last executing test programs: 2m38.584432368s ago: executing program 4 (id=2331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) 2m38.250785641s ago: executing program 4 (id=2333): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x84000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0x4, 0x4, 0x2, 0x44008, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x2}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000500)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) 2m37.322159803s ago: executing program 4 (id=2341): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x200, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0x8915, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1) 2m37.231468813s ago: executing program 4 (id=2342): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1e000000000000000a000000fbffff7f14"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x1b, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 2m34.652225882s ago: executing program 4 (id=2358): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2b, 0x1, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f00000006c0)={0x0, 0x19, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r3, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r6, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, 0x0, 0x40004) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x5, &(0x7f0000000040)=0x4, 0x4) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r11, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r13 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r12, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r13, 0xfffffdc8, &(0x7f0000000340)}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r11, 0x0, 0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000240)={'wpan0\x00'}) 2m32.084446911s ago: executing program 4 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1304000, 0x1000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f0000000600)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x79, &(0x7f0000000180)=""/121, 0x40f00, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) read$alg(r2, &(0x7f0000000000)=""/13, 0xd) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 2m31.642667444s ago: executing program 32 (id=2373): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1304000, 0x1000}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x9, &(0x7f0000000600)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x79, &(0x7f0000000180)=""/121, 0x40f00, 0x4}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) read$alg(r2, &(0x7f0000000000)=""/13, 0xd) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 3.395767388s ago: executing program 0 (id=3687): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000200)={0x2, @long}, 0x8) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000034b0d716d5ca84d9850000009b00000085000000070000009500000000000000"], &(0x7f0000000680)='GPL\x00'}, 0x5d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="5becbc0e0d7cca6073a4f11d1b00", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r8, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) unshare(0x2c020400) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000029c0)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x3}], 0x2, 0x40010002, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=@ipmr_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x80, 0x14, 0x90, 0x0, 0xfc, 0x11, 0xc8, 0x5, 0x200}}, 0x1c}, 0x1, 0x0, 0x0, 0xa800}, 0x0) 3.343800072s ago: executing program 2 (id=3689): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x14, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) 2.866879517s ago: executing program 1 (id=3693): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0xac, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x10, 0xffff}, {0xf, 0xe}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x0, [0x0, 0xe, 0xa, 0x2, 0x0, 0x9, 0x9, 0x5, 0x10, 0x7, 0x8, 0x3, 0x2, 0x6, 0xd, 0xd], 0x1, [0x1, 0x2883, 0x85, 0x1, 0x10, 0x0, 0x9, 0x7, 0x7ff, 0xc, 0x4, 0x6, 0x42d, 0x8, 0x200, 0x4], [0x36e, 0xd, 0xeed, 0x5, 0x200, 0x1, 0x32c4, 0x0, 0x5, 0x0, 0x10, 0x7, 0x200, 0x29, 0xffff, 0x3]}}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0x4}}]}]}, 0xac}}, 0x40044) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2.789887744s ago: executing program 1 (id=3695): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) (async) close(r1) 2.724442644s ago: executing program 1 (id=3696): r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000000206010200000000000000000000000a050001000700000009020073797a30000000000500050005000000050004000000000012000300686173683a6e65742c706f727400100000"], 0x4c}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x28b80, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x9) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000ec0), r4) sendmsg$NFC_CMD_DEP_LINK_UP(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f40)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf250400000008000400ffffffff08000100", @ANYRES32=0x0, @ANYBLOB="0000170000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000010) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r6, 0x11, 0x25, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe}, 0x40) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000140)={{{@in=@local, @in=@private=0xa010101, 0x0, 0x0, 0x4e24, 0x803, 0x2, 0x0, 0x0, 0x3a}, {0x0, 0x7ff, 0x913d, 0x0, 0x6, 0xa, 0x7d}, {0xfffffffffffffff7, 0x0, 0x0, 0x5}, 0xffffffff, 0x0, 0x1, 0x0, 0x4}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x3506, 0x0, 0x2, 0x4, 0x9, 0x0, 0x1}}, 0xe8) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000001c80)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0x3ec, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x138, 0x12, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x9947a60d6dbd01af}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x40, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RT_DREG={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DESC={0x200, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x247}, @NFTA_SET_DESC_CONCAT={0x80, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc0000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb6f6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x100}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xdffffffa}, @NFTA_SET_DESC_CONCAT={0x13c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff81}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x64}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3e}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff3478}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_SIZE={0x8}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x2}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPRESSIONS={0x78, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x24, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}]}}}, {0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe0}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}]}]}, @NFT_MSG_DELTABLE={0x50, 0x2, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x32, 0x6, "5aceb862481fe108a5932d20bb72ade51ed407acbd3d979b6d5ec1123d3d2d5e8cb4a578f7c0d45cd3b87783e6ad"}]}, @NFT_MSG_NEWSETELEM={0x5a4, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x590, 0x3, 0x0, 0x1, [{0x2e0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000000}, @NFTA_SET_ELEM_KEY_END={0x24, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_USERDATA={0x3a, 0x6, 0x1, 0x0, "208af5f9d5bf4732693fc1f1405d1958d64e91eaba3879bd3a2f6b3b80ccfc7a4e27979249ff17b38110a55b8784838b1f258d015b05"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}]}}}, {0x2c, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY={0x64, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x60, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x150, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x20, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}}}, {0x20, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x4}]}}}, {0x54, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x9}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}]}}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0xbc, 0x6, 0x1, 0x0, "14c17a7c06114e446413e01d4fd1bfe10561e78c25aca0383536abd500734565ddcf0736ce911b7fe19869c9515fa276d11217c0c12eeea3d6255e995b724aaf8650c21375b6286c24ec15a275d2fd8081c7ea6bb91c7a5358ddc433d626d2a607d24bd46bc5104cfee5212476c8aeebe3cc83114c69bedbaa78bbba2d73b8f38943e1d086e414aec39903076c59df215410eff121c551d1f4a1accd6e8d5f9a800ed1c43927665dce5cc5bf383a2a673db1c80132e56677"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x6}]}, {0x58, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x54, 0x7, 0x0, 0x1, @socket={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xb9}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0xda}]}}}]}, {0x188, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1000}, @NFTA_SET_ELEM_USERDATA={0xae, 0x6, 0x1, 0x0, "0d2b01960616792ff9c6f8fc120cc327095bc2c3c8ed02de47f582b63d50f8792ebbd396eb838fd511c6bad3894bca1996c0d71df8818e2673611be1a37bf0fca9652c95d1b067eba66189d7e1176c3e3441d2039b624f5f2a7527db85e5d2c41742ab8b9424e9f40a77c78cf8f299d7607700f8a754bcbdcc29f5a7b575f95767765f8620c31528b0e8aa6d9dd0f76d593f0ace825a951c506d000e6344e0774af17be2021d26187a0f"}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x810e}, @NFTA_SET_ELEM_USERDATA={0xad, 0x6, 0x1, 0x0, "9d751d8bbaabeec790fde8f39303fec3e0c876bf4915edecd5bfb5d5f99f22f38802751c0c5be21b952e836b04370d4963544ea5a687f69520544961201bdf57f1d1be96402c924cdcf74b2df2314e0d1592cbba8a1bc4893faeaa3beff89c10d386402e1aa90628dbcd1f2d19b463bc9f38859fda5b0ccc212f65d6850b1fb1585200e828db57fe91ea5778d20492b2b693b0bdd754d06cf60f004719ab385e32da80b4eb693e2887"}]}]}]}, @NFT_MSG_NEWSET={0xe4, 0x9, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xad, 0xd, 0x1, 0x0, "3a31987fd05624a09ef6e0b1c8f33e53b8911b5d9c89a94c21627434d19810424cd7a4caf386086f9ab1e1b5daa011fc6a64ab95af7f0e7131b27265764f702122649021e8cbeb2dade8aa58e388745ff6fd2f9c9a68f1d3f59bc37205bd894cdc4e9d27a989d14ab930355231c83c3e28e37b0729b1aa185230d3ca817d9c610f75bbc14026d75ebb4c0e677a029b27066fffd34bf530ebf730430be01f99810bfaa11e55ea370c91"}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWCHAIN={0x128, 0x3, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xd3, 0xc, "e757b3b0f956c6fef951cba8817347fbe38605d3b95de3d42d1a4380ce85b3e94250767b5c7b7ea371d06706eb98842631dffb82b5621fe509c642ef1be17b8711b185d20635384b14439bd771c099d56b4d94678d4ab81651a10aa3be216862d875b627a7acc9cdedaef741e67ab8d2d07658cb7ddf18b1229242e150924ced076900373a7c3bbdf7396c4efa75b5a2b989021e9e469c3dc7d6d38df9d2c1db707b1fd9efa5f0563c298b28a073a3b5d32ad6229b158527c4178914db2fb4a8449553df8033b828ec7b7b9ca12824"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xc14}, 0x1, 0x0, 0x0, 0x20000140}, 0x4000000) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000300)="89cdd80a864f0cd7872eb8edf973a554b0b9f5f63743ebee8107540eb2597ae11bcc6efb9dde8be46f1ee4988a17813746bef0da12b2741b8340c0c344fc747987dd76ae235c46a9659f14e6e3abbdb703f9d219608cbda4afa7679008eb5117458c72fd895cb6114d653d11095a2fc244b6198181d89e6e0103a28906bc88c69594b432933e47f43e092cd1ec6d483b4cc29c166cbeb57a55f65922b1317e8892a9d98febe6aa79878657f8a8") sendmsg$nl_xfrm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a"], 0x23c}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f00000000c0)) 2.630615389s ago: executing program 3 (id=3698): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000001030104000000000000ecc644714778856c4a107e6dbb62b3288f7aead1baab783b36c710c8ad3098e9fa7c89c7407e29a60090068c1a0fa8caa03c3f95292ec4ebd41ee0d28efe3efbfcc41746103966608855c6e57dc650bcfb5b513f6ff1742ec6408f097f1b29cd82196988061c41315343bb01dba3fce6dbcf2660c81070cff55ba9a5e3b6e206abfdea0ebf430154eb4ee5157a6c8ba4e0f3f705d30a957ea2f1cd9fa2adb1e70ddc2c209a5cfae338a1bbeefe322f7b58b7c3c451569ffa40be76bb825a5e948f7d97ca23c76ea38026054534958a0dd33e6e43b76f9f69a711dcc27fc3ab6067"], 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x4004840) r1 = socket(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000004c0)={0x1, [0x3231]}, &(0x7f0000000500)=0x6) getsockname$packet(r1, &(0x7f0000002600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8, '\x00', r2, 0xffffffffffffffff, 0x3, 0x1, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r7, 0x58, &(0x7f0000000400)}, 0x10) bind$l2tp6(r1, &(0x7f0000000540)={0xa, 0x0, 0x6, @private0, 0x4, 0x1}, 0x20) sendmsg$NL80211_CMD_SET_TID_CONFIG(r5, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0x30, r4, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x12}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1f3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3a7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x20c}]}, 0x4c}, 0x1, 0x0, 0x0, 0x42}, 0x40) 2.511917051s ago: executing program 3 (id=3699): r0 = socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd8, &(0x7f00000001c0)=""/216, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000fc0)={0x104, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0xec, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0x1000000fac08}, @typed={0x8, 0x44, 0x0, 0x0, @uid}, @nested={0xd1, 0x66, 0x0, 0x1, [@nested={0x1c, 0x132, 0x0, 0x1, [@typed={0x8, 0x141, 0x0, 0x0, @u32=0xb2}, @typed={0x8, 0xca, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xc5}, @nested={0x4, 0x8a}]}, @nested={0x8, 0xa1, 0x0, 0x1, [@nested={0x4, 0xb}]}, @generic="c073bf8f025953f538087c2947af34d793a12e66cd988ba2df542272ddf8f3b0634ff9883b7914bc9c92aafa8bb7b0c0552ff62f4a9716d08229fbc0558c09235f84d6771d08666d8b337ac75c741e4e77f4a9bc443c6a07af22469f8689554aa0e81e897ed6146a5b6cb1adf5cecbe76fb27a1c2610d17b8d3c80cfe639ce824597e338c1bb6a7d118257e8e8ac7e1f1c03054e4ec9bce7dfd5f3620229ab929fb9ebb5658776ab26"]}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="88462833"]}]}, 0x104}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000002c00ef5f"], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) r5 = socket$netlink(0x10, 0x3, 0x8000000004) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c280000800", @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0xffffffff, 0x0, 0x400}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6, 0x2}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmmsg$inet(r8, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{0x0, 0x0, &(0x7f0000000100)}}, {{&(0x7f0000000380)={0x2, 0x7, @rand_addr=0x64011100}, 0x10, &(0x7f0000000400)=[{&(0x7f00000003c0)="9b471e960bb5c3048be61afd8feede149cf6f09da93fdba0dce17d29cc7d2bd98c9f63e0b8405e28f68b28dc1a75363c5c0b20be", 0x34}], 0x1, &(0x7f0000000800)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7f}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x80}}], 0x3, 0x0) 2.4249872s ago: executing program 2 (id=3700): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) close(r0) 2.398593238s ago: executing program 3 (id=3701): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x28) r1 = epoll_create(0xd) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x4}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000000)=ANY=[@ANYRES32=r1], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x840) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000630122000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@can_newroute={0x34, 0x18, 0xf885a5fe37fdb9e7, 0x70bd2c, 0x25dfdbfd, {0x1d, 0x1, 0x3}, [@CGW_CS_XOR={0x8, 0x5, {0x4, 0xfffffffffffffff9, 0x5, 0x7}}, @CGW_MOD_SET={0x15, 0x4, {{{0x4, 0x0, 0x0, 0x1}, 0x8, 0x1, 0x0, 0x0, "ea887a286b1aec38"}, 0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x20000028) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_genetlink_get_family_id$nl80211(0x0, r4) 2.364402871s ago: executing program 0 (id=3702): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x500, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 2.107432697s ago: executing program 3 (id=3704): r0 = socket$kcm(0xa, 0x3, 0x3a) r1 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2, 0x0, 0x0, 0x100100}, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000880)=ANY=[@ANYBLOB="034886dd090328000500300003006028ee00000012"], 0xfdef) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x1, 0x4, 0x0, 0x3}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000100)="0080", 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.351559762s ago: executing program 1 (id=3708): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0xcb7}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.35104997s ago: executing program 5 (id=3709): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02140808070000002bbd7000fcdbdf250500170033a000000a004e2400000009fc8b00000000000000"], 0x38}}, 0x20008810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}}}}}}}, 0x0) 1.350432905s ago: executing program 1 (id=3710): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x40}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e21, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x290) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 1.350151219s ago: executing program 0 (id=3711): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x300, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x10000}, 0x1c) close(r0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1.349488375s ago: executing program 3 (id=3712): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0xffffff6a) r5 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0xffe4, &(0x7f0000000ac0)=[{&(0x7f0000000b00)="b6bd7e4983a45b31f79d80060400000000000000a33734d88229acf96457ad59d0b87f8659b614043e3d21a7cacecab8bbd26251b93b28b4d83e618673f9c74d0a28a5146c5511549fa617e908352c87d8ddff2ce042a1e58eb7b63759cab3526dd8ae1566ddcfb5fa83e8b2940b3ed1b8", 0x71}, {&(0x7f0000000880)="3aa854", 0x3}, {&(0x7f0000000a40)="746b9120a32aaf78043a9b07000000000000003c44", 0xfffffe16}], 0x3}, 0xc854) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4c, 0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) sendfile(r3, r4, 0x0, 0xffffffff000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x0, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x44010}, 0x40000) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) close(r0) 1.349057595s ago: executing program 0 (id=3713): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e01, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x3d, 0x0, "bb02a3c364ca41d6357e544524474004000b42a21d7214bf92494925208a0e2f964e0000c534a6324d6193fcf19b2df3ee818afaa4ff1f56c54dc46d8b6d2ccd008aa0cc1dc2767bbe00"}, 0xd8) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080)=0x3070, 0x4) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000001c0)={'dvmrp1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x40, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x8000010}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0x6, 0xffff}, {0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}}, 0x2000c000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="40000000100039042cbd7000fbdbdf2500000000", @ANYRES32=r6, @ANYBLOB="11980400419804002000128008000100736974001400028008000300ac1414aa06000f0002000000"], 0x40}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x0, &(0x7f0000000200)={0x11, 0x86dd, r6, 0x1, 0x4, 0x6, @local}, 0x14) r7 = openat$cgroup_devices(r2, &(0x7f0000000280)='devices.deny\x00', 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="1296962d2e69fc9863e557dd7120a44cce314f16dc5d693bb694d1c2ee5916861fabf8c86cb34c0a7064bb1cd28e05dd778937ebd13433bcac9158aa5f04e91a37ed83626d1f602e6362f04edc5ad71612b8ec05e1b1246f5d6747937e859abf470411d95e4e6c0e75110bcf6662f0041ed859f313fe57d7ce50caf6e8844a6da9d8cf58acaf51a5d1bb6fcfba6fc7c5a30ab0d1449dad1f29b757", 0xfe23}, {&(0x7f0000000100)="10b664579ebe5baca19b377b8d73fa1b34e742665f39849f744cc2061a981f644f72", 0x22}], 0x2}, 0x40000) write$cgroup_devices(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='c 75:*\tmm'], 0x3d) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, &(0x7f0000000040)={0x23, 0x14}, 0x10) 1.222309229s ago: executing program 5 (id=3714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xfff}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004040}, 