last executing test programs: 4.66381596s ago: executing program 0 (id=9071): syz_emit_ethernet(0xf87, &(0x7f0000001180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a60f51002b1f03003a000000000011000000000000fe8000000000000000000000000000aa84ffc2"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000007000009050004000000000005000500e000"], 0x34}, 0x2, 0x34005}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f00000001c0)={0xffffffffffffffff, &(0x7f00000000c0)='NLBL_UNLBL\x00', 0x20200, &(0x7f0000000100)={@_ha_fsid={[0xc, 0xddd89f8]}, {0x1, 0x2, 0x8, 0xfffffffffffffffb}}, 0xfffffff8, &(0x7f0000000140), &(0x7f0000000180)=0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/mnt\x00') r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x54, 0x1407, 0x200, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r7}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0xe0) 3.884211739s ago: executing program 3 (id=9086): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e0000000120009050000000000000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672"], 0xe0}], 0x1}, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000780)=0xffffffffffffff94) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r3, {0xfffd, 0x10}, {0x8, 0x4}, {0x6, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x8804) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xffffff33}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="580000001000010428bd70000300000000000000", @ANYRES32=r6, @ANYBLOB="00000000051c0000380012800e00015527be2ac88f2711370069703665727370616e000000240002800400120014000700ff0100"/64], 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x12) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000003c0)={'sit0\x00', 0x0, 0x80, 0x40, 0x7, 0x5, {{0x2d, 0x4, 0x0, 0x2, 0xb4, 0x66, 0x0, 0x7, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@rr={0x7, 0x13, 0x9e, [@remote, @loopback, @multicast2, @dev={0xac, 0x14, 0x14, 0xf}]}, @lsrr={0x83, 0x3, 0xa4}, @ssrr={0x89, 0x23, 0xc2, [@broadcast, @private=0xa010101, @multicast1, @remote, @local, @local, @multicast2, @multicast1]}, @lsrr={0x83, 0xf, 0x18, [@multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp={0x44, 0x28, 0xaf, 0x0, 0x4, [0x4504, 0x5, 0x7, 0x32ea, 0x2, 0xc3e9, 0x3, 0x5, 0xfffffffd]}, @timestamp={0x44, 0x10, 0x62, 0x0, 0x1, [0x2, 0x80000001, 0x6]}, @lsrr={0x83, 0x1b, 0x7e, [@local, @private=0xa010100, @multicast2, @rand_addr=0x64010102, @loopback, @dev={0xac, 0x14, 0x14, 0x10}]}, @lsrr={0x83, 0x3, 0x87}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000e40)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0xfb, 0xf9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8, 0x1, 0x2, 0x9}}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000dc0)=@newtclass={0x4c, 0x28, 0x8, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x5, 0x10}, {0xffe0, 0x8}, {0x5, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xff}}, @tclass_kind_options=@c_taprio={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x8}}}]}, 0x4c}}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f00000005c0)={@ipv4={""/10, ""/2, @local}}, &(0x7f0000000600)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'macsec0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), &(0x7f0000000780), 0x0, 0x1f, &(0x7f0000000740), 0x0, 0x10, &(0x7f00000007c0), &(0x7f00000006c0), 0x8, 0x2a, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0], 0x0, 0xb2, &(0x7f0000000b80)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001540)=ANY=[@ANYBLOB="88060000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="6801028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff07000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400ff0000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c00040009000306e709000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f74785f617070696e670000000000000500030003000000080004000800"/56, @ANYRES32=r0, @ANYBLOB="080007000000000008000100", @ANYRES32, @ANYBLOB="980002805c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000002c0004000600080700000000880908fd80ffffff0000b007ffffffff0c0003022d00000009000565000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="8800028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b000000140004000700040e060000000200057f0100000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00\x00\x00\b\x00K\x00\x00\x00', @ANYRES32=r8, @ANYBLOB="3c0102803c000100240001006c625f74785f6d6574686f6400000000000000000000000000000000000000000500030005000000090004006861736800000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400250c000008000600", @ANYRES32=r9, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f6164636173740000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000e00040062726f61646361737400000008000100", @ANYRESDEC=r13, @ANYBLOB="6c0102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c0004000a00ff06030000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010034000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES64=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400450000003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r14, @ANYBLOB="c80002803c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r14, @ANYRESDEC=r1], 0x688}, 0x1, 0x0, 0x0, 0xc4}, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040), 0x2) r15 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r15, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 2.793360174s ago: executing program 3 (id=9093): bpf$BPF_PROG_TEST_RUN(0x12, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, 0x0, &(0x7f0000000340)) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff0b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000043000701fefffffffbdbdf25027c000004004580280001"], 0x40}}, 0x810) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000006a00010029bd7000fedbdf2502000000000000000800010001000000e2e1646467763cf51de07085182e184cfde66514c8"], 0x20}, 0x1, 0x0, 0x0, 0x24008015}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000080028005bdb020008002900f8ff0700"], 0x38}}, 0x800) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r6, 0x2000300, 0xf, 0x0, &(0x7f00000003c0)="63eced8e46010000f96daf249b9508", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.705401774s ago: executing program 4 (id=9094): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xb, 0x1, 'socket\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000640)="b2", 0x1}], 0x1, &(0x7f0000000240)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES8=r2], 0x18, 0x20040801}}], 0x1, 0x4000000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x2}, &(0x7f0000000340)=0x8) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100160008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0100098008000140000000075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xec}}, 0x0) 2.609942805s ago: executing program 1 (id=9095): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0xffffffffffffffb8, 0x2, 0x1, 0x0, 0x13}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0xac, 0x2e, 0x200, 0x703d27, 0x0, {0x4}, [@typed={0x97, 0x18, 0x0, 0x0, @binary="08ac0f0002ac0f0009ac0f0006ac0f009eacf343edc30d7d6eea3f49f6e319452e4e71191b3ab5899cb5a94c271a8ffa0025e49e6bdb50d9d7f390a7d477c2332d65b48eb9978ab6ed4d2f0f93e846efa57a8990ec77e8d3b2f75eb96bba8812fa9c4a278bc6211dfd6741c5e26d6d3ca9d650aa11df7d570631337c37bc08ebcfc09ab68b495a77a49e6a9aebb8f587ff1084"}]}, 0xac}, 0x1, 0x0, 0x0, 0x42804}, 0x0) 2.609621535s ago: executing program 4 (id=9096): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @multicast}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xffe0, 0xc}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 2.540026695s ago: executing program 1 (id=9097): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x41da}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x480}}, [@printk={@lu, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x258}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0xae}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) 2.476038955s ago: executing program 3 (id=9099): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000400)={0xfffc, 0x0, 0x3, 0xffff}, 0x8) sendto$inet6(r0, &(0x7f0000000080)='w', 0x1, 0x94, &(0x7f0000000000)={0xa, 0x4, 0x3, @private1, 0x8}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x100, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0x4}, {0x5, 0xe}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x30}}, 0x40000) r1 = socket$netlink(0x10, 0x3, 0xb) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000b00)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba12", 0x11}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800) recvmmsg$unix(r3, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/192, 0xc0}], 0x1}}], 0x1, 0x40000000, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, 0x0) 2.348563014s ago: executing program 1 (id=9100): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18f1cb4760851344b20000ff0300000000000095"], &(0x7f0000000000)='GPL\x00', 0xfff, 0x22, &(0x7f0000000140)=""/34, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES16=r0, @ANYBLOB="1100000000000000", @ANYRES32, @ANYBLOB="f1c4a7d7961759768241754ec422b683af", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="180300000100000000000000000000008510000006000000180100000000000000000000000000006600020000000000180000000090578c89000000000047030000000000009500"/88], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB="04005200000000007d02fd38e21a2a2c00000000", @ANYRESOCT=r1, @ANYRES32, @ANYBLOB="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"/294], 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) socket(0x2a, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0xfffffffffffffee5) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x41000, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x401, 0x0, r2, 0x7, '\x00', 0x0, r2, 0x5, 0x1, 0x5}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000780), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="07efefbd7000f9dbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000d40)=ANY=[@ANYBLOB="df000000", @ANYRES16=r6, @ANYBLOB="100028bd7000ffdbdf250300000014000200fe88000000000000000000000000010114000300ff01000000000000000000000000000105000100000000001400060067726530000000000000000000000000080005007f000001080004000000000008000500e0000001050001000000000014000300fe8000000000000000000000000000aa0e4d7cc1ee8688910b28a25ee02071ef27c18e46568767bb7a2568ae8c69b46c85c28081cdb2eeca92f39b1e65b0c3ccd9989c904d10145e88c2d42b5f466aaa25eda1a1e210f7a3a2cc0b93c913545b2d384303e178dfefa4445416269ea490087a1f99f26d37b0cd6af95bf9cf086363aacab003884e064734a4663d0726ca8200d7e29b4e7e6f3d7dbabc90f0c57f8f9597278585e7a852646bdc629f7ea64d510fe15188f937459454a41f5be5811dacc31254a4b4476cb630af8fd2b0bdae1b3f921c20514c35194a4922a3ba87056ca5df3d63352deaca"], 0x8c}, 0x1, 0x0, 0x0, 0x4040080}, 0x1) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r8, 0x10040) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r8, 0x4058587a, &(0x7f0000000180)={{0xffffffffffffffff, &(0x7f0000000400)='NLBL_\xf5\x0eLBL\x00', 0x20000, &(0x7f0000000040)={@_ha_fsid={[0x2883, 0x6]}, {0x4081, 0x51d6, 0x200004, 0xffffffffffff7c7f}}, 0x4, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x1}, {[0x3, 0x2, 0xffffffff, 0x9]}, 0x4, 0xd, &(0x7f0000000340)=""/13}) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000007c0)=ANY=[@ANYBLOB="807c2e090000003f23e6ecd91aa72df4676dcb1722f893e2f1025ad8cf573bcb1aa9ca2867", @ANYRES16=r7, @ANYBLOB="37effdffffff0000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x814}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 2.153717048s ago: executing program 4 (id=9102): unshare(0x6020400) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe22, 0x298, @loopback={0xff00000000000000}}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="3c1204"], 0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x526f, @remote, 0x27}]}, &(0x7f0000000140)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="110900000000000000000000030000001ca100000000000085100000fcffffff95"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992e05400c2", 0x10) write$bt_hci(r8, &(0x7f0000000080)=ANY=[], 0x1d) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=@dellink={0x20, 0x11, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x20001, 0x9684}}, 0x20}, 0x1, 0x0, 0x0, 0x20000050}, 0x2000c006) 2.023655177s ago: executing program 1 (id=9104): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x40020}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r2, 0x20, &(0x7f0000000940)={&(0x7f0000000640)=""/202, 0xca, 0x0, &(0x7f0000000880)=""/139, 0x8b}}, 0x10) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xbe}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000ac0)='syzkaller\x00', 0x5, 0xec, &(0x7f0000000b00)=""/236, 0x41000, 0x2, '\x00', 0x0, 0x1a, r2, 0x8, &(0x7f0000000c00)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0xb, 0x2, 0x8000}, 0x10, 0x2c42a, r2, 0x6, &(0x7f0000000c80)=[r2, r2, r1, r2, r2], &(0x7f0000000cc0)=[{0x2, 0x4, 0xb}, {0x3, 0x3, 0x5, 0x4}, {0x1, 0x4, 0x2}, {0x4, 0x1, 0xa, 0x5}, {0x4, 0x2, 0x3, 0xf3cfc92f6478092b}, {0x4, 0x4, 0x6, 0x9}], 0x10, 0x401}, 0x94) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x95}}}, &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT6_ADD_MFC_PROXY(r6, 0x29, 0xd2, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x80) socket(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0600000004000000040000000f"], 0x50) close(0x3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket(0x1d, 0x2, 0x6) accept$ax25(r11, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000440)={r9, r1, 0x8, 0x40, &(0x7f0000000180)="6e34c9357fa0686b3fd761abd5fc3e3fb172ddca49ad7272c31b3cc84b2a7d9baf68284741d10d7d3de23d5024fb079b8ffab400a8f1d6d2e5ec8ef94f037eef", 0xe, 0x2, 0xb, 0x6c, 0x9, 0x0, 0x7, 'syz0\x00'}) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10}, 0xc) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1.876315393s ago: executing program 1 (id=9106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x20, r4, 0x300, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0xd}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x6004800) sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) setsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000480)="5cd2910ced23f0d4e8323170113ae67de2d51b7cf5e0e5a23abac9bbdecde450a60dfac75322a5ef4e341df8c44b15d39f76beb7f1e4e3c99d93c6f94fbb9116e484aa8eabd6952a30e626d34c0c311b95fbf726485e385ae9595f59a9293244b37c95d10bd2b1c20da6eadc25dd638e5427dd3334e245d9db4cf4e7bdc2d9838b3cb906653481226bd95dd5b027139c9a28bc80120bccc0866116e22e6c6e", 0x9f) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = getpid() syz_open_procfs$namespace(r6, &(0x7f00000003c0)='ns/time\x00') sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2f0000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e621a63f1}, 0x4000010) 1.712346289s ago: executing program 1 (id=9107): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000340)="f101feca27837b4c2591991cf89f176aa706a017f4f1fb8b36f1a22f94d0023b71565aa7519f644959a23a11061898b4d973fbe530e2b5405292c23b22001f1d9fe1e6b0005b699d2e7964b4bc9d00460d9368e84498c90a0db0b9dcfc7359fb29369549d9e278d6a319aa9f59d44c673fc1185f4c283fe7017c6bcb4fd4e521a64a89e21a5ccc935733eabd2951f15022e6faf475240fb53b61d4ec8090020e63142310661a31dc2c0cbcc110", 0xad}, {&(0x7f0000000400)="66c89b2d40155101ea153dcadaa5170588f6d6f4dcac117bac34da3ffcce8f28da0ad88a77c5c286bf792cbe856a19b1108db7b9c8eaa695fa2b8b8138ff21ac45111c963d85ffead0f3430ac0db58d9a09db115ab59d44863635801fabb2940f19012f8173d1ce04b83e67961a62b3bbe728917038d135fa8208ebb0e7db291dccc59c277", 0x85}, {&(0x7f00000004c0)="20bc73b8de1a452be79943361010d764d87f336925c6560295e1bfe0aea9a8569cdfdbf48fbe372591698768806b36311772693fb2ce650be687fa2bd75b5885d52356ddf85ba03d01f260b6cfb647577e6c61e91c349bc1fa8fbd9eebf49f72113ccd0304693b81fea3cf001b1c82b556126083ba9453faa6f38988fa3974461f3303bd2f30e63c3f35126a4ce68a2cfc114abda082c107", 0x98}], 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="2dd12bbd7000fedbdf25020000000900030073797a32000000000900010077790a0a"], 0x98}}, 0x0) 1.711899031s ago: executing program 4 (id=9108): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d80)=@mangle={'mangle\x00', 0x64, 0x6, 0x6a8, 0x358, 0x230, 0x358, 0x120, 0x358, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x8}}}, {{@ipv6={@mcast1, @local, [], [], 'xfrm0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x6, 0x0, 0x6}, 0x0, 0xd0, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00', {}, {0xff}}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x2280], 0x4, 0x2}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[], 0x0, 0x4}}, @common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) (async, rerun: 64) r3 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) sendmsg$nl_generic(r3, &(0x7f0000000f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000840)=ANY=[@ANYRES64=r0, @ANYRES32=r3, @ANYRESOCT=r3], 0x35c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) getsockopt$sock_buf(r5, 0x1, 0x1c, &(0x7f00000007c0)=""/13, &(0x7f0000000800)=0x75) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720a00fef8ffffff71a4f0ff000000002d030000000000001d400500e8862a904704000001ed00007203feff000300001d44000000000000db0a08fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1cd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1de6ed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c310325b1ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b5c610ae35a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9084281563f75f1219d78d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67edfe2b87b333ff4921cb03ee07fe2432d902000000fa498d2bab6b658f55e74e4e6cb11c859027216bae931226c6037cfba98a7b5ff5e029b744a7fbf7cee3f52caa2cfa790b1708fe8839b6810cf5e9"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0xfffffffffffffe95, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf}, 0x94) (rerun: 64) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6tnl0\x00', 0x0, 0x4, 0xff, 0x80, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x7800, 0x7, 0x1, 0xfffffffd}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001395d2959b64056f4301ace584578827007b5f682c7b54240383104b245b16ed", @ANYRES16=r8, @ANYBLOB="0100000000000000000025000000"], 0x5a}, 0x1, 0x0, 0x0, 0x18000}, 0x400c0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r9, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$unix(0x1, 0x2, 0x0) bind$unix(r11, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r12 = socket$unix(0x1, 0x2, 0x0) connect$unix(r12, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 32) close(0x3) (async, rerun: 32) sendmmsg(r12, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) (async) sendmsg$nl_generic(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x0) r13 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r13, 0x6, 0x1, &(0x7f00000004c0)={0xfbca, 0x1ff, 0x1, 0x4, 0x7, 0x0, 0xd}, 0xc) (async, rerun: 32) syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), r1) (rerun: 32) 1.543242962s ago: executing program 0 (id=9111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000001080)=[{r0}], 0x1, &(0x7f0000000340)={0x0, 0xff}, 0x0, 0x0) socket(0x1f, 0x1, 