last executing test programs: 2.856520741s ago: executing program 2 (id=17479): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x800) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r12, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x8}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}]}, 0x48}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000280)) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r13, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accb", 0x26}], 0x1}, 0x0) r14 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r15 = openat$cgroup_freezer_state(r14, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r15, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r15, r15, 0x0, 0x9) 2.288575883s ago: executing program 2 (id=17484): r0 = socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x2, 0x100000000, 0x100000000000000, 0x4ea, 0x4, 0xc, 0x2881000004000009, 0xc}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25d7dbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x10, 0x8, 0x8, 0x8, 0x81}, 0x103, 0x0, 0x7, 0x7, 0x7, 0xa, 0x12, 0x7, 0x7, 0x3, {0x3, 0x2, 0x3, 0x35db, 0x2, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40188c0}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0xb0, 0x2c, 0x400, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r8, {0x0, 0x10}, {0x0, 0x10}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x6c, 0x9, 0x0, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x5, 0x6, 0x6}, 0x38}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x7c, 0x0, 0x1, 0xa0d2}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r7) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="27030200000314000e00003c000300000000ff8400000000000000000000000000060000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000005c0)={'lo\x00'}) r12 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r12, &(0x7f00000049c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000002000)="ed", 0x1}], 0x1, 0x0, 0x0, 0x24008040}], 0x1, 0x62048800) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 1.974840801s ago: executing program 0 (id=17492): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_create1(0x0) epoll_create1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x3}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0xfffffffc, 0x0, 0x1, 0x0, 0x6}, {{@in6=@loopback, 0x4, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0xc000) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB="0000f1ffffffffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80000) 1.835031548s ago: executing program 3 (id=17494): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f8000000160004000000000000000000fe880000000000000000000000000001ff0100000000000000000000000000010000000000000082000000002b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000096cd4c7d212ca3702bb6000000aa000000002b"], 0xf8}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) getsockopt$sock_buf(r0, 0x1, 0xd9582e048a2ac7b3, &(0x7f0000000580)=""/4096, &(0x7f0000000100)=0x1000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20054841) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1.762703416s ago: executing program 3 (id=17495): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004600070128bd700001000000017c0000080002"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a31000000000800054000000002"], 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002"], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) getsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000001c0)={@dev, 0x0}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x34, r7, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x24040815}, 0x300040d4) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000003}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x80000001}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.60939894s ago: executing program 1 (id=17496): r0 = socket$inet6_sctp(0xa, 0xd, 0x84) r1 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x4, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in=@broadcast, 0x4d1, 0x32}, 0x2, @in=@empty, 0x3502, 0x1, 0x0, 0x0, 0xa, 0xfffffffd}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x8e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 1.487785451s ago: executing program 1 (id=17497): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r3, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x91) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x96) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0x2f000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="800000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000580012800c0001006d6163766c616e00480002800800010010000000280005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa0000000a000400aaaaaaaaaa00000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r1], 0x80}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x8}, 0x8) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_to_hsr\x00', {0xb26}}) sendmsg$nl_route_sched(r7, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x200, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x4, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r8, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608c5", 0xc2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r8, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r8, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14, r9, 0x0, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x8001) syz_emit_ethernet(0x8e, &(0x7f0000000040)=ANY=[@ANYRESOCT=r7, @ANYRES64], 0x0) 1.487524469s ago: executing program 3 (id=17498): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x10000800) 1.486984239s ago: executing program 0 (id=17499): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0xfffffffc, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0xfffffffc, {}, [@RTA_DST={0x8, 0x1, {0x8100}}]}, 0x24}}, 0x0) (async) 1.388840769s ago: executing program 1 (id=17500): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000340)={0x23, {{0x2, 0x0, @private=0xa010101}}, {{0x2, 0x0, @multicast2}}}, 0x108) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r4, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockname$packet(r5, 0x0, &(0x7f0000000000)) close(r0) 1.343833735s ago: executing program 3 (id=17501): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x184, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x13a260736e98a861}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x766c, 0x81}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x6, 0x3, 0x9, 0x1, 0x54, 0x101}}, {0x4}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x400, 0x1, 0x1, 0x242, 0x6, 0x8}}, {0x14, 0x2, [0x7624, 0x8600, 0x4, 0x2, 0x8, 0x3, 0x8, 0x9]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0x98, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x80000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x4}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x52b}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x5}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x7}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x10000}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x9, 0xc, 0x10, 0x7, 0xb, 0x2, 0xa, 0x3, 0x0, 0xa, 0x10, 0x0, 0x7, 0x2, 0x8, 0xd], 0x1, [0xfff, 0xa, 0x6, 0x8, 0x7, 0xba7b, 0x5, 0x10, 0x208f, 0x2, 0x10, 0x2, 0x8, 0x6, 0x8d, 0x9], [0x9, 0xfff, 0x7, 0x7ff, 0x3, 0xf, 0x2, 0xfffc, 0x8, 0x9, 0x0, 0x4, 0x3, 0x7, 0x4, 0x7]}}]}}]}, 0x184}}, 0x24000814) 1.232291589s ago: executing program 0 (id=17502): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001800)=@nat={'nat\x00', 0x670, 0x5, 0xb68, 0x8b0, 0xa00, 0xffffffff, 0x0, 0xa00, 0xad0, 0xad0, 0xffffffff, 0xad0, 0xad0, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'macsec0\x00', {0xff}, {}, 0x16, 0x1}, 0x0, 0x878, 0x8b0, 0x48, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x400, 0x1}, {0x0, 0x1}, {0x5, 0x31ad6b86d1e81068}, {0x92, 0x3}, {0x1d3, 0x2}, {0x3}, {0x1, 0x2}, {}, {0x5, 0x1}, {0x80000001, 0x1}, {0xffffffff, 0x3}], [{0x3, 0x9}, {0x6, 0x1}, {0x7, 0x5}, {0x7, 0x7}, {0x200, 0x6}, {0x420, 0x89f}, {0x3, 0xffffffff}, {0x4, 0x1}, {0x2, 0x6}, {0x0, 0x9}, {0x2, 0x7}], 0x6, 0x3}, {[{0x5}, {0x40, 0x2}, {0xf37b, 0x3}, {0x6, 0x3}, {0x9, 0x2}, {0xd175}, {0xb, 0x3}, {0x80000000, 0x3}, {0x7, 0x1}, {0x80000000, 0x3}, {0x9, 0x1}], [{0xfffff915, 0x7}, {0x4, 0x7fff}, {0x7, 0x6}, {0x5, 0x1}, {0x7, 0x3}, {0x9, 0x3}, {0xfffffffe, 0x6}, {0x8, 0x3}, {0x5fd42ece, 0x7}, {0x1, 0x6}, {0xfffffff9, 0xe}], 0x4, 0x4}, {[{0x1000, 0x2}, {0x80000001}, {0x4, 0x2}, {0x1}, {0x2, 0x1}, {0x8001, 0x1}, {0x0, 0x2}, {0x80000001, 0x3}, {0x4, 0x3}, {0x7, 0x6}, {0x0, 0x1}], [{0x7f, 0x4}, {0xa, 0x6}, {0x80, 0x400}, {0x6, 0xbcdd}, {0xe, 0x40}, {0x9016, 0x1}, {0x0, 0x7ff}, {0x40, 0x1}, {0x5, 0x7}, {0x7, 0x7f}, {0x7, 0x5}], 0x9, 0x2}, {[{0xdb, 0x1}, {0x4}, {0xc, 0x2}, {0xfd0f, 0x1}, {0x4, 0x1}, {0x85bf, 0x2}, {0x5, 0x3}, {0x8}, {0x1000}, {0x6, 0x3}, {0x9e20, 0x2}], [{0x9, 0x4}, {0xfffffff8, 0x1}, {0x3ff, 0x800}, {0x3, 0xd2}, {0x9, 0x400}, {0x6, 0xcf7}, {0x3, 0x7}, {0x5, 0x3}, {0x275, 0x3}, {0x9, 0x4}, {0x1, 0x59a}], 0x7, 0x9}, {[{0x8, 0x1}, {0x1, 0x26cf73c538c095eb}, {0xff}, {0x8, 0x3}, {0x100, 0x2}, {0x7f}, {0x8, 0x1}, {0x821a, 0x1}, {0x10, 0x1}, {0x39c}, {0x2, 0x3}], [{0x4c2a, 0xffff}, {0x1, 0x4}, {0x0, 0x9}, {0x9, 0x3ff}, {0x8, 0x3c}, {0x4, 0x3}, {0x80000001, 0x7}, {0x69, 0x2}, {0xfe4, 0x944a}, {0x3}, {0x49, 0xe8b7}], 0x9, 0x3}, {[{0xfffffffc, 0x2}, {0x98}, {0xea}, {0x970c, 0x2}, {0xf}, {0x8001, 0x1}, {0x9}, {0x8000, 0x3}, {0x3}, {0x9, 0x1}, {0x5}], [{0xb, 0x247}, {0x1, 0x9}, {}, {0x581, 0x3}, {0x2}, {0x4, 0x33}, {0x6, 0x7}, {0x4, 0x9}, {0x6, 0x7}, {0x7ff, 0xffffffff}, {0x8, 0x401}], 0x6, 0x1}, {[{0x89, 0x2}, {0xfcd, 0x3}, {0x2, 0x2}, {0xdd, 0x1}, {0x5ec6, 0x2}, {0xfffffffd, 0x3}, {0x7f, 0x2}, {0x8}, {0x7fff, 0x1}, {0x8, 0x1}, {0x4, 0x1}], [{0x1, 0x81}, {0x7fff, 0x8}, {0x0, 0x7fffffff}, {0x4, 0x1000}, {0x0, 0x1}, {0x3c, 0x80000000}, {0xff, 0x2}, {0x6, 0xe4}, {0x1cc43331, 0x80000000}, {0x8, 0x3}, {0x6bf9, 0x7}], 0xf, 0x7}, {[{0xe, 0x2}, {0x9, 0x2}, {0x9, 0x1}, {0x0, 0x1}, {0x3, 0x2}, {0x4de7, 0x3}, {0x3, 0x3}, {0x56}, {0x7, 0x3}, {0xdc6, 0x2}, {0x5, 0x2}], [{0x200000, 0x9}, {0xffff, 0xca}, {0x1, 0x4}, {0x9, 0xd3}, {0x7fffffff}, {0x6, 0x7}, {0x1400, 0x1}, {0x8, 0x2}, {0x7, 0x9}, {0x6, 0xa37}, {0x9, 0x6}], 0x7, 0x3}, {[{0xffff, 0x3}, {0x6, 0x2}, {}, {0x3ff, 0x2}, {0x9b09, 0x2}, {0x80000001, 0x1}, {0xb, 0x3}, {0x4}, {0x46d1ae2e, 0x1}, {0x0, 0x2}, {0x8, 0x3}], [{0x6, 0x83}, {0x1, 0x8001}, {0x4, 0x80}, {0x4, 0x4}, {0xdd, 0x8}, {0x10000, 0xffe}, {0x8, 0x3}, {0x3, 0x4}, {0x45db, 0x6}, {0x200, 0x9}, {0x82, 0x7}], 0x6, 0x6}, {[{0x2, 0x2}, {0x2a, 0x2}, {0x8, 0x2}, {0x6, 0x1}, {0xc82, 0x3}, {0x4, 0x3}, {0x4}, {0x10001, 0x3}, {0xaa31, 0x1}, {0x9, 0x2}, {0x2, 0x1}], [{0x2a, 0x3}, {0x1, 0x9e}, {}, {0x5, 0xfffff001}, {0x5, 0x8}, {0x8, 0x2}, {0x10, 0x7}, {0xff, 0x5}, {0x1, 0x400}, {0x4f, 0xf2b2}, {0x6, 0x1}], 0x6, 0xfd}, {[{0x48}, {0x7, 0x3}, {0xffe, 0x1}, {0x2, 0x1}, {0x6}, {0x40, 0x1}, {0x5, 0x2}, {0x7ff, 0x3}, {0x7, 0x2}, {0x7, 0x2}, {0x51}], [{0x7ec7, 0xf}, {0x3, 0x954}, {0xbe}, {0x57, 0x663}, {0x2, 0x3}, {0x8, 0x9}, {0xd, 0x2}, {0x40, 0x1000}, {0x1101, 0x9}, {0x800, 0x8}, {0x5, 0x92}], 0xb, 0x1}], 0x9}}, @common=@icmp={{0x28}, {0xd, 'qt'}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @broadcast, @multicast2, @gre_key=0x3, @icmp_id=0x66}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xff000000, 'veth1\x00', 'ip6erspan0\x00', {0xff}, {0xff}, 0x11, 0x2, 0x59}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @rand_addr=0x64010100, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@multicast2, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @port=0x4e23, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @rand_addr=0x64010100, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xbc8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) setsockopt$MRT_TABLE(r1, 0x0, 0xcf, &(0x7f00000000c0)=0xfc, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="973c521c3c028a83a80f462e15a93e134cfc14033fb61de3fb828731795cde5e412dfeb202d15a13d55b00689247cb36c38bdb53334f9f7874fa71d31073a9becea5d97b6c9f005b725d684788fd", 0x4e}, {&(0x7f0000001380)="b45e07f3241c703789b4c870b982e2c6f160bb6e98e976d0067eeb3d858b56b2e43a1fc0b735e583387a6b6484cc7b976242e024ceef1007e06761703a878b659b5a182f7289512c1336005f3ef854e885b9fe94028bf47bfd6e2a5deea4616d2c2a4bb6f14a977e6eb7223138d86a50bf965cf7ec31f0189472a79e0a7ccd79c95120254e7e4007e112824f03f56389c415cf2c5dd3d0120ebc81564b0070a241b57d0e759274c1174af34109fdd5c850ec4d1b2e5810a6e9fa09632e5983f7699013e0cfc18361ffd71bc0c820390a8a148bf3e1277680755933d3913d1ec24e1b4fd40287321e478f42870000000000000000000000cdcfba1558d819227f936e302a025ef7aac0251f5807f79234086d6a747ec1e5bb3fb69ec91dacc51a2521888062833bd4c5298413b812deb24780a77f24f44bd089aaa503c5f0ae9436f42a035ac29e19243a02e3ffa5a0028085fc91114377a9ede9edc9e0ca821c1cd54d6356c2882ad5d52dbe17795c83b361c8964cd45021eac6acefeb381063c67eb0ce730c12db56859bf06f4d67b3ef91aa405ef6a7d1df705cab17b3", 0x19e}, {&(0x7f0000000140)="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"/4270, 0x10ae}, {&(0x7f0000001240)="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", 0xff}], 0x4, 0x0, 0x0, 0x1f00c00e}, 0x40040411) 1.231860931s ago: executing program 1 (id=17503): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r2}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001200)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f07df33c9f7b986", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000405002c3eeb108e07000000000000002f00000000", @ANYRES32=r4], 0x2c}}, 0x4000000) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x44, r1, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3800000012140100000000000000000008004f0000000000080001000000000008004b00130080000800150000000000080003"], 0x38}}, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @mcast1}, 0x2, &(0x7f00000002c0)=[{&(0x7f0000000140)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r7) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="090127bd7000ffdbdf250600000008000d000000000008000100ff"], 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) unshare(0x28000400) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x4000000, 'aegis128-generic\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x5, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1.186378484s ago: executing program 2 (id=17504): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x0, 0xfffffffe, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$IP_VS_SO_SET_FLUSH(r7, 0x0, 0x485, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20005800) close(0x4) 1.185303501s ago: executing program 4 (id=17505): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x4}, &(0x7f0000000200)=0x90) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r1, 0x520, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008845}, 0x44000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=@gettaction={0x30, 0x32, 0x301, 0x70bd29, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffffb}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.121778871s ago: executing program 3 (id=17506): r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f00000005c0)={0xa, 0x4e23, 0x8, @loopback, 0x1}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x3, 0x3, 0x7, 0x8, 0x0, 0xfffffffffffffff0}, @map_val={0x18, 0x9, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2b5d}], &(0x7f0000000200)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x8, 0x5}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x1, 0x2, 0x4, 0x3}, {0x2, 0x5, 0x3}, {0x0, 0x2, 0x5, 0x3}, {0x3, 0x3, 0x9, 0xb}, {0x2, 0x4, 0xa, 0x7}, {0x3, 0x2, 0x6}, {0x1, 0x4, 0x4, 0x2}, {0x3, 0x4, 0x7}, {0x1, 0x2, 0x0, 0x1}], 0x10, 0x80}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)='%pS \x00'}, 0x20) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff, 0x33, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000600)={@map=r3, r2, 0x3e119f02518f2072, 0x201c, 0x0, @value=r4}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000140), 0x10) syz_emit_ethernet(0x68, &(0x7f0000000080)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080036c86e690dd63162002f9078ac1414000a0101000420880b00000000000008000001000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0) sendmsg$can_bcm(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x5, 0x4c3, 0x0, {}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d5bea2784d005b17"}}, 0x48}, 0x1, 0x0, 0x0, 0x5}, 0x40090) r6 = socket$netlink(0x10, 0x3, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="b8d3d8e4", 0x4}], 0x1, 0x0, 0x0, 0x84}, 0x8084) close(r8) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r9, 0x0, 0xcf, &(0x7f0000000000)=0xfc, 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000007c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000001100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x1a34, 0x6, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x464, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x9}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x40}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_TYPE={0x8}]}}}, {0x394, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x384, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x7c, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_FROM_DATA={0x2e4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xfb, 0x1, "1a2ee1180fdd5f5fd830ea243e7c4fd0f38c8ee94ed30322ed9be43848a259c22bc3388ffdcdba3cef9807785f6faab861eefcf310a797f50c3b9a5e108d7c6606cfb1e0846b53bbf73ad0c55a03469b6ff651583684e1cd19c016f135c11a0c07235f05f1b5fde9e38e698b18f74969f3d6d949ea6c69f654accfcccee663ce9fa62fca5ae5013a78c9093a913866570a29c374833db3f0db21983208b3df4e8c1fc68ab9e07e9912be1052cb47b7908b53b66f8efb98c0312ad973edfa47b13ae4d201486d33c1a22f3778af074cbaaffa69c510060495307ce216298acec5470950b8a4fb9c001148edc59271fdea800ce5f1afa50a"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "36408dafbb1ffb5e10b8af43696de99d0f89e762d5b868f794e80ed5e2cfd6837ed8f6f4e46c3c5c0c049ed1220bf555de5af7674a4e22cbe1361997e0d730f46ea55ca92490ea38493ec9a0ad8b1d834c25389b652176480a0a5e5a35452da389f4c46456f3ff4ddf2afa5fac25a10390fc37ccceb0fa90dea0"}, @NFTA_DATA_VALUE={0xd7, 0x1, "eff525954fb0205f4d4308f7b7a11204ce45771f4c4bce87e8f25d299c5dedfe0a06e5ef9731ce3e02d215cd9a92a8f0a3f3a89b812ff60c5d9262fe074c2737b4eb320597b20a203db0455bdadcd449e634ab653cdaf63610d0f0212cb3ad70909014bf18e7f9545d72bbc5cb00f0adb193500f375e1d8511576a87f2d8bcb430b484c7db331cd44e3968dc1feb242cb9b2905da248aee4ace4bcd231045121e5b1e3aa8d98f1f8f561a24ac57bd64fe2ed82ae56d2692f6db39b93dd5ea654666bd75d6d19ff034f4c8ad48f1ba8f64f71ec"}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x70, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x60, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2ff1966d00000000}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x4df}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x1f, 0x7, 0x1, 0x0, "38edb4911cd03144b4da8b56bfeb72710271ac462baeda0c6cf132"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x1544, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}, {0x1504, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14f0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x40, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_IMMEDIATE_DATA={0x48, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_IMMEDIATE_DATA={0x122c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x3b, 0x1, "35084e2073ab79e7f126310d63d0be18d0179fc2de8c265732da4f4c189ae2e28f6a58972884922b488c41a55fed8e3fb1554190267492"}, @NFTA_DATA_VALUE={0x10, 0x1, "00017e1a996ed983cd11e174"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xf6, 0x1, "00116ad4f409310f45b6e3690f54af3dbbced40fdd122e7063bb603cfd375d6b11194b2fcd29efcedd0cdebc2a61b1084051436e65a80731a1dc370e40ca18fd1e5d76913143193dac007b99e5957a708e9779e60c6d6f4d0f0f4c86cf9fe1b48cfa64ea0cb7245eb83c1384065086bc2f0dda4b65b62e0e42988fb4ad3fbb9747bf94f8fd0fdb6390bf9221ac9b590e9ae0f7871f44731d56cad691a5b3c2c9915ab860f37558828324517a800787cf11b7ff7d0fedd896024f38a54a6a7dbf761cb0a05ca1cbe882339c1c1d868fd2fd16e3cb3f9b7a47881cd79ab505c08acd927e03387257fe76b019b46bed9256a2cd"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_IMMEDIATE_DATA={0xc0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x7a, 