0x80d5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000007440000000c0a01020000000000000000010000000900020073797a32000000001800038014000080040001800800034000000001042006400900010073797a3000"], 0xd0}, 0x1, 0x0, 0x0, 0x8a885}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2400c0c9}, 0x4840) 1.115295927s ago: executing program 2 (id=3715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0103, 0x0) vmsplice(r1, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1000}, 0x4) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x1d, &(0x7f0000000000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x7}, 0x6) bind$bt_hci(r4, &(0x7f0000000400)={0x1f, 0xffffffffffffffff}, 0x6) r5 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x800) setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000180)=0x3, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x28, 0x25, 0x301, 0x670bf22, 0x25dfdbfc, {0x15}, [@typed={0x12, 0x15e, 0x0, 0x0, @binary="7d0d98719d139b5dc99eccbeb51b"}]}, 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="0b0000006800e97800001000000000000a00000000"], 0x1c}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r8, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0xfffbfffd, @remote, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000080)="1c", 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES8=0x0, @ANYBLOB="0606010d000000000000000005088fc1ecbc2356686f4acb07206065151452c2add86254c93b3c858574bfd7d3f8422427cb8c75f124f48542dbbadced02caa1976f5c66cff39199c2acd3b1865670f8f1a5f693af071040410823c1ed340cea734ed94bf63d3c6fd5d298847791f807f08f7ce7632cd324d214cc463c12687677e7d46e69e50cbb01d479ac0196e626"], 0x10) sendmsg$nl_route(r6, 0x0, 0x4000) pselect6(0x40, &(0x7f00000001c0)={0x6, 0xe47, 0x7, 0x1, 0x1, 0x10001, 0x1, 0x2}, &(0x7f0000000200)={0x1, 0x7, 0x8000000000000000, 0x1ff, 0x7, 0xaef3, 0x8, 0x6}, &(0x7f0000000240)={0x1, 0x1, 0x6, 0x8be9, 0x6, 0x65, 0xfffffffffffffff8, 0x400}, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7]}, 0x8}) socket(0x1d, 0x802, 0x6) 851.32741ms ago: executing program 5 (id=3716): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000240)={r0, &(0x7f0000000040)='TIPC\x00', 0x4002, &(0x7f0000000080)={@_ha_fsid={[0x2, 0x1ff]}, {0xa, 0xb0ac, 0x1ff, 0xfffffffffffffffa}}, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0xfc8}) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_SET_SERVICE(r4, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r5, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7fffffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffffff79}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x4890) setsockopt$netlink_NETLINK_CAP_ACK(r3, 0x10e, 0xa, 0x0, 0x300) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='ip6_vti0\x00') 745.800494ms ago: executing program 5 (id=3717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'nicvf0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "db0c09b737dbd5dd7f700b848a91eb9ec3e6d668ae19b66fe2b1bcae8da34f7c", "e48f48c7b725cad03a8e80468863e7b6bd0acc9e92061fccc9e52fec5c18d5e4", "4def200f541e6f6c4de5f32edd7f4ea313e40af2e641272342b9a59c18f83155", "1ba24b242fb6e15e84cb90ad4ff0faa60358b12be2945a559c51618edfd212c7", "f6e948fd17b70e49857becf383d9c4b565adb95e3e70c042bd026aee3c1c14ed", "14fa0f0088d3ef6e3210878c", 0xd3, 0xb, 0x1, 0xdcb8, 0xa6ea}}) getsockname(r0, &(0x7f0000000140)=@x25, &(0x7f00000001c0)=0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @local, @private}, &(0x7f0000000280)=0xc) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x3, 0x9) setsockopt$MRT_TABLE(r5, 0x0, 0xcf, &(0x7f00000002c0), 0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2, &(0x7f0000000300)=@raw=[@jmp={0x5, 0x0, 0xa, 0x4, 0x1, 0x6, 0x4}, @generic={0x8, 0x5, 0x9, 0x0, 0x6}], &(0x7f0000000340)='syzkaller\x00', 0x4, 0x58, &(0x7f0000000380)=""/88, 0x40f00, 0x20, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x1, 0xf, 0x40}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0xffffffffffffffff], &(0x7f00000004c0)=[{0x1, 0x1, 0x10, 0x1}, {0x4, 0x3, 0x9, 0x8}, {0x0, 0x1, 0x6, 0xa}, {0x3, 0x3, 0xf, 0x9}], 0x10, 0x4}, 0x94) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz0\x00', 0x200002, 0x0) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000600)={r6, r7, 0xc, 0x0, @val=@perf_event={0x3}}, 0x18) ioctl$AUTOFS_IOC_SETTIMEOUT(r8, 0x80049367, &(0x7f0000000640)=0x4) close(r5) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, &(0x7f0000000700)={'tunl0\x00', &(0x7f0000000680)={'gre0\x00', r4, 0x10, 0x40, 0x2, 0x5, {{0x14, 0x4, 0x0, 0x1, 0x50, 0x65, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @multicast1, {[@timestamp_prespec={0x44, 0x2c, 0xab, 0x3, 0x9, [{@multicast2, 0x8}, {@loopback, 0x3}, {@remote, 0x1}, {@broadcast, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1f03}]}, @timestamp_prespec={0x44, 0xc, 0xf, 0x3, 0x8, [{@multicast1, 0xc}]}, @noop]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000740)={@mcast2, 0x41, r9}) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000780)={0x0, "d3b8f5ac8e06378e200e64d26597518e"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r6, 0xc400941d, &(0x7f0000001780)={r10, 0x58, 0x0, 0x1}) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000001c40)={&(0x7f0000001b80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001c00)={&(0x7f0000001bc0)={0x3c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xffff5334}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x401}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040005}, 0x4845) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001cc0), r2) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000002fc0)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002f80)={&(0x7f0000001d00)={0x1250, r12, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x5b}}}}, [@NL80211_ATTR_FRAME_MATCH={0x61, 0x5b, "7f2ffba3a418877a6b988bd4ea5700130252de23724979f95f0ba3a3194cae7d715d5385dcb4ad43f0687b680e9f801cb2dad9feba4e11d12bbed5437268c9f0257d0b8f964c08d902fd34a508bb3e04658bbd491b2c3f272438c1b0cd"}, @NL80211_ATTR_FRAME_MATCH={0xe4, 0x5b, "836fcd6a0aaf7c4d4113bb761a867d515e28b483d7fc92fc77fcb23194138fd325ddc5186b03aa90e0b3f6e8e636fe1208afb8f83eefdf7a8586a17244d3478414645fc528dd5c0b135b074bb30b937947ecee22266bbb31ff52c3b06f0821738f97248bab320ffde82a575ec2c44ae4ae6c7c68a8bcecd0a810f96e7565400056c787c2608b1eb00970c3dee3f67bdf6a74ee5a12a2acbc7778b17d18da8355855d23d333ba2355d4985e03880c28ea8a0d69f3f6b54bbdeb855883dc023445c4edb2879534368b8ac9dfb6948e6c9b513858b7c66cc6f95e14473754234c22"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_MATCH={0x4d, 0x5b, "0d0ac3f50c68e564a83eace6a38f9b678b71f1973100f81cd0c7c7e75b4b9f08ef7677d4fe5ba8958c5afa92752fa0e8f9c1a0075f178c257c495ae77d895b0b08bb811529bf884bb9"}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "eb5067e81bc38404e5cf2c0b9b50c61d3dde1b"}, @NL80211_ATTR_FRAME_MATCH={0x1004, 0x5b, "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"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x723}, @NL80211_ATTR_FRAME_MATCH={0x51, 0x5b, "32f1cfb4a721cf51d0f947b9a27ef7be0b1d94caca63cf8660a51ecf4e47264f2ae5a2766da85afb4f3ca99619b0ef9c70fff5bfcf7f176f26fd7976ac9fabd97dd04b7b5ddf7efb6932090af9"}, @NL80211_ATTR_FRAME_MATCH={0x17, 0x5b, "631baf9d1a97bbd87139905f06560d4924902a"}]}, 0x1250}, 0x1, 0x0, 0x0, 0x4}, 0x24000012) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000003000)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r7, 0xd000943d, &(0x7f0000003200)={0x7, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x9, "85a2ba79c535dd"}) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000004200)={{0x0, 0x7fffffff, 0xdcd, 0x1, 0x4, 0x3ff, 0x10, 0x0, 0x7, 0x7, 0x10, 0x7, 0x7fff, 0x7, 0xb}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000005200)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000006200)={0x401, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x9, "512f84c940707c"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000010ad00)={0x1, [{r13}, {r14}, {r15}, {r16, r17}], 0xed, "52d7754f612ef5"}) 685.087405ms ago: executing program 2 (id=3718): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000500)={@broadcast, @initdev={0xac, 0x1e, 0xff, 0x0}}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)={@local, @loopback, 0x1}, 0x10) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1e, 0x10, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x0, 0x5, 0x4, 0x10}, @generic={0x8, 0x2, 0x2, 0xd4, 0x8000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000240)='GPL\x00', 0x9, 0xf, &(0x7f00000002c0)=""/15, 0x41100, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0xa, 0x9, 0xfff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000440)=[{0x5, 0x3, 0x10, 0xb}, {0x0, 0x5, 0x5, 0xc}], 0x10, 0x2}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000840)={r1, r4}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28", 0xa6}, {&(0x7f0000000040)="7542473782798be019", 0x9}], 0x2}}], 0x2, 0x2090) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008e0e6ffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0af1cb3f1f815f8989d78854ca4d3116dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fc5fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4c6ea9604faf0453bedf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c29984864961a57ff52f657a67463d7dbf85ae9321fc2cc17dc4a29b9cba8ded5de8206c812439ab129ae818837ee15620789c524b3baf49a09d8be0fc5beecf153236c19740be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2b4dc87b0da20000d9ef418cf19e7a8c4c328be0ce91798adc2dca87ddd9d064e081383409ed2912c811ae63f03212a5331c2a4ead000000000000000000000000000000000000000000000000001386866b311bd144bc32e059658c9f8342c90c1ade31b78072841b8b5a943d62a44cea6b050c42e3c205fad6a23fb43c93da0f49d911877265e6ee443e37397ecf89021e7f579e8d3a74c12b52938d91e9de07fc8eeeb9505f4a9c26266bf5449484ccc1317c7476"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) close(0x3) 496.185628ms ago: executing program 0 (id=3719): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xf1, @empty, 0x19f4929}], 0x1c) listen(r0, 0x100) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000300)="d9", 0x1}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000008400000007000000ac"], 0x18, 0x48d5}, 0x8050) 457.156194ms ago: executing program 5 (id=3720): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2c, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x3, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x4, 0x100000, 0x762, 0x3, 0xd, 0x5, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x2, 0x8000108, 0x3, 0x0, 0x11000, 0x7ffffffc, 0x5, 0x79b, 0x2, 0x1, 0x7d, 0x4, 0x10006, 0x7, 0x11, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x2, 0x7, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x9, 0xa, 0x0, 0x4, 0x1, 0x40, 0x8, 0x4, 0x9, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001e1401"], 0x20}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@empty, 0x300, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x0, r2}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5}}, 0xb8}, 0x1, 0x0, 0x0, 0x810}, 0x0) 374.429704ms ago: executing program 2 (id=3721): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x4e1a, 0x7, @local, 0x2}, 0x1c) r2 = socket$unix(0x1, 0x1, 0x0) recvmsg$unix(r2, &(0x7f0000001dc0)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000001d00)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000340)=""/143, 0x8f}, {&(0x7f00000004c0)=""/233, 0xe9}, {&(0x7f0000000b00)=""/4096, 0x1000}, {&(0x7f0000001b00)=""/149, 0x95}, {&(0x7f0000001bc0)=""/241, 0xf1}, {&(0x7f0000001cc0)=""/62, 0x3e}], 0x7, &(0x7f0000001d80)=[@cred={{0x1c}}], 0x20}, 0x141) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 328.168162ms ago: executing program 1 (id=3722): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000100)=ANY=[], 0x184}}, 0x40000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e0000001080002"], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000013002108000000000000000008000000", @ANYRES32=r1, @ANYBLOB="0600000021a500000c003a80"], 0x2c}], 0x1}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x1000000) 220.989794ms ago: executing program 5 (id=3723): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000040)='tunnel_key\x00', 0x80, &(0x7f0000000080)={@_ha_fsid={[0x3, 0x2]}, {0x7, 0x5, 0x9, 0xa20d}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)=0x8f8a}) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELCHAIN={0xb0, 0x5, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x1ce6}, [@NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x467adaf3}, @NFTA_HOOK_DEV={0x14, 0x3, 'team_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xaf1}]}, @NFTA_CHAIN_COUNTERS={0xfffffffffffffdea, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x55}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x40008}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}}, @NFT_MSG_NEWRULE={0x18, 0x6, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x808}, [@NFTA_RULE_COMPAT={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}, 0x1, 0x0, 0x0, 0x20000080}, 0x40057) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = getuid() r3 = gettid() r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r3}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r6, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38, 0x4004c}}], 0x1, 0x805) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r13 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010025bd7000fedbdf251400000008001c00", @ANYRES32=0x0, @ANYBLOB="08001c00", @ANYRES32=0x0, @ANYBLOB="080001000100000008001c00", @ANYRES32=r13, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08001d00", @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x200000c5}, 0x4880) (fail_nth: 7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000600)) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000680)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000006c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@private2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@private1}}, &(0x7f0000000800)=0xe8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000840)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000880)={0x0, 0x0}, &(0x7f00000008c0)=0xc) r20 = getgid() sendmsg$netlink(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="180000001e0010bd70000000df2508004773fdde1992e117cd2e7756e35875c1000000", @ANYRES32=r2], 0x18}], 0x1, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r3, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r16, r18}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r20}}}], 0xa0, 0x20008000}, 0x48080) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x1, 0x70bd29, 0x0, {}, [{0x4c, 0x1, [@m_tunnel_key={0x48, 0x1, 0x0, 0x0, {{0xf}, {0x18, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) 146.836544ms ago: executing program 3 (id=3724): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="02140808070000002bbd7000fcdbdf250500170033a000000a004e2400000009fc8b00000000000000"], 0x38}}, 0x20008810) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r3, 0x25, 0x0, @void}, 0x10) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) syz_emit_ethernet(0x2e, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x6558, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}}}}}}}, 0x0) 70.588865ms ago: executing program 2 (id=3725): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x2c, r3, 0x1, 0x70bd28, 0x40, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x21, 0x7, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000180)={0xa11, 0x1000, 0xc200, 0x8000, 0x1, 0x7fffffff, 0x8, 0x4}, 0x20) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x4c, 0x1, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6006}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xe8f8}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8005}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket(0x10, 0x803, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r6], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 0 (id=3726): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="d37a45379e03a6d115c5497e6224f40c2052641dec76eb67c68787ee7c24df0b009bf7f8c5c7ebbf9941ad2a149f85d7187be6e73574934a037d04e453f9da87c9f8d04df418e428e37cedb9f6a451e54df40ffdec3b767efd6898a24e73c6736b0dd05e1396519aa2553b81f887c37805864fa1573bd29a434878ffbf2cf2351f32cf2404a4fc431b2a47b6ede95773732a5c28e0cb905b02338a9acef29096aee334d2b77377e00d51a4b1c27d7f2ed235651850edcc9705b9fec0db66d9409c54cce02a1e636db95eb7b7b5389352bd55968c29000ddef424695d3ef9", @ANYRES16=r2, @ANYRES16=r1, @ANYRES32=0x0, @ANYBLOB="0800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x400}, 0xc004) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000003a00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1}}}], 0x20}, 0x4008804) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x20, 0x3f00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x0, @local}, 0x10, &(0x7f0000000280)}, 0x0) kernel console output (not intermixed with test programs): ess `syz.0.2931'. [ 384.734426][T15515] syzkaller0: entered allmulticast mode [ 384.736114][ T5643] Bluetooth: hci2: command 0x0406 tx timeout [ 384.800583][ T5644] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 385.229655][T15549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2938'. [ 385.244443][T15549] FAULT_INJECTION: forcing a failure. [ 385.244443][T15549] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.253219][T15546] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2937'. [ 385.259602][T15550] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2939'. [ 385.267818][T15549] CPU: 1 UID: 0 PID: 15549 Comm: syz.3.2938 Not tainted syzkaller #0 PREEMPT(full) [ 385.267840][T15549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 385.267851][T15549] Call Trace: [ 385.267858][T15549] [ 385.267864][T15549] dump_stack_lvl+0xe8/0x150 [ 385.267888][T15549] should_fail_ex+0x412/0x560 [ 385.267914][T15549] prepare_alloc_pages+0x22a/0x650 [ 385.267944][T15549] __alloc_frozen_pages_noprof+0x12f/0x380 [ 385.267970][T15549] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.267996][T15549] ? __pfx_policy_nodemask+0x10/0x10 [ 385.268023][T15549] ? __lock_acquire+0x6b5/0x2cf0 [ 385.268043][T15549] alloc_pages_mpol+0x235/0x490 [ 385.268071][T15549] folio_alloc_mpol_noprof+0x39/0x160 [ 385.268095][T15549] vma_alloc_folio_noprof+0xe1/0x1e0 [ 385.268120][T15549] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 385.268143][T15549] ? __pte_offset_map+0x29/0x240 [ 385.268163][T15549] ? __pte_offset_map+0x29/0x240 [ 385.268184][T15549] do_pte_missing+0x159d/0x33f0 [ 385.268216][T15549] ? handle_mm_fault+0xee/0x3170 [ 385.268238][T15549] handle_mm_fault+0x1bd9/0x3170 [ 385.268268][T15549] ? handle_mm_fault+0xee/0x3170 [ 385.268293][T15549] ? __pfx_handle_mm_fault+0x10/0x10 [ 385.268323][T15549] ? __lock_acquire+0x6b5/0x2cf0 [ 385.268343][T15549] ? lock_mm_and_find_vma+0xa7/0x340 [ 385.268366][T15549] do_user_addr_fault+0x75b/0x1340 [ 385.268402][T15549] exc_page_fault+0x6a/0xc0 [ 385.268426][T15549] asm_exc_page_fault+0x26/0x30 [ 385.268447][T15549] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 385.268467][T15549] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 385.268479][T15549] RSP: 0018:ffffc90005ac7638 EFLAGS: 00050206 [ 385.268493][T15549] RAX: ffff88808bca4001 RBX: ffff88808bca4141 RCX: 00000000000006c3 [ 385.268505][T15549] RDX: 0000000000000000 RSI: ffff88808bca44c1 RDI: 0000200000001000 [ 385.268515][T15549] RBP: ffffc90005ac77b0 R08: ffff88808bca4b83 R09: 1ffff11011794970 [ 385.268526][T15549] R10: dffffc0000000000 R11: ffffed1011794971 R12: dffffc0000000000 [ 385.268536][T15549] R13: 0000000000000a43 R14: 00007ffffffff000 R15: 00002000000016c3 [ 385.268563][T15549] _copy_to_iter+0x60a/0x17d0 [ 385.268598][T15549] ? __pfx__copy_to_iter+0x10/0x10 [ 385.268617][T15549] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 385.268637][T15549] ? lockdep_hardirqs_on+0x7a/0x110 [ 385.268658][T15549] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 385.268678][T15549] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 385.268702][T15549] __skb_datagram_iter+0xf8/0x980 [ 385.268720][T15549] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 385.268744][T15549] skb_copy_datagram_iter+0xb5/0x240 [ 385.268765][T15549] netlink_recvmsg+0x2c3/0xa50 [ 385.268791][T15549] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.268811][T15549] ? __lock_acquire+0x6b5/0x2cf0 [ 385.268827][T15549] ? aa_sock_msg_perm+0xf1/0x1b0 [ 385.268848][T15549] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 385.268868][T15549] ? security_socket_recvmsg+0x7e/0x2c0 [ 385.268889][T15549] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.268906][T15549] sock_recvmsg+0x172/0x1b0 [ 385.268929][T15549] ____sys_recvmsg+0x1e6/0x4a0 [ 385.268953][T15549] ? __pfx_____sys_recvmsg+0x10/0x10 [ 385.268984][T15549] ? import_iovec+0x73/0xa0 [ 385.269008][T15549] ___sys_recvmsg+0x215/0x590 [ 385.269023][T15549] ? get_pid_task+0x20/0x1f0 [ 385.269046][T15549] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.269067][T15549] ? __fget_files+0x2a/0x420 [ 385.269101][T15549] ? __fget_files+0x3a0/0x420 [ 385.269128][T15549] __x64_sys_recvmsg+0x1ba/0x2a0 [ 385.269147][T15549] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 385.269172][T15549] ? __pfx_ksys_write+0x10/0x10 [ 385.269201][T15549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.269217][T15549] do_syscall_64+0x15f/0xf80 [ 385.269238][T15549] ? trace_irq_disable+0x3b/0x140 [ 385.269259][T15549] ? clear_bhb_loop+0x40/0x90 [ 385.269278][T15549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.269293][T15549] RIP: 0033:0x7fcb4119ce59 [ 385.269307][T15549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.269320][T15549] RSP: 002b:00007fcb420f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 385.269335][T15549] RAX: ffffffffffffffda RBX: 00007fcb41415fa0 RCX: 00007fcb4119ce59 [ 385.269346][T15549] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 385.269355][T15549] RBP: 00007fcb420f2090 R08: 0000000000000000 R09: 0000000000000000 [ 385.269364][T15549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.269373][T15549] R13: 00007fcb41416038 R14: 00007fcb41415fa0 R15: 00007ffd5645a2a8 [ 385.269400][T15549] [ 385.272136][T15546] netlink: 18 bytes leftover after parsing attributes in process `syz.2.2937'. [ 385.285803][T15553] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2939'. [ 385.307445][T15549] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2938'. [ 385.901847][T15562] syzkaller0: entered promiscuous mode [ 385.907595][T15562] syzkaller0: entered allmulticast mode [ 386.066037][T15579] netlink: 'syz.2.2946': attribute type 58 has an invalid length. [ 386.377894][ T5643] Bluetooth: hci5: command tx timeout [ 386.927753][T15583] Bluetooth: MGMT ver 1.23 [ 388.170941][T15601] FAULT_INJECTION: forcing a failure. [ 388.170941][T15601] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.187954][T15601] CPU: 1 UID: 0 PID: 15601 Comm: syz.3.2950 Not tainted syzkaller #0 PREEMPT(full) [ 388.187978][T15601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.187988][T15601] Call Trace: [ 388.187995][T15601] [ 388.188004][T15601] dump_stack_lvl+0xe8/0x150 [ 388.188029][T15601] should_fail_ex+0x412/0x560 [ 388.188055][T15601] _copy_to_user+0x31/0xb0 [ 388.188080][T15601] simple_read_from_buffer+0xe1/0x170 [ 388.188112][T15601] proc_fail_nth_read+0x1bb/0x230 [ 388.188135][T15601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.188158][T15601] ? rw_verify_area+0x2a6/0x4d0 [ 388.188179][T15601] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.188200][T15601] vfs_read+0x20c/0xa70 [ 388.188227][T15601] ? __pfx___mutex_lock+0x10/0x10 [ 388.188242][T15601] ? __pfx_vfs_read+0x10/0x10 [ 388.188264][T15601] ? __fget_files+0x2a/0x420 [ 388.188285][T15601] ? __fget_files+0x3a0/0x420 [ 388.188302][T15601] ? __fget_files+0x2a/0x420 [ 388.188328][T15601] ksys_read+0x150/0x270 [ 388.188352][T15601] ? __pfx_ksys_read+0x10/0x10 [ 388.188381][T15601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.188399][T15601] do_syscall_64+0x15f/0xf80 [ 388.188420][T15601] ? trace_irq_disable+0x3b/0x140 [ 388.188443][T15601] ? clear_bhb_loop+0x40/0x90 [ 388.188463][T15601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.188479][T15601] RIP: 0033:0x7fcb4115d68e [ 388.188495][T15601] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.188509][T15601] RSP: 002b:00007fcb420f1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.188527][T15601] RAX: ffffffffffffffda RBX: 00007fcb420f26c0 RCX: 00007fcb4115d68e [ 388.188539][T15601] RDX: 000000000000000f RSI: 00007fcb420f20a0 RDI: 0000000000000006 [ 388.188549][T15601] RBP: 00007fcb420f2090 R08: 0000000000000000 R09: 0000000000000000 [ 388.188559][T15601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.188569][T15601] R13: 00007fcb41416038 R14: 00007fcb41415fa0 R15: 00007ffd5645a2a8 [ 388.188597][T15601] [ 388.413965][T15603] FAULT_INJECTION: forcing a failure. [ 388.413965][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 388.427012][T15603] CPU: 1 UID: 0 PID: 15603 Comm: syz.2.2951 Not tainted syzkaller #0 PREEMPT(full) [ 388.427035][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 388.427045][T15603] Call Trace: [ 388.427052][T15603] [ 388.427067][T15603] dump_stack_lvl+0xe8/0x150 [ 388.427092][T15603] should_fail_ex+0x412/0x560 [ 388.427117][T15603] should_failslab+0xa8/0x100 [ 388.427142][T15603] __kmalloc_node_noprof+0xf0/0x7c0 [ 388.427163][T15603] ? lock_acquire+0x106/0x350 [ 388.427180][T15603] ? qdisc_alloc+0x92/0x9e0 [ 388.427207][T15603] qdisc_alloc+0x92/0x9e0 [ 388.427236][T15603] qdisc_create+0x12c/0xf20 [ 388.427259][T15603] ? lockdep_rtnl_is_held+0x26/0x40 [ 388.427277][T15603] ? qdisc_lookup+0x36d/0x6d0 [ 388.427298][T15603] tc_modify_qdisc+0x16f0/0x2290 [ 388.427317][T15603] ? rcu_is_watching+0x15/0xb0 [ 388.427347][T15603] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 388.427367][T15603] ? __dev_queue_xmit+0x2b6/0x3950 [ 388.427408][T15603] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 388.427427][T15603] rtnetlink_rcv_msg+0x77e/0xbe0 [ 388.427452][T15603] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 388.427472][T15603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.427491][T15603] ? ref_tracker_free+0x693/0x840 [ 388.427514][T15603] ? __pfx_ref_tracker_free+0x10/0x10 [ 388.427546][T15603] netlink_rcv_skb+0x232/0x4b0 [ 388.427564][T15603] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 388.427587][T15603] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 388.427617][T15603] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.427633][T15603] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.427655][T15603] netlink_unicast+0x75c/0x8e0 [ 388.427688][T15603] netlink_sendmsg+0x813/0xb40 [ 388.427710][T15603] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.427730][T15603] ? aa_sock_msg_perm+0xf1/0x1b0 [ 388.427753][T15603] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.427777][T15603] ____sys_sendmsg+0x972/0x9f0 [ 388.427794][T15603] ? __might_fault+0xaf/0x130 [ 388.427820][T15603] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.427845][T15603] ? import_iovec+0x73/0xa0 [ 388.427871][T15603] ___sys_sendmsg+0x2a5/0x360 [ 388.427887][T15603] ? __lock_acquire+0x6b5/0x2cf0 [ 388.427908][T15603] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.427958][T15603] ? __fget_files+0x2a/0x420 [ 388.427976][T15603] ? __fget_files+0x3a0/0x420 [ 388.428005][T15603] __x64_sys_sendmsg+0x1bd/0x2a0 [ 388.428024][T15603] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.428050][T15603] ? __pfx_ksys_write+0x10/0x10 [ 388.428077][T15603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.428102][T15603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.428120][T15603] do_syscall_64+0x15f/0xf80 [ 388.428142][T15603] ? trace_irq_disable+0x3b/0x140 [ 388.428165][T15603] ? clear_bhb_loop+0x40/0x90 [ 388.428185][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.428201][T15603] RIP: 0033:0x7f96aa59ce59 [ 388.428218][T15603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.428232][T15603] RSP: 002b:00007f96ab538028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.428249][T15603] RAX: ffffffffffffffda RBX: 00007f96aa815fa0 RCX: 00007f96aa59ce59 [ 388.428261][T15603] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 388.428272][T15603] RBP: 00007f96ab538090 R08: 0000000000000000 R09: 0000000000000000 [ 388.428282][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.428291][T15603] R13: 00007f96aa816038 R14: 00007f96aa815fa0 R15: 00007ffffe44f678 [ 388.428319][T15603] [ 388.781892][ T5643] Bluetooth: hci5: command tx timeout [ 388.929877][T15446] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 388.963336][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.973232][T15446] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 388.996128][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.005954][T15446] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.022020][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.029902][T15446] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.040703][T15446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.051792][T15613] netlink: 956 bytes leftover after parsing attributes in process `syz.3.2956'. [ 389.062375][T15614] netlink: 'syz.5.2955': attribute type 1 has an invalid length. [ 389.110873][T15614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.173475][T15613] syzkaller1: entered promiscuous mode [ 389.180849][T15613] syzkaller1: entered allmulticast mode [ 389.334049][T15446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.423073][T15446] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.444640][ T3361] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.451852][ T3361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.524788][T15647] netlink: 'syz.5.2963': attribute type 1 has an invalid length. [ 389.526900][ T3361] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.533791][T15647] __nla_validate_parse: 5 callbacks suppressed [ 389.533806][T15647] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2963'. [ 389.539720][ T3361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.565706][T15647] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2963'. [ 389.583669][T15647] netlink: 'syz.5.2963': attribute type 1 has an invalid length. [ 389.602467][T15641] syzkaller0: entered promiscuous mode [ 389.610302][T15641] syzkaller0: entered allmulticast mode [ 389.613610][T15647] netlink: 'syz.5.2963': attribute type 10 has an invalid length. [ 389.633159][T15641] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2961'. [ 389.686093][T15647] team0 (unregistering): Port device team_slave_0 removed [ 389.708009][T15647] team0 (unregistering): Port device team_slave_1 removed [ 389.884861][T15662] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2965'. [ 390.026130][T15670] netlink: 'syz.0.2966': attribute type 11 has an invalid length. [ 390.047039][T15670] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2966'. [ 390.286740][T15683] netlink: 'syz.3.2971': attribute type 9 has an invalid length. [ 390.300358][T15685] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2972'. [ 390.451663][T15694] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2973'. [ 390.480920][T15694] netlink: 732 bytes leftover after parsing attributes in process `syz.2.2973'. [ 390.855547][T15446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.862560][ T5644] Bluetooth: hci5: command tx timeout [ 390.967175][T15446] veth0_vlan: entered promiscuous mode [ 390.989523][T15446] veth1_vlan: entered promiscuous mode [ 391.084673][T15446] veth0_macvtap: entered promiscuous mode [ 391.100941][T15446] veth1_macvtap: entered promiscuous mode [ 391.135770][T15446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.165807][T15446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.184876][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.197888][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.209222][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.220486][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.257033][T15694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 391.597070][T15729] bond2: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 391.672002][T15729] bond2: entered promiscuous mode [ 391.717002][T15729] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.800585][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.825018][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.976836][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 392.108838][ T749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.137490][ T5644] Bluetooth: hci2: command 0x0406 tx timeout [ 392.137851][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 392.150096][ T749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.273675][T15759] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 392.466799][T15765] ip6_vti0: Master is either lo or non-ether device [ 393.154178][ T5644] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 393.171669][ T5644] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 393.183313][ T5644] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 393.193944][ T5644] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 393.204443][ T5644] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 393.237326][ T7156] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 393.260636][T15784] 8021q: adding VLAN 0 to HW filter on device eth0 [ 393.406102][T15784] 8021q: adding VLAN 0 to HW filter on device eth1 [ 393.469022][T15784] 8021q: adding VLAN 0 to HW filter on device eth2 [ 393.482366][T15784] 8021q: adding VLAN 0 to HW filter on device eth3 [ 393.661676][ T7155] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 393.725444][T15795] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2998'. [ 394.032242][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.158827][T15816] netlink: 'syz.1.3004': attribute type 11 has an invalid length. [ 394.198678][T15816] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3004'. [ 394.340712][T15824] FAULT_INJECTION: forcing a failure. [ 394.340712][T15824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.373830][T15824] CPU: 0 UID: 0 PID: 15824 Comm: syz.0.3008 Not tainted syzkaller #0 PREEMPT(full) [ 394.373855][T15824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 394.373869][T15824] Call Trace: [ 394.373876][T15824] [ 394.373885][T15824] dump_stack_lvl+0xe8/0x150 [ 394.373909][T15824] should_fail_ex+0x412/0x560 [ 394.373935][T15824] _copy_to_user+0x31/0xb0 [ 394.373959][T15824] simple_read_from_buffer+0xe1/0x170 [ 394.373984][T15824] proc_fail_nth_read+0x1bb/0x230 [ 394.374007][T15824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.374031][T15824] ? rw_verify_area+0x2a6/0x4d0 [ 394.374052][T15824] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.374073][T15824] vfs_read+0x20c/0xa70 [ 394.374092][T15824] ? fdget+0x148/0x1e0 [ 394.374113][T15824] ? bpf_prog_test_run+0x1b2/0x340 [ 394.374132][T15824] ? __pfx_vfs_read+0x10/0x10 [ 394.374151][T15824] ? __sys_bpf+0x643/0x950 [ 394.374175][T15824] ? __pfx___sys_bpf+0x10/0x10 [ 394.374194][T15824] ? kmem_cache_free+0x182/0x650 [ 394.374228][T15824] ksys_read+0x150/0x270 [ 394.374252][T15824] ? __pfx_ksys_read+0x10/0x10 [ 394.374280][T15824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.374297][T15824] do_syscall_64+0x15f/0xf80 [ 394.374318][T15824] ? trace_irq_disable+0x3b/0x140 [ 394.374340][T15824] ? clear_bhb_loop+0x40/0x90 [ 394.374359][T15824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.374374][T15824] RIP: 0033:0x7f82cbb5d68e [ 394.374391][T15824] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 394.374403][T15824] RSP: 002b:00007f82cca7ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.374421][T15824] RAX: ffffffffffffffda RBX: 00007f82cca806c0 RCX: 00007f82cbb5d68e [ 394.374432][T15824] RDX: 000000000000000f RSI: 00007f82cca800a0 RDI: 0000000000000003 [ 394.374442][T15824] RBP: 00007f82cca80090 R08: 0000000000000000 R09: 0000000000000000 [ 394.374452][T15824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.374462][T15824] R13: 00007f82cbe16038 R14: 00007f82cbe15fa0 R15: 00007ffcd9663268 [ 394.374490][T15824] [ 394.861667][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.988353][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.117840][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.257748][ T5643] Bluetooth: hci0: command tx timeout [ 395.266145][T15856] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 395.613064][T15864] netlink: 'syz.5.3018': attribute type 15 has an invalid length. [ 395.757472][ T13] bond6 (unregistering): (slave ip6erspan0): Releasing active interface [ 396.020748][ T13] bond0 (unregistering): Released all slaves [ 396.032035][ T13] bond1 (unregistering): (slave veth3): Releasing active interface [ 396.044249][ T13] bond1 (unregistering): Released all slaves [ 396.062117][ T13] bond2 (unregistering): Released all slaves [ 396.080771][ T13] bond3 (unregistering): Released all slaves [ 396.094260][ T13] bond4 (unregistering): Released all slaves [ 396.108872][ T13] bond5 (unregistering): (slave macvlan0): Releasing active interface [ 396.125861][ T13] bond5 (unregistering): Released all slaves [ 396.141678][ T13] bond6 (unregistering): Released all slaves [ 396.155177][ T13] bond7 (unregistering): Released all slaves [ 396.170626][ T13] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 396.188578][ T13] bond8 (unregistering): Released all slaves [ 396.330436][T15785] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.336417][ T13] tipc: Left network mode [ 396.337741][T15785] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.360482][T15785] bridge_slave_0: entered allmulticast mode [ 396.379209][T15785] bridge_slave_0: entered promiscuous mode [ 396.482454][T15785] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.496953][T15785] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.504779][T15785] bridge_slave_1: entered allmulticast mode [ 396.515437][T15785] bridge_slave_1: entered promiscuous mode [ 396.636265][T15785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.682674][T15785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.801723][T15785] team0: Port device team_slave_0 added [ 396.815226][T15785] team0: Port device team_slave_1 added [ 396.925761][T15785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.933900][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.960895][T15785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.979289][T15785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.988786][T15785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.015818][T15785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.092601][T15785] hsr_slave_0: entered promiscuous mode [ 397.100289][T15785] hsr_slave_1: entered promiscuous mode [ 397.107632][T15785] debugfs: 'hsr0' already exists in 'hsr' [ 397.113605][T15785] Cannot create hsr debugfs directory [ 397.205065][ T13] hsr_slave_0: left promiscuous mode [ 397.212652][ T13] hsr_slave_1: left promiscuous mode [ 397.218899][ T13] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 397.225717][ T13] batman_adv: batadv0: Removing interface: ipvlan2 [ 397.241941][ T13] batadv0: left promiscuous mode [ 397.249681][ T13] veth0_macvtap: left promiscuous mode [ 397.255347][ T13] veth0_vlan: left promiscuous mode [ 397.346493][ T5643] Bluetooth: hci0: command tx timeout [ 397.878619][ T13] IPVS: stop unused estimator thread 0... [ 397.888775][T15896] Bluetooth: MGMT ver 1.23 [ 397.897565][T15836] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 398.495884][T15921] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input40 [ 398.616225][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'. [ 398.730627][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3038'. [ 398.930756][T15944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 399.005052][T15943] xt_HMARK: spi-set and port-set can't be combined [ 399.225019][T15785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 399.261713][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 399.272152][T15785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 399.285078][ T749] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 399.304503][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 399.314931][T15785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 399.337756][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 399.351716][T15785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 399.378665][T15785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 