T18042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.550055][T18042] RSP: 002b:00007fdf3ed81028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.550078][T18042] RAX: ffffffffffffffda RBX: 00007fdf3e215fa0 RCX: 00007fdf3df9c819 [ 454.550094][T18042] RDX: 0000000000048090 RSI: 0000200000000480 RDI: 0000000000000003 [ 454.550108][T18042] RBP: 00007fdf3ed81090 R08: 0000000000000000 R09: 0000000000000000 [ 454.550121][T18042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.550133][T18042] R13: 00007fdf3e216038 R14: 00007fdf3e215fa0 R15: 00007ffcb60095b8 [ 454.550168][T18042] [ 455.021700][T18048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.031087][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 455.092521][T18051] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 455.165777][T18052] syzkaller1: entered promiscuous mode [ 455.171331][T18052] syzkaller1: entered allmulticast mode [ 455.346602][T18069] syzkaller0: entered promiscuous mode [ 455.352203][T18069] syzkaller0: entered allmulticast mode [ 455.556183][T18081] netlink: 165 bytes leftover after parsing attributes in process `syz.0.3742'. [ 455.578112][T18081] FAULT_INJECTION: forcing a failure. [ 455.578112][T18081] name failslab, interval 1, probability 0, space 0, times 0 [ 455.613270][T18081] CPU: 1 UID: 0 PID: 18081 Comm: syz.0.3742 Not tainted syzkaller #0 PREEMPT(full) [ 455.613303][T18081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 455.613317][T18081] Call Trace: [ 455.613326][T18081] [ 455.613335][T18081] dump_stack_lvl+0xe8/0x150 [ 455.613372][T18081] should_fail_ex+0x412/0x560 [ 455.613411][T18081] should_failslab+0xa8/0x100 [ 455.613439][T18081] ? skb_clone+0x212/0x3a0 [ 455.613467][T18081] kmem_cache_alloc_noprof+0x87/0x650 [ 455.613500][T18081] skb_clone+0x212/0x3a0 [ 455.613532][T18081] __netlink_deliver_tap+0x404/0x850 [ 455.613581][T18081] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.613617][T18081] netlink_deliver_tap+0x19c/0x1b0 [ 455.613652][T18081] netlink_sendskb+0x68/0x140 [ 455.613686][T18081] netlink_unicast+0x3a3/0x9b0 [ 455.613727][T18081] ? __pfx_netlink_unicast+0x10/0x10 [ 455.613769][T18081] netlink_rcv_skb+0x2b6/0x4b0 [ 455.613804][T18081] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 455.613846][T18081] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 455.613897][T18081] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.613931][T18081] ? netlink_deliver_tap+0x2e/0x1b0 [ 455.613968][T18081] xfrm_netlink_rcv+0x79/0x90 [ 455.613999][T18081] netlink_unicast+0x80f/0x9b0 [ 455.614040][T18081] ? __pfx_netlink_unicast+0x10/0x10 [ 455.614073][T18081] ? netlink_sendmsg+0x650/0xb40 [ 455.614093][T18081] ? skb_put+0x11b/0x210 [ 455.614125][T18081] netlink_sendmsg+0x813/0xb40 [ 455.614158][T18081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.614184][T18081] ? aa_sock_msg_perm+0xf1/0x1b0 [ 455.614219][T18081] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.614249][T18081] ____sys_sendmsg+0x972/0x9f0 [ 455.614287][T18081] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.614325][T18081] ? import_iovec+0x73/0xa0 [ 455.614353][T18081] ___sys_sendmsg+0x2a5/0x360 [ 455.614387][T18081] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.614456][T18081] ? __fget_files+0x2a/0x420 [ 455.614489][T18081] ? __fget_files+0x3a0/0x420 [ 455.614534][T18081] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.614565][T18081] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.614604][T18081] ? __pfx_ksys_write+0x10/0x10 [ 455.614643][T18081] do_syscall_64+0x14d/0xf80 [ 455.614668][T18081] ? trace_irq_disable+0x3b/0x150 [ 455.614687][T18081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.614710][T18081] ? clear_bhb_loop+0x40/0x90 [ 455.614737][T18081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.614760][T18081] RIP: 0033:0x7fd022b9c819 [ 455.614780][T18081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.614800][T18081] RSP: 002b:00007fd023a2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.614831][T18081] RAX: ffffffffffffffda RBX: 00007fd022e15fa0 RCX: 00007fd022b9c819 [ 455.614848][T18081] RDX: 0000000000048090 RSI: 0000200000000480 RDI: 0000000000000003 [ 455.614861][T18081] RBP: 00007fd023a2c090 R08: 0000000000000000 R09: 0000000000000000 [ 455.614874][T18081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.614887][T18081] R13: 00007fd022e16038 R14: 00007fd022e15fa0 R15: 00007ffea46dea38 [ 455.614924][T18081] [ 456.443729][T18097] netlink: 'syz.0.3748': attribute type 4 has an invalid length. [ 456.466439][T18097] netlink: 'syz.0.3748': attribute type 1 has an invalid length. [ 456.505851][T18097] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3748'. [ 456.561098][T18100] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.998469][T18125] FAULT_INJECTION: forcing a failure. [ 456.998469][T18125] name failslab, interval 1, probability 0, space 0, times 0 [ 457.028121][T18125] CPU: 0 UID: 0 PID: 18125 Comm: syz.2.3757 Not tainted syzkaller #0 PREEMPT(full) [ 457.028153][T18125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 457.028166][T18125] Call Trace: [ 457.028175][T18125] [ 457.028184][T18125] dump_stack_lvl+0xe8/0x150 [ 457.028222][T18125] should_fail_ex+0x412/0x560 [ 457.028261][T18125] should_failslab+0xa8/0x100 [ 457.028309][T18125] __kmalloc_cache_noprof+0x88/0x660 [ 457.028336][T18125] ? __hw_addr_add_ex+0x1dc/0x650 [ 457.028370][T18125] __hw_addr_add_ex+0x1dc/0x650 [ 457.028397][T18125] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 457.028433][T18125] dev_addr_init+0x15e/0x240 [ 457.028463][T18125] ? __pfx_dev_addr_init+0x10/0x10 [ 457.028494][T18125] ? alloc_netdev_mqs+0xa6/0x11b0 [ 457.028532][T18125] alloc_netdev_mqs+0x2b1/0x11b0 [ 457.028560][T18125] ? __pfx_vxlan_setup+0x10/0x10 [ 457.028593][T18125] rtnl_create_link+0x31f/0xd70 [ 457.028631][T18125] rtnl_newlink_create+0x277/0xb70 [ 457.028656][T18125] ? __pfx___nla_validate_parse+0x10/0x10 [ 457.028691][T18125] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 457.028726][T18125] ? __pfx___mutex_lock+0x10/0x10 [ 457.028765][T18125] ? ns_capable+0x89/0xe0 [ 457.028798][T18125] rtnl_newlink+0x1666/0x1be0 [ 457.028838][T18125] ? __pfx_rtnl_newlink+0x10/0x10 [ 457.028857][T18125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.028921][T18125] ? kasan_quarantine_put+0xbb/0x1f0 [ 457.028945][T18125] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.028976][T18125] ? kmem_cache_free+0x187/0x630 [ 457.029000][T18125] ? nlmon_xmit+0xb0/0x100 [ 457.029041][T18125] ? __lock_acquire+0x6b5/0x2cf0 [ 457.029077][T18125] ? __local_bh_enable_ip+0xd0/0x130 [ 457.029106][T18125] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.029131][T18125] ? __dev_queue_xmit+0x277/0x3890 [ 457.029157][T18125] ? __local_bh_enable_ip+0xd0/0x130 [ 457.029184][T18125] ? __dev_queue_xmit+0x277/0x3890 [ 457.029241][T18125] ? __pfx_rtnl_newlink+0x10/0x10 [ 457.029262][T18125] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 