last executing test programs: 3.728894072s ago: executing program 2 (id=5448): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)={0x28, r0, 0x1, 0xffffffff, 0x0, {0x1e}, [@ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x28}}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x1, 0x70bd29, 0x25dfdbfc}, 0x14}}, 0x20000000) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xec}]}, 0x10) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000180)={r9, 0x1, 0x6, 0x1}, &(0x7f00000001c0)=0x10) r10 = socket$inet(0x2, 0x4000000000000001, 0x0) unshare(0x22020600) setsockopt$inet_tcp_int(r10, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) getsockname$packet(r6, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) setsockopt$inet_pktinfo(r6, 0x0, 0x8, &(0x7f00000000c0)={r11, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1, 0xa0a, 0x458}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0x4}}]}}]}, 0x40}}, 0x24000000) r12 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r12, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x70bd28, 0x0, {0x6, 0x0, 0x8100, r4, {0xc3}, {0x5}, {0xe, 0xffe0}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x8, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) recvmmsg(r13, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000012000101000000000000000000000000000000000000000004000000000000000300"/56, @ANYRES32=0x0, @ANYBLOB="00000000fd2c07dae8147f02522f27ba"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) bind$packet(r3, &(0x7f0000000040)={0x11, 0x1, r4, 0x1, 0x9}, 0x14) 2.871660852s ago: executing program 3 (id=5455): r0 = socket(0x6, 0x3, 0x5558) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r2, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x2}, 0x4) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000080)={'pim6reg1\x00', 0x80000000}) (async) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'dvmrp0\x00'}}, 0x1e) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x422241, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000140)) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f0000000180)={0x12, "963b2b5915858b159ec362cf6928b81676d28a72b8c737b13233459c6b57f65b1e4d32beb4556099bc326697333b9676d5538463ee9247bfaf52b74ffda55343d7635e7c6fa2efe0d7ee1f5da424d37d3a723bcf443e86605fa28b638fe7d6cf63941dc959ece3441a434dcef7f41c8cee42d60b0634f6c6e07d507a84f332eb"}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000240)={'geneve1\x00', 0x6cef}) tee(r0, r0, 0x3, 0xd) r5 = socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f0000000280)=@null) (async) socket$isdn(0x22, 0x3, 0x26) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000500)={{r3, &(0x7f00000002c0)='\xaa\xaa\xaa\xaa\xaa', 0x10000, &(0x7f0000000300)={@align=0xa, {0xff, 0xd, 0x5, 0x3ff}}, 0x8, &(0x7f0000000340)={@_ha_fsid}, &(0x7f0000000380)=0x5}, 0x1, &(0x7f00000004c0)=[{0x3, 0x9d9, &(0x7f00000003c0)='#\x00', &(0x7f0000000400)="3096d6487e156fe494904c4876c1b28b5aec3da15114276bb5c573c7b769b07e48362b0f1a29bfb4403ca480d5d3b857d315895c492de67d5ba70e7c012a15188085b4ae6b79688d30543894336f2db7907c20170b24eab7202290c5e6fbab2a674021b770c62431024c09c7abeb07d42bd620e8db5b7f803357718b47b0ab2ad34e4f1b5bf56d1453b0cfb5378933b27242669d7971c2", 0x97, 0x30}]}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r7, 0x40309410, &(0x7f0000000580)={0x5, 0x2, 0x1, 0x0, 0x3, [0x2, 0x7, 0x4, 0x6]}) (async) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r7, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000005c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000000680)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0x78, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) setsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f00000008c0)={@loopback, @multicast1, r10}, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000940)={'ip6erspan0\x00', &(0x7f0000000900)=@ethtool_rxfh_indir={0x38, 0x2, [0x8, 0x5]}}) (async) ioctl$F2FS_IOC_GET_FEATURES(r5, 0x8004f50c, &(0x7f0000000980)) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8b) (async) ioctl$XFS_IOC_ERROR_INJECTION(r6, 0x40085874, &(0x7f00000009c0)={r4, 0x4}) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r0, 0x80705864, &(0x7f0000000a00)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r7, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000a80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0], 0x0, 0x5f, &(0x7f0000000b40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) (async) ppoll(&(0x7f0000000d80)=[{r9, 0x8400}, {r9, 0x1000}, {r5, 0x60}, {r8, 0x1085}, {r6, 0x81}, {r2}], 0x6, &(0x7f0000000dc0)={0x77359400}, &(0x7f0000000e00)={[0x7]}, 0x8) 2.515996825s ago: executing program 0 (id=5456): unshare(0x62040200) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000480)=@assoc_value={r6, 0x5}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000680)={r6, 0x1000, "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"}, &(0x7f0000000280)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r7, 0xcf}, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r7, 0x7fffffff}, &(0x7f0000000240)=0x8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0xa0, r9, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x1}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SSIDS={0x6c, 0x2d, 0x0, 0x1, [{0xb, 0x0, @random="250e8aefc3c223"}, {0x5, 0x0, @random='2'}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}, {0xa, 0x0, @default_ibss_ssid}]}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x8}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r10, 0x84, 0x7b, &(0x7f0000000000), 0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)={'a', ' *:* ', 'wm\x00'}, 0x9) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) 2.498723341s ago: executing program 2 (id=5457): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x8000, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000000)=0x8000, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000280)='.', 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48091) (async) sendmsg$inet(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x48091) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @dev}, &(0x7f0000000080)=0xc) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@multicast2, @dev, 0x0}, &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, r6}, 0x14) (async) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x1}, r6}, 0x14) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @mcast2, 0x3}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) sendmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x4004) 2.446452007s ago: executing program 3 (id=5458): socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4040044) (async) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001500010027bd70000000000002380000", @ANYRES32=r1, @ANYBLOB="140003008465746830000000000000000000000008000100"], 0x34}}, 0x0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r4 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r4, &(0x7f0000003f40)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="1c", 0x1}], 0x1, &(0x7f0000000200)=[@init={0x18, 0x84, 0x0, {0xc71f, 0xfff, 0x8, 0xc4}}], 0x18, 0x48060}], 0x1, 0x200000d0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, 0x0, &(0x7f0000000100)) r5 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r5, 0xfffffffffffffffe, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000006800010002000000fcffdf7f00000000000000000c0002000100"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x84000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd67, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000300}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800090300000000fd0600000a00000000000000040004000800010001000000"], 0x24}}, 0x0) 2.334880348s ago: executing program 3 (id=5460): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x0, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0xff, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) r2 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0xfdef}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000004a40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000000c0)=""/21, 0x15}], 0x1, &(0x7f0000001740)=""/107, 0x6b}, 0x8}], 0x1, 0x20, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x28, 0x26, 0xa01, 0xfffffffc, 0x0, {0xd}, [@typed={0x11, 0x5e, 0x0, 0x0, @binary="5a907b02448c79c7572371ae9b"}]}, 0x28}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x138, 0x168, 0x0, 0x138, 0xa, 0x238, 0x250, 0x250, 0x238, 0x250, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x138, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0x5}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x0, 0x80, 0x5}}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x1d}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) readv(r5, &(0x7f0000000440)=[{&(0x7f0000000240)=""/92, 0x5c}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f00000003c0)=""/72, 0x48}, {&(0x7f0000002440)=""/4096, 0x1000}], 0x4) r6 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f00)={'veth0_to_batadv\x00', &(0x7f0000000180)=@ethtool_perm_addr={0x4b, 0x1b, "4372071e8426138c0100fd245c1497c85538300000000200000037"}}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000096b803b88fdd042a2db30810", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r1, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) connect(r3, &(0x7f0000000880)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, 0x80) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 2.115537156s ago: executing program 2 (id=5462): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000000)="5aa64227", 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a0001000000000000000000022020", @ANYRES32=0x0, @ANYRES16=r3], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000040)={@dev={0xac, 0x14, 0x14, 0x23}, @private=0xa010101, @private=0xa010101}, 0xc) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xd9, 0xf1ffffff, 0x1}, 0x80, 0x0, 0x0, 0x0, 0x0, 0xf, 0x2, 0x0, 0x0, 0x0, {0x0, 0x0, 0xd6}}}}]}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 1.905219147s ago: executing program 4 (id=5464): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000640)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT], 0xb) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000200850000005b000000851000000200000085100000010000009500000000000000950000000000000018100000", @ANYRES32=r1, @ANYBLOB="0000000000000000cfb8941118150000", @ANYRES32=r1, @ANYBLOB="04f600000000"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x1e00, 0xa}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000100), r1) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000300)) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, {0x2, 0x7}, {0xffff, 0xffff}, {0x6}}}, 0x24}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095", @ANYRESDEC=r1, @ANYBLOB="07d5d38cf1788cd7915799bec5b3665e348af1bff3438b88105a0e6a83ff7e37b4435b84addbeb05493d382e533dcab7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r8, r10, 0x25, 0x2, @void}, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r11, 0x0, 0x3, &(0x7f0000000000)=0xfffffffc, 0x4) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x3, 0x5, &(0x7f0000001c80)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000e00000095"], &(0x7f0000000200)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x0, 0xe, 0x0, &(0x7f0000000100)="1ab9547ed36adbe9abc89b6f5bec", 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) setsockopt$inet_int(r11, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002c40)=ANY=[@ANYBLOB="d4160000400007012bbd7000fedbdf25027c00001800c28014000100fc010000000000000000000000000001a81609"], 0x16d4}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000140)={'xfrm0\x00', 0x0}) sendmmsg$inet(r11, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r14, @local, @loopback}}}], 0x20}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x2f, 0x80, 0x2, 0x42e7, 0xb, @dev={0xfe, 0x80, '\x00', 0x27}, @private1, 0x20, 0x784f, 0x7fff, 0x7}}) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000400)={@dev, @empty}, &(0x7f0000000440)=0xc) 1.694479103s ago: executing program 1 (id=5465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.692190837s ago: executing program 2 (id=5466): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2580000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035006d6163"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9b5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90501b0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc5867dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eafeffffffffffffff000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99a40b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23eb8c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee36cdad078fc88d17cbde37a2270f90a60afe8548d4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd10459e2f2e267f82bafd5b4c7b481ea5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={r2, 0x1}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0x7ffe, 0xffffffff, 0xfffffffd, 0x1}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000496000/0x2000)=nil, 0x2000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f00004f1000/0x3000)=nil, 0x3000, 0x2000006, 0x12, r4, 0x913e0000) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) shutdown(r5, 0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) mmap(&(0x7f00005d1000/0xb000)=nil, 0xb000, 0x0, 0x11, r6, 0x1000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r3, 0x5431000) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x8001, 'syz0\x00'}) 1.691766739s ago: executing program 4 (id=5467): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r1, 0x4010744d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000002000010027bd7000ffdbdf250a00004000000007060000000c0014"], 0x30}, 0x1, 0x0, 0x0, 0x24048860}, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xbf}, @exit], &(0x7f00000000c0)='GPL\x00', 0xb, 0x0, 0x0, 0x41000, 0x13}, 0x94) 1.553700745s ago: executing program 2 (id=5468): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2d, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0xff, 0x2, 0x87a04cc, 0x1, 0x10, 0xff, 0x5}}, {0xe, 0x2, [0xf337, 0x7f, 0x0, 0x7, 0x0]}}, {{0x1c, 0x1, {0x4, 0x1f, 0x0, 0x8, 0x2, 0x8, 0x8, 0x7}}, {0x12, 0x2, [0xfc00, 0x6, 0x37, 0x10, 0x5, 0x8, 0xfa1]}}, {{0x1c, 0x1, {0x4, 0xb9, 0x8, 0x1, 0x1, 0x200, 0x1, 0x6}}, {0x10, 0x2, [0x5, 0xfffb, 0x54, 0x6b8, 0x0, 0x4]}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.467539207s ago: executing program 4 (id=5469): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x28, 0x4) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b", 0x4}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001a00010000000000fbdb5f250a808000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_USERDATA={0x53, 0xd, 0x1, 0x0, "48a2517ab52f2c4edb2484172c3c52166a7523511bf4994798ea0adabb2c532ff1fcb4398d17e4e9b06440b58f21a24e10ca34e9a6e2f58f40d82301570744093aac24851b85b1576b7d7a5f0185ca"}]}, @NFT_MSG_NEWRULE={0xdc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x41}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x28, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000400)="a6c68f1b", 0x4}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r1}, 0x18) (async) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c0000001a00010000000000fbdb5f250a808000ff"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x20000004) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xb}}, [@NFT_MSG_DELSET={0x78, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x4}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_USERDATA={0x53, 0xd, 0x1, 0x0, "48a2517ab52f2c4edb2484172c3c52166a7523511bf4994798ea0adabb2c532ff1fcb4398d17e4e9b06440b58f21a24e10ca34e9a6e2f58f40d82301570744093aac24851b85b1576b7d7a5f0185ca"}]}, @NFT_MSG_NEWRULE={0xdc, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xa8, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}, {0x54, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MASQ_REG_PROTO_MIN={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_MASQ_FLAGS={0x8}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_MASQ_REG_PROTO_MAX={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x21}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x41}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) 1.360828315s ago: executing program 0 (id=5470): socket$inet6(0xa, 0x3, 0x5) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$netlink(0x10, 0x3, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x48, r3, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x8}]]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, 0x0, 0x10, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb0, 0x17}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_FLAGS={0x24, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHENTICATED={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1091}, 0x8000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0x65, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, {[@rr={0x7, 0x3, 0x1d}]}}, {0x4e26, 0x4e20, 0x4d, 0x0, @opaque="4cb32c17d9b24e7d2a25ab043110260ac0676ea92412bcd66247c2da783677ae6c8728e7f0ff42c4a414f9063664d204e4084e7aff0b2cd2b3d6269485315bba8415e606e8"}}}, 0x73) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x8, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0xb, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x1, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x808, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x4, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000010000000000000060018200000", @ANYRES32=r6, @ANYBLOB="0000000007000000c30009400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0xc, 0xea, &(0x7f0000000fc0)=""/234}, 0x94) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r7], 0x20}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0xf8, 0x1a, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x4003, 0x0, 0x3, 0x3}, {@in6=@mcast2, 0x0, 0x33}, @in6=@empty, {0x0, 0x0, 0x0, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x4}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa, 0x1}, [@extra_flags={0x8, 0x23, 0xfffffff8}]}, 0xf8}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.306361155s ago: executing program 3 (id=5471): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x437, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x308c3, 0xc4a48b7f26be2e0b}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast2}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x2}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x8, 0x4, 0x4, 0x8, 0x1014}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) unshare(0x26020480) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r3, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x503, 0x70bd2a, 0xc, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x201a0}}, 0x20}}, 0x800) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x28, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "b007d624d339fa9d22cb6de324ff596f"}]}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x11, 0xffffffffffffffff, 0x8871b000) 1.248655016s ago: executing program 4 (id=5472): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="180000002e0000000000000082000000180100002020702500000000002020207b1af8ff00000000ada100000000000007010000f8ffffffb702000008000000b703000007000000850000004300000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010da931c35a9dff87ee9090253018becce00010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31e20000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4$netrom(r2, &(0x7f0000000180)={{0x3, @netrom}, [@rose, @null, @rose, @bcast, @remote, @bcast, @null, @bcast]}, &(0x7f0000000200)=0x48, 0x80800) ioctl$sock_netrom_SIOCDELRT(r2, 0x8918, 0x0) 1.205908821s ago: executing program 2 (id=5473): unshare(0x6020480) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4000010, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000001000), &(0x7f0000001040)=0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'pim6reg0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2}, 0x94) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$IP_VS_SO_GET_SERVICES(r4, 0x0, 0x482, &(0x7f0000001100)=""/132, &(0x7f00000011c0)=0x84) sendmsg$IPSET_CMD_RENAME(r5, 0x0, 