399.416999][ T5643] Bluetooth: hci0: command tx timeout [ 399.986252][T15956] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 400.179547][T16003] syzkaller1: entered promiscuous mode [ 400.189016][T16003] syzkaller1: entered allmulticast mode [ 400.195342][T16007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3053'. [ 400.209496][T16005] veth1_macvtap: left promiscuous mode [ 400.216237][T16005] macsec0: entered promiscuous mode [ 400.225070][T16005] macsec0: entered allmulticast mode [ 400.373545][T15785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.591034][T15785] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.633985][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.641188][ T3366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 400.681614][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.688830][T11671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 400.754052][T16036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3061'. [ 400.785599][T16036] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3061'. [ 400.928492][T16042] syzkaller0: entered promiscuous mode [ 400.935336][T16042] syzkaller0: entered allmulticast mode [ 401.007973][T16049] netlink: 'syz.3.3066': attribute type 4 has an invalid length. [ 401.041737][T16049] netlink: 'syz.3.3066': attribute type 4 has an invalid length. [ 401.181822][T16056] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input41 [ 401.219751][T16061] FAULT_INJECTION: forcing a failure. [ 401.219751][T16061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.272431][T16061] CPU: 0 UID: 0 PID: 16061 Comm: syz.1.3068 Not tainted syzkaller #0 PREEMPT(full) [ 401.272454][T16061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.272464][T16061] Call Trace: [ 401.272471][T16061] [ 401.272479][T16061] dump_stack_lvl+0xe8/0x150 [ 401.272502][T16061] should_fail_ex+0x412/0x560 [ 401.272526][T16061] _copy_from_user+0x2d/0xb0 [ 401.272548][T16061] ___sys_recvmsg+0x175/0x590 [ 401.272570][T16061] ? __pfx____sys_recvmsg+0x10/0x10 [ 401.272590][T16061] ? __fget_files+0x2a/0x420 [ 401.272632][T16061] do_recvmmsg+0x334/0x800 [ 401.272656][T16061] ? __pfx_do_recvmmsg+0x10/0x10 [ 401.272682][T16061] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.272722][T16061] __x64_sys_recvmmsg+0x198/0x250 [ 401.272740][T16061] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 401.272762][T16061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.272777][T16061] do_syscall_64+0x15f/0xf80 [ 401.272804][T16061] ? trace_irq_disable+0x3b/0x140 [ 401.272825][T16061] ? clear_bhb_loop+0x40/0x90 [ 401.272844][T16061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.272859][T16061] RIP: 0033:0x7fea9e19ce59 [ 401.272875][T16061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.272889][T16061] RSP: 002b:00007fea9f054028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 401.272907][T16061] RAX: ffffffffffffffda RBX: 00007fea9e416090 RCX: 00007fea9e19ce59 [ 401.272919][T16061] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000005 [ 401.272930][T16061] RBP: 00007fea9f054090 R08: 0000000000000000 R09: 0000000000000000 [ 401.272940][T16061] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 401.272949][T16061] R13: 00007fea9e416128 R14: 00007fea9e416090 R15: 00007ffeb8d85108 [ 401.272977][T16061] [ 401.505120][ T5643] Bluetooth: hci0: command tx timeout [ 401.658748][T15785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.717561][T15785] veth0_vlan: entered promiscuous mode [ 401.732535][T15785] veth1_vlan: entered promiscuous mode [ 401.779269][T15785] veth0_macvtap: entered promiscuous mode [ 401.789929][T15785] veth1_macvtap: entered promiscuous mode [ 401.828819][T15785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.845166][T15785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.863053][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.872319][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.887881][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.898013][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.914162][T16089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3077'. [ 402.071756][ T3366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.089751][ T3366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.144634][ T3366] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.155590][ T3366] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.170154][T16095] FAULT_INJECTION: forcing a failure. [ 402.170154][T16095] name failslab, interval 1, probability 0, space 0, times 0 [ 402.185821][T16095] CPU: 1 UID: 0 PID: 16095 Comm: syz.1.3079 Not tainted syzkaller #0 PREEMPT(full) [ 402.185845][T16095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 402.185854][T16095] Call Trace: [ 402.185861][T16095] [ 402.185867][T16095] dump_stack_lvl+0xe8/0x150 [ 402.185891][T16095] should_fail_ex+0x412/0x560 [ 402.185917][T16095] should_failslab+0xa8/0x100 [ 402.185942][T16095] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 402.185963][T16095] ? __alloc_skb+0x186/0x7d0 [ 402.185983][T16095] ? __alloc_skb+0x1d0/0x7d0 [ 402.186001][T16095] ? __local_bh_enable_ip+0xd0/0x130 [ 402.186021][T16095] __alloc_skb+0x1d0/0x7d0 [ 402.186045][T16095] netlink_sendmsg+0x5d4/0xb40 [ 402.186069][T16095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.186088][T16095] ? aa_sock_msg_perm+0xf1/0x1b0 [ 402.186109][T16095] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 402.186130][T16095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.186144][T16095] sock_write_iter+0x49b/0x4f0 [ 402.186165][T16095] ? __pfx_sock_write_iter+0x10/0x10 [ 402.186191][T16095] ? bpf_lsm_file_permission+0x9/0x20 [ 402.186211][T16095] ? security_file_permission+0x75/0x260 [ 402.186234][T16095] vfs_write+0x61d/0xb90 [ 402.186262][T16095] ? __pfx_vfs_write+0x10/0x10 [ 402.186285][T16095] ? do_sys_openat2+0x14c/0x200 [ 402.186301][T16095] ? kmem_cache_free+0x182/0x650 [ 402.186323][T16095] ? fd_install+0x94/0x3d0 [ 402.186350][T16095] ksys_write+0x150/0x270 [ 402.186372][T16095] ? __pfx_ksys_write+0x10/0x10 [ 402.186398][T16095] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.186415][T16095] do_syscall_64+0x15f/0xf80 [ 402.186435][T16095] ? trace_irq_disable+0x3b/0x140 [ 402.186455][T16095] ? clear_bhb_loop+0x40/0x90 [ 402.186483][T16095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.186498][T16095] RIP: 0033:0x7fea9e19ce59 [ 402.186514][T16095] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.186527][T16095] RSP: 002b:00007fea9f075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 402.186544][T16095] RAX: ffffffffffffffda RBX: 00007fea9e415fa0 RCX: 00007fea9e19ce59 [ 402.186556][T16095] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000005 [ 402.186566][T16095] RBP: 00007fea9f075090 R08: 0000000000000000 R09: 0000000000000000 [ 402.186576][T16095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.186585][T16095] R13: 00007fea9e416038 R14: 00007fea9e415fa0 R15: 00007ffeb8d85108 [ 402.186611][T16095] [ 402.845874][ T5644] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.860925][ T5647] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.870886][ T5647] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.889398][ T5647] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.906071][ T5647] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.114931][T16115] ip_vti0: entered promiscuous mode [ 403.172386][T16115] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3086'. [ 403.201171][T16123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 403.386049][T16131] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 403.576555][ T5647] Bluetooth: hci0: command tx timeout [ 403.649827][T16140] xt_hashlimit: invalid rate [ 404.342569][T16158] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3098'. [ 404.789801][T16170] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 404.995048][T16178] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input42 [ 405.026864][ T5647] Bluetooth: hci4: command tx timeout [ 405.144588][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.159351][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.168930][T16117] bridge_slave_0: entered allmulticast mode [ 405.178392][T16117] bridge_slave_0: entered promiscuous mode [ 405.188926][T16117] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.197376][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.204700][T16117] bridge_slave_1: entered allmulticast mode [ 405.213012][T16117] bridge_slave_1: entered promiscuous mode [ 405.332770][T16117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.377425][T16117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.488002][T16187] syzkaller0: entered promiscuous mode [ 405.502460][T16187] syzkaller0: entered allmulticast mode [ 406.696753][ C0] ip6_tunnel: ip6gre5 xmit: Local address not yet configured! [ 407.097001][ T5647] Bluetooth: hci4: command tx timeout [ 407.790028][T16200] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 407.844243][T16117] team0: Port device team_slave_0 added [ 407.853954][T16117] team0: Port device team_slave_1 added [ 408.083844][T16117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.106216][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.143267][T16117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.192793][T16117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.212849][T16117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.248067][T16117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.250576][T16217] netlink: 180 bytes leftover after parsing attributes in process `syz.1.3115'. [ 408.291257][T16217] FAULT_INJECTION: forcing a failure. [ 408.291257][T16217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.310782][T16217] CPU: 1 UID: 0 PID: 16217 Comm: syz.1.3115 Not tainted syzkaller #0 PREEMPT(full) [ 408.310806][T16217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.310816][T16217] Call Trace: [ 408.310824][T16217] [ 408.310831][T16217] dump_stack_lvl+0xe8/0x150 [ 408.310856][T16217] should_fail_ex+0x412/0x560 [ 408.310881][T16217] _copy_to_user+0x31/0xb0 [ 408.310906][T16217] simple_read_from_buffer+0xe1/0x170 [ 408.310930][T16217] proc_fail_nth_read+0x1bb/0x230 [ 408.310954][T16217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.310976][T16217] ? rw_verify_area+0x2a6/0x4d0 [ 408.310997][T16217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 408.311018][T16217] vfs_read+0x20c/0xa70 [ 408.311044][T16217] ? __pfx___mutex_lock+0x10/0x10 [ 408.311061][T16217] ? __pfx_vfs_read+0x10/0x10 [ 408.311084][T16217] ? __fget_files+0x2a/0x420 [ 408.311107][T16217] ? __fget_files+0x3a0/0x420 [ 408.311124][T16217] ? __fget_files+0x2a/0x420 [ 408.311151][T16217] ksys_read+0x150/0x270 [ 408.311173][T16217] ? __pfx_ksys_read+0x10/0x10 [ 408.311203][T16217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.311220][T16217] do_syscall_64+0x15f/0xf80 [ 408.311240][T16217] ? trace_irq_disable+0x3b/0x140 [ 408.311263][T16217] ? clear_bhb_loop+0x40/0x90 [ 408.311283][T16217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.311302][T16217] RIP: 0033:0x7fea9e15d68e [ 408.311319][T16217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 408.311332][T16217] RSP: 002b:00007fea9f074fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 408.311350][T16217] RAX: ffffffffffffffda RBX: 00007fea9f0756c0 RCX: 00007fea9e15d68e [ 408.311362][T16217] RDX: 000000000000000f RSI: 00007fea9f0750a0 RDI: 0000000000000004 [ 408.311372][T16217] RBP: 00007fea9f075090 R08: 0000000000000000 R09: 0000000000000000 [ 408.311382][T16217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.311391][T16217] R13: 00007fea9e416038 R14: 00007fea9e415fa0 R15: 00007ffeb8d85108 [ 408.311416][T16217] [ 408.558442][T16117] hsr_slave_0: entered promiscuous mode [ 408.565852][T16117] hsr_slave_1: entered promiscuous mode [ 408.575429][T16117] debugfs: 'hsr0' already exists in 'hsr' [ 408.581381][T16117] Cannot create hsr debugfs directory [ 408.782460][T16117] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.878089][T16117] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.988232][T16117] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.179116][ T5647] Bluetooth: hci4: command tx timeout [ 409.195017][T16247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3125'. [ 409.207376][T16239] syzkaller0: entered promiscuous mode [ 409.213139][T16239] syzkaller0: entered allmulticast mode [ 409.237924][T16117] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.970266][T16117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 409.995673][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.015208][T16117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 410.154794][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.316165][T16117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 410.339406][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.359704][T16117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 410.380103][T16117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.519564][T16276] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 410.822951][ T29] IPVS: starting estimator thread 0... [ 410.930752][T16287] IPVS: using max 30 ests per chain, 72000 per kthread [ 411.258105][ T5647] Bluetooth: hci4: command tx timeout [ 411.494467][T16117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.688847][T16117] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.713155][T11671] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.720380][T11671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.760896][T11671] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.768065][T11671] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.993358][T16313] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 412.116018][T16305] x_tables: duplicate underflow at hook 2 [ 412.754594][T16117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.805445][T16338] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3152'. [ 413.051370][T16117] veth0_vlan: entered promiscuous mode [ 413.172263][T16117] veth1_vlan: entered promiscuous mode [ 413.176705][T16348] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3156'. [ 413.336888][ T5647] Bluetooth: hci4: command tx timeout [ 413.394852][T16117] veth0_macvtap: entered promiscuous mode [ 413.414582][T16117] veth1_macvtap: entered promiscuous mode [ 413.510705][T16117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.538975][T16117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.574270][ T3361] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.606171][ T3361] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.635990][ T3361] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.664608][ T3361] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.878779][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.903949][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.983805][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.017896][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.304864][T16381] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3164'. [ 415.340156][ T5643] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.352899][ T5643] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.360876][ T5643] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.373478][ T5643] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.396471][ T5643] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.498965][T16400] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 415.860366][ T5629] bridge0: port 1(syz_tun) entered disabled state [ 415.920459][ T5629] syz_tun (unregistering): left allmulticast mode [ 415.951745][ T5629] syz_tun (unregistering): left promiscuous mode [ 415.959887][ T5629] bridge0: port 1(syz_tun) entered disabled state [ 416.487741][T16422] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 417.058312][T16396] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.065648][T16396] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.087664][T16396] bridge_slave_0: entered allmulticast mode [ 417.095436][T16396] bridge_slave_0: entered promiscuous mode [ 417.109554][T16396] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.141966][T16396] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.149752][T16396] bridge_slave_1: entered allmulticast mode [ 417.158309][T16396] bridge_slave_1: entered promiscuous mode [ 417.212231][T16396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.230687][T16396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.318586][T16396] team0: Port device team_slave_0 added [ 417.337833][T16396] team0: Port device team_slave_1 added [ 417.408709][T16456] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input43 [ 417.429755][ T5643] Bluetooth: hci2: command tx timeout [ 417.457756][T16458] netlink: 'syz.5.3182': attribute type 12 has an invalid length. [ 417.476865][T16396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 417.503423][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.530608][T16396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.547242][T16396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.566380][T16396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.610348][T16396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.770640][T16396] hsr_slave_0: entered promiscuous mode [ 417.794246][T16396] hsr_slave_1: entered promiscuous mode [ 417.808035][T16396] debugfs: 'hsr0' already exists in 'hsr' [ 417.826528][T16396] Cannot create hsr debugfs directory [ 418.210430][T16396] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.223647][T16396] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.638265][T16396] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 418.664238][T16396] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.760333][T16509] syzkaller1: entered promiscuous mode [ 418.785682][T16506] Bluetooth: MGMT ver 1.23 [ 418.785795][T16509] syzkaller1: entered allmulticast mode [ 419.107595][T16396] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.155497][T16396] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.385704][T16396] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.429417][T16396] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.501026][ T5647] Bluetooth: hci2: command tx timeout [ 419.552584][T16538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3202'. [ 419.975239][T16557] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3208'. [ 419.986124][T16557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3208'. [ 419.988566][ T12] veth3: left allmulticast mode [ 420.002331][ T12] veth3: left promiscuous mode [ 420.013318][ T12] bridge0: port 3(veth3) entered disabled state [ 420.097854][T16559] FAULT_INJECTION: forcing a failure. [ 420.097854][T16559] name failslab, interval 1, probability 0, space 0, times 0 [ 420.113039][T16559] CPU: 1 UID: 0 PID: 16559 Comm: syz.5.3209 Not tainted syzkaller #0 PREEMPT(full) [ 420.113067][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.113076][T16559] Call Trace: [ 420.113083][T16559] [ 420.113090][T16559] dump_stack_lvl+0xe8/0x150 [ 420.113113][T16559] should_fail_ex+0x412/0x560 [ 420.113133][T16559] ? __d_alloc+0x37/0x6f0 [ 420.113152][T16559] should_failslab+0xa8/0x100 [ 420.113174][T16559] kmem_cache_alloc_lru_noprof+0x87/0x640 [ 420.113204][T16559] __d_alloc+0x37/0x6f0 [ 420.113237][T16559] d_alloc+0x4b/0x190 [ 420.113253][T16559] ? lookup_one_qstr_excl+0xc4/0x360 [ 420.113276][T16559] lookup_one_qstr_excl+0xd8/0x360 [ 420.113295][T16559] ? lookup_noperm_common+0x245/0x430 [ 420.113316][T16559] start_dirop+0x5c/0x90 [ 420.113334][T16559] simple_start_creating+0xcc/0x110 [ 420.113355][T16559] ? __pfx_simple_start_creating+0x10/0x10 [ 420.113386][T16559] debugfs_start_creating+0xdb/0x1a0 [ 420.113404][T16559] __debugfs_create_file+0x6f/0x400 [ 420.113426][T16559] debugfs_create_file_unsafe+0x3a/0x50 [ 420.113446][T16559] nbd_start_device+0x3b5/0xb10 [ 420.113470][T16559] ? device_create_file+0xf4/0x1b0 [ 420.113490][T16559] nbd_genl_connect+0x165b/0x1cf0 [ 420.113504][T16559] ? __pfx___nla_validate_parse+0x10/0x10 [ 420.113533][T16559] ? __pfx_nbd_genl_connect+0x10/0x10 [ 420.113552][T16559] ? rcu_is_watching+0x15/0xb0 [ 420.113579][T16559] ? trace_kmalloc+0x2a/0xf0 [ 420.113604][T16559] ? __nla_parse+0x40/0x60 [ 420.113629][T16559] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 420.113648][T16559] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 420.113672][T16559] genl_family_rcv_msg_doit+0x22a/0x330 [ 420.113699][T16559] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 420.113732][T16559] ? __lock_acquire+0x6b5/0x2cf0 [ 420.113759][T16559] genl_rcv_msg+0x61c/0x7a0 [ 420.113784][T16559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.113802][T16559] ? __pfx_nbd_genl_connect+0x10/0x10 [ 420.113836][T16559] netlink_rcv_skb+0x232/0x4b0 [ 420.113855][T16559] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.113877][T16559] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.113910][T16559] ? down_read+0x270/0x2e0 [ 420.113924][T16559] ? genl_rcv+0xd/0x40 [ 420.113944][T16559] genl_rcv+0x28/0x40 [ 420.113962][T16559] netlink_unicast+0x75c/0x8e0 [ 420.114001][T16559] netlink_sendmsg+0x813/0xb40 [ 420.114029][T16559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.114048][T16559] ? aa_sock_msg_perm+0xf1/0x1b0 [ 420.114070][T16559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.114095][T16559] ____sys_sendmsg+0x972/0x9f0 [ 420.114113][T16559] ? __might_fault+0xaf/0x130 [ 420.114140][T16559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.114167][T16559] ? import_iovec+0x73/0xa0 [ 420.114193][T16559] ___sys_sendmsg+0x2a5/0x360 [ 420.114209][T16559] ? __lock_acquire+0x6b5/0x2cf0 [ 420.114231][T16559] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.114287][T16559] ? __fget_files+0x2a/0x420 [ 420.114305][T16559] ? __fget_files+0x3a0/0x420 [ 420.114342][T16559] __x64_sys_sendmsg+0x1bd/0x2a0 [ 420.114363][T16559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.114390][T16559] ? __pfx_ksys_write+0x10/0x10 [ 420.114410][T16559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.114436][T16559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.114453][T16559] do_syscall_64+0x15f/0xf80 [ 420.114475][T16559] ? clear_bhb_loop+0x40/0x90 [ 420.114494][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.114506][T16559] RIP: 0033:0x7f20c979ce59 [ 420.114519][T16559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.114530][T16559] RSP: 002b:00007f20ca5c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.114546][T16559] RAX: ffffffffffffffda RBX: 00007f20c9a15fa0 RCX: 00007f20c979ce59 [ 420.114556][T16559] RDX: 0000000000000004 RSI: 00002000000002c0 RDI: 0000000000000004 [ 420.114573][T16559] RBP: 00007f20ca5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 420.114582][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 420.114592][T16559] R13: 00007f20c9a16038 R14: 00007f20c9a15fa0 R15: 00007ffe58c01db8 [ 420.114621][T16559] [ 420.607821][T16561] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 420.662992][ T5647] block nbd7: Receive control failed (result -32) [ 420.852060][T16566] netlink: 'syz.5.3211': attribute type 1 has an invalid length. [ 420.860810][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 420.972399][ T12] bond0 (unregistering): Released all slaves [ 420.985722][ T12] bond1 (unregistering): Released all slaves [ 421.015438][ T12] bond2 (unregistering): Released all slaves [ 421.034707][ T12] bond3 (unregistering): Released all slaves [ 421.055942][ T12] bond4 (unregistering): Released all slaves [ 421.079426][ T12] bond5 (unregistering): (slave macvlan0): Releasing active interface [ 421.096158][ T12] bond5 (unregistering): Released all slaves [ 421.127071][ T12] bond6 (unregistering): Released all slaves [ 421.357732][T16570] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3212'. [ 421.425984][ T12] tipc: Left network mode [ 421.525180][T16396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 421.585441][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 421.600838][T16396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 421.624519][ T5643] Bluetooth: hci2: command 0x040f tx timeout [ 421.627311][T16575] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3213'. [ 421.654990][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 421.722548][T16573] ip_vti0: left promiscuous mode [ 421.734721][T16578] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input44 [ 421.920900][T16573] veth1_macvtap: entered promiscuous mode [ 421.928904][T16573] veth1_macvtap: entered allmulticast mode [ 421.935055][T16573] macsec0: left promiscuous mode [ 421.943882][T16573] mac80211_hwsim hwsim21 wlan0: left promiscuous mode [ 421.962132][T16573] ip6gre1: left promiscuous mode [ 421.971652][T16573] 8021q: adding VLAN 0 to HW filter on device eth0 [ 421.987705][T16573] 8021q: adding VLAN 0 to HW filter on device eth1 [ 422.000109][T16573] 8021q: adding VLAN 0 to HW filter on device eth2 [ 422.012917][T16573] 8021q: adding VLAN 0 to HW filter on device eth3 [ 422.026702][T16573] bond2: left promiscuous mode [ 422.113069][T16396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 422.124073][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 422.146305][T16396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 422.171549][T16396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 422.250673][T16586] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input45 [ 422.605534][T16603] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3218'. [ 423.095485][ T12] hsr_slave_0: left promiscuous mode [ 423.102694][ T12] hsr_slave_1: left promiscuous mode [ 423.125760][ T12] batadv0: left promiscuous mode [ 423.131532][ T12] veth1_macvtap: left allmulticast mode [ 423.137282][ T12] veth1_macvtap: left promiscuous mode [ 423.142761][ T12] veth0_macvtap: left promiscuous mode [ 423.148260][ T12] veth1_vlan: left promiscuous mode [ 423.153500][ T12] veth0_vlan: left promiscuous mode [ 423.659369][ T5643] Bluetooth: hci2: command 0x040f tx timeout [ 425.748936][ T5643] Bluetooth: hci2: command 0x040f tx timeout [ 425.771318][T16612] syzkaller0: entered promiscuous mode [ 425.778169][T16612] syzkaller0: entered allmulticast mode [ 426.074889][T16396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.097731][T16631] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3223'. [ 426.122237][T16631] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3223'. [ 426.135369][T16631] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3223'. [ 426.156941][T16636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3225'. [ 426.371297][T16396] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.392894][ T12] IPVS: stop unused estimator thread 0... [ 426.415643][ T3355] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.423781][ T3355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.507593][ T3355] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.515651][ T3355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.829025][T16656] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 426.875245][T16656] netlink: 'syz.3.3232': attribute type 4 has an invalid length. [ 427.118693][T16665] netlink: 'syz.3.3234': attribute type 4 has an invalid length. [ 427.155659][T16396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.171872][T16665] netlink: 'syz.3.3234': attribute type 4 has an invalid length. [ 427.229124][T16670] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 427.302629][T16396] veth0_vlan: entered promiscuous mode [ 427.344758][T16396] veth1_vlan: entered promiscuous mode [ 427.376985][T16396] veth0_macvtap: entered promiscuous mode [ 427.377072][T16675] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 427.386817][T16396] veth1_macvtap: entered promiscuous mode [ 427.435605][T16396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.457814][T16396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.486840][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.509842][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.528875][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.540716][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.599137][T16679] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input46 [ 427.902297][ T3366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.925581][ T3366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.006920][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.017273][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.040294][T16689] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3243'. [ 428.151071][T16693] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input47 [ 428.542020][T16710] syzkaller1: entered promiscuous mode [ 428.547568][T16710] syzkaller1: entered allmulticast mode [ 428.746612][T16718] geneve2: entered allmulticast mode [ 428.766135][T16719] geneve2: entered allmulticast mode [ 428.828746][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3255'. [ 429.292268][T16731] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3258'. [ 429.358603][T16732] ip6gre1: entered promiscuous mode [ 429.364737][T16732] ip6gre1: entered allmulticast mode [ 429.383183][T16734] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input48 [ 429.449246][T16732] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3257'. [ 429.489875][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3257'. [ 429.503247][T16732] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3257'. [ 430.523281][T16778] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 430.698433][ T5647] Bluetooth: hci2: command 0x040f tx timeout [ 430.699393][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 431.053703][T16801] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 431.765750][T16814] __nla_validate_parse: 5 callbacks suppressed [ 431.765806][T16814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3285'. [ 432.197605][T16824] netlink: 'syz.2.3289': attribute type 1 has an invalid length. [ 432.206639][T16823] netlink: 'syz.5.3290': attribute type 4 has an invalid length. [ 432.251094][T16823] netlink: 'syz.5.3290': attribute type 4 has an invalid length. [ 432.501716][T16824] 8021q: adding VLAN 0 to HW filter on device bond1 [ 432.596826][T16832] bond1: (slave macvlan0): making interface the new active one [ 432.615010][T16832] bond1: (slave macvlan0): Enslaving as an active interface with an up link [ 432.630026][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3294'. [ 432.662490][T16824] syz.2.3289 (16824) used greatest stack depth: 17800 bytes left [ 432.953846][T16844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3296'. [ 433.164805][T16849] netlink: 'syz.0.3297': attribute type 11 has an invalid length. [ 433.172827][T16849] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3297'. [ 433.361745][T16858] FAULT_INJECTION: forcing a failure. [ 433.361745][T16858] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.428136][T16858] CPU: 1 UID: 0 PID: 16858 Comm: syz.5.3298 Not tainted syzkaller #0 PREEMPT(full) [ 433.428161][T16858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 433.428171][T16858] Call Trace: [ 433.428178][T16858] [ 433.428185][T16858] dump_stack_lvl+0xe8/0x150 [ 433.428210][T16858] should_fail_ex+0x412/0x560 [ 433.428234][T16858] _copy_from_user+0x2d/0xb0 [ 433.428257][T16858] ___sys_recvmsg+0x175/0x590 [ 433.428280][T16858] ? __pfx____sys_recvmsg+0x10/0x10 [ 433.428302][T16858] ? __fget_files+0x2a/0x420 [ 433.428348][T16858] do_recvmmsg+0x334/0x800 [ 433.428374][T16858] ? __pfx_do_recvmmsg+0x10/0x10 [ 433.428402][T16858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 433.428441][T16858] __x64_sys_recvmmsg+0x198/0x250 [ 433.428461][T16858] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 433.428486][T16858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.428504][T16858] do_syscall_64+0x15f/0xf80 [ 433.428524][T16858] ? trace_irq_disable+0x3b/0x140 [ 433.428547][T16858] ? clear_bhb_loop+0x40/0x90 [ 433.428567][T16858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.428582][T16858] RIP: 0033:0x7f20c979ce59 [ 433.428598][T16858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.428611][T16858] RSP: 002b:00007f20ca5a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 433.428629][T16858] RAX: ffffffffffffffda RBX: 00007f20c9a16090 RCX: 00007f20c979ce59 [ 433.428641][T16858] RDX: 000000000291962b RSI: 0000200000000040 RDI: 0000000000000003 [ 433.428652][T16858] RBP: 00007f20ca5a1090 R08: 0000000000000000 R09: 0000000000000000 [ 433.428662][T16858] R10: 45833af92e4b39ff R11: 0000000000000246 R12: 0000000000000001 [ 433.428672][T16858] R13: 00007f20c9a16128 R14: 00007f20c9a16090 R15: 00007ffe58c01db8 [ 433.428699][T16858] [ 433.487044][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3300'. [ 433.589005][T16865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3302'. [ 433.789016][T16869] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 433.800949][T16861] netlink: 'syz.2.3300': attribute type 1 has an invalid length. [ 433.993377][T16861] 8021q: adding VLAN 0 to HW filter on device bond2 [ 434.142615][T16867] bond2: (slave veth0_to_bond): making interface the new active one [ 434.198225][T16867] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 434.354724][T16867] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.443079][T16867] ip6tnl1: entered allmulticast mode [ 434.479044][T16876] bond2: entered promiscuous mode [ 434.521552][T16876] veth0_to_bond: entered promiscuous mode [ 434.545537][T16876] bond2: entered allmulticast mode [ 434.567979][T16876] veth0_to_bond: entered allmulticast mode [ 434.667786][ T3361] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 434.729946][ T5637] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 434.743239][ T3361] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 435.125187][T16887] netlink: 'syz.3.3306': attribute type 1 has an invalid length. [ 435.581617][ T7158] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 435.666130][T16887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.738653][ T7156] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 435.821892][T16891] syzkaller1: entered promiscuous mode [ 435.827604][T16891] syzkaller1: entered allmulticast mode [ 435.880759][T16900] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 436.052312][ T7156] hid-generic 0005:10CF:7FFF.0001: item fetching failed at offset 0/1 [ 436.063979][ T7156] hid-generic 0005:10CF:7FFF.0001: probe with driver hid-generic failed with error -22 [ 436.245847][T16909] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 436.833229][T16922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3315'. [ 436.964991][T16926] veth1_macvtap: left allmulticast mode [ 436.970597][T16926] veth1_macvtap: left promiscuous mode [ 436.976072][T16926] macsec0: entered promiscuous mode [ 436.999921][T16928] FAULT_INJECTION: forcing a failure. [ 436.999921][T16928] name failslab, interval 1, probability 0, space 0, times 0 [ 437.014292][T16928] CPU: 0 UID: 0 PID: 16928 Comm: syz.3.3318 Not tainted syzkaller #0 PREEMPT(full) [ 437.014315][T16928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 437.014325][T16928] Call Trace: [ 437.014333][T16928] [ 437.014341][T16928] dump_stack_lvl+0xe8/0x150 [ 437.014364][T16928] should_fail_ex+0x412/0x560 [ 437.014391][T16928] should_failslab+0xa8/0x100 [ 437.014416][T16928] __kmalloc_cache_noprof+0x88/0x660 [ 437.014438][T16928] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 437.014459][T16928] ? __genradix_ptr+0x1e1/0x220 [ 437.014487][T16928] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 437.014517][T16928] sctp_association_new+0x15d3/0x25e0 [ 437.014549][T16928] sctp_connect_new_asoc+0x2e4/0x6b0 [ 437.014570][T16928] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 437.014594][T16928] ? sctp_inet6_send_verify+0x23a/0x300 [ 437.014620][T16928] ? sctp_endpoint_lookup_assoc+0xd1/0x260 [ 437.014640][T16928] __sctp_connect+0x5cb/0xdc0 [ 437.014669][T16928] ? __pfx___sctp_connect+0x10/0x10 [ 437.014684][T16928] ? security_sctp_bind_connect+0x7e/0x2c0 [ 437.014706][T16928] ? __sctp_setsockopt_connectx+0xc7/0x190 [ 437.014729][T16928] sctp_getsockopt_connectx3+0x227/0x360 [ 437.014749][T16928] ? lock_sock_nested+0x6a/0x100 [ 437.014771][T16928] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 437.014796][T16928] ? sctp_getsockopt+0x12f/0xb90 [ 437.014815][T16928] ? __local_bh_enable_ip+0xd0/0x130 [ 437.014837][T16928] sctp_getsockopt+0x984/0xb90 [ 437.014853][T16928] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 437.014874][T16928] do_sock_getsockopt+0x51d/0x7e0 [ 437.014904][T16928] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 437.014943][T16928] ? __fget_files+0x3a0/0x420 [ 437.014960][T16928] ? __fget_files+0x2a/0x420 [ 437.014985][T16928] __x64_sys_getsockopt+0x1a4/0x240 [ 437.015007][T16928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.015025][T16928] do_syscall_64+0x15f/0xf80 [ 437.015047][T16928] ? trace_irq_disable+0x3b/0x140 [ 437.015070][T16928] ? clear_bhb_loop+0x40/0x90 [ 437.015090][T16928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.015106][T16928] RIP: 0033:0x7f6d7a59ce59 [ 437.015121][T16928] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.015134][T16928] RSP: 002b:00007f6d7b4a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 437.015152][T16928] RAX: ffffffffffffffda RBX: 00007f6d7a815fa0 RCX: 00007f6d7a59ce59 [ 437.015164][T16928] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 437.015174][T16928] RBP: 00007f6d7b4a7090 R08: 0000200000000140 R09: 0000000000000000 [ 437.015184][T16928] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.015194][T16928] R13: 00007f6d7a816038 R14: 00007f6d7a815fa0 R15: 00007ffe936f8c58 [ 437.015227][T16928] [ 437.576710][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 437.577505][T16939] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3323'. [ 437.633867][T16936] netlink: 'syz.1.3319': attribute type 12 has an invalid length. [ 437.693750][ T5643] Bluetooth: hci2: command 0x040f tx timeout [ 437.895685][T16955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3329'. [ 438.002603][T16952] netlink: 'syz.3.3326': attribute type 1 has an invalid length. [ 438.010362][T16952] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3326'. [ 438.275488][T16976] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 438.383664][T16981] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3332'. [ 438.555392][T16985] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input49 [ 438.759630][T16991] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3341'. [ 438.794177][T16993] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3342'. [ 439.071591][T17003] veth1_macvtap: left promiscuous mode [ 439.077104][T17003] macsec0: entered promiscuous mode [ 439.082293][T17003] macsec0: entered allmulticast mode [ 439.096642][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.104280][T17005] netlink: 'syz.5.3348': attribute type 4 has an invalid length. [ 439.150936][T17005] netlink: 'syz.5.3348': attribute type 4 has an invalid length. [ 439.262699][T17014] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input50 [ 439.327879][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3353'. [ 439.848410][ T5643] Bluetooth: hci2: command 0x040f tx timeout [ 440.015260][T17037] netlink: 'syz.5.3359': attribute type 4 has an invalid length. [ 440.118686][T17037] netlink: 'syz.5.3359': attribute type 4 has an invalid length. [ 440.641157][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3365'. [ 440.689468][T17055] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 440.934579][T17070] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3371'. [ 440.985035][T17068] netlink: 'syz.0.3370': attribute type 12 has an invalid length. [ 442.110552][T17102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3378'. [ 442.369441][ T7156] hid-generic 0005:10CF:7FFF.0002: item fetching failed at offset 0/1 [ 442.402518][ T7156] hid-generic 0005:10CF:7FFF.0002: probe with driver hid-generic failed with error -22 [ 442.511625][T17117] netlink: 'syz.1.3385': attribute type 4 has an invalid length. [ 442.550160][T17117] netlink: 'syz.1.3385': attribute type 4 has an invalid length. [ 442.613900][T17127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3386'. [ 442.880458][T17136] FAULT_INJECTION: forcing a failure. [ 442.880458][T17136] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 442.926514][T17136] CPU: 0 UID: 0 PID: 17136 Comm: syz.3.3390 Not tainted syzkaller #0 PREEMPT(full) [ 