0x1, "c16597c9d38e83b8992189086b7a72ad1ea364fac6d9f1ca66fd058b8a871ef400a0415344b8d70c43b50a01e7fe3e97df71752fdd7d0cc7a80ebeaa9f5f772a378b136c752bf759c485069146705ef954e19a6364533c69a4e3b13a870136b3aa93705be11969bd67b9d92c3bb176b6d03f50e2d34f"}]}, @NFTA_IMMEDIATE_DATA={0x170, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x18, 0x1, "a4c7167b9b67f01762ab9f3a42e4c1904946deb4"}, @NFTA_DATA_VALUE={0xc7, 0x1, "75fbc880296623dc3b71cadb52cabbe136996bfa535142f332e5594202f524c89a3f86d8009d174517316cd9e08dd91cdc5a75d5b3b256ea725ffdab2d02493c36f72747db0d180b3f1d08a4841b33e604fe07445b9792e3ff980b3f1f3732d78342bda3639abf15f22740fce9315935697799ee288b1421de39cc2c363409b6ee00d20dfd370a8c9ce0dbec2b05c30f0a54388c735bcf31cb4278c0ba38b37c5934e79a9ba5518d70cb4da1fea06c5a44a5ed0aa95ab9e5ce398467c783e59ea1b994"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x64, 0x1, "e6593d01a77095233ecd8975fdfa18bd78a2e8b4bdd1e8859688f947fdb04ea44a8a8f93754ed80af79ce1d63a901fd2b57cdeb825ef87c163e02fb4d38591a908fa3117dc82a226538ba5a9aa687b0751a81425f47a7b1e29f698f93fc54419"}]}]}}}]}]}, @NFT_MSG_DELRULE={0x68, 0x8, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xe51e}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xc8, 0x5, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x6c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'team0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'hsr0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_vlan\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'vlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5f51f67}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2fb6801}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x24bec884}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x170, 0x8, 0xa, 0x0, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_EXPRESSIONS={0x13c, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x3}, @NFTA_QUEUE_SREG_QNUM={0x8}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0xffff}]}}}, {0x40, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x1}]}}}, {0x40, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x13}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x6b}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x6c}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x8c}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", ""]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x1d80}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000031400022abd7000fddbdf250900020073797a30000000000800410033690400000000000000637365633000000000000000004e0900020000140033007465616d5f736c6176655f3100000000"], 0x60}, 0x1, 0x0, 0x0, 0x4051}, 0x4000004) getsockopt$inet6_opts(r1, 0x29, 0x39, 0x0, &(0x7f00000010c0)) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079104e0000000000630a0000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) 1.02065618s ago: executing program 4 (id=17507): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r2, @ANYRES32=r0], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) setsockopt$packet_fanout_data(r1, 0x107, 0x16, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=r0, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r2, @ANYRES32=r0], 0x44}}, 0x0) (async) 643.636691ms ago: executing program 0 (id=17508): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x730, 0x270, 0x190, 0x0, 0x190, 0x0, 0x660, 0x660, 0x660, 0x660, 0x660, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'bond_slave_0\x00', 'vlan1\x00', {}, {}, 0x21}, 0x0, 0x168, 0x190, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @mcast2, @private2, [], [0x0, 0xffffffff], [], 0x0, 0x10}}, @common=@inet=@dccp={{0x30}, {[0x4e24, 0x4e24], [0x4e23, 0x4e24], 0x20, 0x0, 0x4, 0x7}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2}, [], [], 'bridge0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {0x0, 0xfd}, 0x300, 0x4}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'bridge0\x00', 'bond_slave_0\x00', {0xff}}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @local, [0xff, 0x0, 0xff, 0xff000000], [0xff000000, 0xff000000, 0xffffffff, 0xffffff00], 'macvlan0\x00', 'veth1_to_bridge\x00', {}, {0xff}, 0x8, 0x81, 0x1, 0x36}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@private1, 0x0, 0x37}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x790) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 639.010384ms ago: executing program 2 (id=17509): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x3) close(r3) r4 = socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) getsockopt$sock_linger(r0, 0x1, 0x38, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x90, "15dbb80d6f64bda6a4cfe89f937a617b864218957a6086252fa47c818aa80e250a72c417a3540fe757afdee02852eb10bd93cfed8662aa2d3c9c4b94d214d7570573d2b955e6d4725aada66970bd0ce2343946dda83edc47a61b1cca63ff294def0838d9a5a27acaf08c2bb88638a1509d4242c9918581fce1a47c2307b2dae6cea83c2f13cffbcfa3ca55ef2af6e394"}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r7, 0xfffffff7, 0x30}, &(0x7f0000000180)=0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000034000000030a010200000000000000000100fffb0900030073797a32000000000900010073797a300000000008000a400000000420000000080a01080000000000000000010000000900010073797a30"], 0x9c}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r0) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r9, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8008000}, 0x809) 551.941603ms ago: executing program 1 (id=17510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote, 'ip6tnl0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000040)={0x18, 0x0, {0x9, @random="6db46c371ef7", 'ip6gre0\x00'}}, 0x1e) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x0, @multicast, 'veth0_vlan\x00'}}, 0x1e) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r7, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xe}}, "00016337fe9b1803"}}}}}, 0x0) r8 = socket(0x3a, 0x5, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006000)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24020080}, 0x4044080) bind$packet(r5, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r5, &(0x7f0000000800)="4103082c1116480401020200c52cf7c25975e005b02f88a8068988a80300897c6b118777faffffff3066090cb600c5471d130a66321a54e7df305fbe258161b6fd8f2428652265d94c6fdbaefc57376a57c2feffff188be9427c323ef024a37016d2a7f9ab6e7941a6fc4f95aa73c1dfff4941f6503b5bd8c91db22cd33795481c94085fa12cdc679ac2a5d7b5d99b93fb07acb0da680e78b74c74aae8d7690d5986a9af81622a0ac210bc7b5ca5fed11cb54d046642670041e846bb184ff5d39fe8516d2d2a8d84e6e7dfcb2b8a8023444db513a3d7a124b59f0a5cd36489dbbb75cce3145d0ea3c3aa21af7cbcbc7a7575db782e757ca543109f5ddcec4930aa91f4119ea3d1f56140cb86cfe0724b23904ef5d05c725ee23918a502b1afe09fb0", 0x122, 0x880, 0x0, 0x0) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r10, @ANYBLOB="410000000000000001000603000014000300060afc04090300f006e8ffff00000001080007002e3a2f2f140002"], 0x44}, 0x1, 0x1000000, 0x0, 0xc4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 519.8206ms ago: executing program 4 (id=17511): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1882}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x5, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x10000800) 502.566158ms ago: executing program 0 (id=17512): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000600)='ns/net\x00') ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv4_delroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_MULTIPATH={0x14, 0x8, {0x8}}, @RTA_FLOW={0x4, 0x10}]}, 0x30}}, 0x0) 407.581685ms ago: executing program 4 (id=17513): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000005700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0x10}}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x505000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) write$tun(r2, &(0x7f0000000140)={@void, @void, @ipv4=@tipc={{0x1c, 0x4, 0x1, 0x21, 0x9c, 0x68, 0x0, 0x9, 0x6, 0x0, @private=0xa010102, @broadcast, {[@timestamp_prespec={0x44, 0x54, 0x6e, 0x3, 0xa, [{@loopback, 0x8}, {@remote, 0xa2d}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@rand_addr=0x5, 0x8}, {@empty, 0x8}, {@remote, 0xf0000000}, {@empty, 0x1000}, {@multicast1, 0x6}, {@multicast2, 0xc20}, {@rand_addr=0x64010101, 0x1}]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @payload_named={{{{{0x2c, 0x0, 0x0, 0x0, 0x1, 0xa, 0x3, 0x2, 0x3, 0x0, 0x3, 0x8, 0x3, 0x2, 0x2, 0x9, 0x0, 0x4e24, 0x4e24}, 0x2}, 0x2, 0x4}}, [0x0, 0x0, 0x0, 0x0]}}}, 0x9c) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f00000000c0)=0x240) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x3, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe6b}, 0x48) 280.367934ms ago: executing program 3 (id=17514): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2c, r1, 0x15, 0x70bd25, 0x25dfdbfb}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r3, 0x8, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x810) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1b1, 0x2b}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x0) 279.492165ms ago: executing program 2 (id=17515): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}, @IFLA_BOND_FAIL_OVER_MAC={0x5}]}}}]}, 0x44}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x24, 0x1, 0x70bd26, 0x2, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) (async, rerun: 32) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000240)) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000005c0)={@local, @random="2c09000000f8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x30, 0x67, 0x0, 0x9, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x21}, @remote}, @redirect={0x5, 0x1, 0x0, @private=0xa010101, {0x5, 0x4, 0x3, 0x2a, 0xc7e, 0x64, 0xdd, 0x2, 0x21, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}}, 0x0) 242.3577ms ago: executing program 4 (id=17516): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000140007000000e4ff000000002b"], 0x14}, 0x1, 0x0, 0x0, 0x24004095}, 0x0) 182.611267ms ago: executing program 0 (id=17517): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x88802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@mcast1, @in=@empty, 0x0, 0x0, 0x4e20, 0x0, 0xa, 0x40, 0x0, 0x88, 0x0, 0xee01}, {0x1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f0000000200)={0x2b, 0x2}) 151.159806ms ago: executing program 1 (id=17518): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xb, 0x0, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a102ffff0000080026008d03000008009f"], 0x40}}, 0x0) 65.128693ms ago: executing program 4 (id=17519): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x7, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x24}}, 0xc010) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001000), r1) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000500)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20044110}, 0x20000010) r3 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x5c, r3, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x19a1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000005}, 0x8045) 0s ago: executing program 2 (id=17520): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010003904000000000000000000000000573183d1aa858cf3783dd5b354ec27f3c9e462865c5a07cc3c78e436e7f7485323fb3a59e82818592f2e62c98f770f9c51736b40a3e0c5edf63d1eb40cd79b6e018de295a93406859f82dc9c45fc5f277a093cb5329459df3731bfe65b2575bd045412f935a9e10876c4ffe26cb019dad3a55929199cf29a4c8df00663a6ad4b310b574b60f46ebfe1fbced78063fe3c21945903dd522f56fabcd11b234138f2", @ANYRES32=0x0, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac14140006000300bf000000"], 0x40}}, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r1, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @empty}, 0x10, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x3d1, 0x3, 0x20000000, 0x6, 0x6}, 0x76}}]}, {0x3}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}}, 0x2) close(r5) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000314000e00073c002400000000ff8800000000000000000000000000000000000085dc9d9839dc1336", 0x2e}], 0x1}, 0x4005) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r9, 0x6, 0x15, &(0x7f0000000540)=0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f00000004c0)={&(0x7f0000000300)=@generic={0x18, "a64a220b7e6e82df09134c41ccf1e56e8befa34b44636d06c29e696936fb7cc9f86924f92e4fe4fe76b79c5ccbdf0a165187d561a23c26ed1c80c02532bebffed158554f717a7490ecf68e13bd965ed3cceba5bb5a90636d6bf91fd23f1a18ebc89c9b931693c6428ec8e13969d5e056e557146a9f3c59778e545cfb8c56"}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000440)="7a6eb19e74616845f1f39dd4465770fe2f0458f7781f976fa7ed55ebefa5ef694ed5874817a20bf24395217d492c1389fe9d618e3047d59a22f28121828e35d29af506c470da68efb1e4e144d4eeac0053fbfa2b49508b1df14e3abcc052ce58453f1f", 0x63}], 0x1, &(0x7f0000000780)=[{0xc8, 0x117, 0x0, "6e3c169ce1abbeeb563dfc33bc406a014206d2ba93cf4d5ddbf13b254139098f1d852ae1e46af3f5003911910c3d28871228fce5436cc3c2d5bb2f48778c5942f6bb4ab62917c99b026d1233d830daa5475afc2785072cae6da2ac0ef2c32bb186f2d13673d88c510a46a3ded3467b10efa6121825a0375604e5c81232571974989554b2e92ab20598a4618a9502bc796fbde722333dab7ae0909788eda1c6dcd2fe72a6bd2132bf66e49d98a421aea28100aedd"}, {0x68, 0x11f, 0x101, "8689a78a7703fcec82f9301fdfa83dda99e68a5ed1a50d66f1b9e042f03ae3e9a52f32cff00dfa8d93361ce7ccd794fb72b3ee93e2889cc6b96f7d5a5d7dc76771c07ee92183ea38a9ac4d96140f5b6b1f6ead2d1cda4e"}, {0xf8, 0x29, 0x8, "1f50a44beec3d7ba748f485ebde116054e1599678093f1df70806a4bd38f23d90819bee0418fdc6fa0b5ffc6c32e9d26e6d40ea3a41924d275b53ce6372ff474b03f8625cd1efc2b1169c2eac755531318dbc309a18cff61920b9b7c13a3e8795328a1c70ed178af78dc1cd81d1babe4d53fb4fdd1ac9e4f965945f6164d4d720293b4af457cfd4271648fc76afc12641b497d8b6a145f732d0aaf7d02ea5f9b747018c418edad5bd3fd1db1b9adffb1fd17fbe6728f532e5dfd39835a17ef790e48f3a4c398ab3b37105141203e3be01e4ec93f97fa4f7882db0b501bad1b438956fa8626"}, {0x10, 0x106, 0xa}, {0x30, 0x10b, 0x8, "cdbe302629d0808dbe10e1932f70dbc13c3dfd947ac75ea0a4fc00abba"}, {0x90, 0x109, 0x1000, "8c102ce01f0109c90157b9b6216c7e95544914afbecc03bc5ad5591a337b25072f8d374e924afcef513856849e86df5dbb47d91f64dd73ceee9ea36af23cc97ce3ac88a8b6c11f7818d269dc6b636a7358ad425a84f77c081e84e6db1f06b98c1fdb16b7dfa0b7100e2b8abc80d38f4fdc71a685242416983f11859f221e"}], 0x2f8}, 0x20008895) r10 = socket$netlink(0x10, 0x3, 0x9) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x300, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x8010, 0x20510}}, 0x20}}, 0x40090) kernel console output (not intermixed with test programs): th. [ 1360.450976][T22505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1360.486478][T22770] netlink: 'syz.1.16230': attribute type 3 has an invalid length. [ 1360.539009][T22770] netlink: 'syz.1.16230': attribute type 7 has an invalid length. [ 1360.568419][T22770] netlink: 'syz.1.16230': attribute type 8 has an invalid length. [ 1360.584256][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16233'. [ 1360.592778][T22770] netlink: 184 bytes leftover after parsing attributes in process `syz.1.16230'. [ 1360.612532][T22770] NCSI netlink: No device for ifindex 131092 [ 1360.644252][T22780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16233'. [ 1360.781645][T22783] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.789394][T22783] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.953222][T22783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.973645][T22783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1361.294050][T22785] bond0: entered promiscuous mode [ 1361.322572][T22785] bond_slave_0: entered promiscuous mode [ 1361.339977][T22785] bond_slave_1: entered promiscuous mode [ 1361.346572][T22785] bridge_slave_1: entered promiscuous mode [ 1361.361623][T22785] gretap0: entered promiscuous mode [ 1361.397119][T22785] bond0: left promiscuous mode [ 1361.403294][T22785] bond_slave_0: left promiscuous mode [ 1361.414912][T22785] bond_slave_1: left promiscuous mode [ 1361.440430][T22785] bridge_slave_1: left promiscuous mode [ 1361.472712][T22785] gretap0: left promiscuous mode [ 1361.515912][ T9340] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.545837][ T9340] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.577953][ T9340] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.612960][ T9340] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.632189][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1361.643949][ T1299] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 1361.707666][T22808] xt_cgroup: path and classid specified [ 1361.725281][T22505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1361.813597][T22808] tipc: Enabling of bearer rejected, failed to enable media [ 1361.910566][T22505] veth0_vlan: entered promiscuous mode [ 1361.951666][T22505] veth1_vlan: entered promiscuous mode [ 1362.043258][T22505] veth0_macvtap: entered promiscuous mode [ 1362.074555][T22505] veth1_macvtap: entered promiscuous mode [ 1362.172007][T22830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1362.213952][T22834] bond1: (slave geneve2): making interface the new active one [ 1362.269694][ T5828] Bluetooth: hci5: command tx timeout [ 1362.277611][T22834] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1362.322344][T22505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1362.347438][T22505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1362.401528][ T9340] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.427585][T31877] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.484219][T31877] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.501615][T31877] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1362.851006][ T9359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1362.858865][ T9359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.141439][T22869] __nla_validate_parse: 67 callbacks suppressed [ 1363.141458][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16262'. [ 1363.223196][T22867] syzkaller0: entered promiscuous mode [ 1363.228810][T22867] syzkaller0: entered allmulticast mode [ 1363.249268][T22869] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16262'. [ 1363.279623][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1363.287477][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1363.869043][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1363.877126][ C1] lec:lec_tx_timeout: lec0 [ 1366.176858][T22876] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1366.295752][T22878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1366.342902][T22878] 8021q: adding VLAN 0 to HW filter on device team0 [ 1366.365501][T22888] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16267'. [ 1366.384739][T22889] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16268'. [ 1366.394918][T22878] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1366.417877][T22892] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16267'. [ 1366.460795][T22886] delete_channel: no stack [ 1366.638726][T22897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16269'. [ 1366.648438][T22897] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16269'. [ 1366.685709][T22898] set match dimension is over the limit! [ 1366.692386][T22898] syzkaller0: entered promiscuous mode [ 1366.697886][T22898] syzkaller0: entered allmulticast mode [ 1366.722042][T22897] syzkaller0: entered promiscuous mode [ 1366.730772][T22897] syzkaller0: entered allmulticast mode [ 1366.761658][T22897] 0: reclassify loop, rule prio 0, protocol 800 [ 1366.848671][T22908] syzkaller1: entered promiscuous mode [ 1366.883026][T22908] syzkaller1: entered allmulticast mode [ 1367.193919][T22923] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16277'. [ 1367.264138][T22928] lo: Caught tx_queue_len zero misconfig [ 1367.298768][T22928] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16279'. [ 1367.596552][T22948] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20004 [ 1367.625826][T22952] validate_nla: 4 callbacks suppressed [ 1367.625844][T22952] netlink: 'syz.0.16286': attribute type 27 has an invalid length. [ 1368.046734][T22939] infiniband : set down [ 1368.066964][T22939] infiniband : added ipvlan0 [ 1368.105636][T22968] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16293'. [ 1368.133215][T22939] RDS/IB: : added [ 1368.137905][T22939] smc: adding ib device  with port count 1 [ 1368.145379][T22939] smc: ib device  port 1 has no pnetid [ 1368.185525][T22974] IPVS: length: 29 != 24 [ 1368.221018][T22968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.303394][T22976] netlink: 'syz.0.16296': attribute type 21 has an invalid length. [ 1368.319240][T22976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16296'. [ 1368.582350][T22985] tipc: Enabled bearer , priority 0 [ 1368.686788][T22991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16301'. [ 1368.697967][T22984] tipc: Disabling bearer [ 1368.829094][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1369.213574][T23015] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16307'. [ 1369.245608][T23015] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16307'. [ 1369.337040][T23015] geneve3: entered promiscuous mode [ 1369.357780][T23015] geneve3: entered allmulticast mode [ 1370.202932][T23046] x_tables: duplicate underflow at hook 2 [ 1370.215787][T23049] block nbd0: reconnected socket [ 1370.215807][ T5828] block nbd0: Receive control failed (result -107) [ 1370.260816][T23052] IPv4: Oversized IP packet from 172.20.20.24 [ 1370.267537][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1370.273972][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 1370.809277][T23074] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1371.005812][T23081] netlink: 28 bytes leftover after parsing attributes in process `syz.4.16329'. [ 1371.257833][ T9359] nci: nci_ntf_packet: unknown ntf opcode 0x20 [ 1371.317257][T23090] syz_tun: entered promiscuous mode [ 1371.345335][T23090] macvtap1: entered promiscuous mode [ 1371.372104][T23090] syz_tun: left promiscuous mode [ 1371.557935][T23102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16334'. [ 1371.580283][T23102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16334'. [ 1371.893279][T23105] wg1 speed is unknown, defaulting to 1000 [ 1371.915476][T23108] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1371.976118][T23108] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1372.709195][T23118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16338'. [ 1373.869130][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5040 ms [ 1373.877388][ C1] lec:lec_tx_timeout: lec0 [ 1373.882063][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1374.123235][T23085] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1374.309784][T23122] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16339'. [ 1374.522021][T23133] syzkaller0: entered promiscuous mode [ 1374.527549][T23133] syzkaller0: entered allmulticast mode [ 1374.681731][T23138] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1374.701257][T23138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.729943][T23138] bridge0: entered allmulticast mode [ 1374.810008][T23134] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1375.237537][T23148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16349'. [ 1375.437481][T23155] netlink: 'syz.3.16351': attribute type 8 has an invalid length. [ 1375.461952][T23155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16351'. [ 1375.530300][T23155] bond0: entered promiscuous mode [ 1375.535385][T23155] bond_slave_0: entered promiscuous mode [ 1375.561063][T23155] bond_slave_1: entered promiscuous mode [ 1375.590645][T23155] gretap0: entered promiscuous mode [ 1375.592474][T23157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16352'. [ 1375.608787][T23159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16353'. [ 1375.632935][T23159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16353'. [ 1375.639745][T23155] bond0: left promiscuous mode [ 1375.669822][T23155] bond_slave_0: left promiscuous mode [ 1375.676776][T23155] bond_slave_1: left promiscuous mode [ 1375.724548][T23155] gretap0: left promiscuous mode [ 1375.762602][T23157] mac80211_hwsim hwsim111 wlan0: entered promiscuous mode [ 1376.087228][T23185] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16362'. [ 1376.142590][T23182] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1376.284693][T23189] netlink: 52 bytes leftover after parsing attributes in process `syz.3.16364'. [ 1376.453253][T23204] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16367'. [ 1376.496725][T23208] netlink: 'syz.4.16369': attribute type 11 has an invalid length. [ 1376.544118][T23209] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16368'. [ 1376.563000][T23217] netlink: 'syz.0.16371': attribute type 8 has an invalid length. [ 1376.616464][T23217] bond0: entered promiscuous mode [ 1376.651245][T23217] bond_slave_0: entered promiscuous mode [ 1376.657213][T23217] bond_slave_1: entered promiscuous mode [ 1376.691558][T23217] gretap0: entered promiscuous mode [ 1376.704933][T23217] bond0: left promiscuous mode [ 1376.712585][T23217] bond_slave_0: left promiscuous mode [ 1376.718346][T23217] bond_slave_1: left promiscuous mode [ 1376.725873][T23217] gretap0: left promiscuous mode [ 1376.836044][ T174] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.853835][ T174] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.884336][ T174] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1376.936934][ T174] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1377.305127][T23252] ip6t_srh: unknown srh invflags 4000 [ 1377.420523][T23261] netlink: 'syz.2.16386': attribute type 1 has an invalid length. [ 1377.467210][T23261] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1377.624956][T23275] xt_hashlimit: size too large, truncated to 1048576 [ 1377.836213][T23276] –: renamed from vxcan1 (while UP) [ 1378.677331][T23341] netlink: 'syz.1.16409': attribute type 1 has an invalid length. [ 1378.756680][T23341] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1378.871954][T23352] erspan0: entered promiscuous mode [ 1378.888998][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1378.897091][ C1] lec:lec_tx_timeout: lec0 [ 1378.909367][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1378.955206][T23362] smc: net device team0 applied user defined pnetid SYZ2 [ 1379.148578][T23366] wg1 speed is unknown, defaulting to 1000 [ 1379.383502][T23376] bond3 (unregistering): Released all slaves [ 1379.431863][T23385] __nla_validate_parse: 12 callbacks suppressed [ 1379.431882][T23385] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.16424'. [ 1379.482969][T23387] netlink: 'syz.4.16423': attribute type 1 has an invalid length. [ 1379.503074][T23388] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.16424'. [ 1379.516930][T23385] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1379.534553][T23388] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1379.708885][T23387] bond1: entered promiscuous mode [ 1379.760354][T23387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1379.952613][T23382] bond1: (slave bridge2): making interface the new active one [ 1379.965390][T23382] bridge2: entered promiscuous mode [ 1379.976906][T23382] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 1379.985290][T23413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16427'. [ 1380.152285][T23418] netlink: 'syz.3.16431': attribute type 1 has an invalid length. [ 1380.285384][T23418] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1380.303894][T23420] dvmrp8: entered allmulticast mode [ 1380.340434][T23415] dvmrp8: left allmulticast mode [ 1380.545344][T23427] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 1380.566737][T23433] netlink: 'syz.3.16436': attribute type 10 has an invalid length. [ 1380.672275][T23433] batman_adv: batadv0: Adding interface: netdevsim0 [ 1380.717354][T23433] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1380.774244][T23443] netlink: 256 bytes leftover after parsing attributes in process `syz.1.16439'. [ 1380.839088][T23433] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 1381.010565][T23454] netlink: 'syz.0.16441': attribute type 3 has an invalid length. [ 1381.025959][T23452] can: request_module (can-proto-5) failed. [ 1381.207120][T23463] netlink: 'syz.1.16446': attribute type 2 has an invalid length. [ 1381.216266][T23463] netlink: 36 bytes leftover after parsing attributes in process `syz.1.16446'. [ 1381.258154][T23467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16446'. [ 1381.307445][T23468] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16448'. [ 1381.320528][T23467] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1381.342485][T23467] team0: Port device batadv1 added [ 1381.361311][T23476] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16448'. [ 1381.378858][T23470] tipc: Enabled bearer , priority 0 [ 1381.480659][T23470] syzkaller0: entered promiscuous mode [ 1381.486195][T23470] syzkaller0: entered allmulticast mode [ 1381.522912][T23473] tipc: Resetting bearer [ 1381.660435][T23487] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16453'. [ 1381.717333][T23487] netlink: 'syz.0.16453': attribute type 1 has an invalid length. [ 1381.726974][T23487] netlink: 'syz.0.16453': attribute type 2 has an invalid length. [ 1381.889879][T23498] netlink: 'syz.1.16456': attribute type 2 has an invalid length. [ 1381.925750][T23498] netlink: 119 bytes leftover after parsing attributes in process `syz.1.16456'. [ 1382.119543][T23469] tipc: Resetting bearer [ 1382.218321][T23469] tipc: Disabling bearer [ 1383.140222][T23564] syzkaller1: entered promiscuous mode [ 1383.156009][T23564] syzkaller1: entered allmulticast mode [ 1383.355402][T23566] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1383.596593][T23594] tipc: Started in network mode [ 1383.660154][T23594] tipc: Node identity 8a1c5830cbc9, cluster identity 4711 [ 1383.667461][T23594] tipc: Enabled bearer , priority 0 [ 1383.752201][T23600] syzkaller0: entered promiscuous mode [ 1383.786348][T23600] syzkaller0: entered allmulticast mode [ 1383.804304][T23602] xt_l2tp: wrong L2TP version: 0 [ 1383.832481][T23606] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1383.919058][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1383.927126][ C1] lec:lec_tx_timeout: lec0 [ 1383.949408][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1384.004864][T23600] tipc: Resetting bearer [ 1384.069388][T23592] tipc: Resetting bearer [ 1384.254100][T23592] tipc: Disabling bearer [ 1384.666929][T23648] __nla_validate_parse: 3 callbacks suppressed [ 1384.666948][T23648] netlink: 184 bytes leftover after parsing attributes in process `syz.0.16498'. [ 1384.731094][T23652] veth1_macvtap: left promiscuous mode [ 1384.736619][T23652] macsec0: entered promiscuous mode [ 1384.790272][T23652] macsec0: entered allmulticast mode [ 1384.826814][T23648] veth1_macvtap: entered promiscuous mode [ 1384.843052][T23655] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16501'. [ 1384.843343][T23648] veth1_macvtap: entered allmulticast mode [ 1384.886626][T23661] netlink: 'syz.2.16503': attribute type 8 has an invalid length. [ 1384.895113][T23661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16503'. [ 1384.906460][T23648] macsec0: left promiscuous mode [ 1384.927543][T23648] macsec0: left allmulticast mode [ 1384.954228][T23648] veth1_macvtap: left allmulticast mode [ 1384.987197][T23656] gtp1: entered promiscuous mode [ 1385.000327][T23656] gtp1: entered allmulticast mode [ 1385.017196][T23661] bond0: entered promiscuous mode [ 1385.022396][T23661] bond_slave_0: entered promiscuous mode [ 1385.038894][T23661] bond_slave_1: entered promiscuous mode [ 1385.071108][T23661] gretap0: entered promiscuous mode [ 1385.085212][T23661] bond0: left promiscuous mode [ 1385.102380][T23661] bond_slave_0: left promiscuous mode [ 1385.111300][T23661] bond_slave_1: left promiscuous mode [ 1385.172454][T23661] gretap0: left promiscuous mode [ 1385.225002][T23669] syzkaller0: entered promiscuous mode [ 1385.232622][T23669] syzkaller0: entered allmulticast mode [ 1385.310430][T23683] netlink: 892 bytes leftover after parsing attributes in process `syz.1.16509'. [ 1385.417143][T23692] netlink: 156 bytes leftover after parsing attributes in process `syz.0.16511'. [ 1385.426926][T23688] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16510'. [ 1385.459337][T23692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16511'. [ 1385.548299][T23694] netlink: 'syz.1.16514': attribute type 3 has an invalid length. [ 1385.852757][T23706] syzkaller0: entered promiscuous mode [ 1385.861540][T23706] syzkaller0: entered allmulticast mode [ 1385.980598][T23676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.987849][T23676] bridge0: port 2(bridge_slave_1) entered listening state [ 1385.995245][T23676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.002435][T23676] bridge0: port 1(bridge_slave_0) entered listening state [ 1386.018517][T23676] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1386.192257][T23726] netlink: 'syz.4.16522': attribute type 9 has an invalid length. [ 1386.526188][T23744] x_tables: duplicate underflow at hook 2 [ 1388.959594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1388.967722][ C1] lec:lec_tx_timeout: lec0 [ 1388.989358][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1389.564387][T23755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16529'. [ 1389.599320][T23755] mac80211_hwsim hwsim109 wlan0: entered promiscuous mode [ 1389.785567][T23769] FAULT_INJECTION: forcing a failure. [ 1389.785567][T23769] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.819128][T23769] CPU: 0 UID: 0 PID: 23769 Comm: syz.3.16534 Not tainted syzkaller #0 PREEMPT(full) [ 1389.819154][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1389.819165][T23769] Call Trace: [ 1389.819172][T23769] [ 1389.819181][T23769] dump_stack_lvl+0xe8/0x150 [ 1389.819211][T23769] should_fail_ex+0x412/0x560 [ 1389.819248][T23769] should_failslab+0xa8/0x100 [ 1389.819272][T23769] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1389.819302][T23769] ? __alloc_skb+0x1d0/0x7d0 [ 1389.819322][T23769] ? __local_bh_enable_ip+0xd0/0x130 [ 1389.819347][T23769] __alloc_skb+0x1d0/0x7d0 [ 1389.819372][T23769] _sctp_make_chunk+0x59/0x290 [ 1389.819398][T23769] sctp_make_datafrag_empty+0x12a/0x240 [ 1389.819423][T23769] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1389.819444][T23769] ? sctp_datamsg_from_user+0x88/0xef0 [ 1389.819460][T23769] ? sctp_auth_send_cid+0x69/0x250 [ 1389.819484][T23769] sctp_datamsg_from_user+0x729/0xef0 [ 1389.819519][T23769] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 1389.819542][T23769] ? __asan_memcpy+0x40/0x70 [ 1389.819572][T23769] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1389.819608][T23769] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1389.819630][T23769] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1389.819658][T23769] ? __rcu_read_unlock+0x83/0xe0 [ 1389.819676][T23769] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1389.819702][T23769] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1389.819722][T23769] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1389.819751][T23769] sctp_sendmsg+0x1b3d/0x2c10 [ 1389.819790][T23769] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1389.819813][T23769] ? aa_sk_perm+0x15a/0x960 [ 1389.819834][T23769] ? aa_sk_perm+0x82d/0x960 [ 1389.819860][T23769] ? __pfx_aa_sk_perm+0x10/0x10 [ 1389.819882][T23769] ? sock_rps_record_flow+0x19/0x400 [ 1389.819910][T23769] ? inet_sendmsg+0x2f4/0x370 [ 1389.819932][T23769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1389.819954][T23769] ____sys_sendmsg+0x894/0xad0 [ 1389.819987][T23769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1389.820020][T23769] ? import_iovec+0x73/0xa0 [ 1389.820047][T23769] ___sys_sendmsg+0x2a5/0x360 [ 1389.820077][T23769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1389.820135][T23769] ? __fget_files+0x2a/0x420 [ 1389.820158][T23769] ? __fget_files+0x3a0/0x420 [ 1389.820191][T23769] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1389.820226][T23769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1389.820260][T23769] ? __pfx_ksys_write+0x10/0x10 [ 1389.820290][T23769] do_syscall_64+0x14d/0xf80 [ 1389.820314][T23769] ? trace_irq_disable+0x3b/0x150 [ 1389.820338][T23769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.820356][T23769] ? clear_bhb_loop+0x40/0x90 [ 1389.820377][T23769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.820395][T23769] RIP: 0033:0x7f259379c629 [ 1389.820413][T23769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1389.820429][T23769] RSP: 002b:00007f2594624028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1389.820447][T23769] RAX: ffffffffffffffda RBX: 00007f2593a15fa0 RCX: 00007f259379c629 [ 1389.820460][T23769] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1389.820471][T23769] RBP: 00007f2594624090 R08: 0000000000000000 R09: 0000000000000000 [ 1389.820482][T23769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1389.820492][T23769] R13: 00007f2593a16038 R14: 00007f2593a15fa0 R15: 00007ffe34c71fe8 [ 1389.820522][T23769] [ 1390.576519][T23790] wg1 speed is unknown, defaulting to 1000 [ 1390.687004][T23804] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16546'. [ 1390.694470][T23792] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1390.856183][T23811] netlink: 'syz.0.16548': attribute type 8 has an invalid length. [ 1390.864353][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16548'. [ 1390.887589][T23811] bond0: entered promiscuous mode [ 1390.915431][T23811] bond_slave_0: entered promiscuous mode [ 1390.945603][T23811] bond_slave_1: entered promiscuous mode [ 1390.978192][T23811] gretap0: entered promiscuous mode [ 1391.019818][T23811] bond0: left promiscuous mode [ 1391.024783][T23811] bond_slave_0: left promiscuous mode [ 1391.033365][T23811] bond_slave_1: left promiscuous mode [ 1391.074071][T23811] gretap0: left promiscuous mode [ 1391.412113][T23835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16558'. [ 1391.447284][T23838] netlink: 'syz.0.16559': attribute type 1 has an invalid length. [ 1391.460773][T23836] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16558'. [ 1391.572164][T23839] gretap1: entered promiscuous mode [ 1391.601345][T23839] bond1: (slave gretap1): making interface the new active one [ 1391.660929][T23839] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1391.936309][T23864] FAULT_INJECTION: forcing a failure. [ 1391.936309][T23864] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.982500][T23864] CPU: 1 UID: 0 PID: 23864 Comm: syz.0.16565 Not tainted syzkaller #0 PREEMPT(full) [ 1391.982527][T23864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1391.982538][T23864] Call Trace: [ 1391.982545][T23864] [ 1391.982553][T23864] dump_stack_lvl+0xe8/0x150 [ 1391.982582][T23864] should_fail_ex+0x412/0x560 [ 1391.982608][T23864] should_failslab+0xa8/0x100 [ 1391.982629][T23864] ? sctp_chunkify+0x5a/0x260 [ 1391.982651][T23864] kmem_cache_alloc_noprof+0x87/0x650 [ 1391.982685][T23864] sctp_chunkify+0x5a/0x260 [ 1391.982710][T23864] _sctp_make_chunk+0x122/0x290 [ 1391.982735][T23864] sctp_make_datafrag_empty+0x12a/0x240 [ 1391.982760][T23864] ? __pfx_sctp_make_datafrag_empty+0x10/0x10 [ 1391.982784][T23864] ? sctp_datamsg_from_user+0x88/0xef0 [ 1391.982802][T23864] ? sctp_auth_send_cid+0x69/0x250 [ 1391.982827][T23864] sctp_datamsg_from_user+0x729/0xef0 [ 1391.982866][T23864] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 1391.982889][T23864] ? __asan_memcpy+0x40/0x70 [ 1391.982922][T23864] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1391.982968][T23864] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1391.982991][T23864] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1391.983017][T23864] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1391.983041][T23864] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1391.983064][T23864] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1391.983089][T23864] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1391.983108][T23864] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1391.983138][T23864] sctp_sendmsg+0x1b3d/0x2c10 [ 1391.983175][T23864] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1391.983198][T23864] ? aa_sk_perm+0x15a/0x960 [ 1391.983218][T23864] ? aa_sk_perm+0x82d/0x960 [ 1391.983243][T23864] ? __pfx_aa_sk_perm+0x10/0x10 [ 1391.983266][T23864] ? sock_rps_record_flow+0x19/0x400 [ 