0x4) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x28000600) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f00000001c0)='./file0\x00', 0x0, 0x4000, r4}, 0x18) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x8c0) socket$kcm(0x2, 0xa, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)) socket$kcm(0x2, 0xa, 0x73) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="0000001700450900140065000008849078ac1404bb7f00000100000000000000000000005c480fc50d0ed77716977e474bc1d087bdbc775bcce157162dea1980b8dd0cd7"], 0x26) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1ef0000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 1.513336681s ago: executing program 2 (id=9112): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4, 0xe5d) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r1, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, 0x0) shutdown(r1, 0x1) ioctl$BTRFS_IOC_DEFRAG(r1, 0x50009402, 0x0) connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @none, 0x15}, 0xa) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f700000000070200", @ANYRES32], 0x38}}, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc040) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x38, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x4}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x200080c0}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="800000000001010400000000141a000002fff500240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000011c00108008000140000000000800024000000000080003"], 0x80}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0x4, 0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc0d5}, @CTA_SEQ_ADJ_ORIG={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.153393117s ago: executing program 4 (id=9113): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$nci(r2, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0xffffffffffffffdc, &(0x7f0000000100)={&(0x7f0000001000)=ANY=[@ANYRES64=r2], 0x1198}, 0x1, 0x0, 0x0, 0x4044011}, 0x880) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x14) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r3) recvmsg(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/128, 0x80}, {&(0x7f00000027c0)=""/4105, 0x1009}, {&(0x7f0000000240)=""/147, 0x93}, {&(0x7f0000000480)=""/139, 0x8b}], 0x4}, 0x22) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$XFS_IOC_ERROR_CLEARALL(r4, 0x40085875) recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) 965.799981ms ago: executing program 0 (id=9114): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x164, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x164}, 0x1, 0x0, 0x0, 0x4000000}, 0xc841) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x1c, 0x0, @opaque="571818d3e222532f03de8fba932ff0e0f5d52380"}}}}}, 0x0) 893.318495ms ago: executing program 2 (id=9115): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, &(0x7f0000000080)={0x3d, 0x400007e, 0xb, 0x7, 0x203b, 0x8100}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0xfffffffd, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe55, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [{}, {}, {}, {}, {}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x0, 0x20000000, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x80000000}, {0xfffffffc, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0xd5}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {}, {0x0, 0x10}, {0x80000000}, {0x8eb9, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x4, 0x0, 0x7ee}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x9}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x18}, {}, {0x4}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x2}, {}, {}, {}, {}, {}, {0x10000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 736.649402ms ago: executing program 0 (id=9116): openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@delchain={0x38, 0x65, 0x400, 0x70bd2a, 0x24dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {0xfff2, 0xa}, {0x8, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xa, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfffb, 0xd}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000007640)=[{{0x0, 0x0, &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000060000000a000000e3aaaa0000000000c0000000000000000801000000000000750c948cd1e01e871ff79df38f1bbbeaf663bc5ab26ce36273990185e39d13cd035c8b20aa70d63ccd21ddbdedf38387cdddeb02b64bce8a771cca78e38daed750da3fb3793a817a8a110b60bed6e6ff98de9ab0a4a51b45fded1e2ea5ac5c4b5a51d4edb0f00f90f49527ad8f856ce1f4e70e90c1b310ce7dafeb7c698da635cb4a9b3de295d9a8138412665d364c37514c55db338cb2e40115efb3f647280daa5bc20bc2efcbb37e4d800e01696e1e"], 0xd8}}, {{&(0x7f0000000580)=@hci={0x1f, 0x4, 0x1}, 0x80, &(0x7f0000002500)=[{&(0x7f0000001500)="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", 0xfff}], 0x1, &(0x7f0000002540)=[{0x98, 0x3a, 0x8, "564c08965c2466349a10138c278db88ec2c59d2d09912bc003197e0c52981f768fa3a05b9929e32ba0b6e64b1988b22345b1c9c51a50bf365cb87b90464828edfc3b0e9f1e3c63144d1ce3527710f1d44fb1ae964dbd9c5bfc581cc33e172fcd9b92731a6adb375eef57547dce0d6c45cb63dfd857aac3395d3e9e8e4bf5bc15f7e557a265df8f"}, {0x1010, 0x109, 0x5, "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"}, {0x1010, 0x10b, 0x1, "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"}], 0x20b8}}, {{&(0x7f0000004600)=@phonet={0x23, 0xc, 0x3, 0x3}, 0x80, &(0x7f0000005b40), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="50000000000000000600000004000000481bb17a7768df778c7a326fbe506be120dc18bb1920381c279eab2ae70c475ad63ae6824a29a985134b665228269cc276c53cffd5923b394c52b7f70d4f6d2cdc05d8c5bedd80d2c40000"], 0x50}}, {{&(0x7f0000005c80)=@nl=@unspec, 0x80, &(0x7f0000006f00)=[{&(0x7f0000005d00)="e164", 0x2}, {&(0x7f0000005d40)="a17fc73af02a0edc63d98624d6bf740408824cbebea10f6d281b071b1cdd023a5b8ca748081ab2edf70058f5f1418fc61b11f0ccc23b8d1b0c9e6dc7f7d104", 0x3f}, {&(0x7f0000006d80)}, {&(0x7f0000006dc0)}, {&(0x7f0000006e40)}], 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x80}}, {{&(0x7f0000007000)=@in6={0xa, 0x4e22, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80}, 0x80, &(0x7f0000007500), 0x0, &(0x7f0000007580)}}], 0x5, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xfd, 0x6, 0x0, 0x39, @initdev={0xfe, 0x88, '\x00', 0xff, 0x0}, @mcast2={0xff, 0x3}, 0x2000, 0xba08}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) unshare(0x20000400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x1, 0x1, 0x108003, 0x10, 0x4, 0x9, 0xa4, 0xbfb, 0x7, 0xb6b, 0x800c1, 0x4, 0x1, 0x7, 0x9, 0xff, 0x1000, 0xc, 0x3, 0x2, 0x80000001, 0xfffffffa, 0x0, 0x1, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x63c, 0x10, 0x6, 0x100, 0x6, 0x1bf6, 0x25aa, 0x40, 0x40bed4, 0x8, 0x8000100, 0x0, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x5, 0x1, 0x7f, 0x7, 0xa, 0x7, 0xf, 0x101, 0xa, 0x1fa0860a, 0x7, 0xa9, 0x81, 0x2, 0x180000, 0x4003, 0x8b, 0x5, 0x2af, 0x3, 0x5, 0x2, 0x300000, 0x9, 0xbbce, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x6, 0x0, 0x10000, 0x3f5, 0xffffffff, 0x6, 0x6, 0x80000000, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x4, 0xa0006, 0xc50, 0x4, 0xb, 0x2, 0xd9a, 0xc8, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x5, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x10000008, 0x0, 0x5, 0x1fc, 0x1ff, 0x3]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') unshare(0x8040480) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockname$packet(r0, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000680)=0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) 697.202529ms ago: executing program 2 (id=9117): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) write$cgroup_int(r1, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) 444.605529ms ago: executing program 2 (id=9118): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x36, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x800}, {}, {}, [@alu={0x7, 0x0, 0xa, 0xb, 0x5, 0x20, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x81}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x1000054}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb2}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x6, 0xe6, &(0x7f0000000840)=""/230, 0x40f00, 0x47, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x2, 0x29, 0x7ff}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[0x1, 0x1], &(0x7f0000000a00)=[{0x2, 0x4, 0x9}, {0x5, 0x3, 0x3, 0x1}, {0x4, 0x2, 0x6, 0x1}], 0x10, 0xfffffffc}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d000000000000000000000000000000000000000000000000fd000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96, 0x0, 0x3}, 0x28) r1 = socket$packet(0x11, 0x2, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c80)={0x6, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85, 0x0, 0x0, 0x0, 0x1000}, [@map_idx_val={0x18, 0x6, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000700)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x1, 0x4, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000002c0)={r3, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r3, 0x1, 0x6, @multicast}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xd7, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) 444.283647ms ago: executing program 3 (id=9119): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$AUTOFS_IOC_EXPIRE(0xffffffffffffffff, 0x810c9365, &(0x7f0000000080)={{0x80000000, 0x7}, 0x100, './file0\x00'}) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r3, 0x8901, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x700, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x700, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x100a, &(0x7f00000009c0)=""/4106, 0x41100, 0xc}, 0x94) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvmmsg(r4, &(0x7f00000053c0)=[{{0x0, 0x0, 0x0}, 0x170}], 0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58, 0x15}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0xffffffe3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0xd, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x58, 0x15}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0xffffffe3}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x0, 0x4}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) 332.466331ms ago: executing program 0 (id=9120): r0 = socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r2 = socket(0x10, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) (async) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000004}, @TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, r8, 0x207, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x28}}, 0x0) 309.948252ms ago: executing program 3 (id=9121): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xfffffef1}, {&(0x7f0000000700)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98847fa6d197b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f10737fff413ec95f3f00b74ee0b29ece9b69f72fb4c2aa6c7dfa87c9fe2aee84bb3a92701c9023dd4d8cf3ca1472c5e575437195e2c6e7be4309e7e13c09dc61faa43311c1fa08644f", 0x116}], 0x3, &(0x7f0000000380)=[@assoc={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001240)=[{0x18, 0x110, 0xc, ')'}], 0x18}, 0x20004000) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) connect$bt_l2cap(r4, &(0x7f00000000c0)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x8920, &(0x7f0000000040)={'sit0\x00', 0x0}) 205.051739ms ago: executing program 2 (id=9122): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$alg(0x26, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x149900, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b00000008000100", @ANYRES64=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth1\x00'}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80800, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x80, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x5823, 0x7, 0x6362, 0x5, 0xfffffffd, 0xffffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xae0, 0x6, 0x3, 0x3, 0x6, 0x2}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000850) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 163.185126ms ago: executing program 3 (id=9123): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x1e01, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) 124.87215ms ago: executing program 0 (id=9124): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)=""/143, 0x8f}], 0x1}}], 0x2, 0x0, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) (rerun: 32) 534.565µs ago: executing program 2 (id=9125): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000280)={'raw\x00', 0x0, [0x6, 0x40, 0x3ff, 0x5, 0x200]}, &(0x7f0000000300)=0x54) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x80) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x5}, &(0x7f00000001c0)=0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000280)={0x0, 0x3, &(0x7f0000000240)={&(0x7f0000000100)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x100, 0x1, 0x0, 0x9, 0x8, 0xeb70a43, 0x6, 0x8, r4}, 0x20) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000400)={'ip6_vti0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x3, 0x80000080, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, 0x8000, 0x20, 0x1000, 0x4}}) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x348, 0xffffffff, 0x1e0, 0x2b0, 0x110, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xffffff00, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0x100}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0xe8, 0x110, 0x0, {0x100000000000000}, [@common=@inet=@multiport={{0x50}, {0x1, 0xb, [0x4e23, 0x4e21, 0x4e20, 0x4e21, 0x4e20, 0x4e22, 0x4e24, 0x4e23, 0x4e21, 0x4e20, 0x4e24, 0x4e20, 0x4e20, 0x4e20, 0x4e22], [0x1, 0x0, 0x1, 0x0, 0x0, 0x5, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1]}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x4}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x3b, 0x1a, 0x0, 0x3e, 0x9, 0x2, 0x24, 0x39], 0x1, 0x6, 0xa}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'team0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0xa, 0x20, 0x28, 0x18, 0x22, 0xa], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a8) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000400000014000500fc0000000000000000000000000000010800020005000000070006"], 0x44}}, 0x0) 0s ago: executing program 4 (id=9126): socket(0xa, 0x3, 0x87) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, &(0x7f0000000000)=0x1, 0x4) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0) r3 = socket(0x1, 0x5, 0x0) close(r3) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) socket$netlink(0x10, 0x3, 0x2) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x1) r4 = epoll_create1(0x80000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000180)=0x60002620) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0xba, 0x757}) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, 0x0) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r3, 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002075682500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010400008500000004000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) kernel console output (not intermixed with test programs): [ 849.145291][ T2801] __x64_sys_sendmsg+0x1bd/0x2a0 [ 849.145313][ T2801] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.145339][ T2801] ? __pfx_ksys_write+0x10/0x10 [ 849.145365][ T2801] do_syscall_64+0x14d/0xf80 [ 849.145382][ T2801] ? trace_irq_disable+0x3b/0x150 [ 849.145397][ T2801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.145412][ T2801] ? clear_bhb_loop+0x40/0x90 [ 849.145430][ T2801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.145445][ T2801] RIP: 0033:0x7f0585d9c819 [ 849.145461][ T2801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.145474][ T2801] RSP: 002b:00007f0586ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.145494][ T2801] RAX: ffffffffffffffda RBX: 00007f0586015fa0 RCX: 00007f0585d9c819 [ 849.145505][ T2801] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 849.145514][ T2801] RBP: 00007f0586ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 849.145523][ T2801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 849.145533][ T2801] R13: 00007f0586016038 R14: 00007f0586015fa0 R15: 00007ffefbfae1f8 [ 849.145557][ T2801] [ 849.151611][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 849.632394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.642198][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.657352][ T2828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8026'. [ 849.823097][ T2832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8028'. [ 849.976320][ T2842] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8031'. [ 849.983062][ T2844] netlink: 'syz.3.8032': attribute type 10 has an invalid length. [ 849.998706][ T2842] bridge_slave_0: invalid flags given to default FDB implementation [ 850.014287][ T2844] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8032'. [ 850.191569][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 850.219523][ T2846] IPVS: Scheduler module ip_vs_sip not found [ 850.226363][ T2851] netlink: 'syz.3.8032': attribute type 27 has an invalid length. [ 850.457651][ T2867] netlink: 232 bytes leftover after parsing attributes in process `syz.2.8037'. [ 850.461084][ T2869] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8036'. [ 850.505431][ T2874] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 850.546247][ T2878] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8038'. [ 850.564326][ T2878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 850.571673][ T2878] IPv6: NLM_F_CREATE should be set when creating new route [ 850.752155][ T2886] netlink: 'syz.0.8039': attribute type 1 has an invalid length. [ 851.020343][ T2896] pim6reg1: entered promiscuous mode [ 851.025812][ T2896] pim6reg1: entered allmulticast mode [ 851.102452][ T2904] sctp: [Deprecated]: syz.4.8042 (pid 2904) Use of int in max_burst socket option deprecated. [ 851.102452][ T2904] Use struct sctp_assoc_value instead [ 851.231547][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 851.538222][ T2918] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8049'. [ 851.551340][ T2922] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8048'. [ 851.571348][ T2924] netlink: 'syz.0.8051': attribute type 10 has an invalid length. [ 851.597044][ T2924] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8051'. [ 851.741774][ T2927] netlink: 'syz.0.8051': attribute type 27 has an invalid length. [ 851.876800][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5660 ms [ 851.885080][ C0] lec:lec_tx_timeout: lec0 [ 851.944073][ T2934] netlink: 'syz.4.8053': attribute type 11 has an invalid length. [ 851.970633][ T2934] netlink: 'syz.4.8053': attribute type 142 has an invalid length. [ 852.274046][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 852.503298][ T2949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.527248][ T2946] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 852.538054][ T2949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.546583][ T2949] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.558264][ T2946] bond2 (unregistering): Released all slaves [ 852.582133][ T2945] FAULT_INJECTION: forcing a failure. [ 852.582133][ T2945] name failslab, interval 1, probability 0, space 0, times 0 [ 852.596690][ T2945] CPU: 1 UID: 0 PID: 2945 Comm: syz.1.8055 Not tainted syzkaller #0 PREEMPT(full) [ 