442.926538][T17136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 442.926548][T17136] Call Trace: [ 442.926555][T17136] [ 442.926564][T17136] dump_stack_lvl+0xe8/0x150 [ 442.926598][T17136] should_fail_ex+0x412/0x560 [ 442.926625][T17136] prepare_alloc_pages+0x22a/0x650 [ 442.926656][T17136] __alloc_frozen_pages_noprof+0x12f/0x380 [ 442.926684][T17136] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 442.926711][T17136] ? __pfx_policy_nodemask+0x10/0x10 [ 442.926740][T17136] ? __folio_batch_add_and_move+0x11a/0xc50 [ 442.926761][T17136] ? lock_acquire+0x106/0x350 [ 442.926787][T17136] alloc_pages_mpol+0x235/0x490 [ 442.926816][T17136] folio_alloc_mpol_noprof+0x39/0x160 [ 442.926842][T17136] vma_alloc_folio_noprof+0xe1/0x1e0 [ 442.926869][T17136] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 442.926903][T17136] do_wp_page+0x118a/0x4cc0 [ 442.926929][T17136] ? __pte_offset_map+0x29/0x240 [ 442.926959][T17136] ? __pfx_do_wp_page+0x10/0x10 [ 442.926975][T17136] ? do_raw_spin_lock+0x12b/0x2f0 [ 442.926998][T17136] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 442.927030][T17136] handle_mm_fault+0x151f/0x3170 [ 442.927062][T17136] ? handle_mm_fault+0xee/0x3170 [ 442.927087][T17136] ? __pfx_handle_mm_fault+0x10/0x10 [ 442.927106][T17136] ? follow_page_pte+0xbb7/0xe50 [ 442.927134][T17136] ? __pfx_follow_page_pte+0x10/0x10 [ 442.927162][T17136] __get_user_pages+0x1683/0x2720 [ 442.927209][T17136] __gup_longterm_locked+0xdcf/0x1630 [ 442.927238][T17136] ? sanity_check_pinned_pages+0x7af/0x870 [ 442.927266][T17136] gup_fast_fallback+0x1d84/0x20d0 [ 442.927312][T17136] ? __pfx_gup_fast_fallback+0x10/0x10 [ 442.927327][T17136] ? ____sys_recvmsg+0x1e6/0x4a0 [ 442.927342][T17136] ? __x64_sys_recvmsg+0x1ba/0x2a0 [ 442.927355][T17136] ? do_syscall_64+0x15f/0xf80 [ 442.927374][T17136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.927395][T17136] ? pin_user_pages_fast+0x4d/0xb0 [ 442.927415][T17136] iov_iter_extract_pages+0x37b/0x5f0 [ 442.927446][T17136] extract_iter_to_sg+0xefb/0x25d0 [ 442.927482][T17136] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 442.927500][T17136] ? rcu_is_watching+0x15/0xb0 [ 442.927520][T17136] ? trace_kmalloc+0x2a/0xf0 [ 442.927547][T17136] ? __kmalloc_noprof+0x1b8/0x760 [ 442.927569][T17136] ? __asan_memset+0x22/0x50 [ 442.927591][T17136] af_alg_get_rsgl+0x4b6/0x8e0 [ 442.927628][T17136] skcipher_recvmsg+0x392/0x1140 [ 442.927668][T17136] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 442.927688][T17136] ? __lock_acquire+0x6b5/0x2cf0 [ 442.927704][T17136] ? aa_sock_msg_perm+0xf1/0x1b0 [ 442.927725][T17136] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 442.927753][T17136] ? security_socket_recvmsg+0x7e/0x2c0 [ 442.927776][T17136] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 442.927795][T17136] sock_recvmsg+0x172/0x1b0 [ 442.927818][T17136] ____sys_recvmsg+0x1e6/0x4a0 [ 442.927844][T17136] ? __pfx_____sys_recvmsg+0x10/0x10 [ 442.927876][T17136] ? import_iovec+0x73/0xa0 [ 442.927901][T17136] ___sys_recvmsg+0x215/0x590 [ 442.927917][T17136] ? get_pid_task+0x20/0x1f0 [ 442.927942][T17136] ? __pfx____sys_recvmsg+0x10/0x10 [ 442.927963][T17136] ? __fget_files+0x2a/0x420 [ 442.928001][T17136] ? __fget_files+0x3a0/0x420 [ 442.928029][T17136] __x64_sys_recvmsg+0x1ba/0x2a0 [ 442.928049][T17136] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 442.928075][T17136] ? __pfx_ksys_write+0x10/0x10 [ 442.928106][T17136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.928123][T17136] do_syscall_64+0x15f/0xf80 [ 442.928145][T17136] ? trace_irq_disable+0x3b/0x140 [ 442.928167][T17136] ? clear_bhb_loop+0x40/0x90 [ 442.928187][T17136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.928203][T17136] RIP: 0033:0x7f6d7a59ce59 [ 442.928219][T17136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.928232][T17136] RSP: 002b:00007f6d7b4a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 442.928250][T17136] RAX: ffffffffffffffda RBX: 00007f6d7a815fa0 RCX: 00007f6d7a59ce59 [ 442.928261][T17136] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 442.928272][T17136] RBP: 00007f6d7b4a7090 R08: 0000000000000000 R09: 0000000000000000 [ 442.928280][T17136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.928290][T17136] R13: 00007f6d7a816038 R14: 00007f6d7a815fa0 R15: 00007ffe936f8c58 [ 442.928318][T17136] [ 443.857958][T17157] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3395'. [ 443.891296][T17156] netlink: 'syz.0.3398': attribute type 1 has an invalid length. [ 444.048906][T17163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input51 [ 446.681553][T17154] ip6gre1: left promiscuous mode [ 446.687586][T17154] bond2: left promiscuous mode [ 446.703027][T17154] veth0_to_bond: left promiscuous mode [ 446.716905][T17154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 446.732102][T17156] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 446.812487][ T7144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 446.876288][T17170] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input52 [ 446.933477][ T7144] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 446.944974][T17178] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 447.122703][T17189] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3402'. [ 447.150604][T17191] nbd: couldn't find device at index 2 [ 447.254108][T17179] veth1_macvtap: entered promiscuous mode [ 447.293691][T17179] veth1_macvtap: entered allmulticast mode [ 447.303848][T17179] macsec0: left promiscuous mode [ 447.381094][T17197] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3410'. [ 447.551018][T17201] ip6gre2: entered promiscuous mode [ 447.556374][T17201] ip6gre2: entered allmulticast mode [ 447.578337][T17201] xt_NFQUEUE: number of queues (3633) out of range (got 69161) [ 447.656587][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 447.910849][T17208] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 447.925910][T17210] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input53 [ 447.993641][T17208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.002495][T17209] netlink: 'syz.0.3415': attribute type 12 has an invalid length. [ 448.031950][T17208] bond2: (slave macvlan0): making interface the new active one [ 448.040975][T17208] bond2: (slave macvlan0): Enslaving as an active interface with an up link [ 448.327220][T17227] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3416'. [ 448.641229][T17234] syzkaller0: entered promiscuous mode [ 448.669308][T17234] syzkaller0: entered allmulticast mode [ 449.072479][T17261] netlink: 'syz.0.3427': attribute type 4 has an invalid length. [ 449.135094][T17262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3428'. [ 449.154145][T17257] netlink: 'syz.0.3427': attribute type 4 has an invalid length. [ 449.171710][T17256] syzkaller0: entered promiscuous mode [ 449.191964][T17256] syzkaller0: entered allmulticast mode [ 449.337415][T17256] tipc: Started in network mode [ 449.353569][T17256] tipc: Node identity 12cd4f52b7d3, cluster identity 4711 [ 449.386236][T17256] tipc: Enabled bearer , priority 0 [ 449.446961][T17254] tipc: Resetting bearer [ 449.513661][T17254] tipc: Disabling bearer [ 449.538935][T17266] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3429'. [ 450.026175][T17290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3433'. [ 450.107587][T17294] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3438'. [ 450.698553][T17330] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3446'. [ 450.904680][T17340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3448'. [ 451.124107][T17347] FAULT_INJECTION: forcing a failure. [ 451.124107][T17347] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.250059][T17347] CPU: 1 UID: 0 PID: 17347 Comm: syz.1.3449 Not tainted syzkaller #0 PREEMPT(full) [ 451.250083][T17347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.250093][T17347] Call Trace: [ 451.250101][T17347] [ 451.250108][T17347] dump_stack_lvl+0xe8/0x150 [ 451.250133][T17347] should_fail_ex+0x412/0x560 [ 451.250159][T17347] _copy_from_iter+0x1d3/0x1670 [ 451.250182][T17347] ? unwind_next_frame+0xa6/0x2550 [ 451.250206][T17347] ? __pfx__copy_from_iter+0x10/0x10 [ 451.250228][T17347] ? tun_get_user+0x8aa/0x43e0 [ 451.250259][T17347] copy_page_from_iter+0x220/0x2d0 [ 451.250282][T17347] tun_get_user+0x1bf7/0x43e0 [ 451.250303][T17347] ? tun_get_user+0x8aa/0x43e0 [ 451.250335][T17347] ? aa_file_perm+0x50e/0x15e0 [ 451.250353][T17347] ? __pfx_tun_get_user+0x10/0x10 [ 451.250372][T17347] ? __lock_acquire+0x6b5/0x2cf0 [ 451.250398][T17347] ? ref_tracker_alloc+0x35c/0x4c0 [ 451.250417][T17347] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 451.250435][T17347] ? tun_get+0x1c/0x2f0 [ 451.250452][T17347] ? tun_get+0x1c/0x2f0 [ 451.250474][T17347] ? tun_get+0x1c/0x2f0 [ 451.250490][T17347] ? tun_get+0x1c/0x2f0 [ 451.250510][T17347] tun_chr_write_iter+0x113/0x200 [ 451.250530][T17347] vfs_write+0x61d/0xb90 [ 451.250557][T17347] ? __pfx_vfs_write+0x10/0x10 [ 451.250582][T17347] ? __fget_files+0x2a/0x420 [ 451.250604][T17347] ksys_write+0x150/0x270 [ 451.250625][T17347] ? __pfx_ksys_write+0x10/0x10 [ 451.250651][T17347] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.250665][T17347] do_syscall_64+0x15f/0xf80 [ 451.250684][T17347] ? trace_irq_disable+0x3b/0x140 [ 451.250704][T17347] ? clear_bhb_loop+0x40/0x90 [ 451.250721][T17347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.250734][T17347] RIP: 0033:0x7fea9e15d68e [ 451.250749][T17347] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.250761][T17347] RSP: 002b:00007fea9f074fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 451.250777][T17347] RAX: ffffffffffffffda RBX: 00007fea9f0756c0 RCX: 00007fea9e15d68e [ 451.250787][T17347] RDX: 0000000000000036 RSI: 0000200000000140 RDI: 00000000000000c8 [ 451.250796][T17347] RBP: 00007fea9f075090 R08: 0000000000000000 R09: 0000000000000000 [ 451.250806][T17347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.250816][T17347] R13: 00007fea9e416038 R14: 00007fea9e415fa0 R15: 00007ffeb8d85108 [ 451.250840][T17347] [ 451.566683][T17353] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input54 [ 452.036209][T17371] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3455'. [ 452.361917][T17383] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3458'. [ 452.577947][T17400] pim6reg1: entered promiscuous mode [ 452.596940][T17400] pim6reg1: entered allmulticast mode [ 452.728328][T17408] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3464'. [ 452.800162][T17408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3464'. [ 452.809137][T17408] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3464'. [ 452.945546][T17412] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 453.002937][T17412] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.049603][T17414] bond1: (slave macvlan0): Releasing active interface [ 453.093957][T17414] bond3: (slave macvlan0): making interface the new active one [ 453.106865][T17414] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 453.347867][T17425] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 453.748430][T17434] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3472'. [ 453.789417][T17436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3471'. [ 453.803017][ T7158] IPVS: starting estimator thread 0... [ 453.896430][T17437] IPVS: using max 38 ests per chain, 91200 per kthread [ 454.640464][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3478'. [ 454.926179][T17474] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3483'. [ 455.149759][T17480] veth1_macvtap: left promiscuous mode [ 455.155302][T17480] macsec0: entered promiscuous mode [ 455.160809][T17480] macsec0: entered allmulticast mode [ 455.323402][T17488] netlink: 'syz.0.3489': attribute type 10 has an invalid length. [ 455.366744][T17488] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3489'. [ 455.397252][T17491] ipt_ECN: cannot use operation on non-tcp rule [ 455.455044][T17497] netlink: 'syz.3.3491': attribute type 12 has an invalid length. [ 455.506701][T17501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3492'. [ 455.741061][T17510] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 456.101039][T17519] macvtap1: entered promiscuous mode [ 456.106573][T17519] macvtap1: entered allmulticast mode [ 456.111958][T17519] veth1_vlan: entered allmulticast mode [ 456.214365][T17519] macvtap2: entered promiscuous mode [ 456.219685][T17519] macvtap2: entered allmulticast mode [ 456.280585][T17524] 8021q: adding VLAN 0 to HW filter on device bond4 [ 456.373621][T17524] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 456.919880][T17551] veth1_macvtap: entered promiscuous mode [ 456.925646][T17551] veth1_macvtap: entered allmulticast mode [ 456.931677][T17551] macsec0: left promiscuous mode [ 457.206392][T17562] netlink: 'syz.5.3510': attribute type 2 has an invalid length. [ 457.214150][T17562] netlink: 'syz.5.3510': attribute type 8 has an invalid length. [ 457.227749][ T136] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 457.248479][T17562] netlink: 'syz.5.3510': attribute type 2 has an invalid length. [ 457.256237][T17562] netlink: 'syz.5.3510': attribute type 8 has an invalid length. [ 457.370909][T17565] ip6gre1: entered promiscuous mode [ 457.376166][T17565] ip6gre1: entered allmulticast mode [ 457.402427][T17565] __nla_validate_parse: 7 callbacks suppressed [ 457.402564][T17565] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3511'. [ 457.425684][T17565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3511'. [ 457.435369][T17565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3511'. [ 457.479981][T17567] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3512'. [ 457.498294][T17567] FAULT_INJECTION: forcing a failure. [ 457.498294][T17567] name failslab, interval 1, probability 0, space 0, times 0 [ 457.537908][T17567] CPU: 1 UID: 0 PID: 17567 Comm: syz.2.3512 Not tainted syzkaller #0 PREEMPT(full) [ 457.537932][T17567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 457.537942][T17567] Call Trace: [ 457.537948][T17567] [ 457.537954][T17567] dump_stack_lvl+0xe8/0x150 [ 457.537975][T17567] should_fail_ex+0x412/0x560 [ 457.537995][T17567] should_failslab+0xa8/0x100 [ 457.538015][T17567] __kmalloc_cache_noprof+0x88/0x660 [ 457.538031][T17567] ? fib_table_insert+0x4bb/0x1b50 [ 457.538043][T17567] ? fib_magic+0x434/0x510 [ 457.538058][T17567] ? nsim_fib_event_nb+0x190/0x1210 [ 457.538070][T17567] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 457.538086][T17567] ? netlink_rcv_skb+0x232/0x4b0 [ 457.538101][T17567] nsim_fib_event_nb+0x190/0x1210 [ 457.538116][T17567] ? atomic_notifier_call_chain+0x26/0x180 [ 457.538137][T17567] notifier_call_chain+0x1ad/0x3d0 [ 457.538155][T17567] ? atomic_notifier_call_chain+0x26/0x180 [ 457.538171][T17567] atomic_notifier_call_chain+0xda/0x180 [ 457.538194][T17567] call_fib_notifiers+0x31/0x60 [ 457.538207][T17567] call_fib_entry_notifiers+0x158/0x200 [ 457.538223][T17567] ? __pfx_call_fib_entry_notifiers+0x10/0x10 [ 457.538238][T17567] ? fib_insert_alias+0x466/0x1100 [ 457.538251][T17567] ? kmem_cache_alloc_noprof+0x307/0x650 [ 457.538264][T17567] ? fib_table_insert+0x4bb/0x1b50 [ 457.538275][T17567] ? lockdep_rtnl_is_held+0x26/0x40 [ 457.538293][T17567] fib_table_insert+0xcce/0x1b50 [ 457.538325][T17567] fib_magic+0x434/0x510 [ 457.538344][T17567] ? __pfx_fib_magic+0x10/0x10 [ 457.538366][T17567] ? call_rcu+0x644/0x890 [ 457.538381][T17567] ? lockdep_hardirqs_on+0x7a/0x110 [ 457.538403][T17567] fib_modify_prefix_metric+0x201/0x3a0 [ 457.538422][T17567] inet_rtm_newaddr+0x12f0/0x1ad0 [ 457.538437][T17567] ? __local_bh_enable_ip+0xd0/0x130 [ 457.538452][T17567] ? __dev_queue_xmit+0x2b6/0x3950 [ 457.538465][T17567] ? __dev_queue_xmit+0x2b6/0x3950 [ 457.538481][T17567] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 457.538508][T17567] ? __pfx_inet_rtm_newaddr+0x10/0x10 [ 457.538523][T17567] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 457.538542][T17567] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 457.538558][T17567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.538573][T17567] ? ref_tracker_free+0x693/0x840 [ 457.538591][T17567] ? __pfx_ref_tracker_free+0x10/0x10 [ 457.538614][T17567] netlink_rcv_skb+0x232/0x4b0 [ 457.538627][T17567] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 457.538645][T17567] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.538667][T17567] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.538679][T17567] ? netlink_deliver_tap+0x2e/0x1b0 [ 457.538695][T17567] netlink_unicast+0x75c/0x8e0 [ 457.538720][T17567] netlink_sendmsg+0x813/0xb40 [ 457.538740][T17567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.538755][T17567] ? __fget_files+0x2a/0x420 [ 457.538768][T17567] ? aa_sock_msg_perm+0xf1/0x1b0 [ 457.538785][T17567] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 457.538801][T17567] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.538814][T17567] __sys_sendto+0x672/0x710 [ 457.538834][T17567] ? __pfx___sys_sendto+0x10/0x10 [ 457.538848][T17567] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 457.538875][T17567] ? __fget_files+0x3a0/0x420 [ 457.538897][T17567] ? ksys_write+0x242/0x270 [ 457.538915][T17567] ? __pfx_ksys_write+0x10/0x10 [ 457.538936][T17567] __x64_sys_sendto+0xde/0x100 [ 457.538954][T17567] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.538967][T17567] do_syscall_64+0x15f/0xf80 [ 457.538983][T17567] ? trace_irq_disable+0x3b/0x140 [ 457.539000][T17567] ? clear_bhb_loop+0x40/0x90 [ 457.539015][T17567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.539027][T17567] RIP: 0033:0x7ff7af19ce59 [ 457.539040][T17567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.539050][T17567] RSP: 002b:00007ff7b0049028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 457.539064][T17567] RAX: ffffffffffffffda RBX: 00007ff7af415fa0 RCX: 00007ff7af19ce59 [ 457.539073][T17567] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 457.539081][T17567] RBP: 00007ff7b0049090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 457.539090][T17567] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 457.539097][T17567] R13: 00007ff7af416038 R14: 00007ff7af415fa0 R15: 00007ffe9631e828 [ 457.539119][T17567] [ 458.122996][T17575] netlink: 'syz.2.3514': attribute type 12 has an invalid length. [ 458.164434][T17577] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 458.171994][T17574] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3516'. [ 458.250995][T17574] syzkaller0: refused to change device tx_queue_len [ 458.825735][ T30] audit: type=1107 audit(1779196184.637:7): pid=17586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 459.095240][T17606] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3523'. [ 459.148337][T17611] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3523'. [ 459.203503][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'. [ 459.319103][T17608] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3524'. [ 459.354451][T17618] hsr0: entered promiscuous mode [ 459.370379][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3524'. [ 459.603717][T17622] hsr0: left promiscuous mode [ 459.636800][T17622] ip6gre2: left promiscuous mode [ 459.657390][ T5637] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 459.787936][T17629] syzkaller0: entered promiscuous mode [ 459.793447][T17629] syzkaller0: entered allmulticast mode [ 460.129517][T17637] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input55 [ 460.176754][T17642] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 460.187016][ T7158] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 460.247915][T17644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input56 [ 461.513323][T17691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input57 [ 461.586581][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 461.782071][T17692] team0 (unregistering): Port device team_slave_0 removed [ 461.821466][T17692] team0 (unregistering): Port device team_slave_1 removed [ 462.129079][T17703] syzkaller0: entered promiscuous mode [ 462.148905][T17703] syzkaller0: entered allmulticast mode [ 462.464388][T17728] netlink: 'syz.0.3554': attribute type 11 has an invalid length. [ 463.039859][T17749] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input58 [ 463.288834][T17755] netlink: 'syz.5.3563': attribute type 1 has an invalid length. [ 463.335146][T17755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.342385][T17755] IPv6: NLM_F_CREATE should be set when creating new route [ 463.442848][T17762] syzkaller0: entered promiscuous mode [ 463.448350][T17762] syzkaller0: entered allmulticast mode [ 463.520935][T17766] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.528248][T17766] IPv6: NLM_F_CREATE should be set when creating new route [ 463.544302][T17766] IPv6: NLM_F_CREATE should be set when creating new route [ 463.904414][T17778] netlink: 'syz.2.3572': attribute type 4 has an invalid length. [ 463.980284][T17778] netlink: 'syz.2.3572': attribute type 4 has an invalid length. [ 463.993842][T17785] __nla_validate_parse: 4 callbacks suppressed [ 463.993860][T17785] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3570'. [ 464.936534][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 465.264922][T17825] syzkaller0: entered promiscuous mode [ 465.270882][T17825] syzkaller0: entered allmulticast mode [ 465.295025][T17822] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3578'. [ 465.328674][T17827] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3580'. [ 465.729222][T17835] netlink: 'syz.3.3583': attribute type 4 has an invalid length. [ 465.777947][T17835] netlink: 'syz.3.3583': attribute type 4 has an invalid length. [ 465.873330][T17840] netlink: 'syz.3.3586': attribute type 1 has an invalid length. [ 465.894711][T17840] 8021q: adding VLAN 0 to HW filter on device bond3 [ 465.905687][T17840] bond2: (slave macvlan0): Releasing active interface [ 465.916531][T17840] bond3: (slave macvlan0): making interface the new active one [ 465.925023][T17840] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 466.165849][ T7152] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 466.563047][ T136] team0: Port device bridge0 removed [ 466.614326][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.625261][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.635736][ T136] bond0 (unregistering): Released all slaves [ 466.650620][ T136] bond1 (unregistering): Released all slaves [ 466.677657][ T136] bond2 (unregistering): Released all slaves [ 466.697257][ T136] bond3 (unregistering): Released all slaves [ 466.749679][ T136] bond4 (unregistering): Released all slaves [ 466.768479][ T136] bond5 (unregistering): Released all slaves [ 466.797739][ T136] bond6 (unregistering): (slave dummy0): Releasing active interface [ 466.805791][ T136] dummy0: left allmulticast mode [ 466.815640][ T136] bond6 (unregistering): Released all slaves [ 466.841583][ T136] bond8 (unregistering): Released all slaves [ 466.855832][ T136] bond7 (unregistering): Released all slaves [ 466.871618][ T136] bond9 (unregistering): Released all slaves [ 466.885705][ T136] bond10 (unregistering): Released all slaves [ 466.899596][ T136] bond11 (unregistering): Released all slaves [ 466.914262][ T136] bond12 (unregistering): Released all slaves [ 466.931652][ T136] bond13 (unregistering): Released all slaves [ 466.965766][ T136] bond14 (unregistering): Released all slaves [ 466.987678][ T136] bond15 (unregistering): Released all slaves [ 467.008364][ T136] bond16 (unregistering): (slave macvlan0): Releasing active interface [ 467.018398][ T136] bond16 (unregistering): Released all slaves [ 467.050726][ T136] bond17 (unregistering): Released all slaves [ 467.071424][ T136] bond18 (unregistering): Released all slaves [ 467.098915][ T7152] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 467.499100][ T136] tipc: Disabling bearer [ 467.514273][ T136] tipc: Left network mode [ 467.676510][T17804] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.708617][T17845] netlink: 'syz.0.3585': attribute type 1 has an invalid length. [ 467.726744][T17845] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3585'. [ 467.735725][T17845] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3585'. [ 468.112653][ T136] hsr_slave_0: left promiscuous mode [ 468.127163][ T136] hsr_slave_1: left promiscuous mode [ 468.139255][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.177519][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.286211][T17877] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3596'. [ 468.288954][T17879] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3597'. [ 468.392942][T17882] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input59 [ 468.592285][ T136] team0 (unregistering): Port device team_slave_1 removed [ 468.618455][T17885] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3599'. [ 468.631973][ T136] team0 (unregistering): Port device team_slave_0 removed [ 469.272368][T17908] FAULT_INJECTION: forcing a failure. [ 469.272368][T17908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.309297][T17908] CPU: 0 UID: 0 PID: 17908 Comm: syz.0.3603 Not tainted syzkaller #0 PREEMPT(full) [ 469.309322][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 469.309331][T17908] Call Trace: [ 469.309338][T17908] [ 469.309345][T17908] dump_stack_lvl+0xe8/0x150 [ 469.309369][T17908] should_fail_ex+0x412/0x560 [ 469.309395][T17908] _copy_from_user+0x2d/0xb0 [ 469.309417][T17908] __copy_msghdr+0x3c5/0x5b0 [ 469.309437][T17908] ___sys_sendmsg+0x213/0x360 [ 469.309452][T17908] ? __lock_acquire+0x6b5/0x2cf0 [ 469.309473][T17908] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.309522][T17908] ? __fget_files+0x2a/0x420 [ 469.309548][T17908] ? __fget_files+0x3a0/0x420 [ 469.309575][T17908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 469.309594][T17908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.309618][T17908] ? __pfx_ksys_write+0x10/0x10 [ 469.309647][T17908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.309674][T17908] do_syscall_64+0x15f/0xf80 [ 469.309696][T17908] ? trace_irq_disable+0x3b/0x140 [ 469.309718][T17908] ? clear_bhb_loop+0x40/0x90 [ 469.309737][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.309752][T17908] RIP: 0033:0x7fe5b599ce59 [ 469.309769][T17908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.309782][T17908] RSP: 002b:00007fe5b3bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.309798][T17908] RAX: ffffffffffffffda RBX: 00007fe5b5c15fa0 RCX: 00007fe5b599ce59 [ 469.309807][T17908] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 469.309817][T17908] RBP: 00007fe5b3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 469.309826][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.309836][T17908] R13: 00007fe5b5c16038 R14: 00007fe5b5c15fa0 R15: 00007fffedaa2578 [ 469.309861][T17908] [ 469.921703][T17913] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3604'. [ 470.777758][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.263442][T17912] macvtap1: left promiscuous mode [ 474.514711][T17921] netlink: 'syz.0.3607': attribute type 1 has an invalid length. [ 474.581057][T17921] bond1: entered promiscuous mode [ 474.586492][T17921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 474.647260][T17931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input60 [ 474.691831][T17934] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3611'. [ 474.727262][T17935] syzkaller1: entered promiscuous mode [ 474.758948][T17935] syzkaller1: entered allmulticast mode [ 474.961149][T17948] netlink: 'syz.1.3616': attribute type 4 has an invalid length. [ 474.972415][T17948] netlink: 'syz.1.3616': attribute type 4 has an invalid length. [ 475.113762][ T136] IPVS: stop unused estimator thread 0... [ 475.459754][T17964] netlink: 'syz.2.3621': attribute type 1 has an invalid length. [ 475.481438][T17962] netlink: 'syz.3.3620': attribute type 1 has an invalid length. [ 475.635797][T17958] veth1_macvtap: entered promiscuous mode [ 475.689682][T17958] veth1_macvtap: entered allmulticast mode [ 475.732552][T17958] macsec0: left promiscuous mode [ 475.825952][T17958] ip6gre1: left promiscuous mode [ 475.848421][T17972] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input61 [ 475.867243][T17958] bond1: left promiscuous mode [ 475.978655][T17964] 8021q: adding VLAN 0 to HW filter on device bond5 [ 476.053722][T17962] 8021q: adding VLAN 0 to HW filter on device bond4 [ 476.068341][T17965] bond3: (slave macvlan0): Releasing active interface [ 476.088324][T17965] bond4: (slave macvlan0): making interface the new active one [ 476.097358][T17965] bond4: (slave macvlan0): Enslaving as an active interface with an up link [ 476.109138][T17966] bond3: (slave macvlan0): Releasing active interface [ 476.120228][T17966] bond5: (slave macvlan0): making interface the new active one [ 476.128756][T17966] bond5: (slave macvlan0): Enslaving as an active interface with an up link [ 476.350429][T17979] netlink: 'syz.5.3625': attribute type 1 has an invalid length. [ 476.511973][T17979] 8021q: adding VLAN 0 to HW filter on device bond3 [ 476.600293][T17984] bond3: (slave macvlan0): making interface the new active one [ 476.645174][T17984] bond3: (slave macvlan0): Enslaving as an active interface with an up link [ 476.764427][T18002] netlink: 'syz.1.3627': attribute type 4 has an invalid length. [ 476.815302][T18004] netlink: 'syz.1.3627': attribute type 4 has an invalid length. [ 476.859871][ T5647] Bluetooth: hci2: command 0x040f tx timeout [ 476.866072][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 476.954593][T18008] netlink: 320 bytes leftover after parsing attributes in process `syz.5.3632'. [ 476.979678][T17993] syzkaller1: entered promiscuous mode [ 476.986280][T17993] syzkaller1: entered allmulticast mode [ 477.364788][T18024] netlink: 'syz.2.3637': attribute type 1 has an invalid length. [ 477.393952][T18021] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input62 [ 477.596239][T18024] 8021q: adding VLAN 0 to HW filter on device bond6 [ 477.644176][T18027] bond5: (slave macvlan0): Releasing active interface [ 477.671481][T18027] bond6: (slave macvlan0): making interface the new active one [ 477.682569][T18027] bond6: (slave macvlan0): Enslaving as an active interface with an up link [ 478.188743][ T5643] block nbd8: Receive control failed (result -22) [ 478.262524][T18047] nbd8: detected capacity change from 0 to 32 [ 478.282697][T17920] block nbd8: Dead connection, failed to find a fallback [ 478.294090][T17920] block nbd8: shutting down sockets [ 478.301971][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.314578][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.323604][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.337912][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.349723][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.359993][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.388484][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.401415][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.464271][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.482739][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.502928][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.515935][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.550790][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.598798][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.624672][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.640430][T18061] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3646'. [ 478.663459][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.684424][T17920] ldm_validate_partition_table(): Disk read failed. [ 478.706767][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.754296][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.768547][T17920] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 478.780583][T17920] Buffer I/O error on dev nbd8, logical block 0, async page read [ 478.791974][T17920] Dev nbd8: unable to read RDB block 0 [ 478.799141][T17920] nbd8: unable to read partition table [ 478.811491][T17920] ldm_validate_partition_table(): Disk read failed. [ 478.818572][T17920] Dev nbd8: unable to read RDB block 0 [ 478.824548][T17920] nbd8: unable to read partition table [ 478.837043][T18067] syzkaller1: entered promiscuous mode [ 478.858057][T18067] syzkaller1: entered allmulticast mode [ 478.922475][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3646'. [ 478.932441][T17937] block nbd64: NBD_DISCONNECT [ 478.945365][T18072] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3650'. [ 479.374597][T17920] udevd[17920]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 479.389103][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'. [ 479.526435][T18100] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input63 [ 479.683838][T18103] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input64 [ 479.906546][T18109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3659'. [ 479.915563][T18109] FAULT_INJECTION: forcing a failure. [ 479.915563][T18109] name failslab, interval 1, probability 0, space 0, times 0 [ 479.928172][T18109] CPU: 1 UID: 0 PID: 18109 Comm: syz.5.3659 Not tainted syzkaller #0 PREEMPT(full) [ 479.928196][T18109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.928206][T18109] Call Trace: [ 479.928214][T18109] [ 479.928221][T18109] dump_stack_lvl+0xe8/0x150 [ 479.928247][T18109] should_fail_ex+0x412/0x560 [ 479.928272][T18109] should_failslab+0xa8/0x100 [ 479.928298][T18109] __kmalloc_cache_noprof+0x88/0x660 [ 479.928334][T18109] ? tcf_block_get_ext+0x8d3/0x17d0 [ 479.928355][T18109] ? __kmalloc_cache_noprof+0x15b/0x660 [ 479.928385][T18109] tcf_block_get_ext+0x8d3/0x17d0 [ 479.928423][T18109] tcf_block_get+0x67/0xa0 [ 479.928443][T18109] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 479.928471][T18109] cake_init+0x26c/0xc70 [ 479.928499][T18109] ? __raw_spin_lock_init+0x45/0x100 [ 479.928533][T18109] ? __pfx_cake_init+0x10/0x10 [ 479.928551][T18109] qdisc_create+0x7c4/0xf20 [ 479.928574][T18109] ? lockdep_rtnl_is_held+0x26/0x40 [ 479.928597][T18109] tc_modify_qdisc+0x16f0/0x2290 [ 479.928623][T18109] ? rcu_is_watching+0x15/0xb0 [ 479.928656][T18109] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 479.928676][T18109] ? __dev_queue_xmit+0x2b6/0x3950 [ 479.928720][T18109] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 479.928740][T18109] rtnetlink_rcv_msg+0x77e/0xbe0 [ 479.928766][T18109] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 479.928787][T18109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.928807][T18109] ? ref_tracker_free+0x693/0x840 [ 479.928832][T18109] ? __pfx_ref_tracker_free+0x10/0x10 [ 479.928864][T18109] netlink_rcv_skb+0x232/0x4b0 [ 479.928883][T18109] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 479.928907][T18109] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.928937][T18109] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.928953][T18109] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.928976][T18109] netlink_unicast+0x75c/0x8e0 [ 479.929010][T18109] netlink_sendmsg+0x813/0xb40 [ 479.929038][T18109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.929058][T18109] ? aa_sock_msg_perm+0xf1/0x1b0 [ 479.929079][T18109] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.929103][T18109] ____sys_sendmsg+0x972/0x9f0 [ 479.929120][T18109] ? __might_fault+0xaf/0x130 [ 479.929147][T18109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.929174][T18109] ? import_iovec+0x73/0xa0 [ 479.929199][T18109] ___sys_sendmsg+0x2a5/0x360 [ 479.929215][T18109] ? __lock_acquire+0x6b5/0x2cf0 [ 479.929237][T18109] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.929295][T18109] ? __fget_files+0x2a/0x420 [ 479.929313][T18109] ? __fget_files+0x3a0/0x420 [ 479.929343][T18109] __x64_sys_sendmsg+0x1bd/0x2a0 [ 479.929362][T18109] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.929388][T18109] ? __pfx_ksys_write+0x10/0x10 [ 479.929419][T18109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.929437][T18109] do_syscall_64+0x15f/0xf80 [ 479.929459][T18109] ? trace_irq_disable+0x3b/0x140 [ 479.929481][T18109] ? clear_bhb_loop+0x40/0x90 [ 479.929501][T18109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.929517][T18109] RIP: 0033:0x7f20c979ce59 [ 479.929535][T18109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.929548][T18109] RSP: 002b:00007f20ca5c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.929572][T18109] RAX: ffffffffffffffda RBX: 00007f20c9a15fa0 RCX: 00007f20c979ce59 [ 479.929584][T18109] RDX: 0000000000000800 RSI: 00002000000007c0 RDI: 0000000000000003 [ 479.929599][T18109] RBP: 00007f20ca5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 479.929619][T18109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.929628][T18109] R13: 00007f20c9a16038 R14: 00007f20c9a15fa0 R15: 00007ffe58c01db8 [ 479.929656][T18109] [ 480.513426][T18119] netlink: 'syz.1.3665': attribute type 1 has an invalid length. [ 480.558044][T18127] FAULT_INJECTION: forcing a failure. [ 480.558044][T18127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 480.601024][T18127] CPU: 0 UID: 0 PID: 18127 Comm: syz.0.3668 Not tainted syzkaller #0 PREEMPT(full) [ 480.601048][T18127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 480.601058][T18127] Call Trace: [ 480.601066][T18127] [ 480.601073][T18127] dump_stack_lvl+0xe8/0x150 [ 480.601098][T18127] should_fail_ex+0x412/0x560 [ 480.601124][T18127] _copy_to_user+0x31/0xb0 [ 480.601150][T18127] simple_read_from_buffer+0xe1/0x170 [ 480.601175][T18127] proc_fail_nth_read+0x1bb/0x230 [ 480.601200][T18127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.601224][T18127] ? rw_verify_area+0x2a6/0x4d0 [ 480.601245][T18127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 480.601267][T18127] vfs_read+0x20c/0xa70 [ 480.601293][T18127] ? __pfx___mutex_lock+0x10/0x10 [ 480.601310][T18127] ? __pfx_vfs_read+0x10/0x10 [ 480.601333][T18127] ? __fget_files+0x2a/0x420 [ 480.601356][T18127] ? __fget_files+0x3a0/0x420 [ 480.601374][T18127] ? __fget_files+0x2a/0x420 [ 480.601401][T18127] ksys_read+0x150/0x270 [ 480.601425][T18127] ? __pfx_ksys_read+0x10/0x10 [ 480.601456][T18127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.601474][T18127] do_syscall_64+0x15f/0xf80 [ 480.601495][T18127] ? trace_irq_disable+0x3b/0x140 [ 480.601524][T18127] ? clear_bhb_loop+0x40/0x90 [ 480.601545][T18127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.601561][T18127] RIP: 0033:0x7fe5b595d68e [ 480.601576][T18127] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 480.601590][T18127] RSP: 002b:00007fe5b3bedfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 480.601607][T18127] RAX: ffffffffffffffda RBX: 00007fe5b3bee6c0 RCX: 00007fe5b595d68e [ 480.601619][T18127] RDX: 000000000000000f RSI: 00007fe5b3bee0a0 RDI: 0000000000000004 [ 480.601630][T18127] RBP: 00007fe5b3bee090 R08: 0000000000000000 R09: 0000000000000000 [ 480.601643][T18127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.601654][T18127] R13: 00007fe5b5c16038 R14: 00007fe5b5c15fa0 R15: 00007fffedaa2578 [ 480.601683][T18127] [ 480.832375][T18136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3667'. [ 480.837833][T18119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 480.848501][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3667'. [ 480.877429][T18119] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.3665'. [ 480.886583][T18119] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.3665'. [ 480.917953][T18129] vlan2: entered promiscuous mode [ 480.923023][T18129] bond1: entered promiscuous mode [ 480.975447][T18129] vlan2: entered allmulticast mode [ 480.980783][T18129] bond1: entered allmulticast mode [ 481.078796][T18134] bond1: (slave bridge1): making interface the new active one [ 481.091252][T18150] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 481.100180][ T5647] Bluetooth: hci2: command 0x040f tx timeout [ 481.106290][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 481.106321][T18134] bridge1: entered promiscuous mode [ 481.106523][T18134] bridge1: entered allmulticast mode [ 481.113547][T18150] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 481.123301][T18134] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 481.217129][ T136] tipc: Subscription rejected, illegal request [ 481.233527][T18155] FAULT_INJECTION: forcing a failure. [ 481.233527][T18155] name failslab, interval 1, probability 0, space 0, times 0 [ 481.246994][T18155] CPU: 0 UID: 0 PID: 18155 Comm: syz.5.3675 Not tainted syzkaller #0 PREEMPT(full) [ 