457.029288][T18125] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 457.029309][T18125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.029329][T18125] ? ref_tracker_free+0x693/0x840 [ 457.029361][T18125] ? __copy_skb_header+0xa3/0x4a0 [ 457.029390][T18125] ? __pfx_ref_tracker_free+0x10/0x10 [ 457.029436][T18125] netlink_rcv_skb+0x232/0x4b0 [ 457.029473][T18125] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.029497][T18125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.029545][T18125] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.029593][T18125] netlink_unicast+0x80f/0x9b0 [ 457.029634][T18125] ? __pfx_netlink_unicast+0x10/0x10 [ 457.029668][T18125] ? netlink_sendmsg+0x650/0xb40 [ 457.029687][T18125] ? skb_put+0x11b/0x210 [ 457.029720][T18125] netlink_sendmsg+0x813/0xb40 [ 457.029753][T18125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.029779][T18125] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.029814][T18125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.029843][T18125] ____sys_sendmsg+0x972/0x9f0 [ 457.029880][T18125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.029917][T18125] ? import_iovec+0x73/0xa0 [ 457.029946][T18125] ___sys_sendmsg+0x2a5/0x360 [ 457.029979][T18125] ? __pfx____sys_sendmsg+0x10/0x10 [ 457.030047][T18125] ? __fget_files+0x2a/0x420 [ 457.030078][T18125] ? __fget_files+0x3a0/0x420 [ 457.030122][T18125] __x64_sys_sendmsg+0x1bd/0x2a0 [ 457.030152][T18125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 457.030190][T18125] ? __pfx_ksys_write+0x10/0x10 [ 457.030229][T18125] do_syscall_64+0x14d/0xf80 [ 457.030254][T18125] ? trace_irq_disable+0x3b/0x150 [ 457.030274][T18125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.030295][T18125] ? clear_bhb_loop+0x40/0x90 [ 457.030323][T18125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.030345][T18125] RIP: 0033:0x7f0476f9c819 [ 457.030365][T18125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.030383][T18125] RSP: 002b:00007f0477e1b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.030407][T18125] RAX: ffffffffffffffda RBX: 00007f0477215fa0 RCX: 00007f0476f9c819 [ 457.030424][T18125] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 457.030438][T18125] RBP: 00007f0477e1b090 R08: 0000000000000000 R09: 0000000000000000 [ 457.030451][T18125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 457.030464][T18125] R13: 00007f0477216038 R14: 00007f0477215fa0 R15: 00007ffee506f468 [ 457.030501][T18125] [ 457.642630][ T798] IPVS: starting estimator thread 0... [ 457.733011][T18135] IPVS: using max 26 ests per chain, 62400 per kthread [ 457.766277][T18142] netlink: 'syz.2.3764': attribute type 4 has an invalid length. [ 457.774769][T18142] netlink: 'syz.2.3764': attribute type 1 has an invalid length. [ 457.954306][T18151] syzkaller0: entered promiscuous mode [ 457.959871][T18151] syzkaller0: entered allmulticast mode [ 458.054950][T18151] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 458.299989][T18177] IPVS: Unknown mcast interface: vcan0 [ 458.335168][T18180] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 458.506680][T18191] __nla_validate_parse: 8 callbacks suppressed [ 458.506702][T18191] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3783'. [ 458.558265][T18196] netlink: 'syz.2.3784': attribute type 1 has an invalid length. [ 458.603765][T18196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.633768][T18201] netlink: 'syz.2.3784': attribute type 1 has an