852.596717][ T2945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 852.596728][ T2945] Call Trace: [ 852.596736][ T2945] [ 852.596744][ T2945] dump_stack_lvl+0xe8/0x150 [ 852.596777][ T2945] should_fail_ex+0x412/0x560 [ 852.596808][ T2945] should_failslab+0xa8/0x100 [ 852.596831][ T2945] ? skb_clone+0x212/0x3a0 [ 852.596859][ T2945] kmem_cache_alloc_noprof+0x87/0x650 [ 852.596898][ T2945] skb_clone+0x212/0x3a0 [ 852.596928][ T2945] __netlink_deliver_tap+0x404/0x850 [ 852.596965][ T2945] ? netlink_deliver_tap+0x2e/0x1b0 [ 852.596989][ T2945] netlink_deliver_tap+0x19c/0x1b0 [ 852.597015][ T2945] netlink_sendskb+0x68/0x140 [ 852.597039][ T2945] netlink_rcv_skb+0x2b6/0x4b0 [ 852.597062][ T2945] ? __pfx_genl_rcv_msg+0x10/0x10 [ 852.597083][ T2945] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 852.597121][ T2945] ? down_read+0x272/0x2e0 [ 852.597143][ T2945] ? genl_rcv+0xd/0x40 [ 852.597163][ T2945] genl_rcv+0x28/0x40 [ 852.597179][ T2945] netlink_unicast+0x75c/0x8e0 [ 852.597211][ T2945] netlink_sendmsg+0x813/0xb40 [ 852.597241][ T2945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 852.597269][ T2945] ? aa_sock_msg_perm+0xf1/0x1b0 [ 852.597291][ T2945] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 852.597316][ T2945] ____sys_sendmsg+0x972/0x9f0 [ 852.597349][ T2945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 852.597378][ T2945] ? import_iovec+0x73/0xa0 [ 852.597401][ T2945] ___sys_sendmsg+0x2a5/0x360 [ 852.597434][ T2945] ? __pfx____sys_sendmsg+0x10/0x10 [ 852.597493][ T2945] ? __fget_files+0x2a/0x420 [ 852.597510][ T2945] ? __fget_files+0x3a0/0x420 [ 852.597540][ T2945] __x64_sys_sendmsg+0x1bd/0x2a0 [ 852.597569][ T2945] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 852.597605][ T2945] ? __pfx_ksys_write+0x10/0x10 [ 852.597637][ T2945] do_syscall_64+0x14d/0xf80 [ 852.597658][ T2945] ? trace_irq_disable+0x3b/0x150 [ 852.597676][ T2945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.597696][ T2945] ? clear_bhb_loop+0x40/0x90 [ 852.597719][ T2945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.597738][ T2945] RIP: 0033:0x7f4d5fb9c819 [ 852.597756][ T2945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.597772][ T2945] RSP: 002b:00007f4d60ab7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 852.597795][ T2945] RAX: ffffffffffffffda RBX: 00007f4d5fe15fa0 RCX: 00007f4d5fb9c819 [ 852.597808][ T2945] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 852.597819][ T2945] RBP: 00007f4d60ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 852.597830][ T2945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 852.597842][ T2945] R13: 00007f4d5fe16038 R14: 00007f4d5fe15fa0 R15: 00007ffe88d897d8 [ 852.597881][ T2945] [ 852.863002][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 852.886890][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 852.894160][ C0] bridge0: port 3(bond0) entered learning state [ 852.900625][ C0] bridge0: port 4(hsr0) entered learning state [ 852.940567][ T2950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.972345][ T2950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.980682][ T2950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.026910][ T2950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.059832][ T2950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.101019][ T2950] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.376389][ T2967] bond6: entered promiscuous mode [ 853.393425][ T2967] 8021q: adding VLAN 0 to HW filter on device bond6 [ 853.429989][ T2969] 8021q: adding VLAN 0 to HW filter on device bond6 [ 853.475124][ T2969] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 853.487192][ T2969] bond6: (slave vcan1): Error -95 calling set_mac_address [ 853.646002][ T2986] netlink: 'syz.4.8068': attribute type 1 has an invalid length. [ 853.655571][ T2986] netlink: 'syz.4.8068': attribute type 1 has an invalid length. [ 853.667072][ T2990] FAULT_INJECTION: forcing a failure. [ 853.667072][ T2990] name failslab, interval 1, probability 0, space 0, times 0 [ 853.696535][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: syz.2.8069 Not tainted syzkaller #0 PREEMPT(full) [ 853.696564][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 853.696576][ T2990] Call Trace: [ 853.696584][ T2990] [ 853.696593][ T2990] dump_stack_lvl+0xe8/0x150 [ 853.696624][ T2990] should_fail_ex+0x412/0x560 [ 853.696656][ T2990] should_failslab+0xa8/0x100 [ 853.696680][ T2990] ? skb_clone+0x212/0x3a0 [ 853.696708][ T2990] kmem_cache_alloc_noprof+0x87/0x650 [ 853.696740][ T2990] skb_clone+0x212/0x3a0 [ 853.696767][ T2990] __netlink_deliver_tap+0x404/0x850 [ 853.696805][ T2990] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.696838][ T2990] netlink_deliver_tap+0x19c/0x1b0 [ 853.696859][ T2990] netlink_sendskb+0x68/0x140 [ 853.696881][ T2990] netlink_rcv_skb+0x2b6/0x4b0 [ 853.696903][ T2990] ? __pfx_genl_rcv_msg+0x10/0x10 [ 853.696922][ T2990] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.696955][ T2990] ? down_read+0x272/0x2e0 [ 853.696975][ T2990] ? genl_rcv+0xd/0x40 [ 853.696994][ T2990] genl_rcv+0x28/0x40 [ 853.697010][ T2990] netlink_unicast+0x75c/0x8e0 [ 853.697038][ T2990] netlink_sendmsg+0x813/0xb40 [ 853.697068][ T2990] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.697091][ T2990] ? aa_sock_msg_perm+0xf1/0x1b0 [ 853.697109][ T2990] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 853.697131][ T2990] ____sys_sendmsg+0x972/0x9f0 [ 853.697164][ T2990] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.697196][ T2990] ? import_iovec+0x73/0xa0 [ 853.697222][ T2990] ___sys_sendmsg+0x2a5/0x360 [ 853.697254][ T2990] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.697317][ T2990] ? __fget_files+0x2a/0x420 [ 853.697335][ T2990] ? __fget_files+0x3a0/0x420 [ 853.697363][ T2990] __x64_sys_sendmsg+0x1bd/0x2a0 [ 853.697392][ T2990] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 853.697429][ T2990] ? __pfx_ksys_write+0x10/0x10 [ 853.697463][ T2990] do_syscall_64+0x14d/0xf80 [ 853.697484][ T2990] ? trace_irq_disable+0x3b/0x150 [ 853.697502][ T2990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.697521][ T2990] ? clear_bhb_loop+0x40/0x90 [ 853.697545][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.697564][ T2990] RIP: 0033:0x7f80b579c819 [ 853.697582][ T2990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 853.697598][ T2990] RSP: 002b:00007f80b65ed028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.697623][ T2990] RAX: ffffffffffffffda RBX: 00007f80b5a15fa0 RCX: 00007f80b579c819 [ 853.697638][ T2990] RDX: 0000000024044884 RSI: 0000200000000300 RDI: 0000000000000003 [ 853.697652][ T2990] RBP: 00007f80b65ed090 R08: 0000000000000000 R09: 0000000000000000 [ 853.697663][ T2990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.697675][ T2990] R13: 00007f80b5a16038 R14: 00007f80b5a15fa0 R15: 00007fff652df2c8 [ 853.697707][ T2990] [ 853.990281][ T2986] netlink: 'syz.4.8068': attribute type 4 has an invalid length. [ 854.017176][ T2986] netlink: 'syz.4.8068': attribute type 12 has an invalid length. [ 854.169048][ T3000] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 854.189257][ T3000] macvlan3: entered promiscuous mode [ 854.197768][ T3000] macvlan3: entered allmulticast mode [ 854.204353][ T3000] bond3: entered promiscuous mode [ 854.209417][ T3000] bridge2: entered promiscuous mode [ 854.216171][ T3000] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 854.230917][ T3000] bond3: left promiscuous mode [ 854.236512][ T3000] bridge2: left promiscuous mode [ 854.715619][ T3031] __nla_validate_parse: 14 callbacks suppressed [ 854.715644][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8084'. [ 854.764147][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8084'. [ 854.783778][ T3031] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8084'. [ 854.797321][ T3035] netlink: 'syz.0.8083': attribute type 11 has an invalid length. [ 854.830306][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8084'. [ 854.859818][ T3031] netlink: 348 bytes leftover after parsing attributes in process `syz.4.8084'. [ 854.906023][ T3031] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8084'. [ 855.175139][ T3056] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8089'. [ 855.189317][ T3060] netlink: 'syz.4.8090': attribute type 1 has an invalid length. [ 855.359362][ T3065] 8021q: adding VLAN 0 to HW filter on device bond8 [ 855.373310][ T3065] bond7: (slave bond8): making interface the new active one [ 855.382196][ T3065] bond7: (slave bond8): Enslaving as an active interface with an up link [ 855.492307][ T3070] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8091'. [ 855.703070][ T3080] netlink: 'syz.4.8094': attribute type 11 has an invalid length. [ 855.726414][ T3081] netlink: 'syz.4.8094': attribute type 11 has an invalid length. [ 856.100955][ T3107] lo speed is unknown, defaulting to 1000 [ 856.185938][ T3123] sctp: [Deprecated]: syz.3.8106 (pid 3123) Use of int in max_burst socket option. [ 856.185938][ T3123] Use struct sctp_assoc_value instead [ 856.186231][ T3121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8103'. [ 856.307075][ T3126] netlink: 'syz.3.8106': attribute type 1 has an invalid length. [ 856.317414][ T3126] netlink: 'syz.3.8106': attribute type 2 has an invalid length. [ 856.327931][ T3126] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8106'. [ 856.365037][ T3107] lo speed is unknown, defaulting to 1000 [ 856.373629][ T3107] lo speed is unknown, defaulting to 1000 [ 857.219872][ T3162] Cannot find del_set index 1 as target [ 857.242290][ T3162] Cannot find del_set index 1 as target [ 857.471641][ C0] net_ratelimit: 505 callbacks suppressed [ 857.471666][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 857.736614][T24375] nci: nci_rf_intf_activated_ntf_packet: unsupported rf_interface 0xff [ 857.951761][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 858.197985][ T3206] xt_CT: You must specify a L4 protocol and not use inversions on it [ 858.334241][ T3214] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 858.509267][ T3220] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 858.521559][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 858.541838][ T3220] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 858.554522][ T3220] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 858.799589][ T3239] netlink: 'syz.2.8137': attribute type 1 has an invalid length. [ 859.136698][ T3251] 8021q: adding VLAN 0 to HW filter on device bond4 [ 859.331709][ T3257] 8021q: adding VLAN 0 to HW filter on device bond5 [ 859.340623][ T3257] bond4: (slave bond5): Enslaving as an active interface with an up link [ 859.434043][ T3262] bond4 (unregistering): (slave bond5): Releasing backup interface [ 859.458591][ T3262] bond4 (unregistering): Released all slaves [ 859.492450][ T3268] syzkaller1: entered promiscuous mode [ 859.498011][ T3268] syzkaller1: entered allmulticast mode [ 859.561594][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 859.763626][ T3286] FAULT_INJECTION: forcing a failure. [ 859.763626][ T3286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.777749][ T3286] CPU: 1 UID: 0 PID: 3286 Comm: syz.4.8151 Not tainted syzkaller #0 PREEMPT(full) [ 859.777775][ T3286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 859.777787][ T3286] Call Trace: [ 859.777795][ T3286] [ 859.777804][ T3286] dump_stack_lvl+0xe8/0x150 [ 859.777835][ T3286] should_fail_ex+0x412/0x560 [ 859.777868][ T3286] _copy_from_user+0x2d/0xb0 [ 859.777892][ T3286] do_sock_getsockopt+0x165/0x3f0 [ 859.777921][ T3286] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 859.777949][ T3286] ? ksys_write+0x1fc/0x270 [ 859.777974][ T3286] __x64_sys_getsockopt+0x1a4/0x240 [ 859.778004][ T3286] do_syscall_64+0x14d/0xf80 [ 859.778025][ T3286] ? trace_irq_disable+0x3b/0x150 [ 859.778047][ T3286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.778066][ T3286] ? clear_bhb_loop+0x40/0x90 [ 859.778086][ T3286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.778104][ T3286] RIP: 0033:0x7ff48cf9c819 [ 859.778123][ T3286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.778139][ T3286] RSP: 002b:00007ff48ddc1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 859.778164][ T3286] RAX: ffffffffffffffda RBX: 00007ff48d215fa0 RCX: 00007ff48cf9c819 [ 859.778177][ T3286] RDX: 000000000000000d RSI: 0000000000000084 RDI: 0000000000000003 [ 859.778187][ T3286] RBP: 00007ff48ddc1090 R08: 0000000000000000 R09: 0000000000000000 [ 859.778199][ T3286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.778210][ T3286] R13: 00007ff48d216038 R14: 00007ff48d215fa0 R15: 00007ffde8b24098 [ 859.778248][ T3286] [ 860.124188][ T3301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.591574][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 860.614510][ T3338] netlink: 'syz.3.8164': attribute type 83 has an invalid length. [ 860.652612][ T3341] __nla_validate_parse: 12 callbacks suppressed [ 860.652633][ T3341] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8165'. [ 860.681278][ T3338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8164'. [ 860.827094][ T3350] xt_CT: You must specify a L4 protocol and not use inversions on it [ 860.939573][ T3357] netlink: 'syz.2.8171': attribute type 10 has an invalid length. [ 860.950358][ T3357] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8171'. [ 861.128259][ T3369] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8176'. [ 861.130394][ T3364] netlink: 'syz.2.8171': attribute type 27 has an invalid length. [ 861.146604][ T3362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8173'. [ 861.193927][ T3371] erspan0: entered promiscuous mode [ 861.207627][ T3371] macsec1: entered promiscuous mode [ 861.558213][ T3371] erspan0: left promiscuous mode [ 861.631589][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 861.860424][ T3403] xt_CT: You must specify a L4 protocol and not use inversions on it [ 861.883180][ T3406] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20000 [ 862.099678][ T3418] xt_policy: output policy not valid in PREROUTING and INPUT [ 862.167633][ T3424] netlink: 'syz.4.8188': attribute type 10 has an invalid length. [ 862.179776][ T3427] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8189'. [ 862.197895][ T3424] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8188'. [ 862.322379][ T3429] netlink: 'syz.4.8188': attribute type 27 has an invalid length. [ 862.370215][ T3436] netlink: 'syz.3.8192': attribute type 1 has an invalid length. [ 862.443344][ T3436] 8021q: adding VLAN 0 to HW filter on device bond4 [ 862.483244][ T3440] vlan0: entered promiscuous mode [ 862.496712][ T3440] bond4: entered promiscuous mode [ 862.508389][ T3440] vlan0: entered allmulticast mode [ 862.517501][ T3440] bond4: entered allmulticast mode [ 862.549754][ T3436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8192'. [ 862.676157][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 863.711838][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 863.805979][ T3486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8207'. [ 863.831166][ T3486] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8207'. [ 863.849597][ T3489] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 863.997118][ T3496] netlink: 'syz.2.8210': attribute type 11 has an invalid length. [ 864.211882][ T3513] x_tables: duplicate underflow at hook 1 [ 864.348861][ T3521] gretap1: entered promiscuous mode [ 864.505983][ T3528] netlink: 'syz.3.8221': attribute type 6 has an invalid length. [ 864.537462][ T3530] tipc: Enabling of bearer rejected, already enabled [ 864.552122][ T3528] IPv6: NLM_F_CREATE should be specified when creating new route [ 864.751688][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 864.766121][ T3534] netlink: 'syz.0.8224': attribute type 11 has an invalid length. [ 865.093271][ T3550] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 865.127462][ T3550] netlink: 'syz.2.8231': attribute type 10 has an invalid length. [ 865.194279][ T3556] netlink: 'syz.3.8230': attribute type 1 has an invalid length. [ 865.203262][ T6219] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.232659][ T3553] erspan2: entered allmulticast mode [ 865.272334][ T6219] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.292844][ T6219] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.318893][ T6219] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 865.399642][ T3562] tipc: Enabling of bearer rejected, already enabled [ 865.415148][ T3558] syzkaller1: entered promiscuous mode [ 865.420678][ T3558] syzkaller1: entered allmulticast mode [ 865.709581][ T3577] netlink: 'syz.3.8239': attribute type 10 has an invalid length. [ 865.720543][ T3577] __nla_validate_parse: 10 callbacks suppressed [ 865.720568][ T3577] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8239'. [ 865.791594][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 865.826659][ T3582] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8242'. [ 865.858180][ T3584] netlink: 'syz.3.8239': attribute type 27 has an invalid length. [ 866.147376][T13512] lec:lec_start_xmit: lec0:No lecd attached [ 866.497524][ T3592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8244'. [ 866.546425][ T3595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.562126][ T3595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.571061][ T3595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.614510][ T3596] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 866.640131][ T3593] bond6: (slave bridge7): Enslaving as an active interface with an up link [ 866.656883][ T3595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.678770][ T3599] tipc: Enabling of bearer rejected, already enabled [ 866.778291][ T3604] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8247'. [ 866.780766][ T3595] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 866.831653][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 866.900823][ T3612] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8250'. [ 867.049799][ T3621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8253'. [ 867.097149][ T3624] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8254'. [ 867.117334][ T3626] netlink: 'syz.2.8255': attribute type 10 has an invalid length. [ 867.119506][ T3621] netlink: 2124 bytes leftover after parsing attributes in process `syz.4.8253'. [ 867.155265][ T3621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8253'. [ 867.156876][ T3626] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8255'. [ 867.316021][ T3626] netlink: 'syz.2.8255': attribute type 27 has an invalid length. [ 867.573699][ T3621] team_slave_0 (unregistering): left promiscuous mode [ 867.777976][ T3621] team0: Port device team_slave_0 removed [ 867.802303][ T3639] tipc: Enabling of bearer rejected, already enabled [ 867.871750][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 868.128859][ T3666] xt_cgroup: path and classid specified [ 868.155792][ T3666] xt_cgroup: path and classid specified [ 868.191736][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.193795][ C0] bridge0: port 4(hsr0) entered forwarding state [ 868.202748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 868.206352][ C0] bridge0: topology change detected, propagating [ 868.221100][ C0] bridge0: port 3(bond0) entered forwarding state [ 868.227603][ C0] bridge0: topology change detected, propagating [ 868.234166][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 868.241419][ C0] bridge0: topology change detected, propagating [ 868.247928][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 868.255187][ C0] bridge0: topology change detected, propagating [ 868.430729][ T3684] netlink: 'syz.4.8270': attribute type 1 has an invalid length. [ 868.472450][ T3684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 868.506568][ T5904] lo speed is unknown, defaulting to 1000 [ 868.513486][ T5904] sqz0: Port: 1 Link DOWN [ 868.519098][ T5904] lo speed is unknown, defaulting to 1000 [ 868.543044][ T3687] tipc: Enabling of bearer rejected, already enabled [ 868.796284][ T3712] netlink: 'syz.4.8280': attribute type 7 has an invalid length. [ 868.804501][ T3710] netlink: 'syz.1.8279': attribute type 1 has an invalid length. [ 868.895604][ T3710] netem: change failed [ 868.911654][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 869.116155][ T3732] tipc: Enabling of bearer rejected, already enabled [ 869.399528][ T3752] FAULT_INJECTION: forcing a failure. [ 869.399528][ T3752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.442544][ T3752] CPU: 1 UID: 0 PID: 3752 Comm: syz.4.8296 Not tainted syzkaller #0 PREEMPT(full) [ 869.442569][ T3752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 869.442580][ T3752] Call Trace: [ 869.442587][ T3752] [ 869.442595][ T3752] dump_stack_lvl+0xe8/0x150 [ 869.442628][ T3752] should_fail_ex+0x412/0x560 [ 869.442661][ T3752] _copy_to_user+0x31/0xb0 [ 869.442686][ T3752] simple_read_from_buffer+0xe1/0x170 [ 869.442717][ T3752] proc_fail_nth_read+0x1bb/0x230 [ 869.442747][ T3752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 869.442776][ T3752] ? rw_verify_area+0x2a6/0x4d0 [ 869.442797][ T3752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 869.442824][ T3752] vfs_read+0x20c/0xa70 [ 869.442843][ T3752] ? fdget_pos+0x246/0x320 [ 869.442866][ T3752] ? __pfx___mutex_lock+0x10/0x10 [ 869.442902][ T3752] ? __pfx_vfs_read+0x10/0x10 [ 869.442924][ T3752] ? __fget_files+0x2a/0x420 [ 869.442946][ T3752] ? __fget_files+0x3a0/0x420 [ 869.442962][ T3752] ? __fget_files+0x2a/0x420 [ 869.442988][ T3752] ksys_read+0x150/0x270 [ 869.443011][ T3752] ? __pfx_ksys_read+0x10/0x10 [ 869.443043][ T3752] do_syscall_64+0x14d/0xf80 [ 869.443065][ T3752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.443084][ T3752] ? clear_bhb_loop+0x40/0x90 [ 869.443108][ T3752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.443124][ T3752] RIP: 0033:0x7ff48cf5d04e [ 869.443142][ T3752] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 869.443157][ T3752] RSP: 002b:00007ff48ddc0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 869.443180][ T3752] RAX: ffffffffffffffda RBX: 00007ff48ddc16c0 RCX: 00007ff48cf5d04e [ 869.443193][ T3752] RDX: 000000000000000f RSI: 00007ff48ddc10a0 RDI: 0000000000000009 [ 869.443205][ T3752] RBP: 00007ff48ddc1090 R08: 0000000000000000 R09: 0000000000000000 [ 869.443217][ T3752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.443228][ T3752] R13: 00007ff48d216038 R14: 00007ff48d215fa0 R15: 00007ffde8b24098 [ 869.443259][ T3752] [ 869.928860][ T3768] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.938005][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 869.951567][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 870.033501][ T3772] tipc: Enabling of bearer rejected, already enabled [ 870.115113][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 870.301089][ T3792] netlink: 'syz.0.8308': attribute type 10 has an invalid length. [ 870.506201][ T3800] netlink: 'syz.0.8308': attribute type 27 has an invalid length. [ 870.529763][ T3807] openvswitch: netlink: Message has 16 unknown bytes. [ 870.769508][ T3816] tipc: Enabling of bearer rejected, already enabled [ 870.842047][ T3818] xt_CT: You must specify a L4 protocol and not use inversions on it [ 871.092486][ T3825] __nla_validate_parse: 13 callbacks suppressed [ 871.092514][ T3825] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8320'. [ 871.306275][ T3838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8324'. [ 871.350435][ T3838] team0: Port device team_slave_0 removed [ 871.400613][ T3846] netlink: 'syz.0.8325': attribute type 2 has an invalid length. [ 871.417750][ T3853] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8327'. [ 871.431037][ T3846] netlink: 'syz.0.8325': attribute type 2 has an invalid length. [ 871.581235][ T3856] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8328'. [ 871.604863][ T3856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8328'. [ 871.655889][ T3860] netlink: 'syz.4.8329': attribute type 1 has an invalid length. [ 871.700842][ T3860] bond9: entered promiscuous mode [ 871.707869][ T3860] 8021q: adding VLAN 0 to HW filter on device bond9 [ 871.753777][ T3859] 8021q: adding VLAN 0 to HW filter on device bond9 [ 871.760936][ T3859] bond9: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 871.804239][ T3859] bond9: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 871.872243][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 871.880318][ C0] lec:lec_tx_timeout: lec0 [ 871.886265][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 871.932063][ T3859] bond9: (slave ip6gre1): making interface the new active one [ 871.939699][ T3859] ip6gre1: entered promiscuous mode [ 871.964764][ T3859] bond9: (slave ip6gre1): Enslaving as an active interface with an up link [ 872.373888][ T3880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8336'. [ 872.510913][ T3886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8340'. [ 872.522866][ T3886] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8340'. [ 872.756756][ T3901] tipc: Enabling of bearer rejected, already enabled [ 872.871695][ T3906] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8346'. [ 872.874683][ T3908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8347'. [ 872.977150][ T3910] netlink: 'syz.3.8347': attribute type 8 has an invalid length. [ 873.071595][ C0] net_ratelimit: 4 callbacks suppressed [ 873.071618][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 873.129724][ T3924] xt_CT: You must specify a L4 protocol and not use inversions on it [ 873.236499][ T3930] xt_hashlimit: size too large, truncated to 1048576 [ 873.250938][ T3935] tipc: Enabling of bearer rejected, already enabled [ 873.462258][ T3943] digital: digital_start_poll: Unknown protocol [ 874.121726][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 874.672505][T29429] Bluetooth: hci4: command 0x0405 tx timeout [ 874.763290][ T3994] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 874.772770][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 875.151672][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 875.804826][ T4055] netlink: 'syz.1.8396': attribute type 10 has an invalid length. [ 875.967348][ T4070] netlink: 'syz.1.8396': attribute type 27 has an invalid length. [ 876.191564][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 876.693587][ T4096] __nla_validate_parse: 10 callbacks suppressed [ 876.693608][ T4096] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8406'. [ 876.911680][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 876.919727][ C0] lec:lec_tx_timeout: lec0 [ 876.960011][ T4111] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8410'. [ 877.019960][ T4111] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 877.231540][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 877.388257][ T4143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8422'. [ 877.404849][ T4145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8423'. [ 877.463428][ T4145] netlink: 'syz.0.8423': attribute type 1 has an invalid length. [ 877.522730][ T4156] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8423'. [ 877.595506][ T4145] 8021q: adding VLAN 0 to HW filter on device bond4 [ 877.807882][ T4165] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.816701][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 877.847055][ T4167] tipc: Enabling of bearer rejected, already enabled [ 877.893930][ T4169] netlink: 'syz.0.8427': attribute type 2 has an invalid length. [ 877.930541][ T4169] netlink: 'syz.0.8427': attribute type 1 has an invalid length. [ 877.999504][ T4171] rdma_rxe: rxe_newlink: failed to add lo [ 878.064472][ T4176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8431'. [ 878.077237][ T4177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8431'. [ 878.147274][ T4181] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 878.169705][ T4181] netlink: 'syz.1.8432': attribute type 1 has an invalid length. [ 878.220760][ T4181] netlink: 96 bytes leftover after parsing attributes in process `syz.1.8432'. [ 878.238183][ T4150] lec:lec_atm_close: lec0: Shut down! [ 878.244779][ T4181] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8432'. [ 878.266970][ T4181] netlink: 'syz.1.8432': attribute type 1 has an invalid length. [ 878.275041][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 878.291165][ T4181] netlink: 634 bytes leftover after parsing attributes in process `syz.1.8432'. [ 878.514171][ T4195] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 878.520533][ T4195] syzkaller1: linktype set to 768 [ 878.917502][ T4214] tipc: Enabling of bearer rejected, already enabled [ 879.126623][ T4225] netlink: 'syz.4.8445': attribute type 2 has an invalid length. [ 879.201949][ T4225] netlink: 'syz.4.8445': attribute type 8 has an invalid length. [ 879.311677][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 879.419643][ T4245] rdma_rxe: rxe_newlink: failed to add lo [ 879.790483][ T4273] netlink: 'syz.4.8457': attribute type 1 has an invalid length. [ 879.868745][ T4279] openvswitch: netlink: EtherType 0 is less than min 600 [ 880.091221][ T4251] netlink: 'syz.3.8449': attribute type 1 has an invalid length. [ 880.276248][ T4299] lo speed is unknown, defaulting to 1000 [ 880.291662][ T4238] lec:lec_atm_close: lec0: Shut down! [ 880.356299][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 880.563691][ T4299] lo speed is unknown, defaulting to 1000 [ 880.572357][ T4299] lo speed is unknown, defaulting to 1000 [ 880.995531][ T4320] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1536) ! [ 881.391550][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 881.392354][ T4342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.638718][ T4342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.709007][ T4344] __nla_validate_parse: 11 callbacks suppressed [ 881.709029][ T4344] netlink: 7 bytes leftover after parsing attributes in process `syz.4.8477'. [ 882.116064][ T4359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8479'. [ 882.368563][ T4363] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8480'. [ 882.431663][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 882.491222][ T4371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8483'. [ 882.633041][ T4378] netlink: 'syz.2.8485': attribute type 13 has an invalid length. [ 882.662049][ T4378] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.8485'. [ 883.134039][ T4391] lo speed is unknown, defaulting to 1000 [ 883.471600][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 883.488982][ T4401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8492'. [ 883.547212][ T4391] lo speed is unknown, defaulting to 1000 [ 883.557049][ T4391] lo speed is unknown, defaulting to 1000 [ 883.787162][ T4407] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8493'. [ 884.007327][ T4411] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 884.511681][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 884.644064][ T4429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8500'. [ 884.774732][ T4430] lo speed is unknown, defaulting to 1000 [ 885.158672][ T4430] lo speed is unknown, defaulting to 1000 [ 885.159875][ T4437] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8504'. [ 885.166820][ T4430] lo speed is unknown, defaulting to 1000 [ 885.180254][ T4419] lec:lec_atm_close: lec0: Shut down! [ 885.561557][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 885.690904][ T4457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8506'. [ 885.709543][ T4460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 885.755028][ T4463] netlink: 'syz.4.8508': attribute type 10 has an invalid length. [ 885.898309][ T4465] netlink: 'syz.4.8508': attribute type 27 has an invalid length. [ 885.979525][ T4467] lo speed is unknown, defaulting to 1000 [ 886.592217][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 886.765108][ T4475] __nla_validate_parse: 1 callbacks suppressed [ 886.765131][ T4475] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8510'. [ 886.817959][ T4467] lo speed is unknown, defaulting to 1000 [ 886.825146][ T4481] netlink: 'syz.4.8515': attribute type 1 has an invalid length. [ 886.837707][ T4481] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8515'. [ 886.854591][ T4481] FAULT_INJECTION: forcing a failure. [ 886.854591][ T4481] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.855864][ T4467] lo speed is unknown, defaulting to 1000 [ 886.871118][ T4481] CPU: 0 UID: 0 PID: 4481 Comm: syz.4.8515 Not tainted syzkaller #0 PREEMPT(full) [ 886.871143][ T4481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 886.871155][ T4481] Call Trace: [ 886.871163][ T4481] [ 886.871190][ T4481] dump_stack_lvl+0xe8/0x150 [ 886.871224][ T4481] should_fail_ex+0x412/0x560 [ 886.871256][ T4481] _copy_from_user+0x2d/0xb0 [ 886.871280][ T4481] ___sys_sendmsg+0x1c6/0x360 [ 886.871311][ T4481] ? __pfx____sys_sendmsg+0x10/0x10 [ 886.871371][ T4481] ? __fget_files+0x2a/0x420 [ 886.871388][ T4481] ? __fget_files+0x3a0/0x420 [ 886.871413][ T4481] __x64_sys_sendmsg+0x1bd/0x2a0 [ 886.871445][ T4481] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 886.871478][ T4481] ? __pfx_ksys_write+0x10/0x10 [ 886.871509][ T4481] do_syscall_64+0x14d/0xf80 [ 886.871529][ T4481] ? trace_irq_disable+0x3b/0x150 [ 886.871546][ T4481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.871565][ T4481] ? clear_bhb_loop+0x40/0x90 [ 886.871586][ T4481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.871604][ T4481] RIP: 0033:0x7ff48cf9c819 [ 886.871622][ T4481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.871638][ T4481] RSP: 002b:00007ff48ddc1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 886.871660][ T4481] RAX: ffffffffffffffda RBX: 00007ff48d215fa0 RCX: 00007ff48cf9c819 [ 886.871673][ T4481] RDX: 0000000000040080 RSI: 0000200000000040 RDI: 0000000000000009 [ 886.871685][ T4481] RBP: 00007ff48ddc1090 R08: 0000000000000000 R09: 0000000000000000 [ 886.871696][ T4481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 886.871707][ T4481] R13: 00007ff48d216038 R14: 00007ff48d215fa0 R15: 00007ffde8b24098 [ 886.871734][ T4481] [ 887.146660][ T4490] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8518'. [ 887.261312][ T4497] netlink: 380 bytes leftover after parsing attributes in process `syz.3.8520'. [ 887.322267][ T4499] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8519'. [ 887.444125][ T4488] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8517'. [ 887.631744][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 887.684059][ T4515] netlink: 'syz.0.8525': attribute type 10 has an invalid length. [ 887.713820][ T4515] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8525'. [ 887.864661][ T4517] netlink: 'syz.0.8525': attribute type 27 has an invalid length. [ 887.927968][ T4519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8526'. [ 888.014288][ T4519] erspan0: entered promiscuous mode [ 888.027297][ T4519] macvtap0: entered promiscuous mode [ 888.033659][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8526'. [ 888.038070][ T4519] macvtap0: entered allmulticast mode [ 888.049320][ T4519] erspan0: entered allmulticast mode [ 888.403126][ T4536] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8531'. [ 888.671968][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 888.707697][ T4541] xt_CT: You must specify a L4 protocol and not use inversions on it [ 888.866753][ T4548] netlink: 'syz.2.8533': attribute type 2 has an invalid length. [ 889.565249][ T4577] tipc: Enabling of bearer rejected, already enabled [ 889.711598][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 889.735194][ T4584] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 889.743937][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.359026][ T4585] lo speed is unknown, defaulting to 1000 [ 890.593945][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 890.751698][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 890.911462][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5740 ms [ 890.919967][ C0] lec:lec_tx_timeout: lec0 [ 890.980613][ T4613] tipc: Resetting bearer [ 891.002071][T15665] lo speed is unknown, defaulting to 1000 [ 891.114356][ T4617] netlink: 'syz.4.8555': attribute type 1 has an invalid length. [ 891.244624][ T4621] netlink: 'syz.4.8557': attribute type 1 has an invalid length. [ 891.249039][ T4619] tipc: Enabling of bearer rejected, already enabled [ 891.336919][ T4585] lo speed is unknown, defaulting to 1000 [ 891.398565][ T4585] lo speed is unknown, defaulting to 1000 [ 891.511975][ T4631] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:20001 [ 891.529413][ T4631] IPVS: set_ctl: invalid protocol: 135 172.20.20.61:20003 [ 891.562070][ T4631] x_tables: duplicate underflow at hook 3 [ 891.630769][ T6235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 891.654825][ T6235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 891.749826][ T4645] netlink: 'syz.4.8564': attribute type 10 has an invalid length. [ 891.772210][ T4645] __nla_validate_parse: 12 callbacks suppressed [ 891.772230][ T4645] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8564'. [ 891.793160][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 891.824805][ T4649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8566'. [ 891.919290][ T4648] bond6: entered promiscuous mode [ 891.925519][ T4648] 8021q: adding VLAN 0 to HW filter on device bond6 [ 891.934068][ T4648] bridge0: port 1(bond6) entered blocking state [ 891.940663][ T4648] bridge0: port 1(bond6) entered disabled state [ 891.947963][ T4653] netlink: 'syz.4.8564': attribute type 27 has an invalid length. [ 891.953076][ T4648] bond6: entered allmulticast mode [ 891.975520][ T4648] bridge0: port 1(bond6) entered blocking state [ 891.982037][ T4648] bridge0: port 1(bond6) entered listening state [ 892.558799][ T13] bridge0: port 1(bond6) entered disabled state [ 892.568501][ T4667] tipc: Enabling of bearer rejected, already enabled [ 892.621727][ T4673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 892.831732][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 893.041270][ T4696] gre0 speed is unknown, defaulting to 1000 [ 893.068500][ T4696] gre0 speed is unknown, defaulting to 1000 [ 893.076596][ T4696] gre0 speed is unknown, defaulting to 1000 [ 893.188711][ T4701] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 893.413187][ T4696] infiniband syz1: set active [ 893.418576][ T4696] infiniband syz1: added gre0 [ 893.453346][ T914] gre0 speed is unknown, defaulting to 1000 [ 893.488806][ T4704] netlink: 'syz.3.8584': attribute type 10 has an invalid length. [ 893.504203][ T4706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8585'. [ 893.505521][ T4704] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8584'. [ 893.550724][ T4696] RDS/IB: syz1: added [ 893.570279][ T4696] smc: adding ib device syz1 with port count 1 [ 893.587192][ T4696] smc: ib device syz1 port 1 has no pnetid [ 893.595391][ T5904] gre0 speed is unknown, defaulting to 1000 [ 893.602936][ T4696] gre0 speed is unknown, defaulting to 1000 [ 893.687898][ T4710] netlink: 'syz.3.8584': attribute type 27 has an invalid length. [ 893.730337][ T4715] tipc: Enabling of bearer rejected, already enabled [ 893.871757][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 893.898577][ T4717] lo speed is unknown, defaulting to 1000 [ 894.231952][ T4696] gre0 speed is unknown, defaulting to 1000 [ 894.520006][ T4736] xt_connbytes: Forcing CT accounting to be enabled [ 894.546466][ T4736] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 894.911648][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 894.916385][ T4696] gre0 speed is unknown, defaulting to 1000 [ 894.959451][ T4749] tipc: Enabling of bearer rejected, already enabled [ 894.971308][ T4751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8597'. [ 895.025069][ T4717] lo speed is unknown, defaulting to 1000 [ 895.045480][ T4717] lo speed is unknown, defaulting to 1000 [ 895.128217][ T4757] netlink: 'syz.4.8601': attribute type 1 has an invalid length. [ 895.198594][ T4759] netlink: 'syz.1.8602': attribute type 10 has an invalid length. [ 895.217393][ T4759] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8602'. [ 895.319698][ T4757] bond11: entered promiscuous mode [ 895.325957][ T4757] 8021q: adding VLAN 0 to HW filter on device bond11 [ 895.481894][ T4772] netlink: 'syz.1.8602': attribute type 27 has an invalid length. [ 895.650969][T29429] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 895.663661][T29429] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 895.675445][T29429] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 895.687587][T29429] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 895.695975][T29429] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 895.867886][ T4696] gre0 speed is unknown, defaulting to 1000 [ 895.905295][ T4773] lo speed is unknown, defaulting to 1000 [ 895.961851][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 896.351204][ T4773] lo speed is unknown, defaulting to 1000 [ 896.456596][T27498] bond0: (slave syz_tun): Releasing backup interface [ 896.473242][ T4773] lo speed is unknown, defaulting to 1000 [ 896.479029][ T4717] gre0 speed is unknown, defaulting to 1000 [ 896.491042][ T4788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8611'. [ 896.687461][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.732444][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.746114][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 896.776855][ T4798] netem: change failed [ 896.787515][ T4799] tipc: Enabling of bearer rejected, already enabled [ 896.882516][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 896.895030][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.925394][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 897.001603][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 897.025277][ T4696] gre0 speed is unknown, defaulting to 1000 [ 897.057228][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.069258][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.080655][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 897.179326][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 897.192711][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.203550][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 897.287177][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8618'. [ 897.287177][ T4812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8618'. [ 897.333928][ T4696] gre0 speed is unknown, defaulting to 1000 [ 897.443701][ T6219] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.461099][ T6219] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.526942][T24374] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.536926][T24374] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 897.595275][ T12] hsr0: left allmulticast mode [ 897.600095][ T12] hsr_slave_0: left allmulticast mode [ 897.614840][ T12] hsr_slave_1: left allmulticast mode [ 897.620551][ T12] bridge0: port 3(hsr0) entered disabled state [ 897.666113][ T12] bridge_slave_1: left allmulticast mode [ 897.703366][ T12] bridge_slave_1: left promiscuous mode [ 897.709187][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.741086][ T12] bridge_slave_0: left allmulticast mode [ 897.752641][ T12] bridge_slave_0: left promiscuous mode [ 897.754018][ T4826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8621'. [ 897.765081][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.794974][ T5825] Bluetooth: hci0: command tx timeout [ 898.031673][ C0] IPVS: ovf: UDP 224.0.0.1:0 - no destination available [ 898.058648][ T12] bond9 (unregistering): (slave ip6gre1): Releasing backup interface [ 898.074282][ T12] ip6gre1 (unregistering): left promiscuous mode [ 898.506300][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.520060][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 898.531264][ T12] bond0 (unregistering): Released all slaves [ 898.545370][ T12] bond1 (unregistering): Released all slaves [ 898.558397][ T12] bond2 (unregistering): Released all slaves [ 898.572696][ T12] bond3 (unregistering): Released all slaves [ 898.590571][ T12] bond4 (unregistering): Released all slaves [ 898.608842][ T12] bond5 (unregistering): Released all slaves [ 898.623123][ T12] bond6 (unregistering): Released all slaves [ 898.637549][ T12] bond7 (unregistering): (slave bond8): Releasing backup interface [ 898.646737][ T12] bond7 (unregistering): Released all slaves [ 898.669308][ T12] bond8 (unregistering): Released all slaves [ 898.683278][ T12] bond9 (unregistering): Released all slaves [ 898.696852][ T12] bond10 (unregistering): Released all slaves [ 898.717678][ T12] bond11 (unregistering): Released all slaves [ 898.733642][ T4773] gre0 speed is unknown, defaulting to 1000 [ 898.733867][ T4843] tipc: Enabling of bearer rejected, already enabled [ 898.967598][ T12] tipc: Disabling bearer [ 899.022262][ T12] tipc: Disabling bearer [ 899.041257][ T12] tipc: Left network mode [ 899.169370][ T12] IPVS: stopping backup sync thread 1702 ... [ 899.315595][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8627'. [ 899.333521][ T4696] gre0 speed is unknown, defaulting to 1000 [ 899.478440][ T4867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8627'. [ 899.892019][ T5825] Bluetooth: hci0: command tx timeout [ 899.989809][ T4892] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8631'. [ 900.066009][ T4696] gre0 speed is unknown, defaulting to 1000 [ 900.149387][ T4773] chnl_net:caif_netlink_parms(): no params data found [ 900.500229][ T4773] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.572753][ T4773] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.580429][ T4773] bridge_slave_0: entered allmulticast mode [ 900.614330][ T4773] bridge_slave_0: entered promiscuous mode [ 900.624959][ T4773] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.635847][ T4773] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.793336][ T4773] bridge_slave_1: entered allmulticast mode [ 900.812410][ T4773] bridge_slave_1: entered promiscuous mode [ 900.819977][ T4696] gre0 speed is unknown, defaulting to 1000 [ 900.954239][ T4773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.995667][ T4773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 901.127716][ T4773] team0: Port device team_slave_0 added [ 901.155081][ T4773] team0: Port device team_slave_1 added [ 901.239063][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 901.271915][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.343397][ T4773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 901.392909][ T4773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 901.400075][ T4773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 901.460919][ T4773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 901.509524][ T4696] gre0 speed is unknown, defaulting to 1000 [ 901.606787][ T4927] xt_CT: You must specify a L4 protocol and not use inversions on it [ 901.619195][ T4773] hsr_slave_0: entered promiscuous mode [ 901.643395][ T4773] hsr_slave_1: entered promiscuous mode [ 901.653231][ T4773] debugfs: 'hsr0' already exists in 'hsr' [ 901.658984][ T4773] Cannot create hsr debugfs directory [ 901.759681][ T4931] FAULT_INJECTION: forcing a failure. [ 901.759681][ T4931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 901.790247][ T4931] CPU: 0 UID: 0 PID: 4931 Comm: syz.3.8639 Not tainted syzkaller #0 PREEMPT(full) [ 901.790273][ T4931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 901.790285][ T4931] Call Trace: [ 901.790294][ T4931] [ 901.790302][ T4931] dump_stack_lvl+0xe8/0x150 [ 901.790335][ T4931] should_fail_ex+0x412/0x560 [ 901.790370][ T4931] _copy_from_user+0x2d/0xb0 [ 901.790394][ T4931] bpf_test_init+0xd8/0x150 [ 901.790422][ T4931] bpf_prog_test_run_xdp+0x529/0x1160 [ 901.790461][ T4931] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 901.790510][ T4931] ? __fget_files+0x2a/0x420 [ 901.790533][ T4931] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 901.790558][ T4931] bpf_prog_test_run+0x2c7/0x340 [ 901.790583][ T4931] __sys_bpf+0x643/0x950 [ 901.790602][ T4931] ? __pfx___sys_bpf+0x10/0x10 [ 901.790635][ T4931] ? ksys_write+0x242/0x270 [ 901.790659][ T4931] ? __pfx_ksys_write+0x10/0x10 [ 901.790688][ T4931] __x64_sys_bpf+0x7c/0x90 [ 901.790715][ T4931] do_syscall_64+0x14d/0xf80 [ 901.790736][ T4931] ? trace_irq_disable+0x3b/0x150 [ 901.790753][ T4931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.790772][ T4931] ? clear_bhb_loop+0x40/0x90 [ 901.790794][ T4931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.790813][ T4931] RIP: 0033:0x7fb49739c819 [ 901.790831][ T4931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 901.790848][ T4931] RSP: 002b:00007fb498242028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 901.790874][ T4931] RAX: ffffffffffffffda RBX: 00007fb497615fa0 RCX: 00007fb49739c819 [ 901.790888][ T4931] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 901.790900][ T4931] RBP: 00007fb498242090 R08: 0000000000000000 R09: 0000000000000000 [ 901.790912][ T4931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.790923][ T4931] R13: 00007fb497616038 R14: 00007fb497615fa0 R15: 00007ffcfa1406c8 [ 901.790953][ T4931] [ 902.013900][T29429] Bluetooth: hci0: command tx timeout [ 902.128222][ T4939] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8641'. [ 902.543022][ T4959] netlink: 'syz.3.8645': attribute type 4 has an invalid length. [ 902.807309][ T4773] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.161226][ T4773] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.417059][ T4773] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.568810][ T4976] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8648'. [ 903.707555][ T4982] FAULT_INJECTION: forcing a failure. [ 903.707555][ T4982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 903.735332][ T12] hsr_slave_0: left promiscuous mode [ 903.742419][ T4982] CPU: 1 UID: 0 PID: 4982 Comm: syz.1.8650 Not tainted syzkaller #0 PREEMPT(full) [ 903.742447][ T4982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 903.742459][ T4982] Call Trace: [ 903.742468][ T4982] [ 903.742476][ T4982] dump_stack_lvl+0xe8/0x150 [ 903.742509][ T4982] should_fail_ex+0x412/0x560 [ 903.742542][ T4982] _copy_from_user+0x2d/0xb0 [ 903.742566][ T4982] bpf_test_init+0xd8/0x150 [ 903.742595][ T4982] bpf_prog_test_run_xdp+0x529/0x1160 [ 903.742632][ T4982] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 903.742661][ T4982] ? __fget_files+0x2a/0x420 [ 903.742683][ T4982] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 903.742708][ T4982] bpf_prog_test_run+0x2c7/0x340 [ 903.742740][ T4982] __sys_bpf+0x643/0x950 [ 903.742761][ T4982] ? __pfx___sys_bpf+0x10/0x10 [ 903.742793][ T4982] ? ksys_write+0x242/0x270 [ 903.742817][ T4982] ? __pfx_ksys_write+0x10/0x10 [ 903.742845][ T4982] __x64_sys_bpf+0x7c/0x90 [ 903.742871][ T4982] do_syscall_64+0x14d/0xf80 [ 903.742892][ T4982] ? trace_irq_disable+0x3b/0x150 [ 903.742909][ T4982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.742927][ T4982] ? clear_bhb_loop+0x40/0x90 [ 903.742949][ T4982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.742967][ T4982] RIP: 0033:0x7f4d5fb9c819 [ 903.742986][ T4982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.743002][ T4982] RSP: 002b:00007f4d60ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 903.743025][ T4982] RAX: ffffffffffffffda RBX: 00007f4d5fe15fa0 RCX: 00007f4d5fb9c819 [ 903.743039][ T4982] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 903.743051][ T4982] RBP: 00007f4d60ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 903.743063][ T4982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 903.743073][ T4982] R13: 00007f4d5fe16038 R14: 00007f4d5fe15fa0 R15: 00007ffe88d897d8 [ 903.743103][ T4982] [ 903.747192][ T12] hsr_slave_1: left promiscuous mode [ 903.958079][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.965752][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.974549][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.982764][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.034862][T29429] Bluetooth: hci0: command tx timeout [ 904.231954][ T12] veth1_macvtap: left promiscuous mode [ 904.237939][ T12] veth0_macvtap: left allmulticast mode [ 904.262520][ T12] veth0_macvtap: left promiscuous mode [ 904.268457][ T12] veth1_vlan: left promiscuous mode [ 904.275789][ T12] veth0_vlan: left promiscuous mode [ 904.419687][ T12] pim6reg (unregistering): left allmulticast mode [ 904.575601][ T12] team_slave_1 (unregistering): left promiscuous mode [ 904.586055][ T12] team0 (unregistering): Port device team_slave_1 removed [ 904.730084][T24374] smc: removing ib device sqz0 [ 904.797639][ T4773] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.903691][ T4976] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 904.934016][ T797] gre0 speed is unknown, defaulting to 1000 [ 905.151545][ T5017] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8656'. [ 905.311967][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.321104][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.427949][ T5021] netlink: 'syz.1.8657': attribute type 1 has an invalid length. [ 905.436647][ T5019] lo speed is unknown, defaulting to 1000 [ 905.448575][ T5021] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8657'. [ 905.756105][ T5034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8660'. [ 905.775553][ T4773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 906.004963][ T5037] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 906.020083][ T5045] netlink: 'syz.1.8663': attribute type 7 has an invalid length. [ 906.044783][ T5045] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8663'. [ 906.055065][ T5046] FAULT_INJECTION: forcing a failure. [ 906.055065][ T5046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.068893][ T4773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 906.102090][ T5046] CPU: 1 UID: 0 PID: 5046 Comm: syz.0.8662 Not tainted syzkaller #0 PREEMPT(full) [ 906.102130][ T5046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 906.102143][ T5046] Call Trace: [ 906.102151][ T5046] [ 906.102159][ T5046] dump_stack_lvl+0xe8/0x150 [ 906.102192][ T5046] should_fail_ex+0x412/0x560 [ 906.102224][ T5046] _copy_to_user+0x31/0xb0 [ 906.102313][ T5046] bpf_test_finish+0x22c/0x6b0 [ 906.102357][ T5046] ? __pfx_bpf_test_finish+0x10/0x10 [ 906.102385][ T5046] ? _copy_from_user+0x94/0xb0 [ 906.102410][ T5046] ? bpf_test_init+0x113/0x150 [ 906.102434][ T5046] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 906.102471][ T5046] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 906.102501][ T5046] ? __fget_files+0x2a/0x420 [ 906.102525][ T5046] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 906.102551][ T5046] bpf_prog_test_run+0x2c7/0x340 [ 906.102575][ T5046] __sys_bpf+0x643/0x950 [ 906.102596][ T5046] ? __pfx___sys_bpf+0x10/0x10 [ 906.102629][ T5046] ? ksys_write+0x242/0x270 [ 906.102655][ T5046] ? __pfx_ksys_write+0x10/0x10 [ 906.102683][ T5046] __x64_sys_bpf+0x7c/0x90 [ 906.102710][ T5046] do_syscall_64+0x14d/0xf80 [ 906.102732][ T5046] ? trace_irq_disable+0x3b/0x150 [ 906.102749][ T5046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.102772][ T5046] ? clear_bhb_loop+0x40/0x90 [ 906.102795][ T5046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.102814][ T5046] RIP: 0033:0x7f0585d9c819 [ 906.102834][ T5046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.102850][ T5046] RSP: 002b:00007f0586ce5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 906.102874][ T5046] RAX: ffffffffffffffda RBX: 00007f0586015fa0 RCX: 00007f0585d9c819 [ 906.102888][ T5046] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 906.102901][ T5046] RBP: 00007f0586ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 906.102912][ T5046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.102924][ T5046] R13: 00007f0586016038 R14: 00007f0586015fa0 R15: 00007ffefbfae1f8 [ 906.102954][ T5046] [ 906.117890][ T4773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 906.424604][ T5039] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8661'. [ 906.483947][ T4773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 906.638600][ T5058] netlink: 'syz.0.8666': attribute type 10 has an invalid length. [ 906.693544][ T5058] netlink: 2 bytes leftover after parsing attributes in process `syz.0.8666'. [ 906.911147][ T5067] IPVS: rr: FWM 3 0x00000003 - no destination available [ 906.919298][ T5066] netlink: 'syz.0.8666': attribute type 27 has an invalid length. [ 906.954561][ T5075] lo speed is unknown, defaulting to 1000 [ 906.966390][ T5019] lo speed is unknown, defaulting to 1000 [ 906.979598][ T5019] gre0 speed is unknown, defaulting to 1000 [ 907.019330][ T4773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 907.080374][ T4773] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.119555][T24375] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.126981][T24375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.189681][T24375] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.196951][T24375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 907.300411][ T5075] lo speed is unknown, defaulting to 1000 [ 908.043523][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 908.078527][ T4773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 908.086335][ T5096] netlink: 'syz.0.8670': attribute type 1 has an invalid length. [ 908.146840][ T5096] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8670'. [ 908.278192][ T5075] gre0 speed is unknown, defaulting to 1000 [ 908.485777][ T5108] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8673'. [ 908.612519][ T5114] netlink: 176 bytes leftover after parsing attributes in process `syz.0.8674'. [ 908.769835][ T5120] xt_CT: You must specify a L4 protocol and not use inversions on it [ 908.800309][ T5118] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8675'. [ 