1391.983293][T23864] ? inet_sendmsg+0x2f4/0x370 [ 1391.983316][T23864] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1391.983337][T23864] ____sys_sendmsg+0x894/0xad0 [ 1391.983370][T23864] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1391.983403][T23864] ? import_iovec+0x73/0xa0 [ 1391.983433][T23864] ___sys_sendmsg+0x2a5/0x360 [ 1391.983462][T23864] ? __pfx____sys_sendmsg+0x10/0x10 [ 1391.983519][T23864] ? __fget_files+0x2a/0x420 [ 1391.983541][T23864] ? __fget_files+0x3a0/0x420 [ 1391.983574][T23864] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1391.983601][T23864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1391.983635][T23864] ? __pfx_ksys_write+0x10/0x10 [ 1391.983663][T23864] do_syscall_64+0x14d/0xf80 [ 1391.983686][T23864] ? trace_irq_disable+0x3b/0x150 [ 1391.983710][T23864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.983728][T23864] ? clear_bhb_loop+0x40/0x90 [ 1391.983749][T23864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.983767][T23864] RIP: 0033:0x7f831859c629 [ 1391.983784][T23864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.983799][T23864] RSP: 002b:00007f8319378028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1391.983818][T23864] RAX: ffffffffffffffda RBX: 00007f8318815fa0 RCX: 00007f831859c629 [ 1391.983830][T23864] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1391.983841][T23864] RBP: 00007f8319378090 R08: 0000000000000000 R09: 0000000000000000 [ 1391.983851][T23864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1391.983861][T23864] R13: 00007f8318816038 R14: 00007f8318815fa0 R15: 00007ffe8dba0128 [ 1391.983885][T23864] [ 1392.807532][T23886] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1392.872642][T23886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.880033][T23886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.964717][T23886] bridge0: entered allmulticast mode [ 1392.988036][T23894] netlink: 'syz.0.16576': attribute type 1 has an invalid length. [ 1393.007738][T23892] geneve3: entered promiscuous mode [ 1393.063920][T31885] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 48720 - 0 [ 1393.098130][T31885] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 48720 - 0 [ 1393.147169][T31885] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 48720 - 0 [ 1393.178126][T31885] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 48720 - 0 [ 1393.187456][T23902] FAULT_INJECTION: forcing a failure. [ 1393.187456][T23902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1393.223681][T23902] CPU: 0 UID: 0 PID: 23902 Comm: syz.3.16577 Not tainted syzkaller #0 PREEMPT(full) [ 1393.223705][T23902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1393.223716][T23902] Call Trace: [ 1393.223723][T23902] [ 1393.223731][T23902] dump_stack_lvl+0xe8/0x150 [ 1393.223759][T23902] should_fail_ex+0x412/0x560 [ 1393.223785][T23902] _copy_from_iter+0x1d3/0x1670 [ 1393.223807][T23902] ? sctp_chunkify+0x5a/0x260 [ 1393.223828][T23902] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1393.223863][T23902] ? __pfx__copy_from_iter+0x10/0x10 [ 1393.223893][T23902] ? __asan_memcpy+0x40/0x70 [ 1393.223918][T23902] ? sctp_make_datafrag_empty+0x184/0x240 [ 1393.223942][T23902] ? skb_put+0x11b/0x210 [ 1393.223968][T23902] sctp_user_addto_chunk+0x87/0x240 [ 1393.223994][T23902] sctp_datamsg_from_user+0x748/0xef0 [ 1393.224032][T23902] sctp_sendmsg_to_asoc+0x1416/0x1900 [ 1393.224055][T23902] ? __asan_memcpy+0x40/0x70 [ 1393.224084][T23902] ? sctp_assoc_add_peer+0xce1/0x13b0 [ 1393.224119][T23902] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1393.224141][T23902] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1393.224168][T23902] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1393.224192][T23902] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1393.224215][T23902] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1393.224239][T23902] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1393.224259][T23902] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1393.224288][T23902] sctp_sendmsg+0x1b3d/0x2c10 [ 1393.224326][T23902] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1393.224348][T23902] ? aa_sk_perm+0x15a/0x960 [ 1393.224369][T23902] ? aa_sk_perm+0x82d/0x960 [ 1393.224393][T23902] ? __pfx_aa_sk_perm+0x10/0x10 [ 1393.224415][T23902] ? sock_rps_record_flow+0x19/0x400 [ 1393.224442][T23902] ? inet_sendmsg+0x2f4/0x370 [ 1393.224465][T23902] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1393.224486][T23902] ____sys_sendmsg+0x894/0xad0 [ 1393.224519][T23902] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1393.224552][T23902] ? import_iovec+0x73/0xa0 [ 1393.224579][T23902] ___sys_sendmsg+0x2a5/0x360 [ 1393.224610][T23902] ? __pfx____sys_sendmsg+0x10/0x10 [ 1393.224667][T23902] ? __fget_files+0x2a/0x420 [ 1393.224690][T23902] ? __fget_files+0x3a0/0x420 [ 1393.224723][T23902] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1393.224749][T23902] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1393.224782][T23902] ? __pfx_ksys_write+0x10/0x10 [ 1393.224816][T23902] do_syscall_64+0x14d/0xf80 [ 1393.224839][T23902] ? trace_irq_disable+0x3b/0x150 [ 1393.224862][T23902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.224880][T23902] ? clear_bhb_loop+0x40/0x90 [ 1393.224912][T23902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1393.224930][T23902] RIP: 0033:0x7f259379c629 [ 1393.224947][T23902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.224962][T23902] RSP: 002b:00007f2594624028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1393.224981][T23902] RAX: ffffffffffffffda RBX: 00007f2593a15fa0 RCX: 00007f259379c629 [ 1393.224994][T23902] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000005 [ 1393.225005][T23902] RBP: 00007f2594624090 R08: 0000000000000000 R09: 0000000000000000 [ 1393.225017][T23902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1393.225027][T23902] R13: 00007f2593a16038 R14: 00007f2593a15fa0 R15: 00007ffe34c71fe8 [ 1393.225057][T23902] [ 1393.747139][T23906] netlink: 'syz.0.16579': attribute type 12 has an invalid length. [ 1393.778463][T23911] syzkaller1: entered promiscuous mode [ 1393.811952][T23911] syzkaller1: entered allmulticast mode [ 1393.992209][T23916] bond0: Caught tx_queue_len zero misconfig [ 1394.000068][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1394.008244][ C1] lec:lec_tx_timeout: lec0 [ 1394.030015][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1394.179854][T23924] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.16585'. [ 1394.538508][T23924] netlink: 'syz.3.16585': attribute type 25 has an invalid length. [ 1394.569247][T23924] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16585'. [ 1394.692359][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16589'. [ 1394.916818][T23947] ¾x9ÿ: renamed from bridge_slave_0 [ 1394.928341][T23951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.16593'. [ 1394.940791][T23949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16595'. [ 1395.129862][T23961] netlink: 'syz.0.16597': attribute type 1 has an invalid length. [ 1395.145837][T23962] netlink: 'syz.4.16598': attribute type 3 has an invalid length. [ 1395.180369][T23962] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16598'. [ 1395.275836][T23961] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1395.352297][T23970] bond2: (slave geneve2): making interface the new active one [ 1395.430697][T23970] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1395.497318][T23985] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 1395.759665][T23996] __nla_validate_parse: 1 callbacks suppressed [ 1395.759686][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16606'. [ 1395.832285][T23999] ipt_REJECT: ECHOREPLY no longer supported. [ 1395.843346][T24005] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 1395.902051][T23999] Cannot find del_set index 1 as target [ 1396.051268][T24011] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16611'. [ 1396.111266][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16614'. [ 1396.130447][T24016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16614'. [ 1399.039479][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1399.047578][ C1] lec:lec_tx_timeout: lec0 [ 1399.069102][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1399.668505][T24021] tipc: Enabled bearer , priority 0 [ 1399.807241][T24020] tipc: Disabling bearer [ 1399.894807][T24043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16620'. [ 1399.986022][T24045] xt_hashlimit: size too large, truncated to 1048576 [ 1400.015908][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16623'. [ 1400.274793][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16626'. [ 1400.296297][T24063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16626'. [ 1400.581167][T24068] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1400.946968][T24086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16635'. [ 1400.995052][T24096] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16638'. [ 1401.004838][T24093] netlink: 'syz.1.16636': attribute type 25 has an invalid length. [ 1401.014684][T24093] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16636'. [ 1401.027026][T24091] SET target dimension over the limit! [ 1401.045623][T24091] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16634'. [ 1401.066154][T24093] FAULT_INJECTION: forcing a failure. [ 1401.066154][T24093] name failslab, interval 1, probability 0, space 0, times 0 [ 1401.130300][T24093] CPU: 0 UID: 0 PID: 24093 Comm: syz.1.16636 Not tainted syzkaller #0 PREEMPT(full) [ 1401.130327][T24093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1401.130338][T24093] Call Trace: [ 1401.130346][T24093] [ 1401.130355][T24093] dump_stack_lvl+0xe8/0x150 [ 1401.130386][T24093] should_fail_ex+0x412/0x560 [ 1401.130411][T24093] should_failslab+0xa8/0x100 [ 1401.130434][T24093] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1401.130460][T24093] ? __alloc_skb+0x186/0x7d0 [ 1401.130481][T24093] ? __alloc_skb+0x1d0/0x7d0 [ 1401.130500][T24093] ? __local_bh_enable_ip+0xd0/0x130 [ 1401.130526][T24093] __alloc_skb+0x1d0/0x7d0 [ 1401.130547][T24093] ? netlink_ack_tlv_len+0x6c/0x210 [ 1401.130569][T24093] netlink_ack+0x146/0xa50 [ 1401.130587][T24093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1401.130606][T24093] ? ref_tracker_free+0x693/0x840 [ 1401.130625][T24093] ? __copy_skb_header+0xa3/0x4a0 [ 1401.130650][T24093] ? __pfx_ref_tracker_free+0x10/0x10 [ 1401.130680][T24093] netlink_rcv_skb+0x2b6/0x4b0 [ 1401.130700][T24093] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1401.130723][T24093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1401.130754][T24093] ? netlink_deliver_tap+0x2e/0x1b0 [ 1401.130781][T24093] netlink_unicast+0x80f/0x9b0 [ 1401.130807][T24093] ? __pfx_netlink_unicast+0x10/0x10 [ 1401.130827][T24093] ? netlink_sendmsg+0x650/0xb40 [ 1401.130845][T24093] ? skb_put+0x11b/0x210 [ 1401.130871][T24093] netlink_sendmsg+0x813/0xb40 [ 1401.130899][T24093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.130922][T24093] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1401.130944][T24093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1401.130970][T24093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1401.130990][T24093] ____sys_sendmsg+0xa68/0xad0 [ 1401.131022][T24093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1401.131055][T24093] ? import_iovec+0x73/0xa0 [ 1401.131081][T24093] ___sys_sendmsg+0x2a5/0x360 [ 1401.131109][T24093] ? __pfx____sys_sendmsg+0x10/0x10 [ 1401.131164][T24093] ? __fget_files+0x2a/0x420 [ 1401.131196][T24093] ? __fget_files+0x3a0/0x420 [ 1401.131227][T24093] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1401.131253][T24093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1401.131285][T24093] ? __pfx_ksys_write+0x10/0x10 [ 1401.131313][T24093] do_syscall_64+0x14d/0xf80 [ 1401.131341][T24093] ? trace_irq_disable+0x3b/0x150 [ 1401.131363][T24093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.131381][T24093] ? clear_bhb_loop+0x40/0x90 [ 1401.131403][T24093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.131420][T24093] RIP: 0033:0x7fbb47f9c629 [ 1401.131438][T24093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1401.131453][T24093] RSP: 002b:00007fbb48ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1401.131472][T24093] RAX: ffffffffffffffda RBX: 00007fbb48215fa0 RCX: 00007fbb47f9c629 [ 1401.131485][T24093] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1401.131496][T24093] RBP: 00007fbb48ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 1401.131507][T24093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1401.131518][T24093] R13: 00007fbb48216038 R14: 00007fbb48215fa0 R15: 00007fff77cdd778 [ 1401.131546][T24093] [ 1401.761420][T24118] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16644'. [ 1402.133475][T24142] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16650'. [ 1402.320911][T24145] netlink: 88 bytes leftover after parsing attributes in process `syz.1.16655'. [ 1402.399032][T24133] syzkaller0: entered promiscuous mode [ 1402.404765][T24133] syzkaller0: entered allmulticast mode [ 1402.439951][T24145] syzkaller0: entered promiscuous mode [ 1402.455922][T24145] syzkaller0: entered allmulticast mode [ 1402.646688][T24156] netlink: get zone limit has 4 unknown bytes [ 1402.877975][T24168] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16661'. [ 1402.933920][T24166] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16660'. [ 1402.949486][T24166] IPv6: NLM_F_CREATE should be specified when creating new route [ 1402.957602][T24166] netlink: 'syz.0.16660': attribute type 1 has an invalid length. [ 1403.077120][T24175] netlink: 'syz.0.16663': attribute type 25 has an invalid length. [ 1403.089836][T24175] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16663'. [ 1403.114868][T24175] FAULT_INJECTION: forcing a failure. [ 1403.114868][T24175] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.151795][T24175] CPU: 0 UID: 0 PID: 24175 Comm: syz.0.16663 Not tainted syzkaller #0 PREEMPT(full) [ 1403.151821][T24175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1403.151833][T24175] Call Trace: [ 1403.151841][T24175] [ 1403.151848][T24175] dump_stack_lvl+0xe8/0x150 [ 1403.151878][T24175] should_fail_ex+0x412/0x560 [ 1403.151904][T24175] should_failslab+0xa8/0x100 [ 1403.151927][T24175] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1403.151956][T24175] ? __alloc_skb+0x1d0/0x7d0 [ 1403.151976][T24175] ? __local_bh_enable_ip+0xd0/0x130 [ 1403.152001][T24175] __alloc_skb+0x1d0/0x7d0 [ 1403.152031][T24175] ? br_setlink+0x6cc/0x8c0 [ 1403.152058][T24175] br_info_notify+0x105/0x280 [ 1403.152085][T24175] br_setlink+0x390/0x8c0 [ 1403.152113][T24175] ? __pfx_br_setlink+0x10/0x10 [ 1403.152172][T24175] ? __local_bh_enable_ip+0xd0/0x130 [ 1403.152198][T24175] ? mutex_is_locked+0x17/0x50 [ 1403.152226][T24175] rtnl_bridge_setlink+0x5bb/0x7e0 [ 1403.152255][T24175] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1403.152285][T24175] ? __pfx_rtnl_bridge_setlink+0x10/0x10 [ 1403.152306][T24175] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1403.152331][T24175] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1403.152351][T24175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1403.152370][T24175] ? ref_tracker_free+0x693/0x840 [ 1403.152390][T24175] ? __copy_skb_header+0xa3/0x4a0 [ 1403.152415][T24175] ? __pfx_ref_tracker_free+0x10/0x10 [ 1403.152446][T24175] netlink_rcv_skb+0x232/0x4b0 [ 1403.152468][T24175] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1403.152491][T24175] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1403.152522][T24175] ? netlink_deliver_tap+0x2e/0x1b0 [ 1403.152549][T24175] netlink_unicast+0x80f/0x9b0 [ 1403.152576][T24175] ? __pfx_netlink_unicast+0x10/0x10 [ 1403.152596][T24175] ? netlink_sendmsg+0x650/0xb40 [ 1403.152614][T24175] ? skb_put+0x11b/0x210 [ 1403.152639][T24175] netlink_sendmsg+0x813/0xb40 [ 1403.152669][T24175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1403.152693][T24175] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1403.152715][T24175] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1403.152736][T24175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1403.152755][T24175] ____sys_sendmsg+0xa68/0xad0 [ 1403.152798][T24175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1403.152830][T24175] ? import_iovec+0x73/0xa0 [ 1403.152857][T24175] ___sys_sendmsg+0x2a5/0x360 [ 1403.152886][T24175] ? __pfx____sys_sendmsg+0x10/0x10 [ 1403.152944][T24175] ? __fget_files+0x2a/0x420 [ 1403.152967][T24175] ? __fget_files+0x3a0/0x420 [ 1403.153000][T24175] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1403.153033][T24175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1403.153067][T24175] ? __pfx_ksys_write+0x10/0x10 [ 1403.153095][T24175] do_syscall_64+0x14d/0xf80 [ 1403.153118][T24175] ? trace_irq_disable+0x3b/0x150 [ 1403.153141][T24175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.153159][T24175] ? clear_bhb_loop+0x40/0x90 [ 1403.153181][T24175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.153198][T24175] RIP: 0033:0x7f831859c629 [ 1403.153216][T24175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.153230][T24175] RSP: 002b:00007f8319378028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1403.153249][T24175] RAX: ffffffffffffffda RBX: 00007f8318815fa0 RCX: 00007f831859c629 [ 1403.153261][T24175] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1403.153272][T24175] RBP: 00007f8319378090 R08: 0000000000000000 R09: 0000000000000000 [ 1403.153282][T24175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1403.153293][T24175] R13: 00007f8318816038 R14: 00007f8318815fa0 R15: 00007ffe8dba0128 [ 1403.153323][T24175] [ 1403.840523][T24181] netlink: 'syz.0.16664': attribute type 3 has an invalid length. [ 1403.897064][T24186] bridge4: entered promiscuous mode [ 1403.934836][T24186] bridge4: entered allmulticast mode [ 1404.020970][T24182] netlink: 'syz.2.16666': attribute type 29 has an invalid length. [ 1404.031918][T24182] netlink: 'syz.2.16666': attribute type 29 has an invalid length. [ 1404.252182][T24206] syzkaller0: entered promiscuous mode [ 1404.271132][T24206] syzkaller0: entered allmulticast mode [ 1404.290840][T24208] netlink: 'syz.0.16675': attribute type 25 has an invalid length. [ 1404.312374][T24210] netlink: 'syz.1.16676': attribute type 25 has an invalid length. [ 1404.645986][T24232] netlink: 'syz.0.16683': attribute type 3 has an invalid length. [ 1404.785893][T24244] netlink: 'syz.1.16686': attribute type 8 has an invalid length. [ 1404.828947][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 1404.830436][T24244] bond0: entered promiscuous mode [ 1404.836976][ C1] lec:lec_tx_timeout: lec0 [ 1404.838565][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1404.869197][T24244] bond_slave_0: entered promiscuous mode [ 1404.885499][T24244] bond_slave_1: entered promiscuous mode [ 1404.906646][T24244] bridge_slave_1: entered promiscuous mode [ 1404.921804][T24244] gretap0: entered promiscuous mode [ 1404.957025][T24244] bond0: left promiscuous mode [ 1405.029608][T24244] bond_slave_0: left promiscuous mode [ 1405.036053][T24244] bond_slave_1: left promiscuous mode [ 1405.042301][T24244] bridge_slave_1: left promiscuous mode [ 1405.068387][T24244] gretap0: left promiscuous mode [ 1405.556217][T24266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1405.971251][T24293] __nla_validate_parse: 10 callbacks suppressed [ 1405.971272][T24293] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16704'. [ 1406.494170][T24323] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16713'. [ 1406.563480][T24326] validate_nla: 4 callbacks suppressed [ 1406.563499][T24326] netlink: 'syz.1.16715': attribute type 25 has an invalid length. [ 1406.582023][T24328] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16713'. [ 1406.600429][T24326] netlink: 40 bytes leftover after parsing attributes in process `syz.1.16715'. [ 1406.622996][T24330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16716'. [ 1406.680184][T24335] netlink: 'syz.2.16717': attribute type 25 has an invalid length. [ 1406.710520][T24335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16717'. [ 