0x900) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000000)={{r4}, "8331d39e7f0639ba490bdca3e6ac4202f557ff47c34689b3d548030b373b5797303c19e07e9d5c637f2bc3620847ce409fcf8542319070c7daa248f84c3e9015012f520a4ba99fb47f1d88a8c930083c7c5eefcc9b51412f0b3b83ad256ff99228e9b32d027d821833c9808df1e0c47e78823b79f9be58c6c11b164667148ef753b11644d3ee7f9f8469ba2726949ec6ac9b6616853c63d72c1b7a4ff05705f853741e1e8eb0b580d6f74bf8ffed210384cda43c539c64ac44805ff523cbd1e54cb27e97aec1cdc462ea012c4953da45ff4971b02ac5f3e89314ca87b92e58adb3ac9e5ede8fad4f8950858b57ebb955f01018c3af1e750ba42583a10753e42c36439df6801afe1bc6568d0802c4984c656505579a9c14a257f6e5416d8d287628f7391d1e7d57678fd3fa763eab2cd5a9a692ef2b688a8c94801e98fcba5274fcd86891b5b70240baf3ece1089da26c0dd558e2a8ec20a735bfc5e272a666a29fc01cded0ff92659673242d0b2bb25bf53d7189a9bda09ff7df1fdd8133d1c5daa61957c37fab7abb7fe0276d22dbbe4fa4c25d1b929fbcd0349f66c20eeb694396ebe73b8064092b073a2f5be2d96dc48322b8a84cb5cdf39e74136fdbc3fbe103ee7a2a6668c683ae4c68fb5ceb9ddf7eb7502d9be3305367b2fe27b4b50b3dded9700db570ecb8b9af01268cfe1dc269d8be4b07e1e71d3f60d314abacc5bb0942f35fa920aa280e51b0ca4ace9158a7b682fb84ed74dd8661f64b064e0e3ffeb03ccd43eacbe58301a1a34ad41b697a7c0f73e9d9f7642b71b0398c60fa54cc6fea5893525e589e3aa0845101c279f97961cc0fc1b01ba6cd28193cd1259de174d8e9e2a769b31263ab8eb4a95bf99e07df245ab268ad997e5c6962c3e3980f1df026052020cbbb4127244f73709460e84ae73447861c04782c65fd37dceda2ae0d06bb461ed958dd6997cb4a67c7336286387db06f45afb4609e5475025778b124352b64e897732c65f334593b7e1c7ce839832d2ae199f4b37d8a533f4ef6c28a3ead3a689a0e8fd992c57b61a6a3f55ead708d9d0732099f592b845292e188676e0188b8de68385fc136ae30925f469690c456652a8804747c9b2f1a43d73f6444c9484f5fdeb2aa49264c4d57b0aeda01c12c7ddfb00abacffcf887c708d85b9f20386247e9b7c89bf3e1500a6d8f1f08ce9ef684dc4041f3697e380516eff97cca2b8807a9afcfecb289368aa3380f75fe85ff609953d138b62bd15332bb265d7bc2413ca80fbd0796386c892bff4959b192b5a0e9533de277c47048fcf19e01e974017909e580c9076945b2468456fa26627cde9e3b4f0ffd6de927e4113385cbe246e26addc08c51b06b3fc9015ae1d6ca5bc8b650ad98c5f934e297744068e5fde9a9c1c161d55848a2e31153dd1ddd690b9c397552e77e2fbef7928a30df117ab9a442616582329948d5b49a30b324ce7c57537ca73b85318f3481da71fdf88ad91377f000d067390f98fb276cff27fa9bb711ddd95ffe328a2c3021bb9072ade4378fb13146ce19bbf0a0c62463810755a2a7bdcc7348b89d594d61efc82979c705d58c0a8cc1fbd6dfbb99eb7d693f080e689ffbd63ac0c9353bdf06525fc96a82613af71c0cd2954bcf422e0f3673266dad58494968908d38f81658dcab10ea54db89d88fe33a3e69c15ebdadc39a90a84731ffbd9b2d0726261f6e39a290168f424ac904b95867882fc4358d383390e061c646234f34497a5db9286002f6961609dd75fd0c358d94cbe15b74af6b1aee21ed265f0d353645911f5a9864fc436479a30c1d32e5f6f15a18c3ad8f81c06959a300baf734f0c086d8cf5b170d65ef84b970dc94c0afacb06a14f42b236b72072a6d8a23a687065b8566193a8f94aa46eb6f9fda60d92d218fce2c1e0fb516412e0a5ccb20ac9d78073526eb39e6beda077f0222784bfc9fe4f1b31e8ea34f094a09a6bbdc3fae1e20ddb5c5b99ee7c012e9222287187ae316e1c87edda91a8d1b0af314939a9d242ae14e4899ba102575f43c2bb89bfac8171e267ba294c7941d7d410d1c405559bada88d94ba13958171db246d2b8aa5f35946dbea1f0afe31382802f8aac99435521b1507a7039f01ecedc5bbcbd7579a712d9f2b797806a47c0edc27d7e8a8569e345e9b1e523d3a2b72ec853e77dc9e81981fbe0dbe29fc9b20a8b1b0ddb028d9e8e90d6642a461a2f516b6374b9c2e1baa52673d51c40325235d6c9a24720f1d2f9f214cc2d336900c5d3c689995a39a34483462cce1f98d2eece99576bb8526ee0a7d7b4f778a7b03df513f56137a9bb5af56791393b82420433b1adcdd610e1ea3df8a21b3f0a1a70dfcb743ad68b1f04af6170b0c49a72e855adb3499b9fa65375631538ccbe61d80dd0843a64488e62569e3b62cdf1e93cf5c811e95bb8e0489f43a76a549fa93e3de4fbfcee443844c8e15a09d954ed57730f07f38a6688f436292451eada308e53c5d67bdb7165582476e71d913a68366ce8f5b68bd184bee9dd0b720a42d6a42700e63fe84317a7df7a592d54d360525cd0790d9c3821bb1112701d2c69cd6c63f3a33da0381bd6c220b6c5f08c3d7f85b5ddd173ea41bc9cbc8adff9b62f5e6b645d6e287b6682650c02ee1b5ac80efa090b1bb8b4d20741c7aaa6712bb604d3c58ab2837c00fe6267400e9a7862a871e6d47c390605d3675a5715f2ab5ed7c5e35e5d37eb050d0da86baa45ad943e1767d1d0c03ca55a94440bb79b34394c482edad5d86accc5632a795766d61b2df9ba6dfc41996f799b3d5d156a4df30cb541c5b1cd4c6bffd64392b1b45d46651a7c921a1ccbfafdfd67c81b1cc27610df8b89ea0a6b2e07d2e043b16df5ce4421ed63faa6bdc0aef1df860d93867794ee08e2beceaaf8ff607ea5a08f8784e3c0675540fac3ccf0f281b3b2447285a624147bd94331a5e05d02c25331afeafdf60f8de793c1e96b503259a6e4bf69983b432a577986c43373333df526baa3f2dce9eee3d70cc14f334a2fd691d2899162e286d503d135cee81caa4a6f24354220e1a08d3f220b90d4c6928728cac9cd0be5a0975df4ac2c463d77984744e134a0672a7e4f0ae4f721dad69f1346726705a0002b09638129a0c1122a4f6e2207e6a0999327474b739c1722f1ff17131141ef1ba4a6fcf364e12d769898ad5127bd620f9cc2af37a8f7785ed2bbcfce26318fb669a63cd0aa5e6e178cb58eaaccbd92d4258ab1bfa36ae7180f70cfcddc15a627c743341f174c2c4154fe7dc36c5d00f13e76aef2984207e9f94039c5c1c8bb634485330895d14d8a8d0632caf8b62c08053fcb25dc098153ac2d613d3dc2cd8a6959f8190ee13850ebe04cf5d68131fab529fd44ae117fa54738fc5ecbf3c329d727efb3a1c98d7784aaf125e561dcf0230e258d47e05839d7b43c909935c41f40c65bf9cdb18b8c821465494f82e9b714819fb048e9d11c704f77a34c98fed653fab58c490324c8f1f9dc556d7110bbb8e0dc6bc2f14b6783560672f6cd71521d102746addbdd25bd6961bf85f8156b55abaccf5bbf39426944f785160b1cc04687c7bc44516223a47f4f0de58e026076a64b9664ee6a25b3c0efdbf3fa9868ad90577623cee33f7fe68bfcc79682a26961b2aebb54a942aca1f28978ae22b2be8be1aec9dbd5b89e57879ee03d5bd67f0f7f3006fc9a68a74f7d43a983401613716dd3f7bc4d33c1a1fca65f2a25c7312619a60bed6845e37258e1e4de64efc86022fda42cb61f35cebce01e324903239bf4dfa6227d3fbcf72f984afaddb53354b405ea49a2ab6b869e3a87a8c2abb202b0c649000b3170417dfe8592ad40309a45d3237c26c6422af2697f3587e2ad60bb04c09433fb5ac3836eb750f8e6bf8a16aa53de9c95d7a88c4892d76dff923f1bb71a736d654e87332ecb6b98acc94958d8169836d189ae252c267e359a0f516cbede1e270236eaf2b713868f2e69da2775372500947521e3f7c293932c8ff5dbcb123af1d53e97f99d3db6b1264966551690e8cb42db59f31a47dbbdbf746dc28aa5413aa7736d26adcf6ff4c47cbcdf298f7413271e36fa49013c5866a1c431113ddfd55da3906fd8bb0551ed0b654531f3372fbd446035c43ee4cfa2667753ba3fab16b05f6e937ea8da968d8856a389b1f4ad0a46eec1274f7603e3f5ff7a900e6b9d4fd9ccc4dbfc54322b04aa1cbea88250f712bd37547fb68c636a2edff3e4a2216dfe3f89be5d425e5e099d145dce4e0bb8a54be968d093401bf5e4175d8aac18734a1438257e56f6aec5ed38e969a5fff079b3d082b1b423ad2e68f9a1c1e7b4a620015272c424548995c4deb6c203e718fb133f60292442480f4545ea66828d84eb7b93d9c433e6b13cb63b88a6f060ae3f9f567f95522206d2f535b1d5c92a3486d2de0a25639b04463b2906dc0865de27c37b0b3cd2cf6b6ac8524317f99ac6e80d12ee4399a405f6f93a54e0211f55432f8c366e3da8ba4fbd1401859c7adb5f37e9ae7361968e2d48251c951564b408e60d74bc03b0169c0887aa854c5c545ac3326bab8f8d165463d3724d5c9e5ef1d6732405221c64521e5127ac10c834696a9e1b33e3a655c38c2b83209bc2563bbb1fa7f0a64682fafd7dba7f4b8ec7afd4e43363ad487470a9e901a72c5883fae84ec0cd4102a8b175b382ea74d77032f7b156155ef55348733c1d1de7aef7d1136bd1a84c0602e951c99f4af5fe41dc7e81f7b0210a01d225ef99c80218642c77c426b1313278f0586e55fc1455af3572ce21ea2effeb4f2acd4c490b9bb4e3acfe04895bfeab55b3fa0725040a9bc9197a8e91cc013945913d8a69188e0fe8cb04d481d7c634fad2c44d8fd2f65dec3dccc9ed2064f120a5d4a4e950de55355252308930200bfcefd2ca5ecfbcd7212e94dde4b0c82dd27b31161f98737b8b550c33a803f62fda8675105123b941ee61ae2e2a571027c9984f445fdbcd0d949e2fdc0003850dcc16466b2f364b21c5cf39c8818633ced99d862faf2c55d4b671fc33aa66903d74ea3af86c447c3250bfc34b14006c0653ce345b043a6bea2d694b300ca2c15f81276720c03e55ac365bd1c81406ab109ffdae97ed55aea48dc6e7518af13dffe5ea837a45e1766278659d427da7e0f8652942d7fbfc04cf6206f57fd50ddb2e5449cb8f34feb2bbb5351ec329dee493703469bc0b0c1d06af0879a3b2d314107f8a7ba40cf69d798b7ba4c807688803eb355a6b3df08036fd43bc621c0f2637e75656aa6e14856527135d78932535674626f5afd3c3aee39b9d39d1b0b41b32f525bf4910b95f5b889d4350cc4d08ec2814db55327178fc717a981d6cd21260e5de99d5e0d9b72c447e4ca23e9791b255f132dc8093ea5308d243f6cc329cd0d661480c7b0b81b097e8dda7c3377ce5a1475c87540ba26d08c3e3c86e3064bf24a4f6e06ccc6fd455cb857e13b3f784ecadab87bb829590675602c26e5a89a50e1cb82de37b1d5d7972fa4affd265ada8cfeb2aa79e65714ac7266a837f50926e19ab2c4cd36c36c6145c0addcb6124a29166e877e2f584cf2007c60f30e0cee439d3b3b2094ef98530ff2ac5bdd5e7366f2444a7255bc9f04fa255fa3ae0795b598b577f939fb5a8cb64a7911cfb7661b5a39fb609c968112518e6d392d08a1a412d1bb3de5f77fd152bcb9db1ed61c432af28629ec947268d72c527938103beec626a2729ce653a3e44853dd1c43205b9838326bf2eec"}) close(r5) r6 = socket(0x10, 0x4, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000300)='GPL\x00', 0xe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ff}, 0x94) ioctl$int_out(r4, 0x0, &(0x7f0000001080)) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, 0x300) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000100000080000000000000001c6eefa1598b81542f9293664f267b0d2743f6f34b780007911b5787ffbca8894d5a4120503c141b590650bb343da25722c8e02bc370e4ac631bd1a5aff0e923f69a0c416cf9213d5e3d817af766dd01d5929a065c0d3cf41ccf1459889843033191e8770747782a7d1bfb3d8a388b04c560bd857ff3d71219a4c51429a68ffe874b72eb06abb211e936d7f7fc55852f15741f4c8b3e92c4fb2a2d7da46f7f55234ad2f9cbf254b5473f2f91a2850d37788f7e760a00000000000000000000eb9cde2671544ce8907967", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) unshare(0x600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) socket$can_raw(0x1d, 0x3, 0x1) getsockopt$ARPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x0, [0x4, 0x80000000, 0x8800ac5]}, &(0x7f00000003c0)=0x44) unshare(0x20030a80) 1.16019597s ago: executing program 3 (id=5474): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000240)=0xfffffec0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000001000)={0x0, {0x2, 0x4e21, @local}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x25}}, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x3ff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @broadcast}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0xa, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) listen(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) pipe(&(0x7f00000007c0)={0xffffffffffffffff}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) splice(r4, 0x0, r5, 0x0, 0xfffd, 0x9) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001200)={0xe, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0x8, &(0x7f0000001140)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="9028be4d65fff20980da829becb405af1259ce10a0766a1f4c5a0be621cb794d6256eaa8b27a005af74621b9c3d2d08cda4ce1db332b6d3184512c23c1d616c7989dd4aac5028cabe3e30a1136db31ca10a77793e650653b555b3c2ebd649a7a3398a5e1678882", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r7}, 0xc) r8 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r8, 0x0, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x4, 0xd60, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000280], 0x0, &(0x7f0000000180), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0xdd8) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r3, 0x0) syz_emit_ethernet(0x69, &(0x7f0000000000)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0086dd00333a0300000000000000000000000000000000ff0200000000000001040090780000000060a3579e00002c00fe880000000000000000000000000001fe8000000000000000000000000000bb6be2c600000000000000e6e2c5d64bc778ca9524c500113dfcc883077864186cf8f2dac4556eff39cc6278d9b38b716b0db08926e8a6027689adb5134c4cbf5ce13e8501b16f95fb71ca8c0bd95ca6838a74b739f49ae0e5ac1867ed3a3a8ffb89f904f64e618c7158f268b165b6fc7934cfe6f36c5e8027088f7b8a34b412bf82bb87485ab1d71bc2830b5a6eb28d7a11106116217b1427d406f0d059bc47bb4b3005ef3098f18feb33f01d901d102020e18f931b9fa16658c90608188097c54ef2b845ab079c1654054fec707b898baaa46baafd94a0de7be06739e106531b08fd26bd448a915936d3081b8eb4fadfd4d3bc877bec986ed43734ae857da2421cd6add0000000000000"], 0x0) 1.087143691s ago: executing program 4 (id=5475): r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff}, 0x10, 0x800) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000040)) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) unshare(0x20040900) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x2, 0x3906cd54, 0x81, 0x3c, 0xffff, 0xd585, 0xc, 0x8}, &(0x7f00000000c0)={0x3, 0x9, 0x9, 0x3, 0x6, 0x6, 0x8, 0x1}, &(0x7f0000000100)={0x6, 0x4, 0x7800000000000000, 0x8, 0x0, 0x100000000000000, 0x3, 0x42}, &(0x7f0000000180)={r3, r4+60000000}, &(0x7f0000000200)={&(0x7f00000001c0)={[0x6]}, 0x8}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000280)={r2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) r6 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r6, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/3, 0x3}, {&(0x7f0000000300)=""/233, 0xe9}, {&(0x7f0000000400)=""/16, 0x10}], 0x3, 0x10, 0x2477) (async) ioctl$BTRFS_IOC_SCRUB(r6, 0xc400941b, &(0x7f0000000480)={0x0, 0x5}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000880)={r7, "0ed6729b463fc3997b3deb3521c59c64"}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000001900)={'ip6_vti0\x00', &(0x7f0000001880)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x2, 0x1000, 0x6, @mcast2, @loopback, 0x10, 0x80, 0x7f, 0x2c83}}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001940)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa4, '\x00', r8, 0xffffffffffffffff, 0x3, 0x5}, 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000019c0)='cgroup.controllers\x00', 0x0, 0x0) (async) r10 = syz_init_net_socket$ax25(0x3, 0x5, 0x3d) ioctl$BTRFS_IOC_GET_DEV_STATS(r10, 0xc4089434, &(0x7f0000001a00)={r7, 0x3, 0x0, [0x8000, 0x8000, 0x1000, 0x9, 0x4], [0x5, 0xf, 0x3, 0x6221f572, 0x6, 0x3, 0x2, 0x80000001, 0x3, 0x5, 0x100000001, 0xb4b, 0x9, 0x3, 0xffffffffffff67ec, 0x4, 0x5, 0x4fed, 0x3, 0xffffffffffffffff, 0xfff, 0x1, 0x2f31, 0x3, 0xf703, 0x4, 0xd, 0x15, 0xffffffffffffffff, 0x9, 0x4, 0x7f, 0x80, 0x93fb, 0x100, 0x33ea, 0x6, 0x7, 0x8, 0x4, 0x5, 0xffffffffffffffff, 0x6, 0x5, 0x6, 0x1, 0x1, 0x7, 0x0, 0x0, 0x1, 0x9, 0x3, 0x1, 0x6a, 0xca, 0x7, 0xe2d, 0x7, 0x4464, 0x7fffffffffffffff, 0x3, 0xffffffff, 0x5, 0x7f, 0x80000000, 0x0, 0x9, 0x4, 0xf, 0xfffffffffffffffe, 0x7, 0x5, 0x6e, 0xffffffffffffffff, 0x5, 0x2, 0x2, 0x6, 0x9, 0x6, 0xfff, 0x642e552f, 0x4b90, 0x7, 0x8a, 0x8000, 0x7, 0x4, 0x7, 0x3, 0x4, 0x4, 0x6, 0x7, 0x3ac3, 0x9d, 0x70a6dc7b, 0x8, 0xfffffffffffffffb, 0x6, 0x9, 0x8000, 0x2, 0x1, 0x1, 0x1ff, 0x6952, 0xffffffffffffffff, 0x800, 0x8000, 0xffffffffffffffff, 0xffff, 0x7, 0x4, 0x2, 0x3, 0x2fa, 0x9, 0x0, 0x9b]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001e80)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001ec0)={'wpan3\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r11, &(0x7f00000020c0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002080)={&(0x7f0000001f40)={0x114, 0x0, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_SEC_DEVKEY={0xd4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x100}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x20058805) (async) setsockopt$bt_hci_HCI_FILTER(r9, 0x0, 0x2, &(0x7f0000002100)={0x0, [0x0, 0x57], 0x4}, 0x10) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r5, &(0x7f0000002240)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002200)={&(0x7f0000002180)={0x78, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x28}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x563}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x370}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x146}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xc20}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x224}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1255}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1154}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x5f9}]}, 0x78}, 0x1, 0x0, 0x0, 0x2000080}, 0x40001) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) getpeername$packet(r9, &(0x7f0000002280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000022c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000002380)={'syztnl1\x00', &(0x7f0000002300)={'syztnl2\x00', r15, 0x29, 0x40, 0x0, 0xfc1b, 0x4c, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x20, 0x9, 0x80}}) 984.598699ms ago: executing program 4 (id=5476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009200)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="1cd5e48c6b13ad62dbc61f84aa649f9ae9733108095c4225853f451c74d7a56522d4f4254a0e7d1e2dab2a30bfe4849a6f28fafb86566e0a04b10007ebb313d87e", 0x41}], 0x1}}], 0x1, 0x4000841) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f00000004c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r4, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) 972.880581ms ago: executing program 0 (id=5477): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x800000, 0x11, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x4031, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x64, 0x30, 0x871a15abc695fa3d, 0x0, 0x80000, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x8, 0x1, 0x99ac}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) 746.656024ms ago: executing program 1 (id=5478): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r2, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x1, @broadcast}, 0x10) sendto$inet(r2, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) syz_extract_tcp_res(&(0x7f0000000000), 0xffffffba, 0xeb94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x188}}, 0x20000800) listen(r0, 0x28) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x3c, r8, 0x1, 0x70bd2c, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55ebfcb85e78e904}, 0x4) recvmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)=""/8, 0x8}], 0x1}, 0x10022) r9 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r0, &(0x7f00000001c0)={0x4}) shutdown(r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x7}, {0xffff, 0xffff}, {0x6, 0x10}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x32, 0x4) r11 = socket$alg(0x26, 0x5, 0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000140)={0x3ff, 0xfef}) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f00000002c0)="18b18130455a362bbc8c8522def3524d5424fe24d1c4cab25a0942bcff5be7f17d8fc69aee7ee495d657804a70ec23519aae70b6365a86d26c31b344e60c9fe0cf6a99e92268a5c9c65754f5251ad7b9df4fd977e53e458c290801e26267e4547aafc8e75a24b79bdaf96ebc0fb04c04a3b9dc7dd0e3d79d07febe8aa9573b9c58b7daaa30e1ad5358f671b8b6acd226494e91a49d1c8bc1e2321a6a0417e7aeb9501d7ed6d130678d6d5497e6c215a6ffa1b342e3510727a78652d92fa1eebd08ea7592196fbc1205eeb06f30a9419bbeb5c5b51d3c146d1ae0cfcae789d18963fe7a38c12e34a81864966a7b1c", 0xee) 656.337886ms ago: executing program 0 (id=5479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="090000296bb8eaf6685cf300060000000800000008000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000080), 0x8000, r2}, 0x38) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xa, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000500850000008200000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x25, &(0x7f00000002c0)={r3, 0x0, 0x25, 0x12, @val=@tcx={@void, @value=r3}}, 0x1c) r4 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x154, 0x18, 0x1, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6, 0x3, 0x2, 0xff, "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", 0x3, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_CS_XOR={0x8, 0x5, {0x5, 0x21, 0xf5, 0x5}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x5, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x6}}]}, 0x154}, 0x1, 0x0, 0x0, 0x8080}, 0x240440c8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x35, 0x1, 0xfffffefe, 0x0, {0x7, 0x7c}}, 0x14}}, 0x8010) syz_genetlink_get_family_id$SEG6(&(0x7f00000005c0), r7) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[@ANYBLOB="0c01000016000100000000000000000000000000000000000000000000000001ffffffff00000000000000000000000000000000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141400000000000000000000000000000000006c000000ff020000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000ff7f00000c0015005a0735000500000005001b0000000000be5d42b30c67b18c5c17fbbc3c02897e94de6045b9ca6bdf6071aab1d0e68d3eafd16db3e3f248f0f7df0780e3708f2fb13c2e9c5953a92507abb2bc39b133e3e5c29a354fe4bfb5a12bd4074d048d4f946810537363976efdc8adb359d5acd23242e8c89879ddd05a50e2510ba67b4b94ecde2bf6437a95871d02f2e3b0de697c155eef09ded007ee0dc854685033ca380940d98a5c559f96cb735ba1a49a5616"], 0x10c}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000380)={0x29e9c931, 0x4, 0x0, 0x1ff}, 0x10) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xf4, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000340), &(0x7f00000003c0), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f00000006c0)={@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x5f, 0x1, 0xff, 0x100, 0x7, 0x20000, r12}) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000580)={r11, 0x1, 0x6, @random="dc04466aad0e"}, 0x10) 427.147251ms ago: executing program 1 (id=5480): socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000001c0)="8033", 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000006c0)={0x8, {{0x2, 0x0, @multicast1}}}, 0x88) 365.452048ms ago: executing program 0 (id=5481): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000680)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x1c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x900}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{0x6, 0x1, 0xd, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) 312.800692ms ago: executing program 1 (id=5482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) (async) 223.906436ms ago: executing program 3 (id=5483): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2, 0x0, 0xa}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa88a8320081003c0008004500002040000000032f9078ac14140ae05d5d087621"], 0x36) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x4c, r4, 0x100, 0x70bd26, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xfffffffffffe0206}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 223.510484ms ago: executing program 0 (id=5484): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0xfffffffe}]}]}}, &(0x7f0000000f40)=""/4089, 0x2e, 0xff9, 0x1}, 0x28) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x9, 0x0, 0x4, @vifc_lcl_ifindex, @local}, 0x10) r1 = socket$inet6(0xa, 0x6, 0x20001040) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000000)={0x0, 'bond_slave_1\x00', {0x2}, 0xe}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000002c0)={@private2, 0x800, 0x0, 0x53fa9e65deea832f, 0xa, 0xfffd, 0x8001}, 0x20) 99.751788ms ago: executing program 1 (id=5486): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRES64=r0], 0x10}}, 0x40844) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000140000002400128009000100626f6e6400000000140002800500130d0000000008001e"], 0x44}, 0x1, 0x2000000000000000}, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000200)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x10d00, 0xf) 0s ago: executing program 1 (id=5487): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r3, 0xffffffffffffc000) recvmmsg(r2, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001fc0)=""/217, 0xe088}, {&(0x7f00000020c0)=""/16, 0x10}], 0x2}, 0x3b83}], 0x1, 0x20001000, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$rds(r0, 0x0, 0x10) sendmsg$xdp(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000d00)="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", 0x427}], 0x2, 0x0, 0x0, 0x10040000}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f00000000c0), 0x4) kernel console output (not intermixed with test programs): 0 RCX: 00007fdaaed9bf79 [ 468.595217][T20236] RDX: 0000200000000000 RSI: 00000000800448d2 RDI: 0000000000000004 [ 468.595229][T20236] RBP: 00007fdaafc29090 R08: 0000000000000000 R09: 0000000000000000 [ 468.595239][T20236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.595250][T20236] R13: 00007fdaaf016038 R14: 00007fdaaf015fa0 R15: 00007ffdeee34b68 [ 468.595280][T20236] [ 468.595299][T20236] ERROR: Out of memory at tomoyo_realpath_from_path. [ 469.028768][T20251] FAULT_INJECTION: forcing a failure. [ 469.028768][T20251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.047560][T20254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4049'. [ 469.059685][T20255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4049'. [ 469.069075][T20251] CPU: 0 UID: 0 PID: 20251 Comm: syz.1.4047 Not tainted syzkaller #0 PREEMPT(full) [ 469.069099][T20251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.069115][T20251] Call Trace: [ 469.069122][T20251] [ 469.069129][T20251] dump_stack_lvl+0xe8/0x150 [ 469.069154][T20251] should_fail_ex+0x412/0x560 [ 469.069182][T20251] _copy_from_user+0x2d/0xb0 [ 469.069201][T20251] ___sys_recvmsg+0x175/0x590 [ 469.069228][T20251] ? __pfx____sys_recvmsg+0x10/0x10 [ 469.069252][T20251] ? __fget_files+0x2a/0x420 [ 469.069290][T20251] do_recvmmsg+0x334/0x800 [ 469.069318][T20251] ? __pfx_do_recvmmsg+0x10/0x10 [ 469.069349][T20251] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 469.069387][T20251] __x64_sys_recvmmsg+0x198/0x250 [ 469.069418][T20251] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 469.069451][T20251] do_syscall_64+0x14d/0xf80 [ 469.069470][T20251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.069486][T20251] ? trace_irq_disable+0x37/0x100 [ 469.069504][T20251] ? clear_bhb_loop+0x40/0x90 [ 469.069524][T20251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.069541][T20251] RIP: 0033:0x7fdaaed9bf79 [ 469.069558][T20251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.069573][T20251] RSP: 002b:00007fdaafc08028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 469.069591][T20251] RAX: ffffffffffffffda RBX: 00007fdaaf016090 RCX: 00007fdaaed9bf79 [ 469.069603][T20251] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 469.069614][T20251] RBP: 00007fdaafc08090 R08: 0000000000000000 R09: 0000000000000000 [ 469.069625][T20251] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 469.069636][T20251] R13: 00007fdaaf016128 R14: 00007fdaaf016090 R15: 00007ffdeee34b68 [ 469.069664][T20251] [ 469.159989][T20256] netlink: 'syz.0.4048': attribute type 1 has an invalid length. [ 469.272147][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.278058][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.288416][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.321815][T20255] siw: device registration error -23 [ 469.349173][T20256] 8021q: adding VLAN 0 to HW filter on device bond10 [ 469.409009][T20254] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 469.504163][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.523512][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.533099][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.541123][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.550770][T20273] netlink: 65173 bytes leftover after parsing attributes in process `syz.2.4055'. [ 469.566971][T20277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4054'. [ 469.587409][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.623330][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.647629][T20282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4057'. [ 469.657563][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.684620][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.706811][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.715119][T20254] wg1 speed is unknown, defaulting to 1000 [ 469.815393][T20286] lo speed is unknown, defaulting to 1000 [ 469.821693][T20292] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4060'. [ 469.839234][T20285] FAULT_INJECTION: forcing a failure. [ 469.839234][T20285] name failslab, interval 1, probability 0, space 0, times 0 [ 469.857282][T20285] CPU: 1 UID: 0 PID: 20285 Comm: syz.1.4058 Not tainted syzkaller #0 PREEMPT(full) [ 469.857313][T20285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 469.857323][T20285] Call Trace: [ 469.857331][T20285] [ 469.857338][T20285] dump_stack_lvl+0xe8/0x150 [ 469.857363][T20285] should_fail_ex+0x412/0x560 [ 469.857385][T20285] ? sock_alloc_inode+0x28/0xc0 [ 469.857402][T20285] should_failslab+0xa8/0x100 [ 469.857426][T20285] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 469.857451][T20285] ? __pfx_sock_alloc_inode+0x10/0x10 [ 469.857465][T20285] sock_alloc_inode+0x28/0xc0 [ 469.857479][T20285] alloc_inode+0x6a/0x1b0 [ 469.857504][T20285] do_accept+0x13e/0x760 [ 469.857526][T20285] ? __pfx_do_accept+0x10/0x10 [ 469.857561][T20285] __sys_accept4+0x139/0x230 [ 469.857582][T20285] ? __pfx___sys_accept4+0x10/0x10 [ 469.857599][T20285] ? __pfx_ksys_write+0x10/0x10 [ 469.857624][T20285] __x64_sys_accept4+0x9a/0xb0 [ 469.857641][T20285] do_syscall_64+0x14d/0xf80 [ 469.857661][T20285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.857678][T20285] ? trace_irq_disable+0x37/0x100 [ 469.857695][T20285] ? clear_bhb_loop+0x40/0x90 [ 469.857714][T20285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.857732][T20285] RIP: 0033:0x7fdaaed9bf79 [ 469.857747][T20285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.857761][T20285] RSP: 002b:00007fdaafc29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 469.857779][T20285] RAX: ffffffffffffffda RBX: 00007fdaaf015fa0 RCX: 00007fdaaed9bf79 [ 469.857788][T20285] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000005 [ 469.857795][T20285] RBP: 00007fdaafc29090 R08: 0000000000000000 R09: 0000000000000000 [ 469.857801][T20285] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 469.857807][T20285] R13: 00007fdaaf016038 R14: 00007fdaaf015fa0 R15: 00007ffdeee34b68 [ 469.857823][T20285] [ 469.911288][T20290] lo speed is unknown, defaulting to 1000 [ 470.131846][T20286] wg1 speed is unknown, defaulting to 1000 [ 470.365150][T20290] wg1 speed is unknown, defaulting to 1000 [ 470.590974][T20316] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 470.605043][T20316] syzkaller1: linktype set to 778 [ 470.677536][T20316] 8021q: adding VLAN 0 to HW filter on device bond6 [ 470.742895][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4071'. [ 470.807740][T20316] bond_slave_0: entered promiscuous mode [ 470.813979][T20316] bond_slave_1: entered promiscuous mode [ 470.837599][T20316] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.894475][T20316] bond6: (slave macvlan2): Enslaving as an active interface with an up link [ 470.955266][T20330] lo speed is unknown, defaulting to 1000 [ 471.250403][T20343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4075'. [ 471.327526][T20346] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4078'. [ 471.339138][T20346] syzkaller0: entered promiscuous mode [ 471.345343][T20346] syzkaller0: entered allmulticast mode [ 471.355272][T20346] netlink: 'syz.0.4078': attribute type 11 has an invalid length. [ 471.359558][T20330] wg1 speed is unknown, defaulting to 1000 [ 471.364460][T20346] netlink: 'syz.0.4078': attribute type 23 has an invalid length. [ 471.440887][T20347] FAULT_INJECTION: forcing a failure. [ 471.440887][T20347] name failslab, interval 1, probability 0, space 0, times 0 [ 471.455334][T20347] CPU: 0 UID: 0 PID: 20347 Comm: syz.1.4079 Not tainted syzkaller #0 PREEMPT(full) [ 471.455359][T20347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.455370][T20347] Call Trace: [ 471.455377][T20347] [ 471.455385][T20347] dump_stack_lvl+0xe8/0x150 [ 471.455413][T20347] should_fail_ex+0x412/0x560 [ 471.455441][T20347] should_failslab+0xa8/0x100 [ 471.455463][T20347] ? security_inode_alloc+0x39/0x310 [ 471.455485][T20347] kmem_cache_alloc_noprof+0x87/0x650 [ 471.455514][T20347] security_inode_alloc+0x39/0x310 [ 471.455539][T20347] inode_init_always_gfp+0x9ed/0xdc0 [ 471.455569][T20347] ? __pfx_sock_alloc_inode+0x10/0x10 [ 471.455586][T20347] alloc_inode+0x82/0x1b0 [ 471.455610][T20347] do_accept+0x13e/0x760 [ 471.455631][T20347] ? __pfx_do_accept+0x10/0x10 [ 471.455668][T20347] __sys_accept4+0x139/0x230 [ 471.455689][T20347] ? __pfx___sys_accept4+0x10/0x10 [ 471.455707][T20347] ? __pfx_ksys_write+0x10/0x10 [ 471.455734][T20347] __x64_sys_accept4+0x9a/0xb0 [ 471.455755][T20347] do_syscall_64+0x14d/0xf80 [ 471.455776][T20347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.455792][T20347] ? trace_irq_disable+0x37/0x100 [ 471.455811][T20347] ? clear_bhb_loop+0x40/0x90 [ 471.455832][T20347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.455849][T20347] RIP: 0033:0x7fdaaed9bf79 [ 471.455866][T20347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.455880][T20347] RSP: 002b:00007fdaafc29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 471.455899][T20347] RAX: ffffffffffffffda RBX: 00007fdaaf015fa0 RCX: 00007fdaaed9bf79 [ 471.455913][T20347] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000005 [ 471.455925][T20347] RBP: 00007fdaafc29090 R08: 0000000000000000 R09: 0000000000000000 [ 471.455936][T20347] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 471.455947][T20347] R13: 00007fdaaf016038 R14: 00007fdaaf015fa0 R15: 00007ffdeee34b68 [ 471.455977][T20347] [ 471.726722][ T5822] Bluetooth: hci1: command 0x0405 tx timeout [ 471.752013][T20349] lo speed is unknown, defaulting to 1000 [ 471.857700][T20355] netlink: 'syz.2.4081': attribute type 13 has an invalid length. [ 472.191511][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 472.264944][T20367] syz_tun: entered allmulticast mode [ 472.272386][T20365] syz_tun: left allmulticast mode [ 472.277559][T20349] wg1 speed is unknown, defaulting to 1000 [ 473.038638][T20397] lo speed is unknown, defaulting to 1000 [ 473.042226][T20399] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 473.052680][T20400] syzkaller0: entered promiscuous mode [ 473.058174][T20400] syzkaller0: entered allmulticast mode [ 473.066232][T20401] tipc: Started in network mode [ 473.071623][T20401] tipc: Node identity 563835dee348, cluster identity 4711 [ 473.078954][T20401] tipc: Enabled bearer , priority 0 [ 473.096659][T20399] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 473.130224][T20399] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 473.168438][T20399] tipc: Resetting bearer [ 473.208244][T20399] tipc: Disabling bearer [ 473.285204][T20413] xt_CT: You must specify a L4 protocol and not use inversions on it [ 473.557627][T20397] wg1 speed is unknown, defaulting to 1000 [ 473.671238][T20431] netlink: 'syz.1.4103': attribute type 101 has an invalid length. [ 473.679299][T20431] netlink: 'syz.1.4103': attribute type 7 has an invalid length. [ 473.830428][T20435] lo speed is unknown, defaulting to 1000 [ 473.895144][T20438] FAULT_INJECTION: forcing a failure. [ 473.895144][T20438] name failslab, interval 1, probability 0, space 0, times 0 [ 473.908461][T20438] CPU: 1 UID: 0 PID: 20438 Comm: syz.2.4105 Not tainted syzkaller #0 PREEMPT(full) [ 473.908502][T20438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.908516][T20438] Call Trace: [ 473.908526][T20438] [ 473.908537][T20438] dump_stack_lvl+0xe8/0x150 [ 473.908584][T20438] should_fail_ex+0x412/0x560 [ 473.908608][T20438] ? __d_alloc+0x37/0x6f0 [ 473.908627][T20438] should_failslab+0xa8/0x100 [ 473.908651][T20438] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 473.908678][T20438] __d_alloc+0x37/0x6f0 [ 473.908699][T20438] d_alloc_pseudo+0x21/0xc0 [ 473.908720][T20438] alloc_file_pseudo+0xdd/0x240 [ 473.908735][T20438] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 473.908756][T20438] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 473.908771][T20438] ? evm_inode_alloc_security+0x40/0xb0 [ 473.908787][T20438] ? security_inode_alloc+0xd5/0x310 [ 473.908814][T20438] sock_alloc_file+0xb8/0x2e0 [ 473.908835][T20438] do_accept+0x3a0/0x760 [ 473.908853][T20438] ? __pfx_do_accept+0x10/0x10 [ 473.908883][T20438] __sys_accept4+0x139/0x230 [ 473.908898][T20438] ? __pfx___sys_accept4+0x10/0x10 [ 473.908912][T20438] ? __pfx_ksys_write+0x10/0x10 [ 473.908935][T20438] __x64_sys_accept4+0x9a/0xb0 [ 473.908950][T20438] do_syscall_64+0x14d/0xf80 [ 473.908967][T20438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.908979][T20438] ? trace_irq_disable+0x37/0x100 [ 473.908994][T20438] ? clear_bhb_loop+0x40/0x90 [ 473.909010][T20438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.909023][T20438] RIP: 0033:0x7f6395f9bf79 [ 473.909036][T20438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.909047][T20438] RSP: 002b:00007f6396efe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 473.909062][T20438] RAX: ffffffffffffffda RBX: 00007f6396215fa0 RCX: 00007f6395f9bf79 [ 473.909072][T20438] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000005 [ 473.909081][T20438] RBP: 00007f6396efe090 R08: 0000000000000000 R09: 0000000000000000 [ 473.909089][T20438] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 473.909098][T20438] R13: 00007f6396216038 R14: 00007f6396215fa0 R15: 00007ffef5faf5a8 [ 473.909120][T20438] [ 474.254370][T20444] lo speed is unknown, defaulting to 1000 [ 474.793170][T20444] wg1 speed is unknown, defaulting to 1000 [ 474.831015][T20446] __nla_validate_parse: 4 callbacks suppressed [ 474.859637][T20446] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4104'. [ 474.941613][T20435] wg1 speed is unknown, defaulting to 1000 [ 474.957609][T20475] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 475.119872][T20477] IPVS: sed: FWM 3 0x00000003 - no destination available [ 475.127505][ T29] IPVS: starting estimator thread 0... [ 475.234338][T20478] IPVS: using max 34 ests per chain, 81600 per kthread [ 475.333180][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 475.343265][T20484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4117'. [ 475.729403][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4118'. [ 475.776278][T20489] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4118'. [ 475.825444][T20505] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4123'. [ 476.068280][T20511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4121'. [ 476.897340][T20514] geneve2: entered promiscuous mode [ 476.937097][T20514] geneve2: entered allmulticast mode [ 477.246536][T20530] lo speed is unknown, defaulting to 1000 [ 477.335263][T20534] FAULT_INJECTION: forcing a failure. [ 477.335263][T20534] name failslab, interval 1, probability 0, space 0, times 0 [ 477.361523][T20534] CPU: 0 UID: 0 PID: 20534 Comm: syz.3.4131 Not tainted syzkaller #0 PREEMPT(full) [ 477.361548][T20534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 477.361558][T20534] Call Trace: [ 477.361566][T20534] [ 477.361574][T20534] dump_stack_lvl+0xe8/0x150 [ 477.361601][T20534] should_fail_ex+0x412/0x560 [ 477.361627][T20534] should_failslab+0xa8/0x100 [ 477.361649][T20534] ? alloc_empty_file+0x55/0x1d0 [ 477.361664][T20534] kmem_cache_alloc_noprof+0x87/0x650 [ 477.361690][T20534] alloc_empty_file+0x55/0x1d0 [ 477.361704][T20534] alloc_file_pseudo+0x155/0x240 [ 477.361716][T20534] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 477.361735][T20534] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 477.361748][T20534] ? evm_inode_alloc_security+0x40/0xb0 [ 477.361766][T20534] ? security_inode_alloc+0xd5/0x310 [ 477.361807][T20534] sock_alloc_file+0xb8/0x2e0 [ 477.361831][T20534] do_accept+0x3a0/0x760 [ 477.361852][T20534] ? __pfx_do_accept+0x10/0x10 [ 477.361883][T20534] __sys_accept4+0x139/0x230 [ 477.361903][T20534] ? __pfx___sys_accept4+0x10/0x10 [ 477.361918][T20534] ? __pfx_ksys_write+0x10/0x10 [ 477.361945][T20534] __x64_sys_accept4+0x9a/0xb0 [ 477.361964][T20534] do_syscall_64+0x14d/0xf80 [ 477.361984][T20534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.362001][T20534] ? trace_irq_disable+0x37/0x100 [ 477.362016][T20534] ? clear_bhb_loop+0x40/0x90 [ 477.362036][T20534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.362050][T20534] RIP: 0033:0x7f31d6f9bf79 [ 477.362065][T20534] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 477.362079][T20534] RSP: 002b:00007f31d7ef2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 477.362098][T20534] RAX: ffffffffffffffda RBX: 00007f31d7216090 RCX: 00007f31d6f9bf79 [ 477.362111][T20534] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000006 [ 477.362122][T20534] RBP: 00007f31d7ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 477.362132][T20534] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 477.362141][T20534] R13: 00007f31d7216128 R14: 00007f31d7216090 R15: 00007ffd7aaca0d8 [ 477.362169][T20534] [ 477.408980][T20540] IPVS: Error connecting to the multicast addr [ 477.654101][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4134'. [ 477.989689][T20530] wg1 speed is unknown, defaulting to 1000 [ 478.315210][T20576] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4140'. [ 478.369011][T20578] block nbd4: Unsupported socket: should be TCP or UNIX. [ 478.408692][T20576] xt_hashlimit: size too large, truncated to 1048576 [ 478.468228][T20576] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 478.570427][T20583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4143'. [ 478.923244][T20604] netlink: 'syz.1.4151': attribute type 13 has an invalid length. [ 479.018566][T20611] FAULT_INJECTION: forcing a failure. [ 479.018566][T20611] name failslab, interval 1, probability 0, space 0, times 0 [ 479.041251][T20606] lo speed is unknown, defaulting to 1000 [ 479.050445][T20611] CPU: 0 UID: 0 PID: 20611 Comm: syz.4.4149 Not tainted syzkaller #0 PREEMPT(full) [ 479.050472][T20611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 479.050483][T20611] Call Trace: [ 479.050490][T20611] [ 479.050498][T20611] dump_stack_lvl+0xe8/0x150 [ 479.050525][T20611] should_fail_ex+0x412/0x560 [ 479.050554][T20611] should_failslab+0xa8/0x100 [ 479.050577][T20611] ? security_file_alloc+0x34/0x310 [ 479.050596][T20611] kmem_cache_alloc_noprof+0x87/0x650 [ 479.050625][T20611] security_file_alloc+0x34/0x310 [ 479.050647][T20611] init_file+0x90/0x2b0 [ 479.050672][T20611] alloc_empty_file+0x6e/0x1d0 [ 479.050687][T20611] alloc_file_pseudo+0x155/0x240 [ 479.050699][T20611] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 479.050716][T20611] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 479.050727][T20611] ? evm_inode_alloc_security+0x40/0xb0 [ 479.050744][T20611] ? security_inode_alloc+0xd5/0x310 [ 479.050774][T20611] sock_alloc_file+0xb8/0x2e0 [ 479.050799][T20611] do_accept+0x3a0/0x760 [ 479.050821][T20611] ? __pfx_do_accept+0x10/0x10 [ 479.050860][T20611] __sys_accept4+0x139/0x230 [ 479.050881][T20611] ? __pfx___sys_accept4+0x10/0x10 [ 479.050899][T20611] ? __pfx_ksys_write+0x10/0x10 [ 479.050924][T20611] __x64_sys_accept4+0x9a/0xb0 [ 479.050944][T20611] do_syscall_64+0x14d/0xf80 [ 479.050964][T20611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.050980][T20611] ? trace_irq_disable+0x37/0x100 [ 479.050999][T20611] ? clear_bhb_loop+0x40/0x90 [ 479.051019][T20611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.051038][T20611] RIP: 0033:0x7fd24359bf79 [ 479.051053][T20611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.051066][T20611] RSP: 002b:00007fd244417028 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 479.051083][T20611] RAX: ffffffffffffffda RBX: 00007fd243816090 RCX: 00007fd24359bf79 [ 479.051093][T20611] RDX: 0000200000000280 RSI: 0000200000000300 RDI: 0000000000000006 [ 479.051104][T20611] RBP: 00007fd244417090 R08: 0000000000000000 R09: 0000000000000000 [ 479.051114][T20611] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 479.051123][T20611] R13: 00007fd243816128 R14: 00007fd243816090 R15: 00007ffe6e373598 [ 479.051150][T20611] [ 479.378327][T20615] x_tables: ip6_tables: SNPT target: used from hooks FORWARD, but only usable from INPUT/POSTROUTING [ 479.405903][T20615] netdevsim0: mtu less than device minimum [ 479.494552][T20606] wg1 speed is unknown, defaulting to 1000 [ 479.582946][T20621] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 479.605182][T20621] bond1 (unregistering): Released all slaves [ 479.680223][T20634] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 479.715614][T20632] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 479.914024][T20638] netlink: 'syz.0.4160': attribute type 1 has an invalid length. [ 479.930089][T20638] __nla_validate_parse: 5 callbacks suppressed [ 479.930108][T20638] netlink: 248 bytes leftover after parsing attributes in process `syz.0.4160'. [ 479.952190][T20640] Unknown options in mask b7f2 [ 479.966343][T20638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4160'. [ 480.156238][T20650] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4165'. [ 480.219700][T20650] vlan2: entered allmulticast mode [ 480.228315][T20650] erspan0: entered allmulticast mode [ 480.259799][T20655] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 480.370639][T20657] batman_adv: batadv0: Adding interface: geneve4 [ 480.383518][T20657] batman_adv: batadv0: Interface activated: geneve4 [ 480.414179][T12958] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.423235][T12958] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.480328][T12958] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.503474][T12958] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.812935][T20690] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4177'. [ 481.068897][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4184'. [ 481.132816][T20720] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.140199][T20720] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.157199][T20720] bond_slave_0: left promiscuous mode [ 481.164636][T20720] bond_slave_1: left promiscuous mode [ 481.194430][T20720] wg1: left promiscuous mode [ 481.199545][T20720] wg1: left allmulticast mode [ 481.212200][T20720] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 481.261442][T20724] syzkaller0: entered promiscuous mode [ 481.281483][T20724] syzkaller0: entered allmulticast mode [ 481.319285][T20716] bond2: entered promiscuous mode [ 481.446937][T20732] vlan2: entered promiscuous mode [ 481.453036][T20732] batadv0: entered promiscuous mode [ 482.167905][T20767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4194'. [ 483.637276][T20670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 483.811800][T20771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4197'. [ 483.855828][T20771] hsr_slave_1 (unregistering): left promiscuous mode [ 483.899494][T20778] geneve2: entered promiscuous mode [ 483.909062][T20778] geneve2: entered allmulticast mode [ 483.933961][T20776] vlan2: entered promiscuous mode [ 483.954173][T20785] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4201'. [ 483.971921][ T9716] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 483.991906][ T9716] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.028975][T20788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4202'. [ 484.085631][ T9716] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.117273][ T9716] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.226652][T20802] netlink: 'syz.0.4209': attribute type 10 has an invalid length. [ 484.410781][T20819] syzkaller0: entered promiscuous mode [ 484.422483][T20820] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.4213'. [ 484.431889][T20819] syzkaller0: entered allmulticast mode [ 484.496334][T20822] vlan3: entered promiscuous mode [ 484.571962][T20824] lo speed is unknown, defaulting to 1000 [ 484.667543][T20834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.759827][T20834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.771485][T20833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.871818][T20838] bond1: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 484.914593][T20838] bond1 (unregistering): Released all slaves [ 485.089250][T20824] wg1 speed is unknown, defaulting to 1000 [ 485.168950][T20848] __nla_validate_parse: 3 callbacks suppressed [ 485.168968][T20848] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4223'. [ 485.552815][T20862] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4227'. [ 485.696169][T20869] netlink: 240 bytes leftover after parsing attributes in process `syz.0.4228'. [ 485.717203][T20869] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4228'. [ 485.848082][T20881] netlink: 'syz.2.4231': attribute type 10 has an invalid length. [ 485.886537][T20881] veth0_vlan: left promiscuous mode [ 485.899873][T20881] veth0_vlan: entered promiscuous mode [ 485.907902][T20881] team0: Device veth0_vlan failed to register rx_handler [ 486.068424][T20891] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4234'. [ 486.181931][T20900] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4237'. [ 486.221578][T20902] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4239'. [ 486.377638][T20906] netlink: 'syz.4.4241': attribute type 10 has an invalid length. [ 486.408073][T20906] syz_tun: entered promiscuous mode [ 486.447255][T20906] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 486.491848][T20911] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 486.569486][T20908] lo speed is unknown, defaulting to 1000 [ 486.590461][T20920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4245'. [ 486.638179][T20911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4241'. [ 486.948779][T12906] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 486.989005][T12906] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 487.014004][T12906] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 487.026983][T12906] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 487.233415][T20945] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4251'. [ 487.286869][T20943] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 487.324876][T20943] bond3 (unregistering): Released all slaves [ 487.584067][T20908] wg1 speed is unknown, defaulting to 1000 [ 487.905221][T20964] lo speed is unknown, defaulting to 1000 [ 488.316104][T20964] wg1 speed is unknown, defaulting to 1000 [ 488.369235][ T5139] Bluetooth: hci4: command 0x0406 tx timeout [ 488.445353][T20977] lo speed is unknown, defaulting to 1000 [ 488.557228][T20980] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.564506][T20980] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.576765][T20980] bond_slave_0: entered promiscuous mode [ 488.582984][T20980] bond_slave_1: entered promiscuous mode [ 488.613168][T20980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.635373][T20993] xt_socket: unknown flags 0x50 [ 488.644209][T20980] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.662090][T20980] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 489.006469][T20977] wg1 speed is unknown, defaulting to 1000 [ 489.241194][T12958] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.254349][T12958] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.262232][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.592086][T21026] lo: left allmulticast mode [ 489.597009][T21026] tunl0: left allmulticast mode [ 489.602726][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.610586][T21026] gre0: left allmulticast mode [ 489.615671][T21026] gretap0: left allmulticast mode [ 489.620919][T21026] erspan0: left allmulticast mode [ 489.628152][T21026] ip_vti0: left allmulticast mode [ 489.633640][T21026] ip6_vti0: left allmulticast mode [ 489.638984][T21026] sit0: left allmulticast mode [ 489.645791][T21026] ip6tnl0: left allmulticast mode [ 489.662454][T21026] ip6gre0: left allmulticast mode [ 489.672658][T21026] syz_tun: left allmulticast mode [ 489.687350][T21026] ip6gretap0: left allmulticast mode [ 489.697477][T21026] bridge0: left allmulticast mode [ 489.716883][T21026] vcan0: left allmulticast mode [ 489.727147][T21026] bond0: left allmulticast mode [ 489.744009][T21026] bond_slave_0: left allmulticast mode [ 489.757953][T21035] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20004 [ 489.765293][T21026] bond_slave_1: left allmulticast mode [ 489.770781][T21026] dummy0: left allmulticast mode [ 489.796041][T21026] geneve2: left allmulticast mode [ 489.802348][ T24] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 489.830632][ T34] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.848265][ T34] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.912091][ T34] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.927256][T21035] : renamed from bond_slave_0 [ 489.999624][ T34] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.216106][T21060] bond3: option tlb_dynamic_lb: invalid value (5) [ 490.242250][T21060] bond3 (unregistering): Released all slaves [ 490.612253][T21088] __nla_validate_parse: 25 callbacks suppressed [ 490.612274][T21088] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4296'. [ 490.629571][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4293'. [ 490.646850][T21079] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4293'. [ 490.900517][T21098] FAULT_INJECTION: forcing a failure. [ 490.900517][T21098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 490.914284][T21098] CPU: 1 UID: 0 PID: 21098 Comm: syz.2.4299 Not tainted syzkaller #0 PREEMPT(full) [ 490.914308][T21098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 490.914319][T21098] Call Trace: [ 490.914326][T21098] [ 490.914334][T21098] dump_stack_lvl+0xe8/0x150 [ 490.914362][T21098] should_fail_ex+0x412/0x560 [ 490.914391][T21098] _copy_from_user+0x2d/0xb0 [ 490.914410][T21098] ___sys_recvmsg+0x175/0x590 [ 490.914427][T21098] ? __pfx____sys_recvmsg+0x10/0x10 [ 490.914442][T21098] ? __fget_files+0x2a/0x420 [ 490.914468][T21098] do_recvmmsg+0x334/0x800 [ 490.914485][T21098] ? __pfx_do_recvmmsg+0x10/0x10 [ 490.914504][T21098] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 490.914527][T21098] __x64_sys_recvmmsg+0x198/0x250 [ 490.914542][T21098] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 490.914561][T21098] do_syscall_64+0x14d/0xf80 [ 490.914574][T21098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.914583][T21098] ? trace_irq_disable+0x37/0x100 [ 490.914595][T21098] ? clear_bhb_loop+0x40/0x90 [ 490.914609][T21098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.914619][T21098] RIP: 0033:0x7f6395f9bf79 [ 490.914629][T21098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.914638][T21098] RSP: 002b:00007f6396efe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 490.914650][T21098] RAX: ffffffffffffffda RBX: 00007f6396215fa0 RCX: 00007f6395f9bf79 [ 490.914657][T21098] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 490.914664][T21098] RBP: 00007f6396efe090 R08: 0000000000000000 R09: 0000000000000000 [ 490.914670][T21098] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 490.914676][T21098] R13: 00007f6396216038 R14: 00007f6396215fa0 R15: 00007ffef5faf5a8 [ 490.914692][T21098] [ 491.497536][T21112] block nbd4: not configured, cannot reconfigure [ 492.668863][T21108] m1Ie5n: entered promiscuous mode [ 492.680896][ T5139] Bluetooth: hci1: command 0x0405 tx timeout [ 492.736127][T21133] lo speed is unknown, defaulting to 1000 [ 492.868886][T21138] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4305'. [ 492.922340][T21143] netlink: 'syz.3.4308': attribute type 2 has an invalid length. [ 492.942428][T21143] netlink: 'syz.3.4308': attribute type 1 has an invalid length. [ 493.057841][T21151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4311'. [ 493.068504][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'. [ 493.078229][T21148] netlink: 'syz.0.4310': attribute type 12 has an invalid length. [ 493.113759][T21148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4310'. [ 493.113769][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.113807][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.162432][T21148] netlink: 'syz.0.4310': attribute type 12 has an invalid length. [ 493.176206][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.204436][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.386341][T21136] bridge0: left promiscuous mode [ 493.422819][T21136] bridge0: entered promiscuous mode [ 493.438158][T21136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 493.450682][T21136] 8021q: adding VLAN 0 to HW filter on device team0 [ 493.472467][T21136] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 493.516176][T21133] wg1 speed is unknown, defaulting to 1000 [ 493.552166][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 494.229456][T21211] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4325'. [ 494.470773][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4330'. [ 494.578844][T21240] geneve3: entered allmulticast mode [ 494.635938][T21243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 494.687853][T21243] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 494.742527][T21243] erspan1: entered allmulticast mode [ 494.851161][ T5822] Bluetooth: hci1: link tx timeout [ 494.856916][ T5822] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 495.231506][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 495.329597][T21303] sctp: [Deprecated]: syz.2.4343 (pid 21303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.329597][T21303] Use struct sctp_sack_info instead [ 495.461625][T21287] lo speed is unknown, defaulting to 1000 [ 495.523427][T21300] sctp: [Deprecated]: syz.2.4343 (pid 21300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.523427][T21300] Use struct sctp_sack_info instead [ 495.793059][T21287] wg1 speed is unknown, defaulting to 1000 [ 495.871423][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 495.907242][T21320] netlink: 'syz.0.4350': attribute type 1 has an invalid length. [ 495.964231][T21332] netlink: 'syz.0.4350': attribute type 10 has an invalid length. [ 495.980313][T21330] __nla_validate_parse: 6 callbacks suppressed [ 495.980333][T21330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4357'. [ 495.998600][T21330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4357'. [ 496.097148][T21330] batadv1: entered promiscuous mode [ 496.114159][T21330] batadv1: entered allmulticast mode [ 496.129191][T21330] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 496.263938][T21346] ip6gretap0: entered promiscuous mode [ 496.266556][T21348] netlink: 'syz.2.4363': attribute type 13 has an invalid length. [ 496.269445][T21346] ip6gretap0: entered allmulticast mode [ 496.296224][T21340] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 496.473973][T21358] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4366'. [ 496.741949][T21366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4369'. [ 496.743725][T21368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4371'. [ 496.871601][T21370] bond12: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 496.913565][ T5139] Bluetooth: hci1: command 0x0405 tx timeout [ 496.958345][T21370] bond12 (unregistering): Released all slaves [ 497.246203][T21388] netlink: 'syz.0.4376': attribute type 10 has an invalid length. [ 497.326249][T21392] lo speed is unknown, defaulting to 1000 [ 497.339075][T21399] batadv_slave_1: entered promiscuous mode [ 497.433390][T21399] netlink: 'syz.1.4380': attribute type 2 has an invalid length. [ 497.452012][T21398] batadv_slave_1: left promiscuous mode [ 497.548417][T21403] lo speed is unknown, defaulting to 1000 [ 497.829690][T21418] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 497.835855][T21418] syzkaller1: linktype set to 778 [ 497.875538][T21420] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 497.894820][T21422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4387'. [ 498.028470][T21392] wg1 speed is unknown, defaulting to 1000 [ 498.120159][T21428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4389'. [ 498.186226][T21434] netlink: 488 bytes leftover after parsing attributes in process `syz.1.4391'. [ 498.215387][T21434] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.4391'. [ 498.366740][T21404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 498.408104][T21404] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 498.451380][T21403] wg1 speed is unknown, defaulting to 1000 [ 498.657028][T21447] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4393'. [ 499.709894][T21469] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 499.824590][T21474] bond3: entered promiscuous mode [ 499.829696][T21474] bond3: entered allmulticast mode [ 499.835792][T21474] 8021q: adding VLAN 0 to HW filter on device bond3 [ 499.853670][T12955] bond0: (slave bond_slave_0): interface is now down [ 499.855193][T21487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.860883][T12955] bond0: (slave bond_slave_1): interface is now down [ 499.891176][T12955] bond0: (slave syz_tun): interface is now down [ 500.031537][T12942] bond0: (slave bond_slave_0): interface is now down [ 500.041678][T12942] bond0: (slave bond_slave_1): interface is now down [ 500.048397][T12942] bond0: (slave syz_tun): interface is now down [ 500.056243][T21492] syzkaller0: entered promiscuous mode [ 500.105229][T21492] syzkaller0: entered allmulticast mode [ 500.201495][T12959] bond0: (slave bond_slave_0): interface is now down [ 500.208703][T12959] bond0: (slave bond_slave_1): interface is now down [ 500.228884][T12959] bond0: (slave syz_tun): interface is now down [ 500.255333][T12959] bond0: now running without any active interface! [ 500.470611][T21508] ..0{X: renamed from gretap0 [ 500.478977][T21508] ..0{X: left promiscuous mode [ 500.487097][T21508] ..0{X: entered allmulticast mode [ 500.500629][T21508] A link change request failed with some changes committed already. Interface ..0{X may have been left with an inconsistent configuration, please check. [ 500.562364][T21508] syzkaller0: entered promiscuous mode [ 500.568291][T21508] syzkaller0: entered allmulticast mode [ 500.634595][T21516] netlink: 'syz.2.4413': attribute type 13 has an invalid length. [ 500.928580][T21532] FAULT_INJECTION: forcing a failure. [ 500.928580][T21532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 500.946791][T21532] CPU: 1 UID: 0 PID: 21532 Comm: syz.4.4418 Not tainted syzkaller #0 PREEMPT(full) [ 500.946816][T21532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.946827][T21532] Call Trace: [ 500.946834][T21532] [ 500.946840][T21532] dump_stack_lvl+0xe8/0x150 [ 500.946867][T21532] should_fail_ex+0x412/0x560 [ 500.946896][T21532] _copy_from_user+0x2d/0xb0 [ 500.946915][T21532] ___sys_recvmsg+0x175/0x590 [ 500.946944][T21532] ? __pfx____sys_recvmsg+0x10/0x10 [ 500.946968][T21532] ? __fget_files+0x2a/0x420 [ 500.947013][T21532] do_recvmmsg+0x334/0x800 [ 500.947039][T21532] ? __pfx_do_recvmmsg+0x10/0x10 [ 500.947067][T21532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 500.947103][T21532] __x64_sys_recvmmsg+0x198/0x250 [ 500.947126][T21532] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 500.947156][T21532] do_syscall_64+0x14d/0xf80 [ 500.947176][T21532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.947190][T21532] ? trace_irq_disable+0x37/0x100 [ 500.947207][T21532] ? clear_bhb_loop+0x40/0x90 [ 500.947227][T21532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.947243][T21532] RIP: 0033:0x7fd24359bf79 [ 500.947259][T21532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.947273][T21532] RSP: 002b:00007fd244417028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 500.947292][T21532] RAX: ffffffffffffffda RBX: 00007fd243816090 RCX: 00007fd24359bf79 [ 500.947305][T21532] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 500.947324][T21532] RBP: 00007fd244417090 R08: 0000000000000000 R09: 0000000000000000 [ 500.947336][T21532] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 500.947347][T21532] R13: 00007fd243816128 R14: 00007fd243816090 R15: 00007ffe6e373598 [ 500.947375][T21532] [ 501.425327][T21548] netlink: 'syz.1.4425': attribute type 12 has an invalid length. [ 501.438279][T21548] netlink: 'syz.1.4425': attribute type 29 has an invalid length. [ 501.446728][T21548] __nla_validate_parse: 7 callbacks suppressed [ 501.446745][T21548] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4425'. [ 501.492607][T21548] netlink: 59 bytes leftover after parsing attributes in process `syz.1.4425'. [ 501.636706][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.894576][T21577] FAULT_INJECTION: forcing a failure. [ 501.894576][T21577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 501.966943][T21577] CPU: 1 UID: 0 PID: 21577 Comm: syz.2.4434 Not tainted syzkaller #0 PREEMPT(full) [ 501.966969][T21577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 501.966980][T21577] Call Trace: [ 501.966988][T21577] [ 501.966996][T21577] dump_stack_lvl+0xe8/0x150 [ 501.967024][T21577] should_fail_ex+0x412/0x560 [ 501.967052][T21577] _copy_from_user+0x2d/0xb0 [ 501.967071][T21577] ___sys_recvmsg+0x175/0x590 [ 501.967100][T21577] ? __pfx____sys_recvmsg+0x10/0x10 [ 501.967126][T21577] ? __fget_files+0x2a/0x420 [ 501.967175][T21577] do_recvmmsg+0x334/0x800 [ 501.967205][T21577] ? __pfx_do_recvmmsg+0x10/0x10 [ 501.967244][T21577] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 501.967284][T21577] __x64_sys_recvmmsg+0x198/0x250 [ 501.967312][T21577] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 501.967346][T21577] do_syscall_64+0x14d/0xf80 [ 501.967367][T21577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.967383][T21577] ? trace_irq_disable+0x37/0x100 [ 501.967402][T21577] ? clear_bhb_loop+0x40/0x90 [ 501.967436][T21577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 501.967453][T21577] RIP: 0033:0x7f6395f9bf79 [ 501.967469][T21577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 501.967484][T21577] RSP: 002b:00007f6396edd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 501.967504][T21577] RAX: ffffffffffffffda RBX: 00007f6396216090 RCX: 00007f6395f9bf79 [ 501.967517][T21577] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 501.967529][T21577] RBP: 00007f6396edd090 R08: 0000000000000000 R09: 0000000000000000 [ 501.967540][T21577] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 501.967552][T21577] R13: 00007f6396216128 R14: 00007f6396216090 R15: 00007ffef5faf5a8 [ 501.967583][T21577] [ 502.271411][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 502.408025][T21601] netlink: 'syz.2.4438': attribute type 1 has an invalid length. [ 502.414698][T21598] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4440'. [ 502.436845][T21602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4437'. [ 502.565278][T21601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 502.576216][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4437'. [ 502.645158][T19883] block nbd64: NBD_DISCONNECT [ 502.664504][T21611] bond4: (slave veth9): Enslaving as an active interface with a down link [ 502.857074][T20201] udevd[20201]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 503.014721][T21638] lo speed is unknown, defaulting to 1000 [ 503.144537][T21645] netlink: 'syz.1.4450': attribute type 32 has an invalid length. [ 503.181463][T21653] nbd: must specify a device to reconfigure [ 503.201192][T21645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4450'. [ 503.306917][T21657] netlink: 'syz.3.4454': attribute type 10 has an invalid length. [ 503.331529][T21657] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4454'. [ 503.363434][T21645] bond1: option coupled_control: invalid value (12) [ 503.387959][T21645] bond1 (unregistering): Released all slaves [ 503.450639][T21638] wg1 speed is unknown, defaulting to 1000 [ 503.769283][T21681] netlink: 'syz.3.4460': attribute type 1 has an invalid length. [ 503.874597][T21684] gretap1: entered allmulticast mode [ 503.879877][T21681] IPVS: fo: FWM 3 0x00000003 - no destination available [ 503.897799][T21684] bond7: (slave gretap1): making interface the new active one [ 503.907586][T21684] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 504.083393][T21692] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4461'. [ 504.299103][T21697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4464'. [ 504.321667][T21699] veth1_macvtap: renamed from veth0_vlan [ 504.897363][T21738] batman_adv: batadv0: Adding interface: macvlan3 [ 504.913179][T21738] batman_adv: batadv0: The MTU of interface macvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.980515][T21738] batman_adv: batadv0: Not using interface macvlan3 (retrying later): interface not active [ 505.103024][T21749] netlink: 'syz.0.4476': attribute type 1 has an invalid length. [ 505.450246][T21775] netlink: 'syz.0.4480': attribute type 13 has an invalid length. [ 505.479366][T12952] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 505.513151][ T5820] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 505.520967][T12952] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 505.565394][T21785] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 505.910951][ T5902] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 506.073226][T21775] batman_adv: batadv0: Interface deactivated: geneve4 [ 506.192991][ T5484] veth1_macvtap: left promiscuous mode [ 506.250136][ T5484] veth1_macvtap: entered promiscuous mode [ 506.277012][T12927] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.297925][T12927] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.328212][T21782] lo speed is unknown, defaulting to 1000 [ 506.339158][T12927] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.360386][T12927] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.387482][T12927] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.391401][T21802] netlink: 'syz.3.4484': attribute type 5 has an invalid length. [ 506.418332][T12927] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.441983][T12927] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.483670][T12927] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.591591][ T1206] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 506.606692][T21809] lo speed is unknown, defaulting to 1000 [ 506.844285][T21823] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4490'. [ 506.960632][T21782] wg1 speed is unknown, defaulting to 1000 [ 507.645239][T21809] wg1 speed is unknown, defaulting to 1000 [ 507.829432][T21851] netlink: 'syz.0.4493': attribute type 83 has an invalid length. [ 508.268406][T21862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4496'. [ 508.552564][T21870] netlink: 'syz.4.4497': attribute type 13 has an invalid length. [ 508.811733][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'. [ 508.822754][T21878] netlink: 'syz.1.4503': attribute type 30 has an invalid length. [ 508.858892][T12956] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.858993][T21878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4503'. [ 508.883613][T21878] netlink: 'syz.1.4503': attribute type 30 has an invalid length. [ 508.903666][T12956] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.919072][T12956] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.940376][T12956] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.963443][T21887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4505'. [ 509.015930][T21887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4505'. [ 509.040994][T21887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4505'. [ 509.052671][T21887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4505'. [ 509.086106][T21887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4505'. [ 509.131776][T21887] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4505'. [ 509.199882][T21891] lo speed is unknown, defaulting to 1000 [ 509.445537][T21891] wg1 speed is unknown, defaulting to 1000 [ 509.706269][T21910] bond0: (slave syz_tun): Releasing backup interface [ 509.715767][T21910] bridge_slave_0: left allmulticast mode [ 509.722528][T21910] bridge_slave_0: left promiscuous mode [ 509.728615][T21910] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.739595][T21910] bridge_slave_1: left allmulticast mode [ 509.747477][T21910] bridge_slave_1: left promiscuous mode [ 509.754112][T21910] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.774776][T21910] bond0: (slave bond_slave_0): Releasing backup interface [ 509.786457][T21910] bond0: (slave bond_slave_1): Releasing backup interface [ 509.798517][T21910] team0: Port device team_slave_0 removed [ 509.808262][T21910] team0: Port device team_slave_1 removed [ 509.814936][T21910] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.823717][T21910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.853010][T21910] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 510.091407][T21934] netlink: 'syz.4.4521': attribute type 1 has an invalid length. [ 510.287515][T21944] netlink: 'syz.0.4523': attribute type 1 has an invalid length. [ 510.460512][T21947] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 510.477245][T21947] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 510.537500][T21952] netlink: 'syz.4.4525': attribute type 2 has an invalid length. [ 510.567975][T21952] hmac(sha224): entered promiscuous mode [ 510.919165][T21969] netlink: 'syz.3.4532': attribute type 15 has an invalid length. [ 511.315706][T21989] netlink: 'syz.1.4538': attribute type 1 has an invalid length. [ 511.371874][T21989] 8021q: adding VLAN 0 to HW filter on device bond1 [ 511.420617][T21993] tipc: Enabled bearer , priority 0 [ 511.430605][T21994] syzkaller0: entered promiscuous mode [ 511.438637][T21994] syzkaller0: entered allmulticast mode [ 511.457393][T21989] bond1: (slave gretap1): making interface the new active one [ 511.477526][T21989] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 511.488706][T21996] tipc: Resetting bearer [ 511.519027][T21996] tipc: Disabling bearer [ 511.559486][T21997] lo speed is unknown, defaulting to 1000 [ 511.790866][T22014] macvtap1: entered promiscuous mode [ 511.819283][T22014] macvtap1: entered allmulticast mode [ 511.830004][T22021] netlink: 'syz.2.4543': attribute type 12 has an invalid length. [ 511.844053][T22014] batadv0: entered allmulticast mode [ 511.881574][T22014] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 511.926360][T22014] batadv0: left allmulticast mode [ 512.038691][T22027] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 512.063413][T22027] bond8 (unregistering): Released all slaves [ 512.118982][T21997] wg1 speed is unknown, defaulting to 1000 [ 512.154585][T22034] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 512.540414][T22054] __nla_validate_parse: 70 callbacks suppressed [ 512.540435][T22054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4555'. [ 512.794192][T22072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4560'. [ 512.837050][T22074] netlink: 'syz.3.4561': attribute type 1 has an invalid length. [ 512.868351][T22072] macvtap1: entered promiscuous mode [ 512.892924][T22072] macvtap1: entered allmulticast mode [ 512.906153][T22072] batadv0: entered allmulticast mode [ 512.917002][T22072] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 512.941730][T22072] batadv0: left allmulticast mode [ 512.993964][T22075] lo speed is unknown, defaulting to 1000 [ 513.282810][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4568'. [ 513.373900][T22101] netlink: 'syz.3.4569': attribute type 5 has an invalid length. [ 513.406527][T22101] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.4569'. [ 513.521910][T22075] wg1 speed is unknown, defaulting to 1000 [ 513.797614][T22122] xt_hashlimit: size too large, truncated to 1048576 [ 513.856691][T22130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4573'. [ 513.950976][T22135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4577'. [ 514.044211][T22135] macvtap1: entered promiscuous mode [ 514.051204][T22135] batadv0: entered promiscuous mode [ 514.065848][T22135] macvtap1: entered allmulticast mode [ 514.076687][T22138] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4578'. [ 514.081163][T22135] batadv0: entered allmulticast mode [ 514.122031][T22135] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 514.171263][T22135] batadv0: left allmulticast mode [ 514.177408][T22135] batadv0: left promiscuous mode [ 514.494824][T22158] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4582'. [ 514.753864][T22169] lo speed is unknown, defaulting to 1000 [ 514.782876][T22175] IPVS: stopping master sync thread 16199 ... [ 514.984372][T22184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4594'. [ 515.057985][T22184] macvtap1: entered promiscuous mode [ 515.081854][T22184] macvtap1: entered allmulticast mode [ 515.092532][T22184] batadv0: entered allmulticast mode [ 515.111908][T22184] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 515.146175][T22184] batadv0: left allmulticast mode [ 515.281864][T22176] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 515.597307][T22190] lo speed is unknown, defaulting to 1000 [ 515.979377][T22202] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4598'. [ 516.082014][T22204] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 516.100006][T22204] bond3 (unregistering): Released all slaves [ 516.268562][T22169] wg1 speed is unknown, defaulting to 1000 [ 516.510210][T22190] wg1 speed is unknown, defaulting to 1000 [ 516.619269][T22226] vlan3: entered promiscuous mode [ 516.624634][T22226] batadv0: entered promiscuous mode [ 516.956298][T22229] lo speed is unknown, defaulting to 1000 [ 517.288086][T22239] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 517.308223][T22229] wg1 speed is unknown, defaulting to 1000 [ 517.542028][T22250] netlink: 'syz.0.4611': attribute type 21 has an invalid length. [ 517.577648][T22255] __nla_validate_parse: 2 callbacks suppressed [ 517.577667][T22255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4613'. [ 517.696773][T22259] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4616'. [ 517.742098][T22266] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.4618'. [ 517.845592][T22271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4618'. [ 517.920787][T22270] lo speed is unknown, defaulting to 1000 [ 517.968353][T22277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4620'. [ 518.148939][T22282] tun0: tun_chr_ioctl cmd 3233831021 [ 518.155035][T22282] tun0: tun_chr_ioctl cmd 3233831021 [ 518.160547][T22284] tun0: tun_chr_ioctl cmd 1074025675 [ 518.166221][T22284] tun0: persist enabled [ 518.174034][T22282] tun0: tun_chr_ioctl cmd 3233831021 [ 518.308531][T22270] wg1 speed is unknown, defaulting to 1000 [ 518.627244][T22301] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 518.639340][T22301] bond3 (unregistering): Released all slaves [ 518.750106][T22303] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 518.782138][T22303] bond2 (unregistering): Released all slaves [ 518.853657][T22320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4632'. [ 518.959655][T22329] netlink: 'syz.3.4636': attribute type 13 has an invalid length. [ 518.994985][T22320] macvtap1: entered promiscuous mode [ 519.000580][T22320] macvtap1: entered allmulticast mode [ 519.032454][T22320] batadv0: entered allmulticast mode [ 519.062340][T22320] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 519.083374][T22320] batadv0: left allmulticast mode [ 519.498575][T22329] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.520407][T22329] bond_slave_0: left promiscuous mode [ 519.525952][T22329] bond_slave_1: left promiscuous mode [ 519.675519][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.697293][T22329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 520.227872][T22333] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.303216][T12939] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.341828][T12939] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 520.390885][T12939] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.421466][T12939] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 520.422502][T22361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4642'. [ 520.495330][T22333] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.534727][T22366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4643'. [ 520.554606][T22366] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4643'. [ 520.565114][T12939] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.567815][T22366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4643'. [ 520.587437][T12939] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 520.604527][T12939] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.624117][T12939] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 520.697347][T22333] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 520.814681][T22333] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 521.108424][T12956] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.183016][T12951] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.255306][T12947] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.353516][T12930] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 521.450754][T22411] lo speed is unknown, defaulting to 1000 [ 521.580699][T22421] netlink: 'syz.1.4655': attribute type 13 has an invalid length. [ 521.678553][T22418] syzkaller0: entered promiscuous mode [ 521.684354][T22418] syzkaller0: entered allmulticast mode [ 521.801618][T22411] wg1 speed is unknown, defaulting to 1000 [ 521.867762][T22435] lo: left promiscuous mode [ 521.882364][T22435] tunl0: left promiscuous mode [ 521.888499][T22435] gre0: left promiscuous mode [ 521.911824][T22435] ..0{X: left allmulticast mode [ 521.927411][T22435] erspan0: left promiscuous mode [ 521.938848][T22435] ip_vti0: left promiscuous mode [ 521.945726][T22435] ip6_vti0: left promiscuous mode [ 521.954364][T22435] sit0: left promiscuous mode [ 521.959321][T22435] ip6tnl0: left promiscuous mode [ 522.002239][T22435] ip6gre0: left promiscuous mode [ 522.007365][T22435] syz_tun: left promiscuous mode [ 522.018892][T22435] ip6gretap0: left promiscuous mode [ 522.026158][T22435] bridge0: left promiscuous mode [ 522.033373][T22435] vcan0: left promiscuous mode [ 522.041450][T22435] bond0: left promiscuous mode [ 522.067465][T22435] bond_slave_0: left promiscuous mode [ 522.089733][T22435] bond_slave_1: left promiscuous mode [ 522.095842][T22435] dummy0: left promiscuous mode [ 522.103472][T22435] geneve2: left promiscuous mode [ 522.109112][T22435] batadv1: left promiscuous mode [ 522.115308][T22435] batadv1: left allmulticast mode [ 522.149513][T22439] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 522.223997][T12951] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.259271][T12951] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.268061][T12951] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.279798][T12951] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 522.318551][T22454] syzkaller0: entered promiscuous mode [ 522.325474][T22454] syzkaller0: entered allmulticast mode [ 522.456603][T22456] tipc: Enabled bearer , priority 0 [ 522.589409][T22453] tipc: Resetting bearer [ 522.730784][T22453] tipc: Disabling bearer [ 522.770525][T22478] netlink: 'syz.4.4671': attribute type 1 has an invalid length. [ 522.851289][T22478] __nla_validate_parse: 3 callbacks suppressed [ 522.851310][T22478] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4671'. [ 523.016059][T22492] netlink: 160 bytes leftover after parsing attributes in process `syz.3.4673'. [ 523.066158][T22492] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 