908.974712][ T5126] netlink: 'syz.2.8679': attribute type 10 has an invalid length. [ 909.004892][ T5126] netlink: 2 bytes leftover after parsing attributes in process `syz.2.8679'. [ 909.082940][ T4773] veth0_vlan: entered promiscuous mode [ 909.137751][ T4773] veth1_vlan: entered promiscuous mode [ 909.170659][ T5133] netlink: 'syz.2.8679': attribute type 27 has an invalid length. [ 909.250917][ T4773] veth0_macvtap: entered promiscuous mode [ 909.263891][ T4773] veth1_macvtap: entered promiscuous mode [ 909.299784][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.362879][ T4773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.383282][ T6235] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.412177][ T6235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.487354][ T6235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 909.502239][ T6235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.185122][ T12] IPVS: stop unused estimator thread 0... [ 910.361590][ T6219] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.376044][ T6219] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 910.399963][ T5167] netlink: 176 bytes leftover after parsing attributes in process `syz.3.8686'. [ 910.413090][ T5165] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8685'. [ 910.464666][ T5169] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8685'. [ 910.700932][ T5186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 910.874288][T24374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 910.907428][T24374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 911.029385][ T5197] tipc: Enabling of bearer rejected, already enabled [ 911.273368][ T5203] netlink: 'syz.3.8693': attribute type 10 has an invalid length. [ 911.305328][ T5203] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8693'. [ 911.375940][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8694'. [ 911.512098][ T5207] netlink: 'syz.3.8693': attribute type 27 has an invalid length. [ 912.136954][ T5237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 912.307548][ T5242] netlink: 'syz.2.8701': attribute type 1 has an invalid length. [ 912.354176][ T5242] bond3: entered promiscuous mode [ 912.359648][ T5242] 8021q: adding VLAN 0 to HW filter on device bond3 [ 912.394968][ T5242] IPv6: Can't replace route, no match found [ 912.417560][ T5242] IPv6: Can't replace route, no match found [ 912.584495][ T5253] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8705'. [ 912.609051][ T12] vlan0: left allmulticast mode [ 912.620592][ T12] geneve0: left allmulticast mode [ 912.628826][ T12] vlan0: left promiscuous mode [ 912.638737][ T5259] netlink: 'syz.3.8707': attribute type 10 has an invalid length. [ 912.648063][ T12] geneve0: left promiscuous mode [ 912.656484][ T12] bridge0: port 3(vlan0) entered disabled state [ 912.660141][ T5259] netlink: 228 bytes leftover after parsing attributes in process `syz.3.8707'. [ 912.684790][ T12] bridge_slave_1: left allmulticast mode [ 912.694398][ T12] bridge_slave_1: left promiscuous mode [ 912.700335][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.710570][ T12] bridge_slave_0: left allmulticast mode [ 912.718019][ T12] bridge_slave_0: left promiscuous mode [ 912.729195][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.744824][ T12] dvmrp0: left allmulticast mode [ 913.040694][ T12] geneve1 (unregistering): left allmulticast mode [ 913.224165][ T12] bond1 (unregistering): Released all slaves [ 913.250452][ T12] bond2 (unregistering): Released all slaves [ 913.275965][ T12] bond0 (unregistering): Released all slaves [ 913.298380][ T12] bond3 (unregistering): Released all slaves [ 913.344409][ T5262] erspan0: entered promiscuous mode [ 913.349749][ T5262] macsec1: entered promiscuous mode [ 913.392446][ T5262] erspan0: left promiscuous mode [ 913.603983][ T12] tipc: Disabling bearer [ 913.664108][ T12] tipc: Left network mode [ 913.925554][ T5295] __nla_validate_parse: 2 callbacks suppressed [ 913.925574][ T5295] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8713'. [ 914.292667][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8721'. [ 914.368548][ T5324] netlink: 'syz.3.8724': attribute type 1 has an invalid length. [ 914.394755][ T5322] netlink: 216 bytes leftover after parsing attributes in process `syz.1.8721'. [ 914.421068][ T5326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8724'. [ 914.505100][ T5327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8721'. [ 914.555085][ T5322] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8721'. [ 914.587337][ T5322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8721'. [ 914.620582][ T5334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8726'. [ 915.000551][ T5343] pim6reg1: entered promiscuous mode [ 915.016736][ T5343] pim6reg1: entered allmulticast mode [ 915.035115][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8728'. [ 915.083557][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 915.096981][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 915.153058][ T12] hsr0: left allmulticast mode [ 915.168437][ T12] veth1_macvtap: left promiscuous mode [ 915.179650][ T12] veth0_macvtap: left allmulticast mode [ 915.185549][ T12] veth0_macvtap: left promiscuous mode [ 915.202005][ T12] veth1_vlan: left promiscuous mode [ 915.764646][ T12] team0 (unregistering): Port device team_slave_1 removed [ 915.790627][ T12] team0 (unregistering): Port device team_slave_0 removed [ 915.909225][ T12] veth0 (unregistering): left allmulticast mode [ 915.988257][ T6231] smc: removing ib device syz0 [ 916.051900][ T914] lo speed is unknown, defaulting to 1000 [ 916.070607][ T914] syz0: Port: 1 Link DOWN [ 916.362204][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 916.603589][ T5389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8736'. [ 917.395297][ T5386] lec:lec_atm_close: lec0: Shut down! [ 918.002883][ T5466] xt_TPROXY: Can be used only with -p tcp or -p udp [ 918.213712][ T5447] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.221485][ T5447] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.716401][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 918.780844][ T5447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 918.885904][ T5447] veth0_macvtap: left allmulticast mode [ 919.400807][ T5446] veth1: left promiscuous mode [ 919.436028][ T5446] mac80211_hwsim hwsim76 syzkaller0: left promiscuous mode [ 919.448497][ T5446] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode [ 919.500589][ T5446] batman_adv: batadv0: Interface deactivated: gretap1 [ 919.758005][ T5465] bridge_slave_0 (unregistering): left allmulticast mode [ 919.813966][ T5514] netlink: 'syz.0.8753': attribute type 1 has an invalid length. [ 919.831643][ T5465] bridge_slave_0 (unregistering): left promiscuous mode [ 919.832078][ T5514] __nla_validate_parse: 3 callbacks suppressed [ 919.832093][ T5514] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8753'. [ 919.841399][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.950153][ T5904] gre0 speed is unknown, defaulting to 1000 [ 919.950170][ T5480] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.962004][ T5904] syz1: Port: 1 Link DOWN [ 919.967034][ T5480] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 919.980541][ T5520] netlink: 'syz.1.8754': attribute type 2 has an invalid length. [ 919.990898][ T5480] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.006121][ T5514] mac80211_hwsim hwsim76 syzkaller0: entered promiscuous mode [ 920.014922][ T5514] mac80211_hwsim hwsim76 syzkaller0: entered allmulticast mode [ 920.023725][ T5904] gre0 speed is unknown, defaulting to 1000 [ 920.023797][ T5480] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.043559][ T5514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8753'. [ 920.395813][ T12] IPVS: stop unused estimator thread 0... [ 920.620145][ T5542] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8761'. [ 920.788152][ T5573] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8768'. [ 920.817352][ T5573] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8768'. [ 920.838462][ T5575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8769'. [ 920.852882][ T5573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8768'. [ 921.347172][ T5603] tipc: Started in network mode [ 921.357742][ T5603] tipc: Node identity 7edea2ac4086, cluster identity 4711 [ 921.388101][ T5603] tipc: Enabled bearer , priority 0 [ 921.437910][ T5612] syzkaller0: entered promiscuous mode [ 921.480394][ T5612] syzkaller0: entered allmulticast mode [ 921.542225][ T5603] tipc: Resetting bearer [ 921.672991][ T5602] tipc: Resetting bearer [ 921.766068][ T5602] tipc: Disabling bearer [ 922.231776][ T5658] netlink: 'syz.4.8783': attribute type 1 has an invalid length. [ 922.271064][ T5658] sctp: [Deprecated]: syz.4.8783 (pid 5658) Use of int in max_burst socket option. [ 922.271064][ T5658] Use struct sctp_assoc_value instead [ 922.347092][ T5662] ve: renamed from 31ªî{X¹¦ (while UP) [ 922.911421][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 922.920048][ C0] lec:lec_tx_timeout: lec0 [ 923.088298][ T5685] netlink: 'syz.1.8790': attribute type 1 has an invalid length. [ 923.097126][ T5685] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8790'. [ 923.131125][ T5689] netlink: 'syz.2.8792': attribute type 1 has an invalid length. [ 923.142193][ T5689] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8792'. [ 923.207318][ T5689] netem: change failed [ 923.479380][ T5705] lo speed is unknown, defaulting to 1000 [ 923.503795][ T5705] gre0 speed is unknown, defaulting to 1000 [ 923.514001][ T5904] IPVS: starting estimator thread 0... [ 923.602044][ T5710] IPVS: using max 34 ests per chain, 81600 per kthread [ 929.206239][T13512] lec:lec_start_xmit: lec0:No lecd attached [ 931.554899][ T1300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 934.911560][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5700 ms [ 934.919606][ C0] lec:lec_tx_timeout: lec0 [ 934.924371][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 939.931486][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 939.939734][ C0] lec:lec_tx_timeout: lec0 [ 944.225387][ T5747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8802'. [ 944.238662][ T5749] ipt_REJECT: TCP_RESET invalid for non-tcp [ 944.245105][ T5743] ipt_REJECT: TCP_RESET invalid for non-tcp [ 944.388301][ T5759] Bluetooth: MGMT ver 1.23 [ 944.412695][ T5757] netlink: 'syz.0.8805': attribute type 1 has an invalid length. [ 944.426414][ T5757] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8805'. [ 944.440470][ T5759] tap0: tun_chr_ioctl cmd 2148553947 [ 944.517487][ T5765] netlink: 'syz.2.8807': attribute type 1 has an invalid length. [ 944.556461][ T5765] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8807'. [ 944.570875][ T5766] lo speed is unknown, defaulting to 1000 [ 944.605939][ T5765] netem: change failed [ 944.642044][ T5766] gre0 speed is unknown, defaulting to 1000 [ 944.684883][ T5778] netlink: 'syz.4.8809': attribute type 3 has an invalid length. [ 944.780574][ T5778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 944.895485][ T5784] tipc: Enabling of bearer rejected, already enabled [ 945.036961][ T5789] netlink: 284 bytes leftover after parsing attributes in process `syz.2.8812'. [ 945.307142][ T5794] lo speed is unknown, defaulting to 1000 [ 945.358700][ T5804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8817'. [ 945.401173][ T5794] gre0 speed is unknown, defaulting to 1000 [ 945.523094][ T5813] netlink: 'syz.3.8818': attribute type 10 has an invalid length. [ 945.542237][ T5813] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8818'. [ 945.723586][ T5816] netlink: 'syz.3.8818': attribute type 27 has an invalid length. [ 946.291246][ T5822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8820'. [ 946.842868][ T5853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8827'. [ 946.996112][ T5859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8828'. [ 947.012868][ T5864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8824'. [ 947.402420][ T5891] netlink: 'syz.0.8833': attribute type 10 has an invalid length. [ 947.425041][ T5891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 947.445137][ T5891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 947.603572][ T5905] netlink: 'syz.0.8833': attribute type 27 has an invalid length. [ 948.836796][ T5925] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 948.906981][ T5920] FAULT_INJECTION: forcing a failure. [ 948.906981][ T5920] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 948.951295][ T5920] CPU: 0 UID: 0 PID: 5920 Comm: syz.3.8840 Not tainted syzkaller #0 PREEMPT(full) [ 948.951326][ T5920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 948.951338][ T5920] Call Trace: [ 948.951346][ T5920] [ 948.951353][ T5920] dump_stack_lvl+0xe8/0x150 [ 948.951388][ T5920] should_fail_ex+0x412/0x560 [ 948.951422][ T5920] _copy_from_user+0x2d/0xb0 [ 948.951446][ T5920] kstrtouint_from_user+0xd6/0x180 [ 948.951476][ T5920] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 948.951519][ T5920] proc_fail_nth_write+0x8e/0x210 [ 948.951545][ T5920] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 948.951576][ T5920] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 948.951602][ T5920] vfs_write+0x29a/0xb90 [ 948.951633][ T5920] ? __pfx_vfs_write+0x10/0x10 [ 948.951655][ T5920] ? __fget_files+0x2a/0x420 [ 948.951677][ T5920] ? __fget_files+0x3a0/0x420 [ 948.951693][ T5920] ? __fget_files+0x2a/0x420 [ 948.951719][ T5920] ksys_write+0x150/0x270 [ 948.951742][ T5920] ? __pfx_ksys_write+0x10/0x10 [ 948.951774][ T5920] do_syscall_64+0x14d/0xf80 [ 948.951795][ T5920] ? trace_irq_disable+0x3b/0x150 [ 948.951812][ T5920] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.951839][ T5920] ? clear_bhb_loop+0x40/0x90 [ 948.951863][ T5920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.951881][ T5920] RIP: 0033:0x7fb49735d04e [ 948.951899][ T5920] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 948.951915][ T5920] RSP: 002b:00007fb498241fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 948.951937][ T5920] RAX: ffffffffffffffda RBX: 00007fb4982426c0 RCX: 00007fb49735d04e [ 948.951950][ T5920] RDX: 0000000000000001 RSI: 00007fb4982420a0 RDI: 0000000000000005 [ 948.951961][ T5920] RBP: 00007fb498242090 R08: 0000000000000000 R09: 0000000000000000 [ 948.951973][ T5920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 948.951983][ T5920] R13: 00007fb497616038 R14: 00007fb497615fa0 R15: 00007ffcfa1406c8 [ 948.952012][ T5920] [ 949.395004][ T5937] netlink: 'syz.3.8846': attribute type 1 has an invalid length. [ 949.442288][ T5939] __nla_validate_parse: 4 callbacks suppressed [ 949.442317][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8845'. [ 949.499761][ T5939] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 949.502870][ T5943] 8021q: VLANs not supported on ip6_vti0 [ 949.519343][ T5939] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 949.744058][ T5954] FAULT_INJECTION: forcing a failure. [ 949.744058][ T5954] name failslab, interval 1, probability 0, space 0, times 0 [ 949.781198][ T5954] CPU: 1 UID: 0 PID: 5954 Comm: syz.2.8850 Not tainted syzkaller #0 PREEMPT(full) [ 949.781228][ T5954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 949.781240][ T5954] Call Trace: [ 949.781248][ T5954] [ 949.781257][ T5954] dump_stack_lvl+0xe8/0x150 [ 949.781291][ T5954] should_fail_ex+0x412/0x560 [ 949.781325][ T5954] should_failslab+0xa8/0x100 [ 949.781348][ T5954] ? vm_area_dup+0x2b/0x680 [ 949.781367][ T5954] kmem_cache_alloc_noprof+0x87/0x650 [ 949.781393][ T5954] vm_area_dup+0x2b/0x680 [ 949.781415][ T5954] __split_vma+0x1dc/0xa40 [ 949.781454][ T5954] ? __pfx___split_vma+0x10/0x10 [ 949.781489][ T5954] ? mas_find+0xb0e/0xd30 [ 949.781516][ T5954] vms_gather_munmap_vmas+0x4fa/0x1370 [ 949.781561][ T5954] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 949.781596][ T5954] ? mas_find+0xa7d/0xd30 [ 949.781621][ T5954] mmap_region+0x7f5/0x22a0 [ 949.781653][ T5954] ? tomoyo_check_open_permission+0x1d3/0x470 [ 949.781685][ T5954] ? __pfx_mmap_region+0x10/0x10 [ 949.781799][ T5954] ? __lock_acquire+0x6b5/0x2cf0 [ 949.781831][ T5954] ? __lock_acquire+0x6b5/0x2cf0 [ 949.781933][ T5954] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 949.781960][ T5954] ? __lock_acquire+0x6b5/0x2cf0 [ 949.781987][ T5954] ? aa_file_perm+0x192/0x15e0 [ 949.782013][ T5954] ? cap_mmap_addr+0xaf/0x100 [ 949.782038][ T5954] ? bpf_lsm_mmap_addr+0x9/0x50 [ 949.782063][ T5954] ? security_mmap_addr+0x71/0x240 [ 949.782103][ T5954] ? shmem_mapping+0xd/0x50 [ 949.782124][ T5954] ? memfd_check_seals_mmap+0xc5/0x200 [ 949.782152][ T5954] do_mmap+0xc39/0x10c0 [ 949.782187][ T5954] ? __pfx_do_mmap+0x10/0x10 [ 949.782210][ T5954] ? down_write_killable+0x180/0x240 [ 949.782239][ T5954] ? __pfx_down_write_killable+0x10/0x10 [ 949.782262][ T5954] ? apparmor_mmap_file+0x2da/0x3e0 [ 949.782293][ T5954] vm_mmap_pgoff+0x2c9/0x4f0 [ 949.782327][ T5954] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 949.782356][ T5954] ? __fget_files+0x2a/0x420 [ 949.782380][ T5954] ? __fget_files+0x3a0/0x420 [ 949.782398][ T5954] ? __fget_files+0x2a/0x420 [ 949.782420][ T5954] ksys_mmap_pgoff+0x51e/0x760 [ 949.782446][ T5954] do_syscall_64+0x14d/0xf80 [ 949.782468][ T5954] ? trace_irq_disable+0x3b/0x150 [ 949.782486][ T5954] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.782506][ T5954] ? clear_bhb_loop+0x40/0x90 [ 949.782529][ T5954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.782549][ T5954] RIP: 0033:0x7f80b579c819 [ 949.782569][ T5954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.782586][ T5954] RSP: 002b:00007f80b65ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 949.782609][ T5954] RAX: ffffffffffffffda RBX: 00007f80b5a15fa0 RCX: 00007f80b579c819 [ 949.782622][ T5954] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000ffc000 [ 949.782634][ T5954] RBP: 00007f80b65ed090 R08: 0000000000000003 R09: 0000000000000000 [ 949.782646][ T5954] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 949.782658][ T5954] R13: 00007f80b5a16038 R14: 00007f80b5a15fa0 R15: 00007fff652df2c8 [ 949.782689][ T5954] [ 949.790289][ T5956] netlink: 'syz.1.8851': attribute type 10 has an invalid length. [ 950.086105][ T5966] netlink: 'syz.0.8853': attribute type 1 has an invalid length. [ 950.143182][ T5966] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8853'. [ 950.202907][ T5956] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8851'. [ 950.204179][ T5969] netlink: 'syz.1.8851': attribute type 27 has an invalid length. [ 950.453523][ T5980] netlink: 'syz.2.8856': attribute type 1 has an invalid length. [ 950.484865][ T5980] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8856'. [ 950.541800][ T5980] netem: change failed [ 950.587554][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8855'. [ 950.637394][ T5987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8857'. [ 950.956644][ T5998] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20001 [ 950.985205][ T5998] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8862'. [ 951.093641][ T6000] tipc: Enabling of bearer rejected, already enabled [ 951.115821][ T6003] netlink: 'syz.3.8860': attribute type 2 has an invalid length. [ 