1406.803373][T24337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16718'. [ 1407.001145][T24352] netlink: 104 bytes leftover after parsing attributes in process `syz.4.16723'. [ 1407.064389][T24356] netlink: 104 bytes leftover after parsing attributes in process `syz.3.16724'. [ 1407.131700][T24356] ipt_ECN: cannot use operation on non-tcp rule [ 1407.200042][T24365] netlink: 'syz.2.16728': attribute type 25 has an invalid length. [ 1407.228758][T24365] netlink: 40 bytes leftover after parsing attributes in process `syz.2.16728'. [ 1407.447522][T24381] pimreg: entered allmulticast mode [ 1407.476086][T24381] IPVS: set_ctl: invalid protocol: 58 172.20.20.37:20003 [ 1407.483334][T24382] sctp: [Deprecated]: syz.1.16735 (pid 24382) Use of int in maxseg socket option. [ 1407.483334][T24382] Use struct sctp_assoc_value instead [ 1407.510840][T24381] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 1407.526103][T24377] pimreg: left allmulticast mode [ 1407.952912][T24409] netlink: 'syz.3.16743': attribute type 3 has an invalid length. [ 1408.130861][T24421] netlink: 'syz.1.16748': attribute type 1 has an invalid length. [ 1408.168422][T24422] netlink: 'syz.4.16746': attribute type 4 has an invalid length. [ 1408.504830][T24437] netlink: 'syz.3.16757': attribute type 1 has an invalid length. [ 1408.624821][T24437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1409.288200][T24451] lo: left promiscuous mode [ 1409.340213][T24483] netlink: 'syz.0.16771': attribute type 1 has an invalid length. [ 1409.408295][T24451] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.415580][T24451] bridge0: port 2(bridge_slave_1) entered listening state [ 1409.423029][T24451] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.430258][T24451] bridge0: port 1(bridge_slave_0) entered listening state [ 1409.443516][T24451] bridge0: left allmulticast mode [ 1409.453297][T24451] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1409.544519][T24483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1409.869087][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 1409.877168][ C1] lec:lec_tx_timeout: lec0 [ 1409.918700][T24505] delete_channel: no stack [ 1410.232556][T24530] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.442493][T24533] netlink: 'syz.2.16782': attribute type 3 has an invalid length. [ 1410.450751][T24533] netlink: 'syz.2.16782': attribute type 1 has an invalid length. [ 1413.356778][T24532] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1413.408404][T24535] wg1 speed is unknown, defaulting to 1000 [ 1413.497904][T24538] __nla_validate_parse: 11 callbacks suppressed [ 1413.497922][T24538] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16784'. [ 1413.532561][T24542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16785'. [ 1413.626768][T24545] netlink: 'syz.4.16787': attribute type 1 has an invalid length. [ 1413.636182][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16785'. [ 1413.679203][T24547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16785'. [ 1413.816894][T24545] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1414.003487][T24561] netlink: 7 bytes leftover after parsing attributes in process `syz.4.16792'. [ 1414.138620][T24563] veth0: entered promiscuous mode [ 1414.175345][T24562] veth0: left promiscuous mode [ 1414.189501][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1414.305387][T24567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16795'. [ 1414.662743][T24578] netlink: 44 bytes leftover after parsing attributes in process `syz.3.16798'. [ 1414.994587][T24589] netlink: 272 bytes leftover after parsing attributes in process `syz.3.16801'. [ 1415.112002][T24594] tipc: Enabling of bearer rejected, failed to enable media [ 1415.432180][T24608] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1415.466939][T24608] bond3: (slave lo): Enslaving as an active interface with an up link [ 1415.491514][T24613] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16806'. [ 1415.495604][T24608] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1415.521099][T24611] netlink: 156 bytes leftover after parsing attributes in process `syz.1.16809'. [ 1415.618708][T24604] bond4: option packets_per_slave: invalid value (18446744073709551615) [ 1415.637092][T24604] bond4: option packets_per_slave: allowed values 0 - 65535 [ 1415.646547][T24604] bond4 (unregistering): Released all slaves [ 1415.831568][T24622] netlink: 'syz.1.16813': attribute type 1 has an invalid length. [ 1415.916109][T24622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1416.015912][T24626] tipc: Started in network mode [ 1416.066113][T24626] tipc: Node identity 46cb41acb5ee, cluster identity 4711 [ 1416.083706][T24626] tipc: Enabled bearer , priority 0 [ 1416.106061][T24639] FAULT_INJECTION: forcing a failure. [ 1416.106061][T24639] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.109783][T24629] syzkaller0: entered promiscuous mode [ 1416.140984][T24639] CPU: 1 UID: 0 PID: 24639 Comm: syz.2.16818 Not tainted syzkaller #0 PREEMPT(full) [ 1416.141009][T24639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1416.141021][T24639] Call Trace: [ 1416.141028][T24639] [ 1416.141036][T24639] dump_stack_lvl+0xe8/0x150 [ 1416.141065][T24639] should_fail_ex+0x412/0x560 [ 1416.141091][T24639] should_failslab+0xa8/0x100 [ 1416.141115][T24639] __kmalloc_cache_noprof+0x88/0x660 [ 1416.141135][T24639] ? sctp_add_bind_addr+0x8c/0x370 [ 1416.141162][T24639] sctp_add_bind_addr+0x8c/0x370 [ 1416.141186][T24639] sctp_copy_local_addr_list+0x314/0x4f0 [ 1416.141212][T24639] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1416.141233][T24639] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1416.141259][T24639] ? sctp_v4_is_any+0x35/0x60 [ 1416.141279][T24639] ? sctp_copy_one_addr+0x93/0x360 [ 1416.141303][T24639] sctp_bind_addr_copy+0xb3/0x3c0 [ 1416.141325][T24639] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1416.141347][T24639] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1416.141449][T24639] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1416.141475][T24639] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1416.141499][T24639] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1416.141522][T24639] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1416.141547][T24639] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1416.141567][T24639] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1416.141595][T24639] sctp_sendmsg+0x1528/0x2c10 [ 1416.141629][T24639] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1416.141650][T24639] ? aa_sk_perm+0x15a/0x960 [ 1416.141671][T24639] ? aa_sk_perm+0x82d/0x960 [ 1416.141698][T24639] ? __pfx_aa_sk_perm+0x10/0x10 [ 1416.141720][T24639] ? sock_rps_record_flow+0x19/0x400 [ 1416.141748][T24639] ? inet_sendmsg+0x2f4/0x370 [ 1416.141770][T24639] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1416.141792][T24639] ____sys_sendmsg+0x894/0xad0 [ 1416.141825][T24639] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1416.141859][T24639] ? import_iovec+0x73/0xa0 [ 1416.141886][T24639] ___sys_sendmsg+0x2a5/0x360 [ 1416.141915][T24639] ? __pfx____sys_sendmsg+0x10/0x10 [ 1416.141974][T24639] ? __fget_files+0x2a/0x420 [ 1416.141996][T24639] ? __fget_files+0x3a0/0x420 [ 1416.142030][T24639] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1416.142056][T24639] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1416.142086][T24639] ? __pfx_ksys_write+0x10/0x10 [ 1416.142114][T24639] do_syscall_64+0x14d/0xf80 [ 1416.142139][T24639] ? trace_irq_disable+0x3b/0x150 [ 1416.142163][T24639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.142181][T24639] ? clear_bhb_loop+0x40/0x90 [ 1416.142203][T24639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.142221][T24639] RIP: 0033:0x7f61dd99c629 [ 1416.142239][T24639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1416.142254][T24639] RSP: 002b:00007f61de926028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1416.142273][T24639] RAX: ffffffffffffffda RBX: 00007f61ddc15fa0 RCX: 00007f61dd99c629 [ 1416.142286][T24639] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1416.142298][T24639] RBP: 00007f61de926090 R08: 0000000000000000 R09: 0000000000000000 [ 1416.142309][T24639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1416.142320][T24639] R13: 00007f61ddc16038 R14: 00007f61ddc15fa0 R15: 00007ffd572dbb68 [ 1416.142350][T24639] [ 1416.159360][T24629] syzkaller0: entered allmulticast mode [ 1416.391091][T24643] netlink: 'syz.0.16817': attribute type 10 has an invalid length. [ 1416.507187][T24641] smc: net device wlan0 applied user defined pnetid SYZ0 [ 1416.541572][T24643] dummy0: entered promiscuous mode [ 1416.567185][T24643] bridge0: port 3(dummy0) entered blocking state [ 1416.592239][T24643] bridge0: port 3(dummy0) entered disabled state [ 1416.612735][T24643] dummy0: entered allmulticast mode [ 1416.655661][T24643] bridge0: port 3(dummy0) entered blocking state [ 1416.662265][T24643] bridge0: port 3(dummy0) entered listening state [ 1416.785228][T24625] tipc: Resetting bearer [ 1416.873621][T24625] tipc: Disabling bearer [ 1417.054530][T24669] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1417.671329][T24684] bridge0: entered promiscuous mode [ 1417.689212][T24684] macsec1: entered promiscuous mode [ 1417.702301][T24684] macsec1: entered allmulticast mode [ 1417.718875][T24684] bridge0: entered allmulticast mode [ 1417.760709][T24684] bridge0: port 4(macsec1) entered blocking state [ 1417.767346][T24684] bridge0: port 4(macsec1) entered disabled state [ 1417.808290][T24684] bridge0: left allmulticast mode [ 1417.831672][T24684] bridge0: left promiscuous mode [ 1417.890977][T24687] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.898281][T24687] bridge0: port 1(bridge_slave_0) entered disabled state [ 1417.930104][T24687] bridge0: entered allmulticast mode [ 1418.013847][T24698] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1418.086550][T24702] tipc: Enabled bearer , priority 0 [ 1418.125974][T24699] tipc: Disabling bearer [ 1418.154867][T24705] netlink: 'syz.2.16837': attribute type 2 has an invalid length. [ 1418.727687][T24731] __nla_validate_parse: 10 callbacks suppressed [ 1418.727709][T24731] netlink: 401 bytes leftover after parsing attributes in process `syz.1.16845'. [ 1418.845665][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16846'. [ 1418.866522][T24739] xt_nat: multiple ranges no longer supported [ 1418.879217][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16846'. [ 1419.021521][T24744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16852'. [ 1419.116813][T24750] x_tables: duplicate underflow at hook 1 [ 1419.192651][T24753] netlink: 'syz.4.16854': attribute type 25 has an invalid length. [ 1419.204510][T24753] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16854'. [ 1419.350179][T24757] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1419.384588][T24759] netlink: 100 bytes leftover after parsing attributes in process `syz.3.16857'. [ 1419.430384][T24761] netlink: 'syz.4.16858': attribute type 3 has an invalid length. [ 1419.605104][T24770] bridge0: entered allmulticast mode [ 1419.614650][T24767] syzkaller0: entered promiscuous mode [ 1419.652651][T24767] syzkaller0: entered allmulticast mode [ 1419.692869][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16862'. [ 1419.726109][T24771] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1419.851782][T24785] netlink: 'syz.4.16865': attribute type 27 has an invalid length. [ 1419.854674][T24771] netlink: 'syz.1.16862': attribute type 11 has an invalid length. [ 1419.869188][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5680 ms [ 1419.877350][ C1] lec:lec_tx_timeout: lec0 [ 1419.884620][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1419.884844][T24771] netlink: 'syz.1.16862': attribute type 11 has an invalid length. [ 1419.908127][T24786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16862'. [ 1419.911784][T24785] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16865'. [ 1419.917856][T24771] netlink: 204 bytes leftover after parsing attributes in process `syz.1.16862'. [ 1419.941853][T24788] Bluetooth: MGMT ver 1.23 [ 1419.942532][T24782] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 1420.505557][T24821] netlink: 'syz.3.16875': attribute type 3 has an invalid length. [ 1420.535613][T24824] xt_socket: unknown flags 0x50 [ 1420.693229][T24830] openvswitch: netlink: Duplicate key (type 32). [ 1420.721368][T24832] netlink: 'syz.3.16879': attribute type 29 has an invalid length. [ 1420.770569][T24832] netlink: 'syz.3.16879': attribute type 29 has an invalid length. [ 1420.794673][T24832] netlink: 'syz.3.16879': attribute type 29 has an invalid length. [ 1420.824115][T24832] netlink: 'syz.3.16879': attribute type 29 has an invalid length. [ 1420.846883][T24832] netlink: 'syz.3.16879': attribute type 29 has an invalid length. [ 1420.902117][T24832] netlink: 'syz.3.16879': attribute type 29 has an invalid length. [ 1420.972279][T24844] xt_hashlimit: invalid interval [ 1420.978089][T24843] openvswitch: netlink: Flow actions attr not present in new flow. [ 1421.228573][T24859] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1421.238372][T24863] IPv6: NLM_F_CREATE should be specified when creating new route [ 1421.246323][ T5839] IPVS: starting estimator thread 0... [ 1421.349914][T24862] IPVS: using max 30 ests per chain, 72000 per kthread [ 1421.654989][T24887] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 1422.032797][ T5828] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1422.039137][ T5826] Bluetooth: hci2: command 0x0401 tx timeout [ 1423.077337][ T1299] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1423.091051][ T1299] aoe: packet could not be sent on lec0. consider increasing tx_queue_len [ 1423.105459][T24966] team1: entered promiscuous mode [ 1423.119178][T24966] team1: entered allmulticast mode [ 1423.732418][T25006] syzkaller1: entered promiscuous mode [ 1423.737946][T25006] syzkaller1: entered allmulticast mode [ 1423.957845][T25018] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1424.248330][T25041] validate_nla: 7 callbacks suppressed [ 1424.248423][T25041] netlink: 'syz.2.16947': attribute type 8 has an invalid length. [ 1424.274073][T25036] bond5: Removing last ns target with arp_interval on [ 1424.285312][T25041] __nla_validate_parse: 18 callbacks suppressed [ 1424.285333][T25041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16947'. [ 1424.388733][T25041] bond0: entered promiscuous mode [ 1424.399395][T25041] bond_slave_0: entered promiscuous mode [ 1424.410876][T25041] bond_slave_1: entered promiscuous mode [ 1424.418287][T25041] gretap0: entered promiscuous mode [ 1424.464786][T25041] bond0: left promiscuous mode [ 1424.470265][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16950'. [ 1424.494372][T25041] bond_slave_0: left promiscuous mode [ 1424.502384][T25049] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16950'. [ 1424.512747][T25041] bond_slave_1: left promiscuous mode [ 1424.522655][T25041] gretap0: left promiscuous mode [ 1424.803922][T25063] netlink: 'syz.1.16955': attribute type 1 has an invalid length. [ 1424.838558][T25063] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1424.899502][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1424.907546][ C1] lec:lec_tx_timeout: lec0 [ 1425.082272][T25073] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16959'. [ 1425.189968][T25079] netlink: 36 bytes leftover after parsing attributes in process `syz.0.16961'. [ 1425.272562][T25087] netlink: 'syz.3.16965': attribute type 25 has an invalid length. [ 1425.306980][T25087] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16965'. [ 1425.397389][T25090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16967'. [ 1425.530810][T25095] netlink: 'syz.1.16969': attribute type 10 has an invalid length. [ 1425.539094][T25095] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16969'. [ 1425.570939][T25097] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16970'. [ 1425.690693][T25107] FAULT_INJECTION: forcing a failure. [ 1425.690693][T25107] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.739046][T25107] CPU: 0 UID: 0 PID: 25107 Comm: syz.0.16973 Not tainted syzkaller #0 PREEMPT(full) [ 1425.739073][T25107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1425.739085][T25107] Call Trace: [ 1425.739093][T25107] [ 1425.739101][T25107] dump_stack_lvl+0xe8/0x150 [ 1425.739132][T25107] should_fail_ex+0x412/0x560 [ 1425.739158][T25107] should_failslab+0xa8/0x100 [ 1425.739182][T25107] __kmalloc_cache_noprof+0x88/0x660 [ 1425.739201][T25107] ? sctp_add_bind_addr+0x8c/0x370 [ 1425.739226][T25107] sctp_add_bind_addr+0x8c/0x370 [ 1425.739252][T25107] sctp_copy_local_addr_list+0x314/0x4f0 [ 1425.739277][T25107] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1425.739299][T25107] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1425.739324][T25107] ? sctp_v4_is_any+0x35/0x60 [ 1425.739344][T25107] ? sctp_copy_one_addr+0x93/0x360 [ 1425.739369][T25107] sctp_bind_addr_copy+0xb3/0x3c0 [ 1425.739391][T25107] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1425.739414][T25107] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1425.739442][T25107] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1425.739467][T25107] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1425.739491][T25107] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1425.739512][T25107] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1425.739535][T25107] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1425.739554][T25107] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1425.739581][T25107] sctp_sendmsg+0x1528/0x2c10 [ 1425.739617][T25107] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1425.739635][T25107] ? aa_sk_perm+0x15a/0x960 [ 1425.739654][T25107] ? aa_sk_perm+0x82d/0x960 [ 1425.739685][T25107] ? __pfx_aa_sk_perm+0x10/0x10 [ 1425.739705][T25107] ? sock_rps_record_flow+0x19/0x400 [ 1425.739733][T25107] ? inet_sendmsg+0x2f4/0x370 [ 1425.739757][T25107] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1425.739779][T25107] ____sys_sendmsg+0x894/0xad0 [ 1425.739814][T25107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1425.739848][T25107] ? import_iovec+0x73/0xa0 [ 1425.739875][T25107] ___sys_sendmsg+0x2a5/0x360 [ 1425.739906][T25107] ? __pfx____sys_sendmsg+0x10/0x10 [ 1425.739963][T25107] ? __fget_files+0x2a/0x420 [ 1425.739986][T25107] ? __fget_files+0x3a0/0x420 [ 1425.740024][T25107] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1425.740052][T25107] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1425.740084][T25107] ? __pfx_ksys_write+0x10/0x10 [ 1425.740115][T25107] do_syscall_64+0x14d/0xf80 [ 1425.740137][T25107] ? trace_irq_disable+0x3b/0x150 [ 1425.740160][T25107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.740179][T25107] ? clear_bhb_loop+0x40/0x90 [ 1425.740201][T25107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.740220][T25107] RIP: 0033:0x7f831859c629 [ 1425.740237][T25107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.740253][T25107] RSP: 002b:00007f8319378028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1425.740272][T25107] RAX: ffffffffffffffda RBX: 00007f8318815fa0 RCX: 00007f831859c629 [ 1425.740285][T25107] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1425.740302][T25107] RBP: 00007f8319378090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.740313][T25107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.740325][T25107] R13: 00007f8318816038 R14: 00007f8318815fa0 R15: 00007ffe8dba0128 [ 1425.740355][T25107] [ 1426.174142][T25111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16975'. [ 1426.187140][T25112] netlink: 'syz.3.16976': attribute type 64 has an invalid length. [ 1426.255451][T25114] netlink: 'syz.4.16977': attribute type 29 has an invalid length. [ 1426.265155][T25114] netlink: 'syz.4.16977': attribute type 29 has an invalid length. [ 1426.461214][T25119] openvswitch: netlink: Tunnel attr 67 out of range max 16 [ 1426.499784][T25119] netlink: 'syz.0.16979': attribute type 25 has an invalid length. [ 1426.662666][T25133] FAULT_INJECTION: forcing a failure. [ 1426.662666][T25133] name failslab, interval 1, probability 0, space 0, times 0 [ 1426.706361][T25133] CPU: 1 UID: 0 PID: 25133 Comm: syz.3.16984 Not tainted syzkaller #0 PREEMPT(full) [ 1426.706386][T25133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1426.706396][T25133] Call Trace: [ 1426.706404][T25133] [ 1426.706411][T25133] dump_stack_lvl+0xe8/0x150 [ 1426.706441][T25133] should_fail_ex+0x412/0x560 [ 1426.706467][T25133] should_failslab+0xa8/0x100 [ 1426.706488][T25133] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1426.706512][T25133] ? __alloc_skb+0x186/0x7d0 [ 1426.706530][T25133] ? __alloc_skb+0x1d0/0x7d0 [ 1426.706547][T25133] ? __local_bh_enable_ip+0xd0/0x130 [ 1426.706569][T25133] __alloc_skb+0x1d0/0x7d0 [ 1426.706589][T25133] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1426.706610][T25133] netlink_sendmsg+0x5d4/0xb40 [ 1426.706638][T25133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.706660][T25133] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1426.706681][T25133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1426.706700][T25133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1426.706718][T25133] ____sys_sendmsg+0xa68/0xad0 [ 1426.706750][T25133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1426.706780][T25133] ? import_iovec+0x73/0xa0 [ 1426.706807][T25133] ___sys_sendmsg+0x2a5/0x360 [ 1426.706834][T25133] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.706888][T25133] ? __fget_files+0x2a/0x420 [ 1426.706910][T25133] ? __fget_files+0x3a0/0x420 [ 1426.706941][T25133] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1426.706968][T25133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1426.706999][T25133] ? __pfx_ksys_write+0x10/0x10 [ 1426.707026][T25133] do_syscall_64+0x14d/0xf80 [ 1426.707049][T25133] ? trace_irq_disable+0x3b/0x150 [ 1426.707073][T25133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.707091][T25133] ? clear_bhb_loop+0x40/0x90 [ 1426.707110][T25133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.707127][T25133] RIP: 0033:0x7f259379c629 [ 1426.707145][T25133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.707160][T25133] RSP: 002b:00007f2594624028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.707180][T25133] RAX: ffffffffffffffda RBX: 00007f2593a15fa0 RCX: 00007f259379c629 [ 1426.707192][T25133] RDX: 0000000020040002 RSI: 0000200000000a00 RDI: 0000000000000003 [ 1426.707204][T25133] RBP: 00007f2594624090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.707214][T25133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.707224][T25133] R13: 00007f2593a16038 R14: 00007f2593a15fa0 R15: 00007ffe34c71fe8 [ 1426.707252][T25133] [ 1426.969488][T25143] netlink: 'syz.0.16988': attribute type 30 has an invalid length. [ 1427.375213][T25156] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1427.528542][T25171] ipvlan2: entered allmulticast mode [ 1427.585143][T25171] batadv_slave_1: entered allmulticast mode [ 1427.627960][T25171] batman_adv: batadv0: Adding interface: ipvlan2 [ 1427.672973][T25171] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1427.699116][T25171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1427.719098][T25171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1427.740973][T25171] batman_adv: batadv0: Interface activated: ipvlan2 [ 1427.747807][T25180] netlink: ct family unspecified [ 1427.754967][T25173] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 1428.120672][T25196] bond5: entered promiscuous mode [ 1428.139350][T25196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1428.296991][T25196] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1428.333128][T25196] bond5: (slave sit2): The slave device specified does not support setting the MAC address [ 1428.346577][T25196] bond5: (slave sit2): Error -95 calling set_mac_address [ 1428.468775][T25209] syzkaller0: entered promiscuous mode [ 1428.479013][T25209] syzkaller0: entered allmulticast mode [ 1428.727680][T25226] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1429.052273][T25239] netlink: zone id is out of range [ 1429.057531][T25239] netlink: get zone limit has 4 unknown bytes [ 1429.090013][T25243] bridge0: port 3(dummy0) entered disabled state [ 1429.096651][T25243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.104305][T25243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.129551][T25243] bridge0: entered allmulticast mode [ 1429.309666][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1429.496212][T25260] FAULT_INJECTION: forcing a failure. [ 1429.496212][T25260] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.540627][T25260] CPU: 0 UID: 0 PID: 25260 Comm: syz.0.17024 Not tainted syzkaller #0 PREEMPT(full) [ 1429.540653][T25260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1429.540664][T25260] Call Trace: [ 1429.540672][T25260] [ 1429.540680][T25260] dump_stack_lvl+0xe8/0x150 [ 1429.540710][T25260] should_fail_ex+0x412/0x560 [ 1429.540736][T25260] should_failslab+0xa8/0x100 [ 1429.540760][T25260] __kmalloc_cache_noprof+0x88/0x660 [ 1429.540780][T25260] ? sctp_add_bind_addr+0x8c/0x370 [ 1429.540807][T25260] sctp_add_bind_addr+0x8c/0x370 [ 1429.540830][T25260] sctp_copy_local_addr_list+0x314/0x4f0 [ 1429.540854][T25260] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1429.540876][T25260] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1429.540901][T25260] ? sctp_v4_is_any+0x35/0x60 [ 1429.540922][T25260] ? sctp_copy_one_addr+0x93/0x360 [ 1429.540946][T25260] sctp_bind_addr_copy+0xb3/0x3c0 [ 1429.540966][T25260] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1429.540989][T25260] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1429.541018][T25260] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1429.541043][T25260] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1429.541068][T25260] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1429.541090][T25260] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1429.541115][T25260] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1429.541135][T25260] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1429.541164][T25260] sctp_sendmsg+0x1528/0x2c10 [ 1429.541209][T25260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1429.541232][T25260] ? aa_sk_perm+0x15a/0x960 [ 1429.541253][T25260] ? aa_sk_perm+0x82d/0x960 [ 1429.541279][T25260] ? __pfx_aa_sk_perm+0x10/0x10 [ 1429.541301][T25260] ? sock_rps_record_flow+0x19/0x400 [ 1429.541330][T25260] ? inet_sendmsg+0x2f4/0x370 [ 1429.541352][T25260] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1429.541372][T25260] ____sys_sendmsg+0x894/0xad0 [ 1429.541401][T25260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1429.541430][T25260] ? import_iovec+0x73/0xa0 [ 1429.541455][T25260] ___sys_sendmsg+0x2a5/0x360 [ 1429.541484][T25260] ? __pfx____sys_sendmsg+0x10/0x10 [ 1429.541541][T25260] ? __fget_files+0x2a/0x420 [ 1429.541562][T25260] ? __fget_files+0x3a0/0x420 [ 1429.541591][T25260] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1429.541615][T25260] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1429.541650][T25260] ? __pfx_ksys_write+0x10/0x10 [ 1429.541677][T25260] do_syscall_64+0x14d/0xf80 [ 1429.541700][T25260] ? trace_irq_disable+0x3b/0x150 [ 1429.541723][T25260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.541742][T25260] ? clear_bhb_loop+0x40/0x90 [ 1429.541783][T25260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.541801][T25260] RIP: 0033:0x7f831859c629 [ 1429.541819][T25260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1429.541834][T25260] RSP: 002b:00007f8319378028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1429.541853][T25260] RAX: ffffffffffffffda RBX: 00007f8318815fa0 RCX: 00007f831859c629 [ 1429.541866][T25260] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1429.541878][T25260] RBP: 00007f8319378090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.541889][T25260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1429.541899][T25260] R13: 00007f8318816038 R14: 00007f8318815fa0 R15: 00007ffe8dba0128 [ 1429.541930][T25260] [ 1429.935176][T25268] __nla_validate_parse: 17 callbacks suppressed [ 1429.935196][T25268] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17027'. [ 1430.074630][T25271] syzkaller0: entered promiscuous mode [ 1430.088746][T25271] syzkaller0: entered allmulticast mode [ 1430.245186][T25276] tipc: Enabled bearer , priority 0 [ 1430.681216][T25295] netlink: 'syz.3.17037': attribute type 1 has an invalid length. [ 1430.793808][T25299] FAULT_INJECTION: forcing a failure. [ 1430.793808][T25299] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.823625][T25299] CPU: 1 UID: 0 PID: 25299 Comm: syz.4.17038 Not tainted syzkaller #0 PREEMPT(full) [ 1430.823653][T25299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1430.823663][T25299] Call Trace: [ 1430.823671][T25299] [ 1430.823679][T25299] dump_stack_lvl+0xe8/0x150 [ 1430.823708][T25299] should_fail_ex+0x412/0x560 [ 1430.823734][T25299] should_failslab+0xa8/0x100 [ 1430.823757][T25299] __kmalloc_cache_noprof+0x88/0x660 [ 1430.823777][T25299] ? sctp_add_bind_addr+0x8c/0x370 [ 1430.823805][T25299] sctp_add_bind_addr+0x8c/0x370 [ 1430.823840][T25299] sctp_copy_local_addr_list+0x314/0x4f0 [ 1430.823865][T25299] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1430.823887][T25299] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1430.823913][T25299] ? sctp_v4_is_any+0x35/0x60 [ 1430.823933][T25299] ? sctp_copy_one_addr+0x93/0x360 [ 1430.823958][T25299] sctp_bind_addr_copy+0xb3/0x3c0 [ 1430.823979][T25299] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1430.824002][T25299] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1430.824030][T25299] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1430.824055][T25299] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1430.824078][T25299] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1430.824099][T25299] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1430.824124][T25299] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1430.824147][T25299] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1430.824177][T25299] sctp_sendmsg+0x1528/0x2c10 [ 1430.824216][T25299] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1430.824238][T25299] ? aa_sk_perm+0x15a/0x960 [ 1430.824260][T25299] ? aa_sk_perm+0x82d/0x960 [ 1430.824286][T25299] ? __pfx_aa_sk_perm+0x10/0x10 [ 1430.824308][T25299] ? sock_rps_record_flow+0x19/0x400 [ 1430.824336][T25299] ? inet_sendmsg+0x2f4/0x370 [ 1430.824358][T25299] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1430.824380][T25299] ____sys_sendmsg+0x894/0xad0 [ 1430.824414][T25299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1430.824447][T25299] ? import_iovec+0x73/0xa0 [ 1430.824475][T25299] ___sys_sendmsg+0x2a5/0x360 [ 1430.824505][T25299] ? __pfx____sys_sendmsg+0x10/0x10 [ 1430.824563][T25299] ? __fget_files+0x2a/0x420 [ 1430.824584][T25299] ? __fget_files+0x3a0/0x420 [ 1430.824612][T25299] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1430.824636][T25299] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1430.824667][T25299] ? __pfx_ksys_write+0x10/0x10 [ 1430.824695][T25299] do_syscall_64+0x14d/0xf80 [ 1430.824718][T25299] ? trace_irq_disable+0x3b/0x150 [ 1430.824742][T25299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.824760][T25299] ? clear_bhb_loop+0x40/0x90 [ 1430.824782][T25299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.824800][T25299] RIP: 0033:0x7fef95b9c629 [ 1430.824825][T25299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.824841][T25299] RSP: 002b:00007fef9697b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1430.824860][T25299] RAX: ffffffffffffffda RBX: 00007fef95e15fa0 RCX: 00007fef95b9c629 [ 1430.824873][T25299] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1430.824885][T25299] RBP: 00007fef9697b090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.824896][T25299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1430.824907][T25299] R13: 00007fef95e16038 R14: 00007fef95e15fa0 R15: 00007ffe809764c8 [ 1430.824938][T25299] [ 1431.320858][T28985] tipc: Node number set to 4079305132 [ 1431.359290][T25309] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1431.459943][T25315] netlink: 'syz.3.17044': attribute type 21 has an invalid length. [ 1431.511625][T25315] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17044'. [ 1431.558602][T25315] netlink: 'syz.3.17044': attribute type 5 has an invalid length. [ 1431.602631][T25315] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17044'. [ 1431.606230][T25318] netlink: 260 bytes leftover after parsing attributes in process `syz.3.17044'. [ 1431.668317][T25326] netdevsim netdevsim0: Firmware load for '..' refused, path contains '..' component [ 1431.724088][T25317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17045'. [ 1431.801503][T25325] C: renamed from lo (while UP) [ 1431.849032][T25325] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1431.871208][T25339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1432.011973][T25345] netlink: 'syz.2.17053': attribute type 1 has an invalid length. [ 1432.077211][T25351] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1432.235401][T25357] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17058'. [ 1432.311947][T25359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17060'. [ 1432.334322][T25357] netlink: 128 bytes leftover after parsing attributes in process `syz.2.17058'. [ 1432.517290][T25368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17064'. [ 1432.636942][T25375] veth0: entered promiscuous mode [ 1432.641385][T25378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17066'. [ 1432.714127][T25382] netlink: 'syz.3.17068': attribute type 3 has an invalid length. [ 1432.720875][T25378] vlan2: entered allmulticast mode [ 1432.733704][T25378] mac80211_hwsim hwsim102 wlan0: entered allmulticast mode [ 1432.773023][T25373] veth0: left promiscuous mode [ 1432.917017][T25390] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1433.134768][T25404] netlink: 'syz.4.17077': attribute type 7 has an invalid length. [ 1433.163938][T25404] netlink: 'syz.4.17077': attribute type 8 has an invalid length. [ 1433.298376][T25411] netlink: 'syz.3.17080': attribute type 3 has an invalid length. [ 1433.746835][T25435] xt_socket: unknown flags 0x50 [ 1434.112789][T25445] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1434.140637][T25448] FAULT_INJECTION: forcing a failure. [ 1434.140637][T25448] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1434.180848][T25448] CPU: 0 UID: 0 PID: 25448 Comm: syz.0.17091 Not tainted syzkaller #0 PREEMPT(full) [ 1434.180875][T25448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1434.180886][T25448] Call Trace: [ 1434.180894][T25448] [ 1434.180903][T25448] dump_stack_lvl+0xe8/0x150 [ 1434.180933][T25448] should_fail_ex+0x412/0x560 [ 1434.180959][T25448] _copy_from_user+0x2d/0xb0 [ 1434.180985][T25448] ___sys_sendmsg+0x1c6/0x360 [ 1434.181013][T25448] ? __pfx____sys_sendmsg+0x10/0x10 [ 1434.181040][T25448] ? kstrtouint+0x6e/0xe0 [ 1434.181085][T25448] ? __fget_files+0x2a/0x420 [ 1434.181108][T25448] ? __fget_files+0x3a0/0x420 [ 1434.181140][T25448] __sys_sendmmsg+0x27c/0x4e0 [ 1434.181171][T25448] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1434.181192][T25448] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1434.181243][T25448] ? ksys_write+0x242/0x270 [ 1434.181284][T25448] ? __pfx_ksys_write+0x10/0x10 [ 1434.181309][T25448] __x64_sys_sendmmsg+0xa0/0xc0 [ 1434.181336][T25448] do_syscall_64+0x14d/0xf80 [ 1434.181360][T25448] ? trace_irq_disable+0x3b/0x150 [ 1434.181384][T25448] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.181403][T25448] ? clear_bhb_loop+0x40/0x90 [ 1434.181424][T25448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.181442][T25448] RIP: 0033:0x7f831859c629 [ 1434.181459][T25448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.181473][T25448] RSP: 002b:00007f8319378028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1434.181493][T25448] RAX: ffffffffffffffda RBX: 00007f8318815fa0 RCX: 00007f831859c629 [ 1434.181506][T25448] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1434.181518][T25448] RBP: 00007f8319378090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.181530][T25448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.181541][T25448] R13: 00007f8318816038 R14: 00007f8318815fa0 R15: 00007ffe8dba0128 [ 1434.181570][T25448] [ 1434.777295][T25466] IPVS: set_ctl: invalid protocol: 94 172.30.4.1:19999 [ 1434.784749][ T5934] IPVS: starting estimator thread 0... [ 1434.828991][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 1434.837127][ C1] lec:lec_tx_timeout: lec0 [ 1434.909191][T25468] IPVS: using max 34 ests per chain, 81600 per kthread [ 1434.909603][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1435.083769][T25475] netlink: 'syz.3.17100': attribute type 1 has an invalid length. [ 1435.132959][T25475] netlink: 'syz.3.17100': attribute type 4 has an invalid length. [ 1435.140657][T25479] __nla_validate_parse: 10 callbacks suppressed [ 1435.140675][T25479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17099'. [ 1435.182913][T25475] netlink: 9491 bytes leftover after parsing attributes in process `syz.3.17100'. [ 1435.235597][T25479] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1435.325233][T25479] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1435.382539][T25479] batman_adv: batadv0: Removing interface: ipvlan2 [ 1435.412656][T25506] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17106'. [ 1435.426261][T25479] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.654689][T25515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17108'. [ 1435.728506][T25515] netlink: 80 bytes leftover after parsing attributes in process `syz.1.17108'. [ 1435.733957][T25513] netlink: 80 bytes leftover after parsing attributes in process `syz.1.17108'. [ 1436.287908][T25554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17119'. [ 1436.416611][T25559] syzkaller1: entered promiscuous mode [ 1436.430944][T25559] syzkaller1: entered allmulticast mode [ 1436.689917][T25580] tipc: Enabled bearer , priority 0 [ 1436.784029][T25586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1436.790903][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17128'. [ 1436.839820][T25587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17128'. [ 1437.296772][T25610] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1437.373222][T25620] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1437.385726][T25619] netlink: 40 bytes leftover after parsing attributes in process `syz.2.17138'. [ 1437.404631][T25620] bond5 (unregistering): Released all slaves [ 1437.620737][T25627] tipc: Enabling of bearer rejected, already enabled [ 1437.973056][T25650] syzkaller0: entered promiscuous mode [ 1437.990331][T25650] syzkaller0: entered allmulticast mode [ 1438.243237][T25662] netlink: 'syz.2.17150': attribute type 1 has an invalid length. [ 1438.251610][T25662] netlink: 'syz.2.17150': attribute type 1 has an invalid length. [ 1438.386240][T25669] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1438.509265][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1438.907068][T25698] netem: invalid attributes len -24 [ 1438.914457][T25698] netem: change failed [ 1438.949882][T25704] netlink: 'syz.1.17170': attribute type 1 has an invalid length. [ 1439.043497][T25704] bond6: entered promiscuous mode [ 1439.068216][T25704] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1439.176494][T25717] netlink: 'syz.3.17173': attribute type 1 has an invalid length. [ 1439.292155][T25717] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1439.573697][T25727] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1439.621410][T25727] bond4 (unregistering): Released all slaves [ 1439.669611][T25731] FAULT_INJECTION: forcing a failure. [ 1439.669611][T25731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.729136][T25731] CPU: 0 UID: 0 PID: 25731 Comm: syz.3.17179 Not tainted syzkaller #0 PREEMPT(full) [ 1439.729163][T25731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1439.729174][T25731] Call Trace: [ 1439.729182][T25731] [ 1439.729189][T25731] dump_stack_lvl+0xe8/0x150 [ 1439.729218][T25731] should_fail_ex+0x412/0x560 [ 1439.729248][T25731] _copy_from_user+0x2d/0xb0 [ 1439.729273][T25731] kstrtouint_from_user+0xd6/0x180 [ 