481.247016][T18155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.247025][T18155] Call Trace: [ 481.247032][T18155] [ 481.247040][T18155] dump_stack_lvl+0xe8/0x150 [ 481.247064][T18155] should_fail_ex+0x412/0x560 [ 481.247089][T18155] should_failslab+0xa8/0x100 [ 481.247112][T18155] ? skb_clone+0x212/0x3a0 [ 481.247129][T18155] kmem_cache_alloc_noprof+0x87/0x650 [ 481.247168][T18155] skb_clone+0x212/0x3a0 [ 481.247188][T18155] __netlink_deliver_tap+0x404/0x850 [ 481.247217][T18155] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.247236][T18155] netlink_deliver_tap+0x19c/0x1b0 [ 481.247254][T18155] netlink_sendskb+0x68/0x140 [ 481.247279][T18155] netlink_rcv_skb+0x2b6/0x4b0 [ 481.247296][T18155] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.247320][T18155] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.247335][T18155] ? lockdep_hardirqs_on+0x7a/0x110 [ 481.247382][T18155] netlink_unicast+0x75c/0x8e0 [ 481.247414][T18155] netlink_sendmsg+0x813/0xb40 [ 481.247441][T18155] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.247461][T18155] ? aa_sock_msg_perm+0xf1/0x1b0 [ 481.247484][T18155] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.247508][T18155] ____sys_sendmsg+0x972/0x9f0 [ 481.247524][T18155] ? __might_fault+0xaf/0x130 [ 481.247550][T18155] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.247577][T18155] ? import_iovec+0x73/0xa0 [ 481.247602][T18155] ___sys_sendmsg+0x2a5/0x360 [ 481.247618][T18155] ? __lock_acquire+0x6b5/0x2cf0 [ 481.247641][T18155] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.247697][T18155] ? __fget_files+0x2a/0x420 [ 481.247715][T18155] ? __fget_files+0x3a0/0x420 [ 481.247744][T18155] __x64_sys_sendmsg+0x1bd/0x2a0 [ 481.247764][T18155] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.247791][T18155] ? __pfx_ksys_write+0x10/0x10 [ 481.247822][T18155] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.247841][T18155] do_syscall_64+0x15f/0xf80 [ 481.247863][T18155] ? trace_irq_disable+0x3b/0x140 [ 481.247885][T18155] ? clear_bhb_loop+0x40/0x90 [ 481.247904][T18155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.247920][T18155] RIP: 0033:0x7f20c979ce59 [ 481.247936][T18155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.247950][T18155] RSP: 002b:00007f20ca5c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.247967][T18155] RAX: ffffffffffffffda RBX: 00007f20c9a15fa0 RCX: 00007f20c979ce59 [ 481.247979][T18155] RDX: 0000000000000804 RSI: 0000200000000040 RDI: 0000000000000005 [ 481.247989][T18155] RBP: 00007f20ca5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 481.247999][T18155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.248009][T18155] R13: 00007f20c9a16038 R14: 00007f20c9a15fa0 R15: 00007ffe58c01db8 [ 481.248038][T18155] [ 481.650714][T18161] syzkaller1: entered promiscuous mode [ 481.656218][T18161] syzkaller1: entered allmulticast mode [ 482.087287][T18186] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.293105][T18195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3688'. [ 482.350787][T18199] FAULT_INJECTION: forcing a failure. [ 482.350787][T18199] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.364260][T18199] CPU: 0 UID: 0 PID: 18199 Comm: syz.1.3690 Not tainted syzkaller #0 PREEMPT(full) [ 482.364279][T18199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 482.364289][T18199] Call Trace: [ 482.364296][T18199] [ 482.364304][T18199] dump_stack_lvl+0xe8/0x150 [ 482.364329][T18199] should_fail_ex+0x412/0x560 [ 482.364355][T18199] _copy_to_user+0x31/0xb0 [ 482.364380][T18199] bpf_test_finish+0x22c/0x6b0 [ 482.364407][T18199] ? __pfx_bpf_test_finish+0x10/0x10 [ 482.364424][T18199] ? eth_type_trans+0x348/0x7e0 [ 482.364451][T18199] bpf_prog_test_run_skb+0x1250/0x2260 [ 482.364489][T18199] ? __fget_files+0x3a0/0x420 [ 482.364507][T18199] ? __fget_files+0x2a/0x420 [ 482.364530][T18199] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 482.364548][T18199] bpf_prog_test_run+0x2c7/0x340 [ 482.364569][T18199] __sys_bpf+0x643/0x950 [ 482.364594][T18199] ? __pfx___sys_bpf+0x10/0x10 [ 482.364631][T18199] ? ksys_write+0x242/0x270 [ 482.364655][T18199] ? __pfx_ksys_write+0x10/0x10 [ 482.364682][T18199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.364699][T18199] __x64_sys_bpf+0x7c/0x90 [ 482.364721][T18199] do_syscall_64+0x15f/0xf80 [ 482.364743][T18199] ? trace_irq_disable+0x3b/0x140 [ 482.364765][T18199] ? clear_bhb_loop+0x40/0x90 [ 482.364785][T18199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.364801][T18199] RIP: 0033:0x7fea9e19ce59 [ 482.364817][T18199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.364831][T18199] RSP: 002b:00007fea9f075028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 482.364849][T18199] RAX: ffffffffffffffda RBX: 00007fea9e415fa0 RCX: 00007fea9e19ce59 [ 482.364861][T18199] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 482.364872][T18199] RBP: 00007fea9f075090 R08: 0000000000000000 R09: 0000000000000000 [ 482.364882][T18199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.364892][T18199] R13: 00007fea9e416038 R14: 00007fea9e415fa0 R15: 00007ffeb8d85108 [ 482.364920][T18199] [ 482.935375][T18216] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3696'. [ 482.993421][T18220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3696'. [ 483.382278][T18232] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3702'. [ 483.433262][T18233] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3696'. [ 483.551509][T18232] veth1_to_batadv: entered promiscuous mode [ 483.578397][T18232] veth1_to_batadv: left promiscuous mode [ 483.976508][ T5644] Bluetooth: hci2: command 0x040f tx timeout [ 483.983155][ T5643] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 484.239274][T18263] vlan2: left promiscuous mode [ 484.254013][T18263] bond1: left promiscuous mode [ 484.263790][T18268] netlink: 'syz.0.3713': attribute type 16 has an invalid length. [ 484.283010][T18263] bridge1: left promiscuous mode [ 484.288915][T18268] netlink: 'syz.0.3713': attribute type 3 has an invalid length. [ 484.303441][T18268] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.3713'. [ 484.362633][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 484.410897][T18268] netlink: 'syz.0.3713': attribute type 29 has an invalid length. [ 484.441606][T18268] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 484.475844][T18264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3713'. [ 484.518812][T18264] netlink: 'syz.0.3713': attribute type 29 has an invalid length. [ 484.530160][T18273] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3714'. [ 484.984727][T18282] netlink: 'syz.2.3718': attribute type 4 has an invalid length. [ 485.094615][T18282] netlink: 'syz.2.3718': attribute type 4 has an invalid length. [ 485.383189][T18293] FAULT_INJECTION: forcing a failure. [ 485.383189][T18293] name failslab, interval 1, probability 0, space 0, times 0 [ 485.392232][T18294] netlink: 'syz.1.3722': attribute type 58 has an invalid length. [ 485.406420][T18293] CPU: 1 UID: 0 PID: 18293 Comm: syz.5.3723 Not tainted syzkaller #0 PREEMPT(full) [ 485.406443][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.406453][T18293] Call Trace: [ 485.406460][T18293] [ 485.406467][T18293] dump_stack_lvl+0xe8/0x150 [ 485.406492][T18293] should_fail_ex+0x412/0x560 [ 485.406517][T18293] should_failslab+0xa8/0x100 [ 485.406543][T18293] __kmalloc_noprof+0xe8/0x760 [ 485.406563][T18293] ? preempt_schedule_thunk+0x16/0x30 [ 485.406583][T18293] ? kobject_get_path+0xc5/0x2f0 [ 485.406606][T18293] kobject_get_path+0xc5/0x2f0 [ 485.406628][T18293] kobject_rename+0x193/0x520 [ 485.406646][T18293] ? kernfs_put+0x4bf/0x520 [ 485.406666][T18293] ? __pfx_kobject_rename+0x10/0x10 [ 485.406687][T18293] ? sysfs_rename_link_ns+0x178/0x1b0 [ 485.406711][T18293] device_rename+0x15d/0x210 [ 485.406733][T18293] cfg802154_switch_netns+0x1ff/0x3d0 [ 485.406753][T18293] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 485.406778][T18293] genl_family_rcv_msg_doit+0x22a/0x330 [ 485.406800][T18293] ? __asan_memcpy+0x40/0x70 [ 485.406822][T18293] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 485.406854][T18293] ? bpf_lsm_capable+0x9/0x20 [ 485.406869][T18293] ? security_capable+0x7e/0x2c0 [ 485.406895][T18293] genl_rcv_msg+0x61c/0x7a0 [ 485.406930][T18293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.406948][T18293] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 485.406966][T18293] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 485.406985][T18293] ? __pfx_nl802154_post_doit+0x10/0x10 [ 485.407019][T18293] netlink_rcv_skb+0x232/0x4b0 [ 485.407037][T18293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.407059][T18293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.407093][T18293] ? down_read+0x270/0x2e0 [ 485.407107][T18293] ? genl_rcv+0xd/0x40 [ 485.407127][T18293] genl_rcv+0x28/0x40 [ 485.407145][T18293] netlink_unicast+0x75c/0x8e0 [ 485.407180][T18293] netlink_sendmsg+0x813/0xb40 [ 485.407207][T18293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.407227][T18293] ? aa_sock_msg_perm+0xf1/0x1b0 [ 485.407250][T18293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 485.407273][T18293] ____sys_sendmsg+0x972/0x9f0 [ 485.407290][T18293] ? __might_fault+0xaf/0x130 [ 485.407317][T18293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.407343][T18293] ? import_iovec+0x73/0xa0 [ 485.407369][T18293] ___sys_sendmsg+0x2a5/0x360 [ 485.407385][T18293] ? __lock_acquire+0x6b5/0x2cf0 [ 485.407406][T18293] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.407460][T18293] ? __fget_files+0x2a/0x420 [ 485.407478][T18293] ? __fget_files+0x3a0/0x420 [ 485.407506][T18293] __x64_sys_sendmsg+0x1bd/0x2a0 [ 485.407526][T18293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.407552][T18293] ? __pfx_ksys_write+0x10/0x10 [ 485.407584][T18293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.407602][T18293] do_syscall_64+0x15f/0xf80 [ 485.407623][T18293] ? trace_irq_disable+0x3b/0x140 [ 485.407645][T18293] ? clear_bhb_loop+0x40/0x90 [ 485.407665][T18293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.407681][T18293] RIP: 0033:0x7f20c979ce59 [ 485.407697][T18293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.407710][T18293] RSP: 002b:00007f20ca5c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.407728][T18293] RAX: ffffffffffffffda RBX: 00007f20c9a15fa0 RCX: 00007f20c979ce59 [ 485.407739][T18293] RDX: 0000000000004880 RSI: 00002000000005c0 RDI: 0000000000000008 [ 485.407750][T18293] RBP: 00007f20ca5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 485.407760][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.407769][T18293] R13: 00007f20c9a16038 R14: 00007f20c9a15fa0 R15: 00007ffe58c01db8 [ 485.407799][T18293] [ 485.408446][T18293] ------------[ cut here ]------------ [ 485.822662][T18293] err [ 485.822689][T18293] WARNING: net/ieee802154/core.c:258 at cfg802154_switch_netns+0x3c7/0x3d0, CPU#1: syz.5.3723/18293 [ 485.836051][T18293] Modules linked in: [ 485.840628][T18293] CPU: 1 UID: 0 PID: 18293 Comm: syz.5.3723 Not tainted syzkaller #0 PREEMPT(full) [ 485.850013][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 485.860094][T18293] RIP: 0010:cfg802154_switch_netns+0x3c7/0x3d0 [ 485.866267][T18293] Code: e1 07 38 c1 7c 8d 4c 89 e7 e8 f5 d7 d2 f6 eb 83 e8 9e 9a 67 f6 e9 62 fe ff ff e8 94 9a 67 f6 e9 58 fe ff ff e8 8a 9a 67 f6 90 <0f> 0b 90 e9 4a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 485.897294][T18293] RSP: 0018:ffffc900026df3c0 EFLAGS: 00010293 [ 485.903389][T18293] RAX: ffffffff8b5e29d6 RBX: 00000000fffffff4 RCX: ffff88802f875c40 [ 485.911354][T18293] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 485.919323][T18293] RBP: 0000000000000000 R08: ffffffff90311df7 R09: 1ffffffff20623be [ 485.927690][T18293] R10: dffffc0000000000 R11: fffffbfff20623bf R12: ffff888028d74198 [ 485.935686][T18293] R13: 1ffff920004dbe90 R14: dffffc0000000000 R15: ffff888067c6a6c0 [ 485.943670][T18293] FS: 00007f20ca5c26c0(0000) GS:ffff88812537a000(0000) knlGS:0000000000000000 [ 485.952608][T18293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 485.959193][T18293] CR2: 00007f20c9787cc0 CR3: 00000000363ac000 CR4: 00000000003526f0 [ 485.967172][T18293] Call Trace: [ 485.970456][T18293] [ 485.973391][T18293] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 485.978854][T18293] genl_family_rcv_msg_doit+0x22a/0x330 [ 485.984394][T18293] ? __asan_memcpy+0x40/0x70 [ 485.988982][T18293] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 485.995048][T18293] ? bpf_lsm_capable+0x9/0x20 [ 486.007437][T18293] ? security_capable+0x7e/0x2c0 [ 486.012389][T18293] genl_rcv_msg+0x61c/0x7a0 [ 486.016889][T18293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.021902][T18293] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 486.027376][T18293] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 486.033810][T18293] ? __pfx_nl802154_post_doit+0x10/0x10 [ 486.039389][T18293] netlink_rcv_skb+0x232/0x4b0 [ 486.044144][T18293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.049175][T18293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.054459][T18293] ? down_read+0x270/0x2e0 [ 486.058874][T18293] ? genl_rcv+0xd/0x40 [ 486.062953][T18293] genl_rcv+0x28/0x40 [ 486.066934][T18293] netlink_unicast+0x75c/0x8e0 [ 486.071720][T18293] netlink_sendmsg+0x813/0xb40 [ 486.076488][T18293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.081784][T18293] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.086734][T18293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.092029][T18293] ____sys_sendmsg+0x972/0x9f0 [ 486.096805][T18293] ? __might_fault+0xaf/0x130 [ 486.101499][T18293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.106787][T18293] ? import_iovec+0x73/0xa0 [ 486.123428][T18293] ___sys_sendmsg+0x2a5/0x360 [ 486.129046][T18293] ? __lock_acquire+0x6b5/0x2cf0 [ 486.134018][T18293] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.139267][T18293] ? __fget_files+0x2a/0x420 [ 486.143866][T18293] ? __fget_files+0x3a0/0x420 [ 486.148540][T18293] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.153472][T18293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.158939][T18293] ? __pfx_ksys_write+0x10/0x10 [ 486.163814][T18293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.169889][T18293] do_syscall_64+0x15f/0xf80 [ 486.174485][T18293] ? trace_irq_disable+0x3b/0x140 [ 486.179524][T18293] ? clear_bhb_loop+0x40/0x90 [ 486.184196][T18293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.190101][T18293] RIP: 0033:0x7f20c979ce59 [ 486.194527][T18293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.214145][T18293] RSP: 002b:00007f20ca5c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.229880][T18293] RAX: ffffffffffffffda RBX: 00007f20c9a15fa0 RCX: 00007f20c979ce59 [ 486.238324][T18293] RDX: 0000000000004880 RSI: 00002000000005c0 RDI: 0000000000000008 [ 486.246324][T18293] RBP: 00007f20ca5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 486.254392][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.262385][T18293] R13: 00007f20c9a16038 R14: 00007f20c9a15fa0 R15: 00007ffe58c01db8 [ 486.270371][T18293] [ 486.273411][T18293] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 486.280689][T18293] CPU: 1 UID: 0 PID: 18293 Comm: syz.5.3723 Not tainted syzkaller #0 PREEMPT(full) [ 486.290048][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 486.300089][T18293] Call Trace: [ 486.303358][T18293] [ 486.306276][T18293] vpanic+0x56c/0xa60 [ 486.310252][T18293] ? __pfx__printk+0x10/0x10 [ 486.314828][T18293] ? __pfx_vpanic+0x10/0x10 [ 486.319314][T18293] ? is_bpf_text_address+0x292/0x2b0 [ 486.324584][T18293] ? is_bpf_text_address+0x26/0x2b0 [ 486.329772][T18293] panic+0xc5/0xd0 [ 486.333479][T18293] ? __pfx_panic+0x10/0x10 [ 486.337894][T18293] __warn+0x315/0x4c0 [ 486.341865][T18293] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 486.347398][T18293] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 486.352930][T18293] __report_bug+0x29a/0x540 [ 486.357425][T18293] ? do_syscall_64+0x15f/0xf80 [ 486.362184][T18293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.368234][T18293] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 486.373767][T18293] ? __pfx___report_bug+0x10/0x10 [ 486.378794][T18293] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 486.384326][T18293] report_bug+0x16a/0x220 [ 486.388644][T18293] ? cfg802154_switch_netns+0x3c7/0x3d0 [ 486.394175][T18293] ? cfg802154_switch_netns+0x3c9/0x3d0 [ 486.399703][T18293] handle_bug+0x9c/0x200 [ 486.403931][T18293] exc_invalid_op+0x1a/0x50 [ 486.408420][T18293] asm_exc_invalid_op+0x1a/0x20 [ 486.413341][T18293] RIP: 0010:cfg802154_switch_netns+0x3c7/0x3d0 [ 486.419481][T18293] Code: e1 07 38 c1 7c 8d 4c 89 e7 e8 f5 d7 d2 f6 eb 83 e8 9e 9a 67 f6 e9 62 fe ff ff e8 94 9a 67 f6 e9 58 fe ff ff e8 8a 9a 67 f6 90 <0f> 0b 90 e9 4a fe ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 486.439073][T18293] RSP: 0018:ffffc900026df3c0 EFLAGS: 00010293 [ 486.445129][T18293] RAX: ffffffff8b5e29d6 RBX: 00000000fffffff4 RCX: ffff88802f875c40 [ 486.453089][T18293] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 486.461046][T18293] RBP: 0000000000000000 R08: ffffffff90311df7 R09: 1ffffffff20623be [ 486.469002][T18293] R10: dffffc0000000000 R11: fffffbfff20623bf R12: ffff888028d74198 [ 486.476959][T18293] R13: 1ffff920004dbe90 R14: dffffc0000000000 R15: ffff888067c6a6c0 [ 486.484925][T18293] ? cfg802154_switch_netns+0x3c6/0x3d0 [ 486.490476][T18293] nl802154_wpan_phy_netns+0x13e/0x3d0 [ 486.495925][T18293] genl_family_rcv_msg_doit+0x22a/0x330 [ 486.501460][T18293] ? __asan_memcpy+0x40/0x70 [ 486.506040][T18293] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 486.512105][T18293] ? bpf_lsm_capable+0x9/0x20 [ 486.516766][T18293] ? security_capable+0x7e/0x2c0 [ 486.521696][T18293] genl_rcv_msg+0x61c/0x7a0 [ 486.526193][T18293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.531205][T18293] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 486.536651][T18293] ? __pfx_nl802154_wpan_phy_netns+0x10/0x10 [ 486.542628][T18293] ? __pfx_nl802154_post_doit+0x10/0x10 [ 486.548174][T18293] netlink_rcv_skb+0x232/0x4b0 [ 486.552929][T18293] ? __pfx_genl_rcv_msg+0x10/0x10 [ 486.557950][T18293] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 486.563230][T18293] ? down_read+0x270/0x2e0 [ 486.567634][T18293] ? genl_rcv+0xd/0x40 [ 486.571694][T18293] genl_rcv+0x28/0x40 [ 486.575662][T18293] netlink_unicast+0x75c/0x8e0 [ 486.580423][T18293] netlink_sendmsg+0x813/0xb40 [ 486.585182][T18293] ? __pfx_netlink_sendmsg+0x10/0x10 [ 486.590454][T18293] ? aa_sock_msg_perm+0xf1/0x1b0 [ 486.595381][T18293] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.600659][T18293] ____sys_sendmsg+0x972/0x9f0 [ 486.605410][T18293] ? __might_fault+0xaf/0x130 [ 486.610078][T18293] ? __pfx_____sys_sendmsg+0x10/0x10 [ 486.615354][T18293] ? import_iovec+0x73/0xa0 [ 486.619847][T18293] ___sys_sendmsg+0x2a5/0x360 [ 486.624521][T18293] ? __lock_acquire+0x6b5/0x2cf0 [ 486.629452][T18293] ? __pfx____sys_sendmsg+0x10/0x10 [ 486.634659][T18293] ? __fget_files+0x2a/0x420 [ 486.639234][T18293] ? __fget_files+0x3a0/0x420 [ 486.643903][T18293] __x64_sys_sendmsg+0x1bd/0x2a0 [ 486.648828][T18293] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 486.654279][T18293] ? __pfx_ksys_write+0x10/0x10 [ 486.659125][T18293] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.665177][T18293] do_syscall_64+0x15f/0xf80 [ 486.669760][T18293] ? trace_irq_disable+0x3b/0x140 [ 486.674787][T18293] ? clear_bhb_loop+0x40/0x90 [ 486.679464][T18293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.685346][T18293] RIP: 0033:0x7f20c979ce59 [ 486.689756][T18293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.709353][T18293] RSP: 002b:00007f20ca5c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 486.717773][T18293] RAX: ffffffffffffffda RBX: 00007f20c9a15fa0 RCX: 00007f20c979ce59 [ 486.725733][T18293] RDX: 0000000000004880 RSI: 00002000000005c0 RDI: 0000000000000008 [ 486.733695][T18293] RBP: 00007f20ca5c2090 R08: 0000000000000000 R09: 0000000000000000 [ 486.741649][T18293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.749618][T18293] R13: 00007f20c9a16038 R14: 00007f20c9a15fa0 R15: 00007ffe58c01db8 [ 486.757599][T18293] [ 486.761329][T18293] Kernel Offset: disabled [ 486.765645][T18293] Rebooting in 86400 seconds..