invalid length. [ 458.664121][T18201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 458.836990][T18216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3789'. [ 458.888621][T18222] netlink: 'syz.3.3791': attribute type 39 has an invalid length. [ 458.967787][T18225] sctp: [Deprecated]: syz.1.3794 (pid 18225) Use of struct sctp_assoc_value in delayed_ack socket option. [ 458.967787][T18225] Use struct sctp_sack_info instead [ 459.056397][T18227] v: renamed from ip6_vti0 (while UP) [ 459.218973][T18236] ------------[ cut here ]------------ [ 459.224985][T18236] 1 [ 459.225017][T18236] WARNING: net/ipv4/route.c:1275 at ip_rt_bug+0x2d/0x140, CPU#0: syz.2.3798/18236 [ 459.236968][T18236] Modules linked in: [ 459.241248][T18236] CPU: 0 UID: 0 PID: 18236 Comm: syz.2.3798 Not tainted syzkaller #0 PREEMPT(full) [ 459.250804][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.260964][T18236] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 459.266281][T18236] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 0a 5c ba f7 66 90 e8 03 5c ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 2c 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f a6 a6 01 cc 49 [ 459.286106][T18236] RSP: 0018:ffffc9001bb6f1e0 EFLAGS: 00010282 [ 459.292323][T18236] RAX: 9a03d56c4d43a200 RBX: ffff88807d7b08c0 RCX: 0000000080000401 [ 459.300380][T18236] RDX: 0000000000000002 RSI: ffffffff8def989e RDI: ffffffff8c27cb00 [ 459.308576][T18236] RBP: ffffc9001bb6f4e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 459.316671][T18236] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 459.325014][T18236] R13: 0000000000000000 R14: ffff88807d7b08c0 R15: dffffc0000000000 [ 459.333256][T18236] FS: 00007f0477e1b6c0(0000) GS:ffff88812545a000(0000) knlGS:0000000000000000 [ 459.342372][T18236] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.349154][T18236] CR2: 000000110c32b494 CR3: 0000000032afe000 CR4: 00000000003526f0 [ 459.357221][T18236] Call Trace: [ 459.360950][T18236] [ 459.363978][T18236] ip_push_pending_frames+0x8b/0x110 [ 459.369327][T18236] __icmp_send+0x118d/0x1590 [ 459.374052][T18236] ? __icmp_send+0x22b/0x1590 [ 459.378823][T18236] ? __pfx___icmp_send+0x10/0x10 [ 459.383899][T18236] ? ip_route_input_noref+0xad/0x270 [ 459.389256][T18236] ? __pfx_ip_route_input_noref+0x10/0x10 [ 459.395097][T18236] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 459.400447][T18236] ip_options_compile+0x80/0xb0 [ 459.405400][T18236] ip_rcv_finish_core+0xaa2/0x1c00 [ 459.410591][T18236] ip_rcv_finish+0x14c/0x2a0 [ 459.415305][T18236] NF_HOOK+0x336/0x3c0 [ 459.419541][T18236] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.424771][T18236] ? NF_HOOK+0x9e/0x3c0 [ 459.428988][T18236] ? __pfx_NF_HOOK+0x10/0x10 [ 459.433695][T18236] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.438971][T18236] ? netif_receive_skb+0x102/0xc50 [ 459.444189][T18236] ? __pfx_ip_rcv+0x10/0x10 [ 459.448850][T18236] netif_receive_skb+0x45b/0xc50 [ 459.453898][T18236] ? __pfx_netif_receive_skb+0x10/0x10 [ 459.459417][T18236] ? __lock_acquire+0x6b5/0x2cf0 [ 459.464473][T18236] ? tun_rx_batched+0x185/0x790 [ 459.469391][T18236] tun_rx_batched+0x1de/0x790 [ 459.474175][T18236] ? __build_skb+0x62/0x440 [ 459.478733][T18236] ? __pfx_tun_rx_batched+0x10/0x10 [ 459.484125][T18236] ? tun_get_user+0x2354/0x3dd0 [ 459.489125][T18236] ? __local_bh_enable_ip+0xd0/0x130 [ 459.494616][T18236] ? tun_get_user+0x2669/0x3dd0 [ 459.499529][T18236] tun_get_user+0x2a78/0x3dd0 [ 