523.257328][T22512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4679'. [ 523.287704][T22511] macsec2: entered promiscuous mode [ 523.295068][T22511] macsec2: entered allmulticast mode [ 523.301312][T22512] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4679'. [ 523.641612][T22535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4688'. [ 523.652167][T22535] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4688'. [ 523.654831][T22538] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4689'. [ 524.037807][T22564] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4696'. [ 524.047346][T22568] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4696'. [ 524.082121][T22569] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4698'. [ 524.132030][T22572] sctp: [Deprecated]: syz.0.4697 (pid 22572) Use of int in maxseg socket option. [ 524.132030][T22572] Use struct sctp_assoc_value instead [ 524.268060][T22583] lo speed is unknown, defaulting to 1000 [ 524.738915][T22584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.747807][T22584] 8021q: adding VLAN 0 to HW filter on device team0 [ 524.766807][T22584] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 524.786789][T22583] wg1 speed is unknown, defaulting to 1000 [ 525.275583][T22616] lo speed is unknown, defaulting to 1000 [ 525.666876][T22616] wg1 speed is unknown, defaulting to 1000 [ 525.680758][T22639] lo speed is unknown, defaulting to 1000 [ 525.960273][T22640] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 526.065042][T22639] wg1 speed is unknown, defaulting to 1000 [ 526.395924][T22656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.424744][T22656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.637284][T22664] netlink: 'syz.3.4719': attribute type 13 has an invalid length. [ 527.137358][T22695] FAULT_INJECTION: forcing a failure. [ 527.137358][T22695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 527.211328][T22695] CPU: 1 UID: 0 PID: 22695 Comm: syz.2.4725 Not tainted syzkaller #0 PREEMPT(full) [ 527.211354][T22695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 527.211364][T22695] Call Trace: [ 527.211372][T22695] [ 527.211380][T22695] dump_stack_lvl+0xe8/0x150 [ 527.211418][T22695] should_fail_ex+0x412/0x560 [ 527.211446][T22695] _copy_from_user+0x2d/0xb0 [ 527.211466][T22695] ___sys_recvmsg+0x175/0x590 [ 527.211494][T22695] ? __pfx____sys_recvmsg+0x10/0x10 [ 527.211520][T22695] ? __fget_files+0x2a/0x420 [ 527.211569][T22695] do_recvmmsg+0x334/0x800 [ 527.211600][T22695] ? __pfx_do_recvmmsg+0x10/0x10 [ 527.211633][T22695] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 527.211672][T22695] __x64_sys_recvmmsg+0x198/0x250 [ 527.211696][T22695] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 527.211727][T22695] do_syscall_64+0x14d/0xf80 [ 527.211748][T22695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.211765][T22695] ? clear_bhb_loop+0x40/0x90 [ 527.211787][T22695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 527.211804][T22695] RIP: 0033:0x7f6395f9bf79 [ 527.211820][T22695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 527.211834][T22695] RSP: 002b:00007f6396ebc028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 527.211853][T22695] RAX: ffffffffffffffda RBX: 00007f6396216180 RCX: 00007f6395f9bf79 [ 527.211867][T22695] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 527.211878][T22695] RBP: 00007f6396ebc090 R08: 0000000000000000 R09: 0000000000000000 [ 527.211889][T22695] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 527.211898][T22695] R13: 00007f6396216218 R14: 00007f6396216180 R15: 00007ffef5faf5a8 [ 527.211928][T22695] [ 527.681399][ T5895] IPVS: starting estimator thread 0... [ 527.771171][T22706] IPVS: using max 38 ests per chain, 91200 per kthread [ 527.800746][T12939] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.809955][T12939] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.822345][ T5895] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.831426][ T5895] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 527.909970][T22718] netlink: zone id is out of range [ 527.915402][T22718] netlink: zone id is out of range [ 527.920652][T22718] netlink: zone id is out of range [ 527.928017][T22718] netlink: zone id is out of range [ 527.934872][T22718] netlink: zone id is out of range [ 527.940821][T22718] netlink: zone id is out of range [ 527.950955][T22720] __nla_validate_parse: 4 callbacks suppressed [ 527.950975][T22720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4735'. [ 527.970609][T22718] netlink: zone id is out of range [ 528.031877][T22722] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 528.041705][T22722] syzkaller1: linktype set to 825 [ 528.106170][T22726] nft_compat: unsupported protocol 0 [ 528.124967][T22725] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4737'. [ 528.134269][T22725] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4737'. [ 528.143675][T22725] netlink: 'syz.0.4737': attribute type 15 has an invalid length. [ 528.246877][T22733] FAULT_INJECTION: forcing a failure. [ 528.246877][T22733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.263962][T22733] CPU: 1 UID: 0 PID: 22733 Comm: syz.3.4740 Not tainted syzkaller #0 PREEMPT(full) [ 528.263989][T22733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.264000][T22733] Call Trace: [ 528.264007][T22733] [ 528.264015][T22733] dump_stack_lvl+0xe8/0x150 [ 528.264043][T22733] should_fail_ex+0x412/0x560 [ 528.264070][T22733] _copy_from_user+0x2d/0xb0 [ 528.264089][T22733] ___sys_recvmsg+0x175/0x590 [ 528.264115][T22733] ? __pfx____sys_recvmsg+0x10/0x10 [ 528.264140][T22733] ? __fget_files+0x2a/0x420 [ 528.264187][T22733] do_recvmmsg+0x334/0x800 [ 528.264217][T22733] ? __pfx_do_recvmmsg+0x10/0x10 [ 528.264252][T22733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 528.264290][T22733] __x64_sys_recvmmsg+0x198/0x250 [ 528.264315][T22733] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 528.264348][T22733] do_syscall_64+0x14d/0xf80 [ 528.264370][T22733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.264387][T22733] ? trace_irq_disable+0x37/0x100 [ 528.264406][T22733] ? clear_bhb_loop+0x40/0x90 [ 528.264427][T22733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.264444][T22733] RIP: 0033:0x7f31d6f9bf79 [ 528.264460][T22733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.264474][T22733] RSP: 002b:00007f31d7ef2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 528.264492][T22733] RAX: ffffffffffffffda RBX: 00007f31d7216090 RCX: 00007f31d6f9bf79 [ 528.264505][T22733] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 528.264517][T22733] RBP: 00007f31d7ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 528.264528][T22733] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 528.264538][T22733] R13: 00007f31d7216128 R14: 00007f31d7216090 R15: 00007ffd7aaca0d8 [ 528.264578][T22733] [ 528.452045][ T5903] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 528.595391][T22744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4741'. [ 528.604551][T22742] netlink: 'syz.3.4743': attribute type 13 has an invalid length. [ 529.005674][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4752'. [ 529.048276][T22778] FAULT_INJECTION: forcing a failure. [ 529.048276][T22778] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.072878][T22778] CPU: 0 UID: 0 PID: 22778 Comm: syz.1.4754 Not tainted syzkaller #0 PREEMPT(full) [ 529.072902][T22778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.072912][T22778] Call Trace: [ 529.072919][T22778] [ 529.072927][T22778] dump_stack_lvl+0xe8/0x150 [ 529.072951][T22778] should_fail_ex+0x412/0x560 [ 529.072977][T22778] _copy_from_user+0x2d/0xb0 [ 529.072994][T22778] ___sys_recvmsg+0x175/0x590 [ 529.073019][T22778] ? __pfx____sys_recvmsg+0x10/0x10 [ 529.073042][T22778] ? __fget_files+0x2a/0x420 [ 529.073081][T22778] do_recvmmsg+0x334/0x800 [ 529.073109][T22778] ? __pfx_do_recvmmsg+0x10/0x10 [ 529.073137][T22778] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 529.073183][T22778] __x64_sys_recvmmsg+0x198/0x250 [ 529.073205][T22778] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 529.073234][T22778] do_syscall_64+0x14d/0xf80 [ 529.073253][T22778] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.073268][T22778] ? trace_irq_disable+0x37/0x100 [ 529.073286][T22778] ? clear_bhb_loop+0x40/0x90 [ 529.073307][T22778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.073323][T22778] RIP: 0033:0x7fdaaed9bf79 [ 529.073339][T22778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.073352][T22778] RSP: 002b:00007fdaafc29028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 529.073369][T22778] RAX: ffffffffffffffda RBX: 00007fdaaf015fa0 RCX: 00007fdaaed9bf79 [ 529.073380][T22778] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 529.073391][T22778] RBP: 00007fdaafc29090 R08: 0000000000000000 R09: 0000000000000000 [ 529.073401][T22778] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 529.073412][T22778] R13: 00007fdaaf016038 R14: 00007fdaaf015fa0 R15: 00007ffdeee34b68 [ 529.073441][T22778] [ 529.565682][T22803] batman_adv: batadv0: Adding interface: macvlan2 [ 529.577944][T22803] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.626766][T22803] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 529.669751][T22806] lo speed is unknown, defaulting to 1000 [ 529.862801][T22806] wg1 speed is unknown, defaulting to 1000 [ 530.220501][T22820] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4766'. [ 530.302269][T22824] tipc: Enabled bearer , priority 0 [ 530.309977][T22824] syzkaller0: entered promiscuous mode [ 530.332298][T22824] syzkaller0: entered allmulticast mode [ 530.395960][T22824] tipc: Resetting bearer [ 530.465514][T22827] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 530.477298][T22827] bond6 (unregistering): Released all slaves [ 530.504666][T22823] tipc: Resetting bearer [ 530.528137][T22823] tipc: Disabling bearer [ 530.558413][T22825] lo speed is unknown, defaulting to 1000 [ 530.692602][T22836] pimreg3: entered allmulticast mode [ 530.795173][T22840] lo speed is unknown, defaulting to 1000 [ 530.879231][T22846] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 530.903095][T22846] bridge1: left promiscuous mode [ 530.919341][T22846] sit1: left allmulticast mode [ 530.934406][T22846] vlan2: left allmulticast mode [ 530.969924][T22846] erspan0: left allmulticast mode [ 530.990767][T22846] geneve3: left allmulticast mode [ 531.006194][T22846] gretap1: left allmulticast mode [ 531.174217][T22850] netlink: 'syz.3.4776': attribute type 13 has an invalid length. [ 531.318514][T22844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.340698][T22844] net_ratelimit: 47 callbacks suppressed [ 531.340709][T22844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 531.412322][T22855] netlink: 'syz.4.4777': attribute type 1 has an invalid length. [ 531.436952][T22855] netlink: 'syz.4.4777': attribute type 1 has an invalid length. [ 531.465753][T22855] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4777'. [ 531.513820][T22858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4778'. [ 531.518532][T22825] wg1 speed is unknown, defaulting to 1000 [ 531.560528][T22858] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4778'. [ 531.906684][T22871] FAULT_INJECTION: forcing a failure. [ 531.906684][T22871] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.920181][T22871] CPU: 1 UID: 0 PID: 22871 Comm: syz.3.4782 Not tainted syzkaller #0 PREEMPT(full) [ 531.920207][T22871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 531.920219][T22871] Call Trace: [ 531.920226][T22871] [ 531.920234][T22871] dump_stack_lvl+0xe8/0x150 [ 531.920262][T22871] should_fail_ex+0x412/0x560 [ 531.920292][T22871] _copy_from_user+0x2d/0xb0 [ 531.920311][T22871] ___sys_recvmsg+0x175/0x590 [ 531.920341][T22871] ? __pfx____sys_recvmsg+0x10/0x10 [ 531.920366][T22871] ? __fget_files+0x2a/0x420 [ 531.920415][T22871] do_recvmmsg+0x334/0x800 [ 531.920445][T22871] ? __pfx_do_recvmmsg+0x10/0x10 [ 531.920478][T22871] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 531.920518][T22871] __x64_sys_recvmmsg+0x198/0x250 [ 531.920542][T22871] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 531.920576][T22871] do_syscall_64+0x14d/0xf80 [ 531.920597][T22871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.920613][T22871] ? trace_irq_disable+0x37/0x100 [ 531.920632][T22871] ? clear_bhb_loop+0x40/0x90 [ 531.920653][T22871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.920670][T22871] RIP: 0033:0x7f31d6f9bf79 [ 531.920687][T22871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.920701][T22871] RSP: 002b:00007f31d7f13028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 531.920721][T22871] RAX: ffffffffffffffda RBX: 00007f31d7215fa0 RCX: 00007f31d6f9bf79 [ 531.920735][T22871] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 531.920747][T22871] RBP: 00007f31d7f13090 R08: 0000000000000000 R09: 0000000000000000 [ 531.920759][T22871] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 531.920770][T22871] R13: 00007f31d7216038 R14: 00007f31d7215fa0 R15: 00007ffd7aaca0d8 [ 531.920801][T22871] [ 532.232234][T22840] wg1 speed is unknown, defaulting to 1000 [ 532.769272][T22886] netlink: 'syz.4.4784': attribute type 16 has an invalid length. [ 532.791431][T22886] netlink: 'syz.4.4784': attribute type 17 has an invalid length. [ 533.429034][T22901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4786'. [ 534.509008][T22886] syz_tun: left promiscuous mode [ 534.516343][T22886] ip6gretap0: left promiscuous mode [ 534.522283][T22886] ip6gretap0: left allmulticast mode [ 534.533638][T22886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.541698][T22886] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.553423][T22886] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 534.881571][T22912] lo speed is unknown, defaulting to 1000 [ 534.890193][T22911] lo speed is unknown, defaulting to 1000 [ 535.019363][T22920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4793'. [ 535.105906][T22922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4794'. [ 535.241228][T22930] netlink: 'syz.0.4797': attribute type 13 has an invalid length. [ 535.761252][T22930] veth1_macvtap: left promiscuous mode [ 536.184216][T22912] wg1 speed is unknown, defaulting to 1000 [ 538.823823][T22911] wg1 speed is unknown, defaulting to 1000 [ 538.957003][T22968] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 539.108456][T22974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4807'. [ 539.123544][T22970] syzkaller0: entered promiscuous mode [ 539.129137][T22970] syzkaller0: entered allmulticast mode [ 539.136907][T22971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4806'. [ 539.158678][T22970] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4806'. [ 539.637858][T22992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4812'. [ 539.828646][T23000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4815'. [ 539.873569][T23000] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4815'. [ 539.911279][T23005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4818'. [ 539.915076][T23000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4815'. [ 539.933996][T23000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4815'. [ 539.973495][T23009] netlink: 'syz.4.4819': attribute type 29 has an invalid length. [ 540.079177][T23013] syzkaller0: entered promiscuous mode [ 540.094994][T23013] syzkaller0: entered allmulticast mode [ 540.171345][T23015] lo speed is unknown, defaulting to 1000 [ 540.228527][T23021] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4823'. [ 540.932725][T23038] bond14 (unregistering): Released all slaves [ 541.000595][T23019] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 541.160635][T23050] dummy0: entered allmulticast mode [ 541.171905][T23050] IPVS: Error connecting to the multicast addr [ 541.463836][T23015] wg1 speed is unknown, defaulting to 1000 [ 543.336855][T23098] tipc: Enabled bearer , priority 0 [ 543.345275][T23098] syzkaller0: entered promiscuous mode [ 543.356159][T23098] syzkaller0: entered allmulticast mode [ 543.414097][T23098] tipc: Resetting bearer [ 543.452813][T23097] tipc: Resetting bearer [ 543.468352][T23106] netlink: 'syz.0.4850': attribute type 150 has an invalid length. [ 543.498823][T23097] tipc: Disabling bearer [ 543.559985][T23112] netlink: 'syz.0.4853': attribute type 10 has an invalid length. [ 543.888223][T23133] netlink: 'syz.3.4860': attribute type 58 has an invalid length. [ 543.923712][T23131] batadv2: entered promiscuous mode [ 543.931714][T23131] batadv2: entered allmulticast mode [ 543.939288][T23131] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 544.024454][T23139] syz.2.4862 (23139) used obsolete PPPIOCDETACH ioctl [ 544.298525][T12544] wg1 speed is unknown, defaulting to 1000 [ 544.485605][T23167] netlink: 'syz.4.4871': attribute type 1 has an invalid length. [ 544.541829][T23174] __nla_validate_parse: 7 callbacks suppressed [ 544.541848][T23174] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4871'. [ 544.591331][T23174] bond4: (slave bridge1): making interface the new active one [ 544.600417][T23174] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 544.663026][T23178] netlink: 'syz.1.4875': attribute type 10 has an invalid length. [ 544.665958][T23167] bond4: (slave bridge2): Enslaving as an active interface with a down link [ 544.712680][T23166] lo speed is unknown, defaulting to 1000 [ 544.715972][T23178] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.732148][T23178] team0: Port device bond0 added [ 544.848826][T23184] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4876'. [ 545.096663][T23196] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 545.103286][T23196] syzkaller1: linktype set to 778 [ 545.157113][T23196] 8021q: adding VLAN 0 to HW filter on device bond14 [ 545.303332][T23172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.313908][T23172] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.335294][T23172] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.393450][T23204] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 545.415400][T23204] bond14: (slave macvlan3): Enslaving as a backup interface with a down link [ 545.451830][T23166] wg1 speed is unknown, defaulting to 1000 [ 545.519334][T23214] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4886'. [ 545.574674][T23215] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4886'. [ 545.719935][T23218] netlink: 'syz.2.4888': attribute type 11 has an invalid length. [ 545.728380][T23218] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4888'. [ 545.787581][T23224] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 545.804609][T23220] sch_tbf: burst 1 is lower than device syzkaller0 mtu (1514) ! [ 545.813455][T23220] syzkaller0: entered promiscuous mode [ 545.818940][T23220] syzkaller0: entered allmulticast mode [ 545.825612][T23220] tipc: Enabled bearer , priority 0 [ 545.854050][T23227] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4890'. [ 545.883382][T12929] tipc: Resetting bearer [ 545.900560][T23220] tipc: Resetting bearer [ 545.926621][T23219] tipc: Resetting bearer [ 545.958784][T23219] tipc: Disabling bearer [ 545.992183][T23231] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4892'. [ 546.003179][T23231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4892'. [ 546.058703][T23231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4892'. [ 546.082593][T23233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4891'. [ 546.102946][T23231] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 546.206425][T23235] tipc: Enabling of bearer rejected, failed to enable media [ 546.696528][T23264] lo speed is unknown, defaulting to 1000 [ 546.732743][T23268] netlink: 'syz.1.4903': attribute type 13 has an invalid length. [ 547.024909][T23264] wg1 speed is unknown, defaulting to 1000 [ 547.872707][T23311] lo speed is unknown, defaulting to 1000 [ 548.408539][T23311] wg1 speed is unknown, defaulting to 1000 [ 548.654177][T23338] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 548.904308][T23338] bond6 (unregistering): Released all slaves [ 550.083488][T23382] __nla_validate_parse: 5 callbacks suppressed [ 550.083507][T23382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4934'. [ 550.208033][T23380] lo speed is unknown, defaulting to 1000 [ 550.454333][T23389] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4937'. [ 550.572309][T23380] wg1 speed is unknown, defaulting to 1000 [ 551.288078][T23399] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 551.349565][T23399] bond6 (unregistering): Released