951.225388][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8864'. [ 951.323342][ T6009] netlink: 'syz.3.8865': attribute type 1 has an invalid length. [ 951.554166][ T6024] FAULT_INJECTION: forcing a failure. [ 951.554166][ T6024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.563149][ T6016] bond8: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 951.587324][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8865'. [ 951.601976][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.1.8869 Not tainted syzkaller #0 PREEMPT(full) [ 951.602008][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 951.602020][ T6024] Call Trace: [ 951.602029][ T6024] [ 951.602038][ T6024] dump_stack_lvl+0xe8/0x150 [ 951.602071][ T6024] should_fail_ex+0x412/0x560 [ 951.602103][ T6024] _copy_from_user+0x2d/0xb0 [ 951.602127][ T6024] ___sys_sendmsg+0x1c6/0x360 [ 951.602160][ T6024] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.602190][ T6024] ? kstrtouint+0x6e/0xe0 [ 951.602239][ T6024] ? __fget_files+0x2a/0x420 [ 951.602256][ T6024] ? __fget_files+0x3a0/0x420 [ 951.602283][ T6024] __sys_sendmmsg+0x27c/0x4e0 [ 951.602313][ T6024] ? __pfx___sys_sendmmsg+0x10/0x10 [ 951.602336][ T6024] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 951.602382][ T6024] ? ksys_write+0x242/0x270 [ 951.602406][ T6024] ? __pfx_ksys_write+0x10/0x10 [ 951.602432][ T6024] __x64_sys_sendmmsg+0xa0/0xc0 [ 951.602460][ T6024] do_syscall_64+0x14d/0xf80 [ 951.602479][ T6024] ? trace_irq_disable+0x3b/0x150 [ 951.602497][ T6024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.602516][ T6024] ? clear_bhb_loop+0x40/0x90 [ 951.602538][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.602556][ T6024] RIP: 0033:0x7f4d5fb9c819 [ 951.602575][ T6024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.602591][ T6024] RSP: 002b:00007f4d60ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 951.602614][ T6024] RAX: ffffffffffffffda RBX: 00007f4d5fe15fa0 RCX: 00007f4d5fb9c819 [ 951.602627][ T6024] RDX: 0000000000000001 RSI: 0000200000007580 RDI: 0000000000000004 [ 951.602639][ T6024] RBP: 00007f4d60ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 951.602651][ T6024] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000001 [ 951.602663][ T6024] R13: 00007f4d5fe16038 R14: 00007f4d5fe15fa0 R15: 00007ffe88d897d8 [ 951.602692][ T6024] [ 951.833797][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8865'. [ 951.851188][ T6019] 8021q: adding VLAN 0 to HW filter on device bond8 [ 951.873437][T14129] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 952.012202][T24374] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 952.102428][ T6009] veth13: entered promiscuous mode [ 952.112427][ T6009] bond8: (slave veth13): Enslaving as a backup interface with a down link [ 952.131966][ T6028] netlink: 'syz.0.8868': attribute type 1 has an invalid length. [ 952.189056][ T6027] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 952.667272][ T6048] xt_CT: You must specify a L4 protocol and not use inversions on it [ 952.886153][ T6064] FAULT_INJECTION: forcing a failure. [ 952.886153][ T6064] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 952.907424][ T6059] bridge1: entered promiscuous mode [ 952.914264][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: syz.2.8880 Not tainted syzkaller #0 PREEMPT(full) [ 952.914291][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 952.914304][ T6064] Call Trace: [ 952.914311][ T6064] [ 952.914320][ T6064] dump_stack_lvl+0xe8/0x150 [ 952.914370][ T6064] should_fail_ex+0x412/0x560 [ 952.914405][ T6064] _copy_from_user+0x2d/0xb0 [ 952.914429][ T6064] __copy_msghdr+0x3c5/0x5b0 [ 952.914461][ T6064] ___sys_sendmsg+0x213/0x360 [ 952.914492][ T6064] ? __pfx____sys_sendmsg+0x10/0x10 [ 952.914519][ T6064] ? kstrtouint+0x6e/0xe0 [ 952.914564][ T6064] ? __fget_files+0x2a/0x420 [ 952.914582][ T6064] ? __fget_files+0x3a0/0x420 [ 952.914606][ T6064] __sys_sendmmsg+0x27c/0x4e0 [ 952.914635][ T6064] ? __pfx___sys_sendmmsg+0x10/0x10 [ 952.914658][ T6064] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 952.914703][ T6064] ? ksys_write+0x242/0x270 [ 952.914726][ T6064] ? __pfx_ksys_write+0x10/0x10 [ 952.914750][ T6064] __x64_sys_sendmmsg+0xa0/0xc0 [ 952.914773][ T6064] do_syscall_64+0x14d/0xf80 [ 952.914791][ T6064] ? trace_irq_disable+0x3b/0x150 [ 952.914806][ T6064] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.914823][ T6064] ? clear_bhb_loop+0x40/0x90 [ 952.914843][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 952.914861][ T6064] RIP: 0033:0x7f80b579c819 [ 952.914878][ T6064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 952.914893][ T6064] RSP: 002b:00007f80b65ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 952.914914][ T6064] RAX: ffffffffffffffda RBX: 00007f80b5a15fa0 RCX: 00007f80b579c819 [ 952.914927][ T6064] RDX: 0000000000000001 RSI: 0000200000007580 RDI: 0000000000000004 [ 952.914940][ T6064] RBP: 00007f80b65ed090 R08: 0000000000000000 R09: 0000000000000000 [ 952.914952][ T6064] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000001 [ 952.914963][ T6064] R13: 00007f80b5a16038 R14: 00007f80b5a15fa0 R15: 00007fff652df2c8 [ 952.914992][ T6064] [ 952.918966][ T6059] bridge1: entered allmulticast mode [ 953.288415][ T6076] netlink: 'syz.3.8883': attribute type 1 has an invalid length. [ 953.770191][ T6086] vlan1: entered allmulticast mode [ 953.879823][ T6091] mac80211_hwsim hwsim76 syzkaller0: left promiscuous mode [ 953.911962][ T6091] mac80211_hwsim hwsim76 syzkaller0: left allmulticast mode [ 954.169586][ T6104] FAULT_INJECTION: forcing a failure. [ 954.169586][ T6104] name failslab, interval 1, probability 0, space 0, times 0 [ 954.192083][ T6104] CPU: 0 UID: 0 PID: 6104 Comm: syz.1.8891 Not tainted syzkaller #0 PREEMPT(full) [ 954.192112][ T6104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 954.192124][ T6104] Call Trace: [ 954.192131][ T6104] [ 954.192140][ T6104] dump_stack_lvl+0xe8/0x150 [ 954.192173][ T6104] should_fail_ex+0x412/0x560 [ 954.192205][ T6104] should_failslab+0xa8/0x100 [ 954.192232][ T6104] __kmalloc_noprof+0xe8/0x760 [ 954.192254][ T6104] ? iovec_from_user+0x87/0x250 [ 954.192280][ T6104] iovec_from_user+0x87/0x250 [ 954.192304][ T6104] __import_iovec+0x163/0x7e0 [ 954.192346][ T6104] import_iovec+0x73/0xa0 [ 954.192372][ T6104] ___sys_sendmsg+0x255/0x360 [ 954.192405][ T6104] ? __pfx____sys_sendmsg+0x10/0x10 [ 954.192435][ T6104] ? kstrtouint+0x6e/0xe0 [ 954.192484][ T6104] ? __fget_files+0x2a/0x420 [ 954.192500][ T6104] ? __fget_files+0x3a0/0x420 [ 954.192526][ T6104] __sys_sendmmsg+0x27c/0x4e0 [ 954.192558][ T6104] ? __pfx___sys_sendmmsg+0x10/0x10 [ 954.192580][ T6104] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 954.192628][ T6104] ? ksys_write+0x242/0x270 [ 954.192651][ T6104] ? __pfx_ksys_write+0x10/0x10 [ 954.192672][ T6104] __x64_sys_sendmmsg+0xa0/0xc0 [ 954.192696][ T6104] do_syscall_64+0x14d/0xf80 [ 954.192714][ T6104] ? trace_irq_disable+0x3b/0x150 [ 954.192731][ T6104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.192748][ T6104] ? clear_bhb_loop+0x40/0x90 [ 954.192771][ T6104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.192790][ T6104] RIP: 0033:0x7f4d5fb9c819 [ 954.192809][ T6104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.192824][ T6104] RSP: 002b:00007f4d60ab7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 954.192847][ T6104] RAX: ffffffffffffffda RBX: 00007f4d5fe15fa0 RCX: 00007f4d5fb9c819 [ 954.192861][ T6104] RDX: 0000000000000001 RSI: 0000200000007580 RDI: 0000000000000004 [ 954.192873][ T6104] RBP: 00007f4d60ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 954.192885][ T6104] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000001 [ 954.192897][ T6104] R13: 00007f4d5fe16038 R14: 00007f4d5fe15fa0 R15: 00007ffe88d897d8 [ 954.192927][ T6104] [ 954.253031][ T6107] netlink: 'syz.0.8892': attribute type 12 has an invalid length. [ 954.470976][ T6107] __nla_validate_parse: 9 callbacks suppressed [ 954.471000][ T6107] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8892'. [ 954.582825][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8894'. [ 954.667781][ T6116] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8896'. [ 954.899048][ T6122] netlink: 'syz.0.8897': attribute type 1 has an invalid length. [ 955.053702][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8898'. [ 955.410375][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8906'. [ 955.426401][ T6152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 955.507012][ T6154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8906'. [ 955.797550][ T6168] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8910'. [ 955.821142][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8910'. [ 956.087602][ T6185] FAULT_INJECTION: forcing a failure. [ 956.087602][ T6185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.151956][ T6185] CPU: 1 UID: 0 PID: 6185 Comm: syz.4.8915 Not tainted syzkaller #0 PREEMPT(full) [ 956.151987][ T6185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 956.151999][ T6185] Call Trace: [ 956.152008][ T6185] [ 956.152017][ T6185] dump_stack_lvl+0xe8/0x150 [ 956.152050][ T6185] should_fail_ex+0x412/0x560 [ 956.152084][ T6185] _copy_from_iter+0x3b0/0x1670 [ 956.152106][ T6185] ? lruvec_stat_mod_folio+0x70/0x4b0 [ 956.152141][ T6185] ? __pfx__copy_from_iter+0x10/0x10 [ 956.152160][ T6185] ? trace_kmalloc+0x2a/0x110 [ 956.152191][ T6185] ? __kmalloc_noprof+0x37d/0x760 [ 956.152212][ T6185] ? nfc_llcp_send_ui_frame+0xf6/0x740 [ 956.152239][ T6185] nfc_llcp_send_ui_frame+0x145/0x740 [ 956.152262][ T6185] ? release_sock+0x2f/0x260 [ 956.152289][ T6185] ? llcp_sock_sendmsg+0x240/0x3f0 [ 956.152311][ T6185] ? __pfx_nfc_llcp_send_ui_frame+0x10/0x10 [ 956.152327][ T6185] ? __local_bh_enable_ip+0xd0/0x130 [ 956.152350][ T6185] ? lockdep_hardirqs_on+0x7a/0x110 [ 956.152370][ T6185] ? __local_bh_enable_ip+0xd0/0x130 [ 956.152391][ T6185] ? llcp_sock_sendmsg+0x240/0x3f0 [ 956.152412][ T6185] ____sys_sendmsg+0x972/0x9f0 [ 956.152444][ T6185] ? __pfx_____sys_sendmsg+0x10/0x10 [ 956.152475][ T6185] ? import_iovec+0x73/0xa0 [ 956.152494][ T6185] ___sys_sendmsg+0x2a5/0x360 [ 956.152522][ T6185] ? __pfx____sys_sendmsg+0x10/0x10 [ 956.152549][ T6185] ? kstrtouint+0x6e/0xe0 [ 956.152601][ T6185] ? __fget_files+0x2a/0x420 [ 956.152629][ T6185] ? __fget_files+0x3a0/0x420 [ 956.152656][ T6185] __sys_sendmmsg+0x27c/0x4e0 [ 956.152687][ T6185] ? __pfx___sys_sendmmsg+0x10/0x10 [ 956.152711][ T6185] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 956.152757][ T6185] ? ksys_write+0x242/0x270 [ 956.152780][ T6185] ? __pfx_ksys_write+0x10/0x10 [ 956.152808][ T6185] __x64_sys_sendmmsg+0xa0/0xc0 [ 956.152836][ T6185] do_syscall_64+0x14d/0xf80 [ 956.152855][ T6185] ? trace_irq_disable+0x3b/0x150 [ 956.152872][ T6185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.152891][ T6185] ? clear_bhb_loop+0x40/0x90 [ 956.152914][ T6185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.152933][ T6185] RIP: 0033:0x7fc8ba19c819 [ 956.152953][ T6185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.152970][ T6185] RSP: 002b:00007fc8baf8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 956.152993][ T6185] RAX: ffffffffffffffda RBX: 00007fc8ba415fa0 RCX: 00007fc8ba19c819 [ 956.153007][ T6185] RDX: 0000000000000001 RSI: 0000200000007580 RDI: 0000000000000004 [ 956.153020][ T6185] RBP: 00007fc8baf8b090 R08: 0000000000000000 R09: 0000000000000000 [ 956.153032][ T6185] R10: 0000000020000010 R11: 0000000000000246 R12: 0000000000000001 [ 956.153044][ T6185] R13: 00007fc8ba416038 R14: 00007fc8ba415fa0 R15: 00007ffe5cad4aa8 [ 956.153074][ T6185] [ 956.614728][ T6187] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8916'. [ 956.698708][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8916'. [ 956.753267][ T5825] Bluetooth: hci4: command 0x0405 tx timeout [ 956.764052][ T6189] tipc: Enabling of bearer rejected, already enabled [ 956.882273][ T6193] mac80211_hwsim hwsim76 syzkaller0: entered promiscuous mode [ 956.890095][ T6193] mac80211_hwsim hwsim76 syzkaller0: entered allmulticast mode [ 956.956416][ T6194] netlink: 'syz.4.8918': attribute type 1 has an invalid length. [ 957.427720][ T6213] geneve1: entered promiscuous mode [ 957.488934][ T6213] geneve1: left promiscuous mode [ 957.676475][T29429] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 957.687869][T29429] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 957.703307][T29429] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 957.722583][T29429] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 957.733579][T29429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 957.936681][ T6233] netlink: 'syz.1.8926': attribute type 6 has an invalid length. [ 957.968000][ T6220] lo speed is unknown, defaulting to 1000 [ 958.003657][ T6220] gre0 speed is unknown, defaulting to 1000 [ 958.581048][ T6241] ipt_ECN: cannot use operation on non-tcp rule [ 959.409080][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 959.450178][ T6254] tipc: Enabling of bearer rejected, already enabled [ 959.749451][ T6259] lo speed is unknown, defaulting to 1000 [ 959.792124][T29429] Bluetooth: hci1: command tx timeout [ 959.816696][ T6259] gre0 speed is unknown, defaulting to 1000 [ 959.828483][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.858792][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.890964][ T6220] bridge_slave_0: entered allmulticast mode [ 959.921280][ T6220] bridge_slave_0: entered promiscuous mode [ 959.946059][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.975231][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 959.993493][ T6220] bridge_slave_1: entered allmulticast mode [ 960.015404][ T6220] bridge_slave_1: entered promiscuous mode [ 960.256740][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.373549][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 960.475322][ T6220] team0: Port device team_slave_0 added [ 960.562280][ T6220] team0: Port device team_slave_1 added [ 960.736802][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 960.771557][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 960.800656][ T6279] netlink: 'syz.1.8936': attribute type 1 has an invalid length. [ 960.835844][ T6279] __nla_validate_parse: 4 callbacks suppressed [ 960.835876][ T6279] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8936'. [ 960.870830][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 960.960530][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 960.977430][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 961.032236][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 961.079444][ T6274] syzkaller1: entered promiscuous mode [ 961.085549][ T6274] syzkaller1: entered allmulticast mode [ 961.230905][ T6220] hsr_slave_0: entered promiscuous mode [ 961.255911][ T6220] hsr_slave_1: entered promiscuous mode [ 961.636423][ T6290] netlink: 'syz.4.8939': attribute type 1 has an invalid length. [ 961.677325][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8939'. [ 961.706663][ T6290] netlink: 'syz.4.8939': attribute type 1 has an invalid length. [ 961.774281][ T6294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.824978][ T6293] syzkaller1: entered promiscuous mode [ 961.832076][ T6293] syzkaller1: entered allmulticast mode [ 961.873723][T29429] Bluetooth: hci1: command tx timeout [ 962.269221][ T6315] netlink: 'syz.1.8945': attribute type 1 has an invalid length. [ 962.281549][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 962.299659][ T6315] netlink: 88 bytes leftover after parsing attributes in process `syz.1.8945'. [ 962.343192][ T6315] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8945'. [ 962.387983][ T6315] netlink: 'syz.1.8945': attribute type 1 has an invalid length. [ 962.416528][ T6315] netlink: 634 bytes leftover after parsing attributes in process `syz.1.8945'. [ 962.483295][ T6220] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 962.495028][ T6220] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 962.507307][ T6220] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 962.519114][ T6220] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 963.059249][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8949'. [ 963.182317][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 963.208825][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 963.325743][ T6231] bridge0: port 1(bridge_slave_0) entered blocking state [ 963.332945][ T6231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 963.399767][T14129] bridge0: port 2(bridge_slave_1) entered blocking state [ 963.406953][T14129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 963.868166][ T6370] FAULT_INJECTION: forcing a failure. [ 963.868166][ T6370] name failslab, interval 1, probability 0, space 0, times 0 [ 963.903021][ T6370] CPU: 0 UID: 0 PID: 6370 Comm: syz.0.8961 Not tainted syzkaller #0 PREEMPT(full) [ 963.903053][ T6370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 963.903066][ T6370] Call Trace: [ 963.903074][ T6370] [ 963.903083][ T6370] dump_stack_lvl+0xe8/0x150 [ 963.903117][ T6370] should_fail_ex+0x412/0x560 [ 963.903151][ T6370] should_failslab+0xa8/0x100 [ 963.903177][ T6370] __kmalloc_noprof+0xe8/0x760 [ 963.903199][ T6370] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 963.903218][ T6370] ? sock_kmalloc+0xd6/0x160 [ 963.903254][ T6370] sock_kmalloc+0xd6/0x160 [ 963.903282][ T6370] af_alg_alloc_areq+0x99/0x200 [ 963.903300][ T6370] skcipher_recvmsg+0x332/0x1140 [ 963.903333][ T6370] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 963.903352][ T6370] ? aa_sock_msg_perm+0xf1/0x1b0 [ 963.903373][ T6370] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 963.903395][ T6370] ? security_socket_recvmsg+0x7e/0x2c0 [ 963.903417][ T6370] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 963.903437][ T6370] sock_recvmsg+0x172/0x1b0 [ 963.903462][ T6370] ____sys_recvmsg+0x1e6/0x4a0 [ 963.903497][ T6370] ? __pfx_____sys_recvmsg+0x10/0x10 [ 963.903537][ T6370] ? import_iovec+0x73/0xa0 [ 963.903563][ T6370] ___sys_recvmsg+0x215/0x590 [ 963.903593][ T6370] ? get_pid_task+0x20/0x1f0 [ 963.903616][ T6370] ? __pfx____sys_recvmsg+0x10/0x10 [ 963.903666][ T6370] ? __fget_files+0x3a0/0x420 [ 963.903694][ T6370] __x64_sys_recvmsg+0x1ba/0x2a0 [ 963.903724][ T6370] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 963.903759][ T6370] ? __pfx_ksys_write+0x10/0x10 [ 963.903792][ T6370] do_syscall_64+0x14d/0xf80 [ 963.903813][ T6370] ? trace_irq_disable+0x3b/0x150 [ 963.903829][ T6370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.903848][ T6370] ? clear_bhb_loop+0x40/0x90 [ 963.903871][ T6370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.903889][ T6370] RIP: 0033:0x7f0585d9c819 [ 963.903909][ T6370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.903925][ T6370] RSP: 002b:00007f0586ce5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 963.903949][ T6370] RAX: ffffffffffffffda RBX: 00007f0586015fa0 RCX: 00007f0585d9c819 [ 963.903963][ T6370] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 963.903975][ T6370] RBP: 00007f0586ce5090 R08: 0000000000000000 R09: 0000000000000000 [ 963.903986][ T6370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.903997][ T6370] R13: 00007f0586016038 R14: 00007f0586015fa0 R15: 00007ffefbfae1f8 [ 963.904028][ T6370] [ 964.205068][T29429] Bluetooth: hci1: command tx timeout [ 964.253320][ T6367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8958'. [ 964.309513][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.543200][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8962'. [ 964.599296][ T6220] veth0_vlan: entered promiscuous mode [ 964.663762][ T6220] veth1_vlan: entered promiscuous mode [ 964.730857][ T6220] veth0_macvtap: entered promiscuous mode [ 964.753970][ T6220] veth1_macvtap: entered promiscuous mode [ 964.797438][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.829176][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.884909][ T6231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.896759][ T6231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.923662][ T6388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8964'. [ 964.959578][ T6231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.992978][ T6231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 965.023234][ T6401] 8021q: VLANs not supported on ip6_vti0 [ 965.229032][T14129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.272478][T14129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.368949][ T6410] vlan2: entered promiscuous mode [ 965.381418][ T6410] macvlan1: entered promiscuous mode [ 965.409841][T14129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 965.424988][T14129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.764370][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8977'. [ 965.913760][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8978'. [ 966.273153][ T5825] Bluetooth: hci1: command tx timeout [ 966.350194][ T6468] tipc: Started in network mode [ 966.361151][ T6468] tipc: Node identity ac14140f, cluster identity 4711 [ 966.373912][ T6468] tipc: New replicast peer: 255.255.255.255 [ 966.400759][ T6468] tipc: Enabled bearer , priority 10 [ 966.459412][ T6475] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8988'. [ 966.533125][ T6475] tipc: Enabled bearer , priority 0 [ 966.565730][ T6475] syzkaller0: entered promiscuous mode [ 966.587142][ T6475] syzkaller0: entered allmulticast mode [ 966.603997][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8989'. [ 966.613771][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8989'. [ 966.633330][ T6475] tipc: Resetting bearer [ 966.675744][ T6473] tipc: Resetting bearer [ 966.708008][ T6483] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8989'. [ 966.722031][ T6483] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8989'. [ 966.744879][ T6473] tipc: Disabling bearer [ 966.860554][ T6495] x_tables: duplicate underflow at hook 3 [ 967.094878][ T6507] netlink: 'syz.1.8998': attribute type 39 has an invalid length. [ 967.140547][ T6511] 5nè‹Ò: entered promiscuous mode [ 967.152529][ T6509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8997'. [ 967.221604][ T6515] netlink: 'syz.1.8998': attribute type 13 has an invalid length. [ 967.238263][ T6515] netlink: 'syz.1.8998': attribute type 17 has an invalid length. [ 967.347137][ T6505] syzkaller0: entered promiscuous mode [ 967.368476][ T6505] syzkaller0: entered allmulticast mode [ 967.436503][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9002'. [ 967.485545][ T6515] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 967.536712][ T5904] tipc: Node number set to 2886997007 [ 971.112573][ T6525] kthread_run failed with err -4 [ 971.299962][ T6554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 971.534882][ T6568] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9017'. [ 971.617468][ T6573] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9019'. [ 971.639484][ T6571] netlink: zone id is out of range [ 971.642181][ T6567] netlink: 'syz.4.9018': attribute type 8 has an invalid length. [ 971.653858][ T6567] netlink: 'syz.4.9018': attribute type 4 has an invalid length. [ 971.657848][ T6571] netlink: zone id is out of range [ 971.678227][ T6571] netlink: zone id is out of range [ 971.696538][ T6571] netlink: zone id is out of range [ 971.726843][ T6571] netlink: zone id is out of range [ 971.753055][ T6571] netlink: zone id is out of range [ 971.801462][ T6571] netlink: zone id is out of range [ 971.806623][ T6571] netlink: zone id is out of range [ 971.818082][ T6571] netlink: zone id is out of range [ 972.427963][ T6607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9026'. [ 972.465222][ T6609] netlink: 'syz.4.9028': attribute type 1 has an invalid length. [ 972.756672][ T6609] bond2: entered promiscuous mode [ 972.766766][ T6609] 8021q: adding VLAN 0 to HW filter on device bond2 [ 973.064634][ T6630] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9034'. [ 973.123508][ T6632] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9035'. [ 973.704408][ T6659] FAULT_INJECTION: forcing a failure. [ 973.704408][ T6659] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 973.765147][ T6659] CPU: 1 UID: 0 PID: 6659 Comm: syz.4.9043 Not tainted syzkaller #0 PREEMPT(full) [ 973.765177][ T6659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 973.765190][ T6659] Call Trace: [ 973.765198][ T6659] [ 973.765206][ T6659] dump_stack_lvl+0xe8/0x150 [ 973.765239][ T6659] should_fail_ex+0x412/0x560 [ 973.765274][ T6659] prepare_alloc_pages+0x22a/0x650 [ 973.765306][ T6659] __alloc_frozen_pages_noprof+0x12f/0x380 [ 973.765341][ T6659] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 973.765369][ T6659] ? __pfx_policy_nodemask+0x10/0x10 [ 973.765404][ T6659] alloc_pages_mpol+0x232/0x4a0 [ 973.765433][ T6659] vma_alloc_folio_noprof+0xea/0x210 [ 973.765464][ T6659] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 973.765497][ T6659] do_wp_page+0x1204/0x5a00 [ 973.765545][ T6659] ? __pfx_do_wp_page+0x10/0x10 [ 973.765567][ T6659] ? do_raw_spin_lock+0x12b/0x2f0 [ 973.765589][ T6659] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 973.765618][ T6659] handle_mm_fault+0x1520/0x3310 [ 973.765651][ T6659] ? handle_mm_fault+0xee/0x3310 [ 973.765687][ T6659] ? __pfx_handle_mm_fault+0x10/0x10 [ 973.765706][ T6659] ? follow_page_pte+0xd7f/0x1450 [ 973.765733][ T6659] ? __pfx_follow_page_pte+0x10/0x10 [ 973.765763][ T6659] __get_user_pages+0x165b/0x29d0 [ 973.765821][ T6659] __gup_longterm_locked+0xdcf/0x1630 [ 973.765869][ T6659] ? sanity_check_pinned_pages+0x1212/0x12d0 [ 973.765902][ T6659] gup_fast_fallback+0x1d82/0x22e0 [ 973.765960][ T6659] ? __pfx_gup_fast_fallback+0x10/0x10 [ 973.765992][ T6659] ? pin_user_pages_fast+0x4d/0xb0 [ 973.766020][ T6659] iov_iter_extract_pages+0x37b/0x5f0 [ 973.766059][ T6659] extract_iter_to_sg+0xe62/0x2520 [ 973.766094][ T6659] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 973.766130][ T6659] ? __asan_memset+0x22/0x50 [ 973.766153][ T6659] af_alg_get_rsgl+0x436/0x810 [ 973.766195][ T6659] skcipher_recvmsg+0x3a3/0x1140 [ 973.766236][ T6659] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 973.766256][ T6659] ? aa_sock_msg_perm+0xf1/0x1b0 [ 973.766277][ T6659] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 973.766300][ T6659] ? security_socket_recvmsg+0x7e/0x2c0 [ 973.766322][ T6659] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 973.766350][ T6659] sock_recvmsg+0x172/0x1b0 [ 973.766386][ T6659] ____sys_recvmsg+0x1e6/0x4a0 [ 973.766422][ T6659] ? __pfx_____sys_recvmsg+0x10/0x10 [ 973.766464][ T6659] ? import_iovec+0x73/0xa0 [ 973.766489][ T6659] ___sys_recvmsg+0x215/0x590 [ 973.766512][ T6659] ? get_pid_task+0x20/0x1f0 [ 973.766533][ T6659] ? __pfx____sys_recvmsg+0x10/0x10 [ 973.766576][ T6659] ? __fget_files+0x3a0/0x420 [ 973.766600][ T6659] __x64_sys_recvmsg+0x1ba/0x2a0 [ 973.766634][ T6659] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 973.766665][ T6659] ? __pfx_ksys_write+0x10/0x10 [ 973.766696][ T6659] do_syscall_64+0x14d/0xf80 [ 973.766716][ T6659] ? trace_irq_disable+0x3b/0x150 [ 973.766731][ T6659] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.766748][ T6659] ? clear_bhb_loop+0x40/0x90 [ 973.766769][ T6659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.766785][ T6659] RIP: 0033:0x7fc8ba19c819 [ 973.766803][ T6659] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.766818][ T6659] RSP: 002b:00007fc8baf8b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 973.766840][ T6659] RAX: ffffffffffffffda RBX: 00007fc8ba415fa0 RCX: 00007fc8ba19c819 [ 973.766853][ T6659] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 973.766863][ T6659] RBP: 00007fc8baf8b090 R08: 0000000000000000 R09: 0000000000000000 [ 973.766874][ T6659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.766885][ T6659] R13: 00007fc8ba416038 R14: 00007fc8ba415fa0 R15: 00007ffe5cad4aa8 [ 973.766912][ T6659] [ 974.225799][ T6665] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9045'. [ 974.435808][ T6674] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9048'. [ 974.889655][ T6694] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9052'. [ 975.043783][ T6697] lo speed is unknown, defaulting to 1000 [ 975.117581][ T6697] gre0 speed is unknown, defaulting to 1000 [ 975.279196][ T6708] tipc: Enabling of bearer rejected, already enabled [ 975.342895][ T6710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9059'. [ 975.865710][ T6737] netlink: 'syz.4.9066': attribute type 3 has an invalid length. [ 975.910127][ T6737] netlink: 666 bytes leftover after parsing attributes in process `syz.4.9066'. [ 976.144008][ T6744] netlink: 'syz.0.9068': attribute type 1 has an invalid length. [ 976.322185][ T6746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.417919][ T6746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.518495][ T6746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 976.647826][ T6773] __nla_validate_parse: 4 callbacks suppressed [ 976.647852][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9079'. [ 976.859482][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9082'. [ 977.115978][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9086'. [ 977.170324][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9086'. [ 977.223429][ T6806] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9086'. [ 977.325598][ T6809] netlink: 'syz.1.9090': attribute type 13 has an invalid length. [ 977.341981][ T6809] netlink: 'syz.1.9090': attribute type 17 has an invalid length. [ 977.355530][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9090'. [ 977.555657][ T6808] bridge0: port 4(hsr0) entered disabled state [ 977.562113][ T6808] bridge0: port 3(bond0) entered disabled state [ 977.568862][ T6808] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.576571][ T6808] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.643300][ T6829] net_ratelimit: 391 callbacks suppressed [ 977.643321][ T6829] netlink: ct family unspecified [ 977.654507][ T6829] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 977.668280][ T6829] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9092'. [ 977.857182][ T6808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.935988][ T6808] veth0_macvtap: left allmulticast mode [ 978.018632][ T919] lo speed is unknown, defaulting to 1000 [ 978.024750][ T919] syz2: Port: 1 Link DOWN [ 978.069927][ T6838] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 978.070174][ T6229] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.127343][ T6229] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.159360][ T6229] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.184523][ T6229] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.199919][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9094'. [ 978.294985][ T6229] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.320686][ T6229] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.355239][ T6229] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 978.390142][ T6229] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.421928][ T6848] hsr0: entered promiscuous mode [ 978.448329][ T6848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9096'. [ 978.486145][ T6848] hsr_slave_0: left promiscuous mode [ 978.502930][ T6848] hsr_slave_1: left promiscuous mode [ 978.542635][ T6848] hsr0 (unregistering): left promiscuous mode [ 978.830693][ T6869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 978.903070][ T6869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 979.113481][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9105'. [ 979.276140][ T6887] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 979.398323][ T6887] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 979.577576][ T6897] vlan2: entered allmulticast mode [ 979.743825][T29429] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 979.754966][T29429] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 979.763197][T29429] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 979.771142][T29429] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 979.779366][T29429] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 979.976039][ T6910] lo speed is unknown, defaulting to 1000 [ 980.046783][ T6910] gre0 speed is unknown, defaulting to 1000 [ 980.502391][ T6931] batadv_slave_1: entered promiscuous mode [ 980.545211][ T6930] batadv_slave_1: left promiscuous mode [ 980.751080][ T6944] tipc: Enabling of bearer rejected, already enabled [ 980.807316][ T6946] xt_CT: You must specify a L4 protocol and not use inversions on it [ 980.836675][ T12] ------------[ cut here ]------------ [ 980.842728][ T12] conntrack cleanup blocked for 60s [ 980.842760][ T12] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x234/0x340, CPU#1: kworker/u8:0/12 [ 980.861376][ T12] Modules linked in: [ 980.865773][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 980.875675][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 980.886905][ T12] Workqueue: netns cleanup_net [ 980.892255][ T12] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 980.899049][ T12] Code: 08 48 89 df e8 6d 38 63 f8 4c 8b 3b 49 39 df 74 69 e8 10 e6 f8 f7 45 31 e4 e9 8e fe ff ff e8 03 e6 f8 f7 48 8d 3d 5c 34 54 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 980.921951][ T12] RSP: 0018:ffffc900001178b0 EFLAGS: 00010293 [ 980.928201][ T12] RAX: ffffffff89ccc9ed RBX: ffffc90000117a50 RCX: ffff88801dae8000 [ 980.936285][ T12] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: ffffffff9020fe50 [ 980.944410][ T12] RBP: 0000000000000001 R08: ffff8880599d7003 R09: 1ffff1100b33ae00 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 980.952993][ T12] R10: dffffc0000000000 R11: ffffed100b33ae01 R12: 0000000000000001 [ 980.961101][ T12] R13: dffffc0000000000 R14: 000000010001093e R15: 0000000100010940 [ 980.969977][ T12] FS: 0000000000000000(0000) GS:ffff88812554a000(0000) knlGS:0000000000000000 [ 980.979597][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 980.986944][ T12] CR2: 000000110c380589 CR3: 00000000a5e60000 CR4: 00000000003526f0 [ 980.995996][ T12] Call Trace: [ 980.999303][ T12] [ 981.002949][ T12] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 981.009061][ T12] ops_undo_list+0x52b/0x940 [ 981.014320][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 981.019475][ T12] ? idr_destroy+0x227/0x290 [ 981.024793][ T12] cleanup_net+0x56b/0x800 [ 981.029348][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 981.035143][ T12] ? process_scheduled_works+0xa8d/0x18c0 [ 981.040911][ T12] ? process_scheduled_works+0xa8d/0x18c0 [ 981.047271][ T12] process_scheduled_works+0xb6e/0x18c0 [ 981.053442][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 981.059463][ T12] ? assign_work+0x3d5/0x5e0 [ 981.064683][ T12] worker_thread+0xa53/0xfc0 [ 981.069333][ T12] kthread+0x388/0x470 [ 981.073974][ T12] ? __pfx_worker_thread+0x10/0x10 [ 981.079118][ T12] ? __pfx_kthread+0x10/0x10 [ 981.084340][ T12] ret_from_fork+0x51e/0xb90 [ 981.088968][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 981.094716][ T12] ? __switch_to+0xc7d/0x1450 [ 981.099430][ T12] ? __pfx_kthread+0x10/0x10 [ 981.104676][ T12] ret_from_fork_asm+0x1a/0x30 [ 981.109535][ T12] [ 981.113170][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 981.120510][ T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 981.129822][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 981.139899][ T12] Workqueue: netns cleanup_net [ 981.144708][ T12] Call Trace: [ 981.147986][ T12] [ 981.150909][ T12] vpanic+0x56c/0xa60 [ 981.154925][ T12] ? __pfx__printk+0x10/0x10 [ 981.159526][ T12] ? __pfx_vpanic+0x10/0x10 [ 981.164021][ T12] ? is_bpf_text_address+0x292/0x2b0 [ 981.169296][ T12] ? is_bpf_text_address+0x26/0x2b0 [ 981.174490][ T12] panic+0xc5/0xd0 [ 981.178209][ T12] ? __pfx_panic+0x10/0x10 [ 981.182628][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 981.187597][ T12] __warn+0x315/0x4f0 [ 981.191575][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 981.197720][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 981.204037][ T12] __report_bug+0x29a/0x540 [ 981.208532][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 981.213468][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 981.219614][ T12] ? __pfx___report_bug+0x10/0x10 [ 981.224625][ T12] ? __lock_acquire+0x6b5/0x2cf0 [ 981.229735][ T12] ? nf_conntrack_cleanup_net_list+0x13e/0x340 [ 981.236232][ T12] report_bug_entry+0x19a/0x290 [ 981.241078][ T12] ? nf_conntrack_cleanup_net_list+0x234/0x340 [ 981.247221][ T12] ? nf_conntrack_cleanup_net_list+0x239/0x340 [ 981.253458][ T12] handle_bug+0xce/0x200 [ 981.257696][ T12] exc_invalid_op+0x1a/0x50 [ 981.262198][ T12] asm_exc_invalid_op+0x1a/0x20 [ 981.267050][ T12] RIP: 0010:nf_conntrack_cleanup_net_list+0x234/0x340 [ 981.273803][ T12] Code: 08 48 89 df e8 6d 38 63 f8 4c 8b 3b 49 39 df 74 69 e8 10 e6 f8 f7 45 31 e4 e9 8e fe ff ff e8 03 e6 f8 f7 48 8d 3d 5c 34 54 06 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c cd fe ff [ 981.293400][ T12] RSP: 0018:ffffc900001178b0 EFLAGS: 00010293 [ 981.299570][ T12] RAX: ffffffff89ccc9ed RBX: ffffc90000117a50 RCX: ffff88801dae8000 [ 981.307531][ T12] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: ffffffff9020fe50 [ 981.315493][ T12] RBP: 0000000000000001 R08: ffff8880599d7003 R09: 1ffff1100b33ae00 [ 981.323497][ T12] R10: dffffc0000000000 R11: ffffed100b33ae01 R12: 0000000000000001 [ 981.331459][ T12] R13: dffffc0000000000 R14: 000000010001093e R15: 0000000100010940 [ 981.339440][ T12] ? nf_conntrack_cleanup_net_list+0x22d/0x340 [ 981.345609][ T12] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 981.351674][ T12] ops_undo_list+0x52b/0x940 [ 981.356266][ T12] ? __pfx_ops_undo_list+0x10/0x10 [ 981.361464][ T12] ? idr_destroy+0x227/0x290 [ 981.366058][ T12] cleanup_net+0x56b/0x800 [ 981.370522][ T12] ? __pfx_cleanup_net+0x10/0x10 [ 981.375497][ T12] ? process_scheduled_works+0xa8d/0x18c0 [ 981.381243][ T12] ? process_scheduled_works+0xa8d/0x18c0 [ 981.386994][ T12] process_scheduled_works+0xb6e/0x18c0 [ 981.392672][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 981.398685][ T12] ? assign_work+0x3d5/0x5e0 [ 981.403282][ T12] worker_thread+0xa53/0xfc0 [ 981.407934][ T12] kthread+0x388/0x470 [ 981.412001][ T12] ? __pfx_worker_thread+0x10/0x10 [ 981.417106][ T12] ? __pfx_kthread+0x10/0x10 [ 981.421691][ T12] ret_from_fork+0x51e/0xb90 [ 981.426284][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 981.431391][ T12] ? __switch_to+0xc7d/0x1450 [ 981.436061][ T12] ? __pfx_kthread+0x10/0x10 [ 981.440641][ T12] ret_from_fork_asm+0x1a/0x30 [ 981.445421][ T12] [ 981.448850][ T12] Kernel Offset: disabled [ 981.453204][ T12] Rebooting in 86400 seconds..