459.504357][T18236] ? aa_file_perm+0x50e/0x15e0 [ 459.509191][T18236] ? __pfx_tun_get_user+0x10/0x10 [ 459.514387][T18236] ? aa_file_perm+0x192/0x15e0 [ 459.519260][T18236] ? ref_tracker_alloc+0x35c/0x4c0 [ 459.524595][T18236] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 459.530137][T18236] ? tun_get+0x1c/0x2f0 [ 459.534457][T18236] ? tun_get+0x1c/0x2f0 [ 459.538665][T18236] ? tun_get+0x1c/0x2f0 [ 459.542914][T18236] tun_chr_write_iter+0x113/0x200 [ 459.548002][T18236] vfs_write+0x61d/0xb90 [ 459.552677][T18236] ? __pfx_vfs_write+0x10/0x10 [ 459.557617][T18236] ? __fget_files+0x2a/0x420 [ 459.562471][T18236] ksys_write+0x150/0x270 [ 459.567012][T18236] ? __pfx_ksys_write+0x10/0x10 [ 459.572119][T18236] do_syscall_64+0x14d/0xf80 [ 459.576898][T18236] ? trace_irq_disable+0x3b/0x150 [ 459.581973][T18236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.588149][T18236] ? clear_bhb_loop+0x40/0x90 [ 459.592926][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.599048][T18236] RIP: 0033:0x7f0476f5d04e [ 459.603590][T18236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 459.623378][T18236] RSP: 002b:00007f0477e1afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 459.631908][T18236] RAX: ffffffffffffffda RBX: 00007f0477e1b6c0 RCX: 00007f0476f5d04e [ 459.640228][T18236] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 459.648310][T18236] RBP: 00007f0477032c91 R08: 0000000000000000 R09: 0000000000000000 [ 459.656389][T18236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.664440][T18236] R13: 00007f0477216038 R14: 00007f0477215fa0 R15: 00007ffee506f468 [ 459.672501][T18236] [ 459.675629][T18236] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 459.683040][T18236] CPU: 0 UID: 0 PID: 18236 Comm: syz.2.3798 Not tainted syzkaller #0 PREEMPT(full) [ 459.692620][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 459.702715][T18236] Call Trace: [ 459.706023][T18236] [ 459.708976][T18236] vpanic+0x56c/0xa60 [ 459.713110][T18236] ? __pfx__printk+0x10/0x10 [ 459.717825][T18236] ? __pfx_vpanic+0x10/0x10 [ 459.722353][T18236] ? is_bpf_text_address+0x292/0x2b0 [ 459.727678][T18236] ? is_bpf_text_address+0x26/0x2b0 [ 459.733606][T18236] panic+0xc5/0xd0 [ 459.737447][T18236] ? __pfx_panic+0x10/0x10 [ 459.741920][T18236] __warn+0x315/0x4f0 [ 459.745938][T18236] ? ip_rt_bug+0x2d/0x140 [ 459.750326][T18236] ? ip_rt_bug+0x2d/0x140 [ 459.754712][T18236] __report_bug+0x29a/0x540 [ 459.759258][T18236] ? NF_HOOK+0x336/0x3c0 [ 459.763584][T18236] ? netif_receive_skb+0x45b/0xc50 [ 459.768845][T18236] ? tun_rx_batched+0x1de/0x790 [ 459.773736][T18236] ? ip_rt_bug+0x2d/0x140 [ 459.778143][T18236] ? __pfx___report_bug+0x10/0x10 [ 459.783256][T18236] ? ip_rt_bug+0x2d/0x140 [ 459.787805][T18236] report_bug+0x16a/0x220 [ 459.792168][T18236] ? ip_rt_bug+0x2d/0x140 [ 459.796522][T18236] ? ip_rt_bug+0x2f/0x140 [ 459.800885][T18236] handle_bug+0x9c/0x200 [ 459.805331][T18236] exc_invalid_op+0x1a/0x50 [ 459.809918][T18236] asm_exc_invalid_op+0x1a/0x20 [ 459.814903][T18236] RIP: 0010:ip_rt_bug+0x2d/0x140 [ 459.819973][T18236] Code: fa 55 41 57 41 56 41 55 41 54 53 48 89 d3 e8 0a 5c ba f7 66 90 e8 03 5c ba f7 31 ff 48 89 de ba 02 00 00 00 e8 d4 2c 6a ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 0f a6 a6 01 cc 49 [ 459.840137][T18236] RSP: 0018:ffffc9001bb6f1e0 EFLAGS: 00010282 [ 459.846289][T18236] RAX: 9a03d56c4d43a200 RBX: ffff88807d7b08c0 RCX: 0000000080000401 [ 459.854391][T18236] RDX: 0000000000000002 RSI: ffffffff8def989e