all slaves [ 551.459657][T23400] lo speed is unknown, defaulting to 1000 [ 551.620878][T23420] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 551.808140][T23425] netlink: 'syz.0.4948': attribute type 10 has an invalid length. [ 551.947604][T23400] wg1 speed is unknown, defaulting to 1000 [ 551.992497][T23431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4950'. [ 552.261307][T23436] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 552.319068][T23437] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 552.795056][T23447] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4955'. [ 552.816091][T23447] xt_TCPMSS: Only works on TCP SYN packets [ 552.823605][T23447] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4955'. [ 552.832903][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 553.108408][T23455] bond15: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 553.131798][T23455] bond15 (unregistering): Released all slaves [ 553.310460][T23464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4960'. [ 553.348255][T23464] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4960'. [ 553.585850][T23474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.192696][T23486] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4965'. [ 554.209726][T23485] netlink: 'syz.2.4967': attribute type 3 has an invalid length. [ 554.218180][T23485] netlink: 'syz.2.4967': attribute type 1 has an invalid length. [ 554.226414][T23485] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4967'. [ 554.252091][T23485] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.275094][T23485] netlink: 'syz.2.4967': attribute type 1 has an invalid length. [ 554.376450][T23490] tipc: Enabled bearer , priority 0 [ 554.424978][T23491] syzkaller0: entered promiscuous mode [ 554.447118][T23491] syzkaller0: entered allmulticast mode [ 554.483460][T23490] tipc: Resetting bearer [ 554.558833][T23490] tipc: Disabling bearer [ 554.585058][T23368] Set syz1 is full, maxelem 65536 reached [ 554.742177][T23507] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4972'. [ 554.777617][T23507] netlink: 'syz.0.4972': attribute type 7 has an invalid length. [ 554.785816][T23507] netlink: 'syz.0.4972': attribute type 8 has an invalid length. [ 554.800663][T23507] syz_tun: entered promiscuous mode [ 554.817883][T23507] erspan0: entered promiscuous mode [ 554.827360][T23507] syz_tun: left promiscuous mode [ 554.843617][T23507] erspan0: left promiscuous mode [ 554.917415][ T5139] Bluetooth: hci3: command 0x0406 tx timeout [ 554.939063][T23517] bond0: (slave dummy0): Releasing backup interface [ 555.103465][T23529] netlink: 'syz.0.4982': attribute type 8 has an invalid length. [ 555.155592][T23533] lo speed is unknown, defaulting to 1000 [ 555.275128][T23541] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 555.306494][T23541] bond2 (unregistering): Released all slaves [ 555.347530][T23553] x_tables: duplicate underflow at hook 1 [ 555.396305][T23550] __nla_validate_parse: 6 callbacks suppressed [ 555.396324][T23550] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4987'. [ 555.671680][T23573] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4992'. [ 555.737456][T23533] wg1 speed is unknown, defaulting to 1000 [ 556.054590][T23585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4996'. [ 556.457898][T23607] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 556.513405][T23607] bond2 (unregistering): Released all slaves [ 556.695896][T23617] FAULT_INJECTION: forcing a failure. [ 556.695896][T23617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 556.745264][T23619] netlink: 'syz.4.5004': attribute type 1 has an invalid length. [ 556.753714][T23617] CPU: 0 UID: 0 PID: 23617 Comm: syz.0.5003 Not tainted syzkaller #0 PREEMPT(full) [ 556.753740][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 556.753752][T23617] Call Trace: [ 556.753760][T23617] [ 556.753771][T23617] dump_stack_lvl+0xe8/0x150 [ 556.753799][T23617] should_fail_ex+0x412/0x560 [ 556.753827][T23617] _copy_from_iter+0x1d3/0x1670 [ 556.753860][T23617] ? rcu_is_watching+0x15/0xb0 [ 556.753881][T23617] ? __pfx__copy_from_iter+0x10/0x10 [ 556.753913][T23617] ? netlink_sendmsg+0x650/0xb40 [ 556.753928][T23617] ? skb_put+0x11b/0x210 [ 556.753951][T23617] netlink_sendmsg+0x6c0/0xb40 [ 556.753977][T23617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.753997][T23617] ? aa_sock_msg_perm+0xf1/0x1b0 [ 556.754021][T23617] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 556.754044][T23617] ? __pfx_netlink_sendmsg+0x10/0x10 [ 556.754060][T23617] ____sys_sendmsg+0xa68/0xad0 [ 556.754081][T23617] ? __might_fault+0xaf/0x130 [ 556.754107][T23617] ? __pfx_____sys_sendmsg+0x10/0x10 [ 556.754136][T23617] ? import_iovec+0x73/0xa0 [ 556.754156][T23617] ___sys_sendmsg+0x2a5/0x360 [ 556.754175][T23617] ? __lock_acquire+0x6b5/0x2cf0 [ 556.754198][T23617] ? __pfx____sys_sendmsg+0x10/0x10 [ 556.754253][T23617] ? __fget_files+0x2a/0x420 [ 556.754269][T23617] ? __fget_files+0x3a0/0x420 [ 556.754297][T23617] __x64_sys_sendmsg+0x1bd/0x2a0 [ 556.754320][T23617] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 556.754349][T23617] ? __pfx_ksys_write+0x10/0x10 [ 556.754382][T23617] do_syscall_64+0x14d/0xf80 [ 556.754403][T23617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.754419][T23617] ? trace_irq_disable+0x37/0x100 [ 556.754438][T23617] ? clear_bhb_loop+0x40/0x90 [ 556.754458][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.754473][T23617] RIP: 0033:0x7f577819bf79 [ 556.754488][T23617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.754501][T23617] RSP: 002b:00007f5778fbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.754520][T23617] RAX: ffffffffffffffda RBX: 00007f5778416090 RCX: 00007f577819bf79 [ 556.754532][T23617] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 556.754541][T23617] RBP: 00007f5778fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 556.754551][T23617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.754561][T23617] R13: 00007f5778416128 R14: 00007f5778416090 R15: 00007ffe99d60118 [ 556.754595][T23617] [ 557.118936][T23626] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.168715][T23630] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5008'. [ 557.221740][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5008'. [ 557.230722][T23636] openvswitch: netlink: Missing key (keys=40, expected=80) [ 557.317988][T23640] netlink: 'syz.4.5009': attribute type 1 has an invalid length. [ 557.369843][T23640] 8021q: adding VLAN 0 to HW filter on device bond5 [ 557.487013][T23643] bond5: (slave veth7): Enslaving as an active interface with a down link [ 557.589099][T23660] x_tables: duplicate underflow at hook 1 [ 557.812434][T23675] netlink: 'syz.1.5020': attribute type 13 has an invalid length. [ 559.950768][T23711] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5030'. [ 560.057614][T23706] netlink: 'syz.0.5027': attribute type 11 has an invalid length. [ 560.067199][T23706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5027'. [ 560.235515][T23738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5035'. [ 560.274065][T23740] netlink: 'syz.1.5038': attribute type 6 has an invalid length. [ 560.283525][T23743] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 560.323435][T23740] netlink: 'syz.1.5038': attribute type 6 has an invalid length. [ 560.508975][T23758] netlink: 'syz.2.5044': attribute type 1 has an invalid length. [ 560.541451][T23758] netlink: 'syz.2.5044': attribute type 8 has an invalid length. [ 560.571604][T23758] netlink: 'syz.2.5044': attribute type 9 has an invalid length. [ 560.579373][T23758] netlink: 'syz.2.5044': attribute type 10 has an invalid length. [ 560.608080][T23758] netlink: 'syz.2.5044': attribute type 11 has an invalid length. [ 560.623040][T23758] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5044'. [ 560.706938][T23763] IPVS: Error connecting to the multicast addr [ 560.780453][T23768] netlink: 211344 bytes leftover after parsing attributes in process `syz.1.5047'. [ 560.798571][T12929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 560.816585][T12929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 560.868406][T23774] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.899011][T23770] vti0: entered promiscuous mode [ 560.908058][T23770] vti0: entered allmulticast mode [ 560.948731][T23778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 561.023049][T23784] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5051'. [ 561.076853][T23786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5055'. [ 561.101844][T23786] batman_adv: batadv0: Removing interface: macvlan3 [ 561.131249][T23786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 561.414051][T23793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.459680][T23795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5058'. [ 561.902491][T23816] lo speed is unknown, defaulting to 1000 [ 561.923866][T23814] lo speed is unknown, defaulting to 1000 [ 562.075771][T23820] lo speed is unknown, defaulting to 1000 [ 562.388048][T23821] bridge0: left promiscuous mode [ 562.401491][T23821] bridge0: entered promiscuous mode [ 562.423918][T23821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.433135][T23821] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.472111][T23821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 562.508734][T23816] wg1 speed is unknown, defaulting to 1000 [ 562.765508][T23839] validate_nla: 1 callbacks suppressed [ 562.765530][T23839] netlink: 'syz.0.5068': attribute type 13 has an invalid length. [ 563.071295][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 563.097079][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.281902][T23814] wg1 speed is unknown, defaulting to 1000 [ 563.757521][T23856] netlink: 256 bytes leftover after parsing attributes in process `syz.3.5072'. [ 563.772192][T23820] wg1 speed is unknown, defaulting to 1000 [ 563.958315][T23858] netlink: 'syz.3.5072': attribute type 25 has an invalid length. [ 564.135365][T23868] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5075'. [ 564.144838][T23867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5075'. [ 564.276708][T23873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5076'. [ 564.287201][T23873] netlink: 'syz.0.5076': attribute type 7 has an invalid length. [ 564.361505][T23873] netlink: 'syz.0.5076': attribute type 8 has an invalid length. [ 564.415916][T23878] netlink: 'syz.1.5077': attribute type 10 has an invalid length. [ 564.449024][T23878] veth0_vlan: left promiscuous mode [ 564.482677][T23878] veth0_vlan: entered promiscuous mode [ 564.490459][T23878] team0: Device veth0_vlan failed to register rx_handler [ 565.151326][ T5139] Bluetooth: hci2: command 0x0405 tx timeout [ 565.153744][T23909] bond8: option miimon: invalid value (18446744073709551607) [ 565.171023][T23909] bond8: option miimon: allowed values 0 - 2147483647 [ 565.180681][T23909] bond8 (unregistering): Released all slaves [ 565.253356][T23918] netlink: 'syz.0.5090': attribute type 7 has an invalid length. [ 565.289732][T23918] netlink: 'syz.0.5090': attribute type 8 has an invalid length. [ 565.364193][T23916] syzkaller0: entered promiscuous mode [ 565.404284][T23916] syzkaller0: entered allmulticast mode [ 565.780021][T23940] netlink: 'syz.0.5096': attribute type 5 has an invalid length. [ 565.852691][T23938] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 565.860256][T23938] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 565.927605][T23944] lo speed is unknown, defaulting to 1000 [ 565.949154][T23952] __nla_validate_parse: 6 callbacks suppressed [ 565.949174][T23952] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5099'. [ 566.062140][T23954] netlink: 'syz.0.5098': attribute type 1 has an invalid length. [ 566.146318][T23954] 8021q: adding VLAN 0 to HW filter on device bond15 [ 566.167617][T23964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 566.228983][T23959] bond15: (slave veth9): Enslaving as an active interface with a down link [ 566.308233][T23964] tipc: Enabled bearer , priority 0 [ 566.410929][T23965] tipc: Resetting bearer [ 566.434697][T23971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5102'. [ 566.482687][T23949] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 566.569579][T23973] team0: Port device syz_tun added [ 566.596930][T23944] wg1 speed is unknown, defaulting to 1000 [ 566.634561][T23978] netlink: 'syz.3.5105': attribute type 1 has an invalid length. [ 566.650614][T23971] lo speed is unknown, defaulting to 1000 [ 566.700735][T23978] bond8: entered promiscuous mode [ 566.706165][T23978] bond8: entered allmulticast mode [ 566.976079][T23971] wg1 speed is unknown, defaulting to 1000 [ 567.108862][T23993] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5110'. [ 567.254770][T24000] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5105'. [ 567.380041][T23994] bond8: (slave ip6gretap1): making interface the new active one [ 567.396092][T23994] ip6gretap1: entered promiscuous mode [ 567.403486][T23994] ip6gretap1: entered allmulticast mode [ 567.421832][T23994] bond8: (slave ip6gretap1): Enslaving as an active interface with an up link [ 567.438473][T23999] !9: entered promiscuous mode [ 567.444400][T24003] !9: left promiscuous mode [ 567.512086][T24000] bond8: left promiscuous mode [ 567.523502][T24000] ip6gretap1: left promiscuous mode [ 567.530278][T24000] bond8: left allmulticast mode [ 567.536731][T24000] ip6gretap1: left allmulticast mode [ 567.543553][T24000] 8021q: adding VLAN 0 to HW filter on device bond8 [ 567.986105][T24029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5117'. [ 568.094837][T24035] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5120'. [ 568.233904][T24044] validate_nla: 2 callbacks suppressed [ 568.233923][T24044] netlink: 'syz.4.5124': attribute type 13 has an invalid length. [ 568.637801][T24059] netlink: 'syz.4.5129': attribute type 1 has an invalid length. [ 568.687666][T24061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5128'. [ 568.798430][T24068] netlink: 'syz.0.5131': attribute type 3 has an invalid length. [ 568.863493][T24074] openvswitch: netlink: Message has 2 unknown bytes. [ 568.870257][T24074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.878999][T24076] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5134'. [ 569.054828][T24088] netlink: 'syz.4.5138': attribute type 5 has an invalid length. [ 569.306810][T24106] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5142'. [ 569.319051][T24106] netlink: 'syz.0.5142': attribute type 7 has an invalid length. [ 569.327759][T24106] netlink: 'syz.0.5142': attribute type 8 has an invalid length. [ 569.336890][T24106] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5142'. [ 569.370548][T24106] syz_tun: entered promiscuous mode [ 569.377915][T24106] erspan0: entered promiscuous mode [ 569.386822][T24106] syz_tun: left promiscuous mode [ 569.401549][T24106] erspan0: left promiscuous mode [ 570.559017][T24165] syzkaller1: entered promiscuous mode [ 570.565059][T24165] syzkaller1: entered allmulticast mode [ 571.187163][T24184] lo speed is unknown, defaulting to 1000 [ 571.228064][T24182] can: request_module (can-proto-0) failed. [ 571.426704][T24205] netlink: 'syz.1.5177': attribute type 21 has an invalid length. [ 571.442531][T24205] __nla_validate_parse: 4 callbacks suppressed [ 571.442548][T24205] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5177'. [ 571.594552][T24184] wg1 speed is unknown, defaulting to 1000 [ 571.732582][T24213] netlink: 'syz.3.5179': attribute type 5 has an invalid length. [ 571.755230][T24213] netlink: 'syz.3.5179': attribute type 5 has an invalid length. [ 571.896982][T24209] lo speed is unknown, defaulting to 1000 [ 572.022354][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5180'. [ 572.307908][T24236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5186'. [ 572.332451][T24236] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5186'. [ 572.367982][T24209] wg1 speed is unknown, defaulting to 1000 [ 572.400175][T24238] syzkaller1: entered promiscuous mode [ 572.405825][T24238] syzkaller1: entered allmulticast mode [ 572.413840][T24238] af_packet: tpacket_rcv: packet too big, clamped from 64993 to 3944. macoff=96 [ 572.429834][T12930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 572.451849][T12930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 572.539785][T24243] netlink: 'syz.4.5189': attribute type 11 has an invalid length. [ 572.718709][T24247] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5191'. [ 573.086739][T24268] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5197'. [ 573.127673][T24274] netlink: 312 bytes leftover after parsing attributes in process `syz.3.5198'. [ 573.137317][T24273] netlink: 312 bytes leftover after parsing attributes in process `syz.3.5198'. [ 573.788826][T24305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5207'. [ 573.816387][T24303] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5206'. [ 574.008985][T24319] netlink: 'syz.3.5212': attribute type 1 has an invalid length. [ 574.098401][T24314] netlink: 'syz.4.5210': attribute type 1 has an invalid length. [ 574.214675][T24314] bond7: entered promiscuous mode [ 574.220124][T24314] 8021q: adding VLAN 0 to HW filter on device bond7 [ 574.265508][T24328] bond7: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 574.279630][T24328] bond7: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 574.295043][T24328] bond7: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 574.537411][T24348] netlink: 'syz.0.5217': attribute type 1 has an invalid length. [ 574.601005][T24354] netlink: 'syz.3.5220': attribute type 2 has an invalid length. [ 574.652724][T24348] 8021q: adding VLAN 0 to HW filter on device bond16 [ 574.715626][T24355] bond16: (slave veth11): Enslaving as an active interface with a down link [ 574.897719][T24365] lo speed is unknown, defaulting to 1000 [ 575.230972][T24380] syzkaller1: entered promiscuous mode [ 575.243876][T24380] syzkaller1: entered allmulticast mode [ 575.262023][T24365] wg1 speed is unknown, defaulting to 1000 [ 575.960779][T24404] syzkaller0: entered promiscuous mode [ 575.967328][T24404] syzkaller0: entered allmulticast mode [ 576.129335][T24414] syzkaller0: entered promiscuous mode [ 576.139656][T24414] syzkaller0: entered allmulticast mode [ 576.159860][T24414] netlink: 'syz.3.5237': attribute type 1 has an invalid length. [ 576.451575][T24431] __nla_validate_parse: 6 callbacks suppressed [ 576.451595][T24431] netlink: 116 bytes leftover after parsing attributes in process `syz.4.5241'. [ 576.784326][T24450] netlink: 'syz.0.5244': attribute type 13 has an invalid length. [ 576.806996][T24450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5244'. [ 577.327952][T24484] netlink: 'syz.3.5255': attribute type 1 has an invalid length. [ 577.457492][T24493] tipc: Enabled bearer , priority 0 [ 577.465468][T24493] syzkaller0: entered promiscuous mode [ 577.477782][T24493] syzkaller0: entered allmulticast mode [ 577.505952][T24493] tipc: Resetting bearer [ 577.534475][T24493] tipc: Disabling bearer [ 577.777601][T24518] netlink: 'syz.3.5267': attribute type 8 has an invalid length. [ 578.095997][T24540] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5272'. [ 578.096004][T24534] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5272'. [ 578.107348][T24534] batadv_slave_1: Device is already in use. [ 578.166748][T24540] batadv_slave_1: Device is already in use. [ 578.348312][T24551] netlink: 148 bytes leftover after parsing attributes in process `syz.4.5276'. [ 578.394990][T24555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5278'. [ 578.406523][T24555] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5278'. [ 578.951669][T24591] lo speed is unknown, defaulting to 1000 [ 580.799419][T24591] wg1 speed is unknown, defaulting to 1000 [ 580.812843][T24604] xt_hashlimit: size too large, truncated to 1048576 [ 580.853659][T24604] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 581.705321][T24641] IPVS: set_ctl: invalid protocol: 50 224.0.0.1:20001 [ 581.718090][T24641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5299'. [ 581.805643][T24643] netlink: 'syz.0.5300': attribute type 9 has an invalid length. [ 581.973544][T24648] netlink: 'syz.2.5301': attribute type 4 has an invalid length. [ 582.003204][T24648] netlink: 'syz.2.5301': attribute type 4 has an invalid length. [ 582.203023][T24659] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5305'. [ 582.222332][T24659] netlink: 'syz.4.5305': attribute type 7 has an invalid length. [ 