1439.729298][T25731] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1439.729326][T25731] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1439.729359][T25731] proc_fail_nth_write+0x8e/0x210 [ 1439.729384][T25731] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1439.729413][T25731] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1439.729437][T25731] vfs_write+0x29a/0xb90 [ 1439.729462][T25731] ? __pfx_vfs_write+0x10/0x10 [ 1439.729480][T25731] ? __fget_files+0x2a/0x420 [ 1439.729509][T25731] ? __fget_files+0x3a0/0x420 [ 1439.729529][T25731] ? __fget_files+0x2a/0x420 [ 1439.729560][T25731] ksys_write+0x150/0x270 [ 1439.729579][T25731] ? __pfx_ksys_write+0x10/0x10 [ 1439.729603][T25731] do_syscall_64+0x14d/0xf80 [ 1439.729627][T25731] ? trace_irq_disable+0x3b/0x150 [ 1439.729649][T25731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.729666][T25731] ? clear_bhb_loop+0x40/0x90 [ 1439.729685][T25731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.729701][T25731] RIP: 0033:0x7f259375cece [ 1439.729717][T25731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1439.729730][T25731] RSP: 002b:00007f2594623fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1439.729746][T25731] RAX: ffffffffffffffda RBX: 00007f25946246c0 RCX: 00007f259375cece [ 1439.729758][T25731] RDX: 0000000000000001 RSI: 00007f25946240a0 RDI: 0000000000000006 [ 1439.729768][T25731] RBP: 00007f2594624090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.729778][T25731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1439.729788][T25731] R13: 00007f2593a16038 R14: 00007f2593a15fa0 R15: 00007ffe34c71fe8 [ 1439.729816][T25731] [ 1440.158440][T25762] netlink: 'syz.2.17187': attribute type 6 has an invalid length. [ 1440.207926][ T29] audit: type=1107 audit(1771604254.440:17): pid=25763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='N º7‡õ=Û84\$ÓÕŽ@´{‡€6' [ 1440.428412][T25776] netlink: 'syz.3.17191': attribute type 8 has an invalid length. [ 1440.450646][T25779] FAULT_INJECTION: forcing a failure. [ 1440.450646][T25779] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.466960][T25776] __nla_validate_parse: 3 callbacks suppressed [ 1440.466977][T25776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17191'. [ 1440.499099][T25779] CPU: 1 UID: 0 PID: 25779 Comm: syz.2.17193 Not tainted syzkaller #0 PREEMPT(full) [ 1440.499124][T25779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1440.499136][T25779] Call Trace: [ 1440.499143][T25779] [ 1440.499150][T25779] dump_stack_lvl+0xe8/0x150 [ 1440.499179][T25779] should_fail_ex+0x412/0x560 [ 1440.499205][T25779] should_failslab+0xa8/0x100 [ 1440.499225][T25779] ? skb_clone+0x212/0x3a0 [ 1440.499249][T25779] kmem_cache_alloc_noprof+0x87/0x650 [ 1440.499274][T25779] ? __netlink_lookup+0xc6/0x8b0 [ 1440.499302][T25779] skb_clone+0x212/0x3a0 [ 1440.499329][T25779] __netlink_deliver_tap+0x404/0x850 [ 1440.499362][T25779] ? netlink_deliver_tap+0x2e/0x1b0 [ 1440.499383][T25779] netlink_deliver_tap+0x19c/0x1b0 [ 1440.499404][T25779] netlink_unicast+0x7e3/0x9b0 [ 1440.499431][T25779] ? __pfx_netlink_unicast+0x10/0x10 [ 1440.499451][T25779] ? netlink_sendmsg+0x650/0xb40 [ 1440.499469][T25779] ? skb_put+0x11b/0x210 [ 1440.499495][T25779] netlink_sendmsg+0x813/0xb40 [ 1440.499524][T25779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.499549][T25779] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1440.499571][T25779] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1440.499591][T25779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1440.499609][T25779] ____sys_sendmsg+0xa68/0xad0 [ 1440.499632][T25779] ? __lock_acquire+0x6b5/0x2cf0 [ 1440.499662][T25779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1440.499694][T25779] ? import_iovec+0x73/0xa0 [ 1440.499728][T25779] ___sys_sendmsg+0x2a5/0x360 [ 1440.499758][T25779] ? __pfx____sys_sendmsg+0x10/0x10 [ 1440.499787][T25779] ? kstrtouint+0x6e/0xe0 [ 1440.499831][T25779] ? __fget_files+0x2a/0x420 [ 1440.499853][T25779] ? __fget_files+0x3a0/0x420 [ 1440.499886][T25779] __sys_sendmmsg+0x27c/0x4e0 [ 1440.499914][T25779] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1440.499936][T25779] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1440.499987][T25779] ? ksys_write+0x242/0x270 [ 1440.500007][T25779] ? __pfx_ksys_write+0x10/0x10 [ 1440.500032][T25779] __x64_sys_sendmmsg+0xa0/0xc0 [ 1440.500058][T25779] do_syscall_64+0x14d/0xf80 [ 1440.500081][T25779] ? trace_irq_disable+0x3b/0x150 [ 1440.500108][T25779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.500124][T25779] ? clear_bhb_loop+0x40/0x90 [ 1440.500143][T25779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.500160][T25779] RIP: 0033:0x7f61dd99c629 [ 1440.500177][T25779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.500191][T25779] RSP: 002b:00007f61de926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1440.500209][T25779] RAX: ffffffffffffffda RBX: 00007f61ddc15fa0 RCX: 00007f61dd99c629 [ 1440.500222][T25779] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1440.500233][T25779] RBP: 00007f61de926090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.500244][T25779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.500254][T25779] R13: 00007f61ddc16038 R14: 00007f61ddc15fa0 R15: 00007ffd572dbb68 [ 1440.500281][T25779] [ 1440.835200][T25776] bond0: entered promiscuous mode [ 1440.841255][T25776] bond_slave_0: entered promiscuous mode [ 1440.847244][T25776] bond_slave_1: entered promiscuous mode [ 1440.890857][T25776] gretap0: entered promiscuous mode [ 1440.963229][T25776] bond0: left promiscuous mode [ 1440.981351][T25776] bond_slave_0: left promiscuous mode [ 1440.987453][T25776] bond_slave_1: left promiscuous mode [ 1441.012701][T25776] gretap0: left promiscuous mode [ 1441.257383][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17197'. [ 1441.283572][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17197'. [ 1441.350997][T25802] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1441.435848][T25806] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17201'. [ 1441.571399][T25814] netlink: 24 bytes leftover after parsing attributes in process `syz.4.17205'. [ 1441.725077][T25822] FAULT_INJECTION: forcing a failure. [ 1441.725077][T25822] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.725880][T25826] netlink: 'syz.1.17209': attribute type 1 has an invalid length. [ 1441.738488][T25822] CPU: 1 UID: 0 PID: 25822 Comm: syz.4.17208 Not tainted syzkaller #0 PREEMPT(full) [ 1441.738515][T25822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1441.738525][T25822] Call Trace: [ 1441.738533][T25822] [ 1441.738542][T25822] dump_stack_lvl+0xe8/0x150 [ 1441.738569][T25822] should_fail_ex+0x412/0x560 [ 1441.738594][T25822] should_failslab+0xa8/0x100 [ 1441.738614][T25822] ? fdb_create+0x1a2/0x13d0 [ 1441.738635][T25822] kmem_cache_alloc_noprof+0x87/0x650 [ 1441.738675][T25822] fdb_create+0x1a2/0x13d0 [ 1441.738701][T25822] ? rcu_read_lock_any_held+0x33/0x90 [ 1441.738733][T25822] ? br_fdb_find+0x82/0x210 [ 1441.738760][T25822] ? __pfx_fdb_create+0x10/0x10 [ 1441.738783][T25822] ? br_fdb_find+0x82/0x210 [ 1441.738806][T25822] ? br_fdb_find+0x82/0x210 [ 1441.738834][T25822] fdb_add_local+0x128/0x250 [ 1441.738857][T25822] ? br_fdb_add_local+0x2a/0x60 [ 1441.738883][T25822] br_fdb_add_local+0x3a/0x60 [ 1441.738913][T25822] br_vlan_add+0x837/0x1080 [ 1441.738946][T25822] br_vlan_info+0x1be/0x470 [ 1441.738973][T25822] ? __pfx_br_vlan_info+0x10/0x10 [ 1441.738995][T25822] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.739027][T25822] br_process_vlan_info+0x315/0x8b0 [ 1441.739060][T25822] ? __pfx_br_process_vlan_info+0x10/0x10 [ 1441.739094][T25822] br_vlan_rtm_process+0xd2d/0x1230 [ 1441.739114][T25822] ? trace_contention_end+0x3d/0x150 [ 1441.739156][T25822] ? __pfx_br_vlan_rtm_process+0x10/0x10 [ 1441.739199][T25822] ? __pfx_br_vlan_rtm_process+0x10/0x10 [ 1441.739218][T25822] rtnetlink_rcv_msg+0x77e/0xbe0 [ 1441.739243][T25822] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1441.739263][T25822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1441.739281][T25822] ? ref_tracker_free+0x693/0x840 [ 1441.739301][T25822] ? __copy_skb_header+0xa3/0x4a0 [ 1441.739325][T25822] ? __pfx_ref_tracker_free+0x10/0x10 [ 1441.739354][T25822] netlink_rcv_skb+0x232/0x4b0 [ 1441.739374][T25822] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1441.739392][T25822] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1441.739420][T25822] ? netlink_deliver_tap+0x2e/0x1b0 [ 1441.739446][T25822] netlink_unicast+0x80f/0x9b0 [ 1441.739473][T25822] ? __pfx_netlink_unicast+0x10/0x10 [ 1441.739493][T25822] ? netlink_sendmsg+0x650/0xb40 [ 1441.739510][T25822] ? skb_put+0x11b/0x210 [ 1441.739534][T25822] netlink_sendmsg+0x813/0xb40 [ 1441.739563][T25822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.739586][T25822] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1441.739608][T25822] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1441.739628][T25822] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1441.739646][T25822] ____sys_sendmsg+0xa68/0xad0 [ 1441.739675][T25822] ? __lock_acquire+0x6b5/0x2cf0 [ 1441.739702][T25822] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1441.739734][T25822] ? import_iovec+0x73/0xa0 [ 1441.739760][T25822] ___sys_sendmsg+0x2a5/0x360 [ 1441.739789][T25822] ? __pfx____sys_sendmsg+0x10/0x10 [ 1441.739817][T25822] ? kstrtouint+0x6e/0xe0 [ 1441.739860][T25822] ? __fget_files+0x2a/0x420 [ 1441.739883][T25822] ? __fget_files+0x3a0/0x420 [ 1441.739914][T25822] __sys_sendmmsg+0x27c/0x4e0 [ 1441.739943][T25822] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1441.739963][T25822] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1441.740012][T25822] ? ksys_write+0x242/0x270 [ 1441.740032][T25822] ? __pfx_ksys_write+0x10/0x10 [ 1441.740056][T25822] __x64_sys_sendmmsg+0xa0/0xc0 [ 1441.740082][T25822] do_syscall_64+0x14d/0xf80 [ 1441.740104][T25822] ? trace_irq_disable+0x3b/0x150 [ 1441.740126][T25822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.740143][T25822] ? clear_bhb_loop+0x40/0x90 [ 1441.740164][T25822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.740181][T25822] RIP: 0033:0x7fef95b9c629 [ 1441.740199][T25822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.740213][T25822] RSP: 002b:00007fef9697b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1441.740232][T25822] RAX: ffffffffffffffda RBX: 00007fef95e15fa0 RCX: 00007fef95b9c629 [ 1441.740245][T25822] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1441.740256][T25822] RBP: 00007fef9697b090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.740267][T25822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1441.740277][T25822] R13: 00007fef95e16038 R14: 00007fef95e15fa0 R15: 00007ffe809764c8 [ 1441.740305][T25822] [ 1441.762849][T25822] bridge0: failed to insert local address into bridge forwarding table [ 1441.828317][T25827] netlink: 'syz.3.17207': attribute type 7 has an invalid length. [ 1442.316397][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17211'. [ 1442.351715][T25826] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1442.360158][T25838] netlink: 'syz.2.17210': attribute type 3 has an invalid length. [ 1442.379155][T25836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17211'. [ 1442.421815][T25828] syz_tun: entered promiscuous mode [ 1442.444344][T25828] macvtap1: entered promiscuous mode [ 1442.476049][T25828] syz_tun: left promiscuous mode [ 1442.486729][T25842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17212'. [ 1442.774831][T25848] netlink: 52 bytes leftover after parsing attributes in process `syz.4.17214'. [ 1442.777091][T25497] IPVS: starting estimator thread 0... [ 1442.849969][T25852] IPVS: set_ctl: invalid protocol: 22 172.20.20.187:20001 [ 1442.969567][T25853] IPVS: using max 36 ests per chain, 86400 per kthread [ 1443.121598][T25864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17219'. [ 1443.383159][T25870] syzkaller1: entered promiscuous mode [ 1443.385061][T25872] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1443.388754][T25870] syzkaller1: entered allmulticast mode [ 1443.430047][T25870] netlink: 'syz.1.17221': attribute type 1 has an invalid length. [ 1443.827168][T25881] netlink: 'syz.1.17224': attribute type 3 has an invalid length. [ 1443.839282][T25883] netlink: 'syz.4.17225': attribute type 1 has an invalid length. [ 1443.867205][T25883] netlink: 'syz.4.17225': attribute type 1 has an invalid length. [ 1444.242425][T25902] netlink: 'syz.0.17230': attribute type 8 has an invalid length. [ 1444.295018][T25902] bond0: entered promiscuous mode [ 1444.325173][T25902] bond_slave_0: entered promiscuous mode [ 1444.364467][T25902] bond_slave_1: entered promiscuous mode [ 1444.381016][T25902] gretap0: entered promiscuous mode [ 1444.398006][T25902] bond0: left promiscuous mode [ 1444.406324][T25902] bond_slave_0: left promiscuous mode [ 1444.414848][T25902] bond_slave_1: left promiscuous mode [ 1444.458464][T25902] gretap0: left promiscuous mode [ 1444.945766][T25932] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1444.973365][T25932] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1444.989423][T25936] netlink: 'syz.4.17241': attribute type 2 has an invalid length. [ 1445.037578][T25936] netlink: 'syz.4.17241': attribute type 1 has an invalid length. [ 1445.214328][T25940] mac80211_hwsim hwsim103 syzkaller0: entered promiscuous mode [ 1445.236364][T25940] mac80211_hwsim hwsim103 syzkaller0: entered allmulticast mode [ 1445.264891][T25940] tipc: Resetting bearer [ 1445.542968][T25965] x_tables: duplicate underflow at hook 3 [ 1445.662780][T25968] __nla_validate_parse: 9 callbacks suppressed [ 1445.662799][T25968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17252'. [ 1445.862223][T23686] tipc: Resetting bearer [ 1446.020379][T25995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.071215][T25995] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1446.208626][T26002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.17262'. [ 1446.359900][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1446.425720][T26005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17263'. [ 1446.634608][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.676059][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.699975][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.722204][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.743760][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.766376][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.784128][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.808500][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.848756][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1446.856346][T26014] xt_hashlimit: max too large, truncated to 1048576 [ 1447.006734][T26031] netlink: 'syz.3.17271': attribute type 3 has an invalid length. [ 1447.026626][T26032] tipc: Resetting bearer [ 1447.037067][T26035] FAULT_INJECTION: forcing a failure. [ 1447.037067][T26035] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.064438][T26035] CPU: 0 UID: 0 PID: 26035 Comm: syz.4.17274 Not tainted syzkaller #0 PREEMPT(full) [ 1447.064462][T26035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1447.064472][T26035] Call Trace: [ 1447.064479][T26035] [ 1447.064486][T26035] dump_stack_lvl+0xe8/0x150 [ 1447.064512][T26035] should_fail_ex+0x412/0x560 [ 1447.064533][T26035] should_failslab+0xa8/0x100 [ 1447.064551][T26035] __kmalloc_cache_noprof+0x88/0x660 [ 1447.064567][T26035] ? sctp_add_bind_addr+0x8c/0x370 [ 1447.064588][T26035] sctp_add_bind_addr+0x8c/0x370 [ 1447.064608][T26035] sctp_copy_local_addr_list+0x314/0x4f0 [ 1447.064627][T26035] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1447.064644][T26035] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1447.064663][T26035] ? sctp_v4_is_any+0x35/0x60 [ 1447.064679][T26035] ? sctp_copy_one_addr+0x93/0x360 [ 1447.064697][T26035] sctp_bind_addr_copy+0xb3/0x3c0 [ 1447.064714][T26035] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1447.064731][T26035] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1447.064752][T26035] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1447.064771][T26035] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1447.064790][T26035] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1447.064808][T26035] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1447.064826][T26035] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1447.064842][T26035] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1447.064865][T26035] sctp_sendmsg+0x1528/0x2c10 [ 1447.064894][T26035] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1447.064911][T26035] ? aa_sk_perm+0x15a/0x960 [ 1447.064927][T26035] ? aa_sk_perm+0x82d/0x960 [ 1447.064947][T26035] ? __pfx_aa_sk_perm+0x10/0x10 [ 1447.064964][T26035] ? sock_rps_record_flow+0x19/0x400 [ 1447.064985][T26035] ? inet_sendmsg+0x2f4/0x370 [ 1447.065003][T26035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1447.065027][T26035] ____sys_sendmsg+0x894/0xad0 [ 1447.065054][T26035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1447.065079][T26035] ? import_iovec+0x73/0xa0 [ 1447.065100][T26035] ___sys_sendmsg+0x2a5/0x360 [ 1447.065122][T26035] ? __pfx____sys_sendmsg+0x10/0x10 [ 1447.065171][T26035] ? __fget_files+0x2a/0x420 [ 1447.065188][T26035] ? __fget_files+0x3a0/0x420 [ 1447.065214][T26035] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1447.065234][T26035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1447.065260][T26035] ? __pfx_ksys_write+0x10/0x10 [ 1447.065284][T26035] do_syscall_64+0x14d/0xf80 [ 1447.065302][T26035] ? trace_irq_disable+0x3b/0x150 [ 1447.065320][T26035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.065334][T26035] ? clear_bhb_loop+0x40/0x90 [ 1447.065351][T26035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.065364][T26035] RIP: 0033:0x7fef95b9c629 [ 1447.065379][T26035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1447.065391][T26035] RSP: 002b:00007fef9697b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1447.065406][T26035] RAX: ffffffffffffffda RBX: 00007fef95e15fa0 RCX: 00007fef95b9c629 [ 1447.065416][T26035] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1447.065425][T26035] RBP: 00007fef9697b090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.065434][T26035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1447.065442][T26035] R13: 00007fef95e16038 R14: 00007fef95e15fa0 R15: 00007ffe809764c8 [ 1447.065465][T26035] [ 1447.606487][T26042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17276'. [ 1447.691516][T26047] netlink: 'syz.4.17277': attribute type 1 has an invalid length. [ 1447.700403][T26047] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17277'. [ 1447.752384][T26047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17277'. [ 1447.821437][T26047] netlink: 'syz.4.17277': attribute type 2 has an invalid length. [ 1447.874566][ T5826] Bluetooth: hci5: command tx timeout [ 1448.042698][T26057] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17280'. [ 1448.249904][T26067] syzkaller0: entered promiscuous mode [ 1448.258283][T26069] FAULT_INJECTION: forcing a failure. [ 1448.258283][T26069] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.277403][T26067] syzkaller0: entered allmulticast mode [ 1448.303339][T26069] CPU: 0 UID: 0 PID: 26069 Comm: syz.1.17287 Not tainted syzkaller #0 PREEMPT(full) [ 1448.303365][T26069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1448.303376][T26069] Call Trace: [ 1448.303384][T26069] [ 1448.303392][T26069] dump_stack_lvl+0xe8/0x150 [ 1448.303422][T26069] should_fail_ex+0x412/0x560 [ 1448.303449][T26069] should_failslab+0xa8/0x100 [ 1448.303472][T26069] __kmalloc_cache_noprof+0x88/0x660 [ 1448.303493][T26069] ? sctp_add_bind_addr+0x8c/0x370 [ 1448.303520][T26069] sctp_add_bind_addr+0x8c/0x370 [ 1448.303546][T26069] sctp_copy_local_addr_list+0x314/0x4f0 [ 1448.303573][T26069] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 1448.303594][T26069] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1448.303621][T26069] ? sctp_v4_is_any+0x35/0x60 [ 1448.303641][T26069] ? sctp_copy_one_addr+0x93/0x360 [ 1448.303666][T26069] sctp_bind_addr_copy+0xb3/0x3c0 [ 