RDI: ffffffff8c27cb00 [ 459.862441][T18236] RBP: ffffc9001bb6f4e0 R08: ffffffff9011beb7 R09: 1ffffffff20237d6 [ 459.870636][T18236] R10: dffffc0000000000 R11: fffffbfff20237d7 R12: dffffc0000000000 [ 459.878826][T18236] R13: 0000000000000000 R14: ffff88807d7b08c0 R15: dffffc0000000000 [ 459.886880][T18236] ip_push_pending_frames+0x8b/0x110 [ 459.892218][T18236] __icmp_send+0x118d/0x1590 [ 459.896867][T18236] ? __icmp_send+0x22b/0x1590 [ 459.901780][T18236] ? __pfx___icmp_send+0x10/0x10 [ 459.906869][T18236] ? ip_route_input_noref+0xad/0x270 [ 459.912194][T18236] ? __pfx_ip_route_input_noref+0x10/0x10 [ 459.918037][T18236] ? tcp_v4_early_demux+0x4b3/0x9a0 [ 459.923280][T18236] ip_options_compile+0x80/0xb0 [ 459.928230][T18236] ip_rcv_finish_core+0xaa2/0x1c00 [ 459.933411][T18236] ip_rcv_finish+0x14c/0x2a0 [ 459.938039][T18236] NF_HOOK+0x336/0x3c0 [ 459.942240][T18236] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.947450][T18236] ? NF_HOOK+0x9e/0x3c0 [ 459.951661][T18236] ? __pfx_NF_HOOK+0x10/0x10 [ 459.956283][T18236] ? __pfx_ip_rcv_finish+0x10/0x10 [ 459.961462][T18236] ? netif_receive_skb+0x102/0xc50 [ 459.966715][T18236] ? __pfx_ip_rcv+0x10/0x10 [ 459.971283][T18236] netif_receive_skb+0x45b/0xc50 [ 459.976266][T18236] ? __pfx_netif_receive_skb+0x10/0x10 [ 459.981757][T18236] ? __lock_acquire+0x6b5/0x2cf0 [ 459.986738][T18236] ? tun_rx_batched+0x185/0x790 [ 459.991614][T18236] tun_rx_batched+0x1de/0x790 [ 459.996403][T18236] ? __build_skb+0x62/0x440 [ 460.001056][T18236] ? __pfx_tun_rx_batched+0x10/0x10 [ 460.006301][T18236] ? tun_get_user+0x2354/0x3dd0 [ 460.011277][T18236] ? __local_bh_enable_ip+0xd0/0x130 [ 460.016605][T18236] ? tun_get_user+0x2669/0x3dd0 [ 460.021686][T18236] tun_get_user+0x2a78/0x3dd0 [ 460.026435][T18236] ? aa_file_perm+0x50e/0x15e0 [ 460.031241][T18236] ? __pfx_tun_get_user+0x10/0x10 [ 460.036311][T18236] ? aa_file_perm+0x192/0x15e0 [ 460.041126][T18236] ? ref_tracker_alloc+0x35c/0x4c0 [ 460.046320][T18236] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 460.051820][T18236] ? tun_get+0x1c/0x2f0 [ 460.056014][T18236] ? tun_get+0x1c/0x2f0 [ 460.060193][T18236] ? tun_get+0x1c/0x2f0 [ 460.064386][T18236] tun_chr_write_iter+0x113/0x200 [ 460.069440][T18236] vfs_write+0x61d/0xb90 [ 460.073738][T18236] ? __pfx_vfs_write+0x10/0x10 [ 460.078538][T18236] ? __fget_files+0x2a/0x420 [ 460.083204][T18236] ksys_write+0x150/0x270 [ 460.087664][T18236] ? __pfx_ksys_write+0x10/0x10 [ 460.092641][T18236] do_syscall_64+0x14d/0xf80 [ 460.097363][T18236] ? trace_irq_disable+0x3b/0x150 [ 460.102582][T18236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.108669][T18236] ? clear_bhb_loop+0x40/0x90 [ 460.113383][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.119312][T18236] RIP: 0033:0x7f0476f5d04e [ 460.123753][T18236] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 460.143480][T18236] RSP: 002b:00007f0477e1afb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 460.152009][T18236] RAX: ffffffffffffffda RBX: 00007f0477e1b6c0 RCX: 00007f0476f5d04e [ 460.160106][T18236] RDX: 0000000000000046 RSI: 0000200000000440 RDI: 00000000000000c8 [ 460.168116][T18236] RBP: 00007f0477032c91 R08: 0000000000000000 R09: 0000000000000000 [ 460.176122][T18236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.184203][T18236] R13: 00007f0477216038 R14: 00007f0477215fa0 R15: 00007ffee506f468 [ 460.192226][T18236] [ 460.195904][T18236] Kernel Offset: disabled [ 460.200326][T18236] Rebooting in 86400 seconds..