582.240716][T24659] netlink: 'syz.4.5305': attribute type 8 has an invalid length. [ 582.255885][T24659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5305'. [ 582.290933][T24659] syz_tun: entered promiscuous mode [ 582.315061][T24659] syz_tun: left promiscuous mode [ 583.114940][T24683] sctp: [Deprecated]: syz.0.5311 (pid 24683) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.114940][T24683] Use struct sctp_sack_info instead [ 583.166772][T24690] netlink: 'syz.4.5312': attribute type 1 has an invalid length. [ 583.242188][T24689] syzkaller1: entered promiscuous mode [ 583.258495][T24689] syzkaller1: entered allmulticast mode [ 583.446158][T24702] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5317'. [ 583.454974][T24696] lo speed is unknown, defaulting to 1000 [ 583.475795][T24702] netlink: 'syz.3.5317': attribute type 7 has an invalid length. [ 583.492217][T24702] netlink: 'syz.3.5317': attribute type 8 has an invalid length. [ 583.519427][T24702] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5317'. [ 583.607298][T24702] syz_tun: entered promiscuous mode [ 583.662656][T24702] erspan0: entered promiscuous mode [ 583.689997][T24702] syz_tun: left promiscuous mode [ 583.714161][T24702] erspan0: left promiscuous mode [ 583.810510][T24712] lo speed is unknown, defaulting to 1000 [ 583.842505][T24708] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5318'. [ 583.889498][ T5822] Bluetooth: hci1: link tx timeout [ 583.902035][ T5822] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 583.911620][T24716] sctp: [Deprecated]: syz.3.5321 (pid 24716) Use of int in max_burst socket option. [ 583.911620][T24716] Use struct sctp_assoc_value instead [ 583.942863][T24718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5320'. [ 584.021651][T24696] wg1 speed is unknown, defaulting to 1000 [ 584.324713][T24727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5323'. [ 584.438343][T24703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.446903][T24703] 8021q: adding VLAN 0 to HW filter on device team0 [ 584.458561][T24703] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.495207][T24712] wg1 speed is unknown, defaulting to 1000 [ 584.869201][T24734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5326'. [ 584.891462][T24734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5326'. [ 585.076627][T24734] bond11: option arp_all_targets: invalid value (33557504) [ 585.103177][T24734] bond11 (unregistering): Released all slaves [ 585.475818][T24747] pim6reg: entered allmulticast mode [ 585.492051][T24743] pim6reg: left allmulticast mode [ 585.527057][T24746] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 585.534227][T24746] syzkaller1: Linktype set failed because interface is up [ 585.843565][T24772] netlink: 'syz.4.5336': attribute type 10 has an invalid length. [ 585.878706][T24772] team0: Failed to send options change via netlink (err -105) [ 585.887151][T24772] team0: Port device dummy0 added [ 585.893227][T24772] netlink: 'syz.4.5336': attribute type 10 has an invalid length. [ 585.900239][T24770] lo speed is unknown, defaulting to 1000 [ 585.904217][T24772] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 585.929458][T24772] team0: Failed to send options change via netlink (err -105) [ 585.937618][T24772] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 585.951423][ T5139] Bluetooth: hci1: command 0x0405 tx timeout [ 585.951531][T24772] team0: Port device dummy0 removed [ 585.974187][T24772] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 586.236385][T24787] syzkaller1: entered promiscuous mode [ 586.251393][T24787] syzkaller1: entered allmulticast mode [ 586.261871][T12927] bond0: (slave dummy0): interface is now down [ 586.270349][T12927] bond0: now running without any active interface! [ 586.297044][T24770] wg1 speed is unknown, defaulting to 1000 [ 586.797141][T24812] __nla_validate_parse: 2 callbacks suppressed [ 586.797161][T24812] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5348'. [ 586.844274][T24814] netlink: 'syz.0.5349': attribute type 1 has an invalid length. [ 587.326609][T24834] syzkaller0: entered promiscuous mode [ 587.341459][T24834] syzkaller0: entered allmulticast mode [ 587.575200][T24848] netlink: 91 bytes leftover after parsing attributes in process `syz.1.5357'. [ 587.678571][T24850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5358'. [ 587.976252][T24862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5363'. [ 588.019407][T24862] macvtap1: entered promiscuous mode [ 588.031921][T24862] macvtap1: entered allmulticast mode [ 588.042567][T24862] batadv0: entered allmulticast mode [ 588.057195][T24862] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 588.086095][T24862] batadv0: left allmulticast mode [ 588.327625][T24871] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5365'. [ 588.367029][T24873] netlink: 'syz.4.5366': attribute type 1 has an invalid length. [ 588.437862][T24873] 8021q: adding VLAN 0 to HW filter on device bond8 [ 588.620662][T24880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5368'. [ 589.163363][T24876] bond8: (slave veth9): Enslaving as an active interface with a down link [ 589.533132][T24919] xt_connbytes: Forcing CT accounting to be enabled [ 589.540172][T24918] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5379'. [ 589.839936][T24937] sctp: [Deprecated]: syz.0.5385 (pid 24937) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.839936][T24937] Use struct sctp_sack_info instead [ 590.003651][T24946] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5390'. [ 590.021328][T24952] tipc: Invalid UDP bearer configuration [ 590.021381][T24952] tipc: Enabling of bearer rejected, failed to enable media [ 590.021691][T24948] netlink: 'syz.1.5390': attribute type 13 has an invalid length. [ 590.061186][T24946] netlink: 'syz.1.5390': attribute type 13 has an invalid length. [ 590.081626][T24946] tipc: Enabling of bearer rejected, already enabled [ 590.167232][T24956] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 590.188334][T24960] syzkaller1: entered promiscuous mode [ 590.202781][T24960] syzkaller1: entered allmulticast mode [ 590.295849][T24964] 8021q: adding VLAN 0 to HW filter on device bond17 [ 590.357678][T24964] veth1_vlan: left allmulticast mode [ 590.377568][T24964] bridge1: left allmulticast mode [ 590.395321][T24964] erspan1: left allmulticast mode [ 590.404586][T24966] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5395'. [ 590.433666][T24971] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5394'. [ 590.488030][T24967] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 590.501290][T24967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 590.685277][T24977] bond11: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 590.725069][T24977] bond11 (unregistering): Released all slaves [ 590.768308][T24983] workqueue: name exceeds WQ_NAME_LEN. Truncating to: π,xb)% ]3DL̥ [ 590.904946][T24988] netlink: 'syz.2.5401': attribute type 13 has an invalid length. [ 591.041964][T24996] sctp: [Deprecated]: syz.3.5403 (pid 24996) Use of int in max_burst socket option. [ 591.041964][T24996] Use struct sctp_assoc_value instead [ 591.526940][T25013] syzkaller0: entered promiscuous mode [ 591.543451][T25013] syzkaller0: entered allmulticast mode [ 592.281905][T25058] __nla_validate_parse: 2 callbacks suppressed [ 592.281926][T25058] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5413'. [ 592.330975][T25062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5418'. [ 592.403950][T25068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5419'. [ 592.533778][T25073] netlink: 112 bytes leftover after parsing attributes in process `syz.0.5421'. [ 592.574119][T25073] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5421'. [ 592.718870][T25079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5423'. [ 592.925864][T25079] bond18: entered promiscuous mode [ 592.957610][T25079] 8021q: adding VLAN 0 to HW filter on device bond18 [ 593.009073][T25083] 8021q: adding VLAN 0 to HW filter on device bond18 [ 593.025344][T25083] bond18: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 593.082407][T25083] bond18: (slave ip6tnl3): Error -95 calling set_mac_address [ 593.523194][T25112] netlink: 'syz.4.5427': attribute type 1 has an invalid length. [ 593.709840][T25112] 8021q: adding VLAN 0 to HW filter on device bond9 [ 593.928205][T25114] bond9: (slave veth11): Enslaving as an active interface with a down link [ 594.033412][T25128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5431'. [ 594.047888][T25128] netlink: 'syz.3.5431': attribute type 7 has an invalid length. [ 594.056615][T25128] netlink: 'syz.3.5431': attribute type 8 has an invalid length. [ 594.065896][T25128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'. [ 594.085354][T25130] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5432'. [ 594.099172][T25126] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 594.220427][T25130] macvtap1: entered promiscuous mode [ 594.227858][T25130] macvtap1: entered allmulticast mode [ 594.237601][T25130] batadv0: entered allmulticast mode [ 594.249233][T25130] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 594.278971][T25130] batadv0: left allmulticast mode [ 594.370136][T25138] bond19: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 594.383536][T25138] bond19 (unregistering): Released all slaves [ 594.537827][T25149] lo speed is unknown, defaulting to 1000 [ 594.574886][T25146] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 594.599682][T25155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'. [ 594.610859][T25156] netlink: get zone limit has 4 unknown bytes [ 594.766600][T25166] netlink: 'syz.0.5444': attribute type 3 has an invalid length. [ 594.784928][T25166] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.797809][T25166] dvmrp0: left allmulticast mode [ 594.830761][T25149] wg1 speed is unknown, defaulting to 1000 [ 594.871302][T25166] siw: device registration error -23 [ 594.940904][T25166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.957270][T25166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 595.237017][T25182] ip6gre2: entered promiscuous mode [ 595.252539][T25182] ip6gre2: entered allmulticast mode [ 595.309115][T25179] netlink: 'syz.2.5448': attribute type 17 has an invalid length. [ 595.362591][T25179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 595.381284][T25179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 595.401703][T25179] hsr0: entered promiscuous mode [ 595.470963][T25187] netlink: 'syz.4.5450': attribute type 32 has an invalid length. [ 595.502177][T25187] IPv6: NLM_F_CREATE should be specified when creating new route [ 595.644094][T25189] netlink: 'syz.4.5451': attribute type 7 has an invalid length. [ 595.659300][T25191] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 595.661175][T25189] netlink: 'syz.4.5451': attribute type 8 has an invalid length. [ 595.726236][T25189] netlink: 'syz.4.5451': attribute type 8 has an invalid length. [ 595.742946][T25193] netlink: 'syz.0.5453': attribute type 13 has an invalid length. [ 596.339817][T25209] bond2: (slave geneve3): making interface the new active one [ 596.348756][T25209] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 596.416448][T12930] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.427308][T12930] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.454771][T12930] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.463387][T12930] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 596.507277][T25220] xt_hashlimit: size too large, truncated to 1048576 [ 596.667610][T25218] lo speed is unknown, defaulting to 1000 [ 596.735885][T25235] set match dimension is over the limit! [ 596.828970][T25237] tipc: Enabling of bearer rejected, already enabled [ 597.008509][T25246] openvswitch: netlink: ufid size 5796 bytes exceeds the range (1, 16) [ 597.048527][T25246] openvswitch: netlink: Message has 16 unknown bytes. [ 597.158679][T25244] xt_CONNSECMARK: invalid mode: 0 [ 597.287632][T25218] wg1 speed is unknown, defaulting to 1000 [ 597.555974][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.564763][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.648636][T25267] syzkaller1: entered promiscuous mode [ 597.666737][T25267] syzkaller1: entered allmulticast mode [ 597.900051][T25275] lo speed is unknown, defaulting to 1000 [ 597.926865][T25286] IPVS: length: 132 != 8 [ 597.980263][T25286] pimreg: entered allmulticast mode [ 598.301756][T25298] block nbd4: server does not support multiple connections per device. [ 598.342184][T25298] block nbd4: shutting down sockets [ 598.390233][T25300] __nla_validate_parse: 5 callbacks suppressed [ 598.390252][T25300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5479'. [ 598.595366][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.603630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.623467][T25286] pimreg: left allmulticast mode [ 598.679992][T25275] wg1 speed is unknown, defaulting to 1000 [ 598.844918][T25317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5483'. [ 598.911115][ C1] ------------[ cut here ]------------ [ 598.917090][ C1] ODEBUG: free active (active state 0) object: ffff88804cb52c90 object type: timer_list hint: rose_t0timer_expiry+0x0/0x560 [ 598.930220][ C1] WARNING: lib/debugobjects.c:615 at debug_check_no_obj_freed+0x405/0x550, CPU#1: syz.4.5476/25287 [ 598.941077][ C1] Modules linked in: [ 598.945445][ C1] CPU: 1 UID: 0 PID: 25287 Comm: syz.4.5476 Not tainted syzkaller #0 PREEMPT(full) [ 598.955023][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.965138][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 598.971541][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 598.991202][ C1] RSP: 0000:ffffc90004707aa8 EFLAGS: 00010246 [ 598.997289][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a42de20 RCX: 0000000000000000 [ 599.005415][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 599.014049][ C1] RBP: ffffffff8bcf4a00 R08: ffff88804cb52c90 R09: ffffffff8bcf5d20 [ 599.022095][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88804cb52e00 [ 599.030090][ C1] R13: ffffffff901b4570 R14: ffff88804cb52000 R15: ffff88804cb52c90 [ 599.038161][ C1] FS: 00005555722cf500(0000) GS:ffff8881255b0000(0000) knlGS:0000000000000000 [ 599.047223][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 599.053870][ C1] CR2: 00007fdaaefe42f8 CR3: 00000000b14da000 CR4: 00000000003526f0 [ 599.061897][ C1] Call Trace: [ 599.065197][ C1] [ 599.068148][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 599.073879][ C1] kfree+0x13a/0x610 [ 599.077806][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 599.083064][ C1] rose_timer_expiry+0x4cb/0x600 [ 599.088213][ C1] ? call_timer_fn+0x178/0x5a0 [ 599.093098][ C1] call_timer_fn+0x192/0x5a0 [ 599.097717][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 599.103258][ C1] ? call_timer_fn+0xd4/0x5a0 [ 599.107959][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 599.113159][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.118503][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 599.124065][ C1] __run_timer_base+0x652/0x8b0 [ 599.128937][ C1] ? ktime_get+0x45/0x200 [ 599.133365][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 599.138758][ C1] ? sched_clock_cpu+0x74/0x440 [ 599.143716][ C1] run_timer_softirq+0xb7/0x170 [ 599.148677][ C1] handle_softirqs+0x22a/0x7c0 [ 599.153512][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 599.158313][ C1] __irq_exit_rcu+0x5f/0x150 [ 599.163315][ C1] irq_exit_rcu+0x9/0x30 [ 599.167749][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 599.173481][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.179483][ C1] RIP: 0033:0x7fd24346c500 [ 599.183973][ C1] Code: 0f 7e c1 66 48 0f 7e ca 48 39 c2 73 65 48 39 f0 0f 82 2a 01 00 00 48 39 f2 72 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 [ 599.203674][ C1] RSP: 002b:00007ffe6e3734f0 EFLAGS: 00000283 [ 599.209824][ C1] RAX: 00007fd2430c7700 RBX: 00007fd2430b9ea8 RCX: ffffffff81d394d9 [ 599.218107][ C1] RDX: ffffffff8202d3e2 RSI: 00007fd2430c7700 RDI: 00007fd2430bfad0 [ 599.226153][ C1] RBP: 00007fd2430b7680 R08: 00007fd243800000 R09: 00007fd243816038 [ 599.234219][ C1] R10: 0000000000000001 R11: 0000000000000003 R12: 00007fd2430c7f28 [ 599.242343][ C1] R13: 000000000000001a R14: 0000000000002115 R15: 0000000000000001 [ 599.250354][ C1] ? is_bpf_text_address+0x1b9/0x2b0 [ 599.255731][ C1] ? __folio_batch_add_and_move+0xe2/0xc50 [ 599.261702][ C1] [ 599.264752][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 599.272042][ C1] CPU: 1 UID: 0 PID: 25287 Comm: syz.4.5476 Not tainted syzkaller #0 PREEMPT(full) [ 599.281420][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 599.291479][ C1] Call Trace: [ 599.294756][ C1] [ 599.297701][ C1] vpanic+0x1e0/0x670 [ 599.301704][ C1] panic+0xc5/0xd0 [ 599.305431][ C1] ? __pfx_panic+0x10/0x10 [ 599.309938][ C1] __warn+0x315/0x4a0 [ 599.313920][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 599.319816][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 599.325539][ C1] __report_bug+0x29a/0x540 [ 599.330057][ C1] ? debug_check_no_obj_freed+0x405/0x550 [ 599.335774][ C1] ? __pfx___report_bug+0x10/0x10 [ 599.340804][ C1] ? __update_load_avg_cfs_rq+0x6f6/0xbb0 [ 599.346527][ C1] report_bug_entry+0x19a/0x290 [ 599.351374][ C1] ? debug_check_no_obj_freed+0x44a/0x550 [ 599.357091][ C1] ? debug_check_no_obj_freed+0x44f/0x550 [ 599.362941][ C1] handle_bug+0xca/0x200 [ 599.367183][ C1] exc_invalid_op+0x1a/0x50 [ 599.371729][ C1] asm_exc_invalid_op+0x1a/0x20 [ 599.376606][ C1] RIP: 0010:debug_check_no_obj_freed+0x44a/0x550 [ 599.382952][ C1] Code: 89 44 24 20 e8 b7 6b 7e fd 48 8b 44 24 20 4c 8b 4d 00 4c 89 ef 48 c7 c6 40 6b 27 8c 48 c7 c2 c0 70 27 8c 8b 0c 24 4d 89 f8 50 <67> 48 0f b9 3a 48 83 c4 08 4c 8b 6c 24 18 48 b9 00 00 00 00 00 fc [ 599.402572][ C1] RSP: 0000:ffffc90004707aa8 EFLAGS: 00010246 [ 599.408656][ C1] RAX: ffffffff8a888d00 RBX: ffffffff9a42de20 RCX: 0000000000000000 [ 599.416706][ C1] RDX: ffffffff8c2770c0 RSI: ffffffff8c276b40 RDI: ffffffff901b4570 [ 599.424763][ C1] RBP: ffffffff8bcf4a00 R08: ffff88804cb52c90 R09: ffffffff8bcf5d20 [ 599.432733][ C1] R10: dffffc0000000000 R11: ffffffff81b099e0 R12: ffff88804cb52e00 [ 599.440698][ C1] R13: ffffffff901b4570 R14: ffff88804cb52000 R15: ffff88804cb52c90 [ 599.448667][ C1] ? __pfx_timer_debug_hint+0x10/0x10 [ 599.454651][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 599.460288][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 599.465925][ C1] kfree+0x13a/0x610 [ 599.469812][ C1] ? rose_timer_expiry+0x4cb/0x600 [ 599.475042][ C1] rose_timer_expiry+0x4cb/0x600 [ 599.479983][ C1] ? call_timer_fn+0x178/0x5a0 [ 599.484774][ C1] call_timer_fn+0x192/0x5a0 [ 599.489365][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 599.494820][ C1] ? call_timer_fn+0xd4/0x5a0 [ 599.499503][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 599.504632][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 599.509843][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 599.515303][ C1] __run_timer_base+0x652/0x8b0 [ 599.520168][ C1] ? ktime_get+0x45/0x200 [ 599.524526][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 599.529923][ C1] ? sched_clock_cpu+0x74/0x440 [ 599.534972][ C1] run_timer_softirq+0xb7/0x170 [ 599.539909][ C1] handle_softirqs+0x22a/0x7c0 [ 599.544668][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 599.549461][ C1] __irq_exit_rcu+0x5f/0x150 [ 599.554101][ C1] irq_exit_rcu+0x9/0x30 [ 599.558348][ C1] sysvec_apic_timer_interrupt+0x57/0xc0 [ 599.564066][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 599.570038][ C1] RIP: 0033:0x7fd24346c500 [ 599.574450][ C1] Code: 0f 7e c1 66 48 0f 7e ca 48 39 c2 73 65 48 39 f0 0f 82 2a 01 00 00 48 39 f2 72 65 66 0f c6 c0 01 0f 11 45 00 4c 89 e6 eb 09 90 <48> 8b 4b 08 48 83 c3 08 48 39 d1 72 f3 48 8d 46 f8 48 8b 76 f8 48 [ 599.594140][ C1] RSP: 002b:00007ffe6e3734f0 EFLAGS: 00000283 [ 599.600311][ C1] RAX: 00007fd2430c7700 RBX: 00007fd2430b9ea8 RCX: ffffffff81d394d9 [ 599.608276][ C1] RDX: ffffffff8202d3e2 RSI: 00007fd2430c7700 RDI: 00007fd2430bfad0 [ 599.616337][ C1] RBP: 00007fd2430b7680 R08: 00007fd243800000 R09: 00007fd243816038 [ 599.624299][ C1] R10: 0000000000000001 R11: 0000000000000003 R12: 00007fd2430c7f28 [ 599.632264][ C1] R13: 000000000000001a R14: 0000000000002115 R15: 0000000000000001 [ 599.640242][ C1] ? is_bpf_text_address+0x1b9/0x2b0 [ 599.645528][ C1] ? __folio_batch_add_and_move+0xe2/0xc50 [ 599.651780][ C1] [ 599.654978][ C1] Kernel Offset: disabled [ 599.659290][ C1] Rebooting in 86400 seconds..