1448.303688][T26069] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1448.303711][T26069] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1448.303740][T26069] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1448.303766][T26069] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1448.303791][T26069] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1448.303814][T26069] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1448.303839][T26069] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1448.303859][T26069] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1448.303889][T26069] sctp_sendmsg+0x1528/0x2c10 [ 1448.303929][T26069] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1448.303951][T26069] ? aa_sk_perm+0x15a/0x960 [ 1448.303972][T26069] ? aa_sk_perm+0x82d/0x960 [ 1448.304000][T26069] ? __pfx_aa_sk_perm+0x10/0x10 [ 1448.304023][T26069] ? sock_rps_record_flow+0x19/0x400 [ 1448.304051][T26069] ? inet_sendmsg+0x2f4/0x370 [ 1448.304074][T26069] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1448.304097][T26069] ____sys_sendmsg+0x894/0xad0 [ 1448.304130][T26069] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1448.304164][T26069] ? import_iovec+0x73/0xa0 [ 1448.304192][T26069] ___sys_sendmsg+0x2a5/0x360 [ 1448.304229][T26069] ? __pfx____sys_sendmsg+0x10/0x10 [ 1448.304290][T26069] ? __fget_files+0x2a/0x420 [ 1448.304313][T26069] ? __fget_files+0x3a0/0x420 [ 1448.304346][T26069] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1448.304374][T26069] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1448.304409][T26069] ? __pfx_ksys_write+0x10/0x10 [ 1448.304439][T26069] do_syscall_64+0x14d/0xf80 [ 1448.304463][T26069] ? trace_irq_disable+0x3b/0x150 [ 1448.304487][T26069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.304505][T26069] ? clear_bhb_loop+0x40/0x90 [ 1448.304528][T26069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.304545][T26069] RIP: 0033:0x7fbb47f9c629 [ 1448.304564][T26069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.304579][T26069] RSP: 002b:00007fbb48ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1448.304598][T26069] RAX: ffffffffffffffda RBX: 00007fbb48215fa0 RCX: 00007fbb47f9c629 [ 1448.304612][T26069] RDX: 00000000000080d1 RSI: 0000200000000140 RDI: 0000000000000004 [ 1448.304624][T26069] RBP: 00007fbb48ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 1448.304635][T26069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1448.304646][T26069] R13: 00007fbb48216038 R14: 00007fbb48215fa0 R15: 00007fff77cdd778 [ 1448.304678][T26069] [ 1448.685163][T26079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17288'. [ 1448.700298][T26076] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17289'. [ 1448.720814][T26079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17288'. [ 1448.752227][T26074] bond8: entered promiscuous mode [ 1448.784397][T26074] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1449.117918][T26084] bond8: (slave bridge5): making interface the new active one [ 1449.139199][T26084] bridge5: entered promiscuous mode [ 1449.145713][T26084] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 1449.342093][T26101] validate_nla: 3 callbacks suppressed [ 1449.342121][T26101] netlink: 'syz.3.17294': attribute type 8 has an invalid length. [ 1449.466694][T26101] bond0: entered promiscuous mode [ 1449.473281][T26101] bond_slave_0: entered promiscuous mode [ 1449.495072][T26101] bond_slave_1: entered promiscuous mode [ 1449.516003][T26101] gretap0: entered promiscuous mode [ 1449.536813][T26101] bond0: left promiscuous mode [ 1449.566259][T26101] bond_slave_0: left promiscuous mode [ 1449.572850][T26101] bond_slave_1: left promiscuous mode [ 1449.598661][T26101] gretap0: left promiscuous mode [ 1449.644546][T26107] tipc: Enabled bearer , priority 10 [ 1449.685055][T26120] openvswitch: netlink: Flow key attr not present in new flow. [ 1449.795682][T26124] nbd: must specify an index to disconnect [ 1450.443151][T26162] syz_tun: entered allmulticast mode [ 1450.545142][T26162] dvmrp8: entered allmulticast mode [ 1450.553342][T26170] sctp: [Deprecated]: syz.2.17314 (pid 26170) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1450.553342][T26170] Use struct sctp_sack_info instead [ 1450.717608][T26163] syz_tun: left allmulticast mode [ 1450.759063][T25497] tipc: Node number set to 1104500784 [ 1450.787194][T26182] __nla_validate_parse: 11 callbacks suppressed [ 1450.787218][T26182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17319'. [ 1450.842261][T26182] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17319'. [ 1451.088313][T26193] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1451.182124][T26202] netlink: 44 bytes leftover after parsing attributes in process `syz.2.17324'. [ 1451.434472][T26215] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17328'. [ 1451.478856][T26213] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17329'. [ 1451.664034][T26219] netlink: 9 bytes leftover after parsing attributes in process `syz.0.17330'. [ 1451.769183][T26228] netlink: 'syz.2.17335': attribute type 4 has an invalid length. [ 1451.779380][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17334'. [ 1451.785167][T26227] netlink: 'syz.2.17335': attribute type 4 has an invalid length. [ 1451.788857][T26225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17334'. [ 1451.819244][T26228] netlink: 17 bytes leftover after parsing attributes in process `syz.2.17335'. [ 1451.831352][T26227] netlink: 17 bytes leftover after parsing attributes in process `syz.2.17335'. [ 1451.937031][ T29] audit: type=1804 audit(1771604266.170:18): pid=26236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.17336" name="/newroot/421/cgroup.controllers" dev="tmpfs" ino=2142 res=1 errno=0 [ 1452.032535][ T29] audit: type=1800 audit(1771604266.170:19): pid=26236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17336" name="cgroup.controllers" dev="tmpfs" ino=2142 res=0 errno=0 [ 1452.297122][T26255] team0: Port device team_slave_0 removed [ 1452.493551][T26270] tipc: Enabling of bearer rejected, already enabled [ 1452.863030][T26290] bond2: option mode: unable to set because the bond device has slaves [ 1452.887856][T26294] netlink: 'syz.4.17358': attribute type 3 has an invalid length. [ 1453.093464][T26303] syzkaller0: entered promiscuous mode [ 1453.111105][T26303] syzkaller0: entered allmulticast mode [ 1453.371044][T26319] netlink: 'syz.2.17366': attribute type 1 has an invalid length. [ 1453.404075][T26319] netlink: 'syz.2.17366': attribute type 1 has an invalid length. [ 1453.582868][T26324] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 1453.624827][T26329] netlink: 'syz.3.17370': attribute type 3 has an invalid length. [ 1453.641888][T26330] tipc: Enabling of bearer rejected, already enabled [ 1453.676904][T26330] tipc: Resetting bearer [ 1453.716592][T26330] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1453.851203][T26330] tipc: Resetting bearer [ 1453.975275][ T5934] IPVS: starting estimator thread 0... [ 1454.082387][T26346] IPVS: using max 37 ests per chain, 88800 per kthread [ 1454.160449][T26357] netlink: 'syz.3.17382': attribute type 29 has an invalid length. [ 1454.200560][T26357] netlink: 'syz.3.17382': attribute type 29 has an invalid length. [ 1454.262005][T26357] netdevsim netdevsim3 netdevsim0: IPsec offload requires 128 bit authentication [ 1454.286131][T26354] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1454.361247][T26366] wireguard0: entered promiscuous mode [ 1454.406313][T26366] wireguard0: entered allmulticast mode [ 1454.451669][T26366] team0: Device wireguard0 is of different type [ 1454.693855][T26374] bond7 (unregistering): Released all slaves [ 1455.069170][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1455.316584][T26412] bond7: option arp_all_targets: invalid value (18446744073709551613) [ 1455.335785][T26412] bond7 (unregistering): Released all slaves [ 1456.162112][T26464] __nla_validate_parse: 38 callbacks suppressed [ 1456.162132][T26464] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17414'. [ 1456.251358][T26467] 8021q: VLANs not supported on ip_vti0 [ 1456.310472][T26469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17416'. [ 1456.367008][T26469] macsec1: entered promiscuous mode [ 1456.373360][T26469] bridge0: entered promiscuous mode [ 1456.409910][T26469] macsec1: entered allmulticast mode [ 1456.430081][T26469] bridge0: port 3(macsec1) entered blocking state [ 1456.458747][T26469] bridge0: port 3(macsec1) entered disabled state [ 1456.486862][T26469] bridge0: left promiscuous mode [ 1456.553163][T26478] netlink: 7 bytes leftover after parsing attributes in process `syz.1.17417'. [ 1456.573725][T26458] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17412'. [ 1456.710048][T26482] netlink: 108 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1456.757492][T26490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17420'. [ 1456.907576][T26493] openvswitch: netlink: IP tunnel dst address not specified [ 1457.051201][T26504] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1457.104411][T26504] team0: Port device batadv1 added [ 1457.162440][T26504] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1457.198308][T26504] team0: Port device batadv2 added [ 1457.242005][T26504] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 1457.252879][T26504] team0: Port device batadv3 added [ 1457.307193][T26504] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 1457.316518][T26518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17432'. [ 1457.341078][T26504] team0: Port device batadv4 added [ 1457.372712][T26504] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 1457.403704][T26504] team0: Port device batadv5 added [ 1457.424523][T26504] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 1457.433674][T26504] team0: Port device batadv6 added [ 1457.449422][T26522] syzkaller0: entered promiscuous mode [ 1457.455061][T26522] syzkaller0: entered allmulticast mode [ 1457.489534][T26504] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 1457.504394][T26504] team0: Port device batadv7 added [ 1457.544488][T26504] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 1457.559395][T26504] team0: Port device batadv8 added [ 1457.569711][T26529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17436'. [ 1457.635303][T26521] syzkaller1: entered promiscuous mode [ 1457.649729][T26521] syzkaller1: entered allmulticast mode [ 1457.665485][T26504] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 1457.687253][T26504] team0: Port device batadv9 added [ 1457.794703][T26504] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 1457.826406][T26504] team0: Port device batadv10 added [ 1458.081810][T26554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.091105][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.116377][T26553] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17441'. [ 1458.160895][T26558] netlink: 'syz.2.17443': attribute type 30 has an invalid length. [ 1458.180819][T26554] xt_connbytes: Forcing CT accounting to be enabled [ 1458.229164][T26562] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17443'. [ 1458.250048][T26562] netlink: 'syz.2.17443': attribute type 12 has an invalid length. [ 1458.269498][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.281070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1458.537558][T26575] netlink: 'syz.0.17449': attribute type 1 has an invalid length. [ 1458.906903][T26598] bond6 (unregistering): Released all slaves [ 1459.145941][T26614] netlink: 'syz.3.17458': attribute type 3 has an invalid length. [ 1459.511932][T26635] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1460.000339][T26668] netlink: 'syz.2.17474': attribute type 1 has an invalid length. [ 1460.226391][T26668] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1461.348011][T26739] __nla_validate_parse: 7 callbacks suppressed [ 1461.348030][T26739] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.17494'. [ 1461.417976][T26741] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17493'. [ 1461.960741][T26763] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1462.090275][T26773] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17503'. [ 1462.192414][T26783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17507'. [ 1462.478648][T26783] netlink: 'syz.4.17507': attribute type 3 has an invalid length. [ 1462.599754][T26791] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.17508'. [ 1462.622871][T26789] mac80211_hwsim hwsim103 syzkaller0: left promiscuous mode [ 1462.667882][T26789] mac80211_hwsim hwsim103 syzkaller0: left allmulticast mode [ 1462.695379][T26796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17510'. [ 1462.705603][T26789] tipc: Resetting bearer [ 1463.004973][T26812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17514'. [ 1463.056329][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17515'. [ 1463.113966][T26814] netlink: 224 bytes leftover after parsing attributes in process `syz.2.17515'. [ 1463.123481][T26814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17515'. [ 1463.145251][T26825] netlink: 'syz.4.17519': attribute type 1 has an invalid length. [ 1463.192843][T26824] [ 1463.195219][T26824] ====================================================== [ 1463.202344][T26824] WARNING: possible circular locking dependency detected [ 1463.209390][T26824] syzkaller #0 Not tainted [ 1463.213794][T26824] ------------------------------------------------------ [ 1463.220805][T26824] syz.1.17518/26824 is trying to acquire lock: [ 1463.227027][T26824] ffffffff8fd47a58 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1463.236371][T26824] [ 1463.236371][T26824] but task is already holding lock: [ 1463.243726][T26824] ffff888037316870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1463.253129][T26824] [ 1463.253129][T26824] which lock already depends on the new lock. [ 1463.253129][T26824] [ 1463.263527][T26824] [ 1463.263527][T26824] the existing dependency chain (in reverse order) is: [ 1463.272532][T26824] [ 1463.272532][T26824] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1463.280523][T26824] _raw_spin_lock_bh+0x36/0x50 [ 1463.285806][T26824] nr_rt_device_down+0x153/0x860 [ 1463.291261][T26824] nr_device_event+0x137/0x150 [ 1463.296549][T26824] notifier_call_chain+0x1be/0x400 [ 1463.302439][T26824] __dev_notify_flags+0x16d/0x310 [ 1463.307983][T26824] netif_change_flags+0xe8/0x1a0 [ 1463.313434][T26824] dev_change_flags+0x130/0x260 [ 1463.318804][T26824] dev_ioctl+0x7b4/0x1150 [ 1463.323649][T26824] sock_do_ioctl+0x23e/0x320 [ 1463.328748][T26824] sock_ioctl+0x5c6/0x7f0 [ 1463.333586][T26824] __se_sys_ioctl+0xfc/0x170 [ 1463.338685][T26824] do_syscall_64+0x14d/0xf80 [ 1463.343791][T26824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.350197][T26824] [ 1463.350197][T26824] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1463.358012][T26824] _raw_spin_lock_bh+0x36/0x50 [ 1463.363295][T26824] nr_rt_device_down+0xbe/0x860 [ 1463.368660][T26824] nr_device_event+0x137/0x150 [ 1463.373937][T26824] notifier_call_chain+0x1be/0x400 [ 1463.379566][T26824] __dev_notify_flags+0x16d/0x310 [ 1463.385105][T26824] netif_change_flags+0xe8/0x1a0 [ 1463.390555][T26824] dev_change_flags+0x130/0x260 [ 1463.395919][T26824] dev_ioctl+0x7b4/0x1150 [ 1463.400758][T26824] sock_do_ioctl+0x23e/0x320 [ 1463.405858][T26824] sock_ioctl+0x5c6/0x7f0 [ 1463.410696][T26824] __se_sys_ioctl+0xfc/0x170 [ 1463.415793][T26824] do_syscall_64+0x14d/0xf80 [ 1463.420931][T26824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.427447][T26824] [ 1463.427447][T26824] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1463.435351][T26824] __lock_acquire+0x15a5/0x2cf0 [ 1463.440727][T26824] lock_acquire+0xf0/0x2e0 [ 1463.445659][T26824] _raw_spin_lock_bh+0x36/0x50 [ 1463.450939][T26824] nr_remove_neigh+0x25/0xe0 [ 1463.456038][T26824] nr_add_node+0x1e41/0x2630 [ 1463.461141][T26824] nr_rt_ioctl+0xe59/0xf90 [ 1463.466073][T26824] sock_do_ioctl+0x101/0x320 [ 1463.471186][T26824] sock_ioctl+0x5c6/0x7f0 [ 1463.476026][T26824] __se_sys_ioctl+0xfc/0x170 [ 1463.481125][T26824] do_syscall_64+0x14d/0xf80 [ 1463.486236][T26824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.492638][T26824] [ 1463.492638][T26824] other info that might help us debug this: [ 1463.492638][T26824] [ 1463.502854][T26824] Chain exists of: [ 1463.502854][T26824] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1463.502854][T26824] [ 1463.516669][T26824] Possible unsafe locking scenario: [ 1463.516669][T26824] [ 1463.524108][T26824] CPU0 CPU1 [ 1463.529463][T26824] ---- ---- [ 1463.534819][T26824] lock(&nr_node->node_lock); [ 1463.539570][T26824] lock(nr_node_list_lock); [ 1463.546666][T26824] lock(&nr_node->node_lock); [ 1463.553940][T26824] lock(nr_neigh_list_lock); [ 1463.558610][T26824] [ 1463.558610][T26824] *** DEADLOCK *** [ 1463.558610][T26824] [ 1463.566741][T26824] 1 lock held by syz.1.17518/26824: [ 1463.571929][T26824] #0: ffff888037316870 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1463.581763][T26824] [ 1463.581763][T26824] stack backtrace: [ 1463.587635][T26824] CPU: 0 UID: 0 PID: 26824 Comm: syz.1.17518 Not tainted syzkaller #0 PREEMPT(full) [ 1463.587654][T26824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1463.587665][T26824] Call Trace: [ 1463.587673][T26824] [ 1463.587681][T26824] dump_stack_lvl+0xe8/0x150 [ 1463.587705][T26824] print_circular_bug+0x2e1/0x300 [ 1463.587730][T26824] check_noncircular+0x12e/0x150 [ 1463.587755][T26824] __lock_acquire+0x15a5/0x2cf0 [ 1463.587782][T26824] lock_acquire+0xf0/0x2e0 [ 1463.587800][T26824] ? nr_remove_neigh+0x25/0xe0 [ 1463.587817][T26824] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1463.587833][T26824] ? nr_remove_neigh+0x25/0xe0 [ 1463.587847][T26824] _raw_spin_lock_bh+0x36/0x50 [ 1463.587867][T26824] ? nr_remove_neigh+0x25/0xe0 [ 1463.587881][T26824] nr_remove_neigh+0x25/0xe0 [ 1463.587896][T26824] nr_add_node+0x1e41/0x2630 [ 1463.587921][T26824] ? dev_get_by_name+0x21/0x200 [ 1463.587935][T26824] ? dev_get_by_name+0x21/0x200 [ 1463.587948][T26824] ? nr_call_to_digi+0x136/0x1b0 [ 1463.587971][T26824] nr_rt_ioctl+0xe59/0xf90 [ 1463.587997][T26824] ? kasan_quarantine_put+0xbb/0x1f0 [ 1463.588012][T26824] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1463.588037][T26824] ? apparmor_capable+0x137/0x1a0 [ 1463.588061][T26824] ? capable+0x88/0xe0 [ 1463.588081][T26824] ? nr_ioctl+0x1b1/0x3b0 [ 1463.588101][T26824] sock_do_ioctl+0x101/0x320 [ 1463.588117][T26824] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1463.588132][T26824] ? do_futex+0x395/0x420 [ 1463.588156][T26824] sock_ioctl+0x5c6/0x7f0 [ 1463.588171][T26824] ? __pfx_sock_ioctl+0x10/0x10 [ 1463.588185][T26824] ? __fget_files+0x2a/0x420 [ 1463.588206][T26824] ? __fget_files+0x3a0/0x420 [ 1463.588225][T26824] ? __fget_files+0x2a/0x420 [ 1463.588246][T26824] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1463.588264][T26824] ? __pfx_sock_ioctl+0x10/0x10 [ 1463.588278][T26824] __se_sys_ioctl+0xfc/0x170 [ 1463.588295][T26824] do_syscall_64+0x14d/0xf80 [ 1463.588317][T26824] ? trace_irq_disable+0x3b/0x150 [ 1463.588338][T26824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.588353][T26824] ? clear_bhb_loop+0x40/0x90 [ 1463.588369][T26824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.588385][T26824] RIP: 0033:0x7fbb47f9c629 [ 1463.588399][T26824] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.588414][T26824] RSP: 002b:00007fbb48ef0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.588435][T26824] RAX: ffffffffffffffda RBX: 00007fbb48215fa0 RCX: 00007fbb47f9c629 [ 1463.588446][T26824] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000007 [ 1463.588457][T26824] RBP: 00007fbb48032b39 R08: 0000000000000000 R09: 0000000000000000 [ 1463.588467][T26824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.588476][T26824] R13: 00007fbb48216038 R14: 00007fbb48215fa0 R15: 00007fff77cdd778 [ 1463.588494][T26824] [ 1463.909666][T26828] mac80211_hwsim hwsim103 syzkaller0: entered promiscuous mode [ 1463.927593][T26828] mac80211_hwsim hwsim103 syzkaller0: entered allmulticast mode [ 1463.937312][T26828] tipc: Resetting bearer [ 1464.189113][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1471.229186][ T5826] Bluetooth: hci2: command 0x0401 tx timeout [ 1471.345234][ T8037] lec:lec_start_xmit: lec0:No lecd attached