last executing test programs: 21.227977073s ago: executing program 0 (id=2675): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = epoll_create1(0x0) r2 = socket(0x1, 0x80802, 0x0) r3 = epoll_create1(0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x10000001}) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(r3) shutdown(r2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000006c0)={0x0, 'bridge0\x00', {0x101}, 0x2}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a8d000000060a010400000000000000000a0000010900010073797a31000000005c000480580001800b0001007461726765740000480002802c0003009ac420e62e2eafb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000240000000000e00010049444c4554494d45520000000900020073797a32"], 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 19.954427135s ago: executing program 0 (id=2682): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c150000410007012cbd7000fadbdf25037c00000400c280341501802d1510800400078014000c"], 0x154c}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff00000000030000000000000000000000020000000000000000000000000000040300000000000000000000100c"], 0x0, 0x56, 0x0, 0x0, 0x4}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000000440)={{r1}, r2, 0x2, @unused=[0x5, 0x7, 0x6, 0x1], @subvolid=0x8}) 19.81524295s ago: executing program 0 (id=2683): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (fail_nth: 10) 19.323887392s ago: executing program 0 (id=2687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="d83900001000010000000000fedbdf25070000001300000008000000", @ANYRESOCT, @ANYBLOB="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", @ANYRES32=0x0, @ANYRESDEC], 0x39d8}], 0x1}, 0x91) 18.221466788s ago: executing program 0 (id=2692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="110200000000000000000100000030000180060005004e21000014000400000000000000000000000000000000010800060001000000060001000a"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x64, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9b}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4c000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000002050016000200000004001200050017"], 0x60}}, 0x0) 6.78595232s ago: executing program 1 (id=2764): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1a, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000400)=0x8) 6.5977103s ago: executing program 1 (id=2765): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r0], 0x48}}, 0x4008004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003880)=ANY=[], 0x4718}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x50) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000100)="c8d1a72cfc5da43d1d1f0e0cd056b6ae5af9c6e39f25e6376911f3c2f41898d5ba56b297882c82242e4508b2779077", &(0x7f0000000100), 0x1800, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r9}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4001000000000000fe88000000000075f7229900eb00000120010000000000000000000000000000fffd00004e2400000200002000000000a670dff12f51ad466cf4f31b7ec88fd844314893d0998c7e6844d4d7e458b83f0015c9c499922cfb44aa2a790a5e3a2357a3b29bc725ca03f9fe35bcd5a3b8800bd0b8a9b5017de1383dc45b3d5bee412352d49a9e69bca997ca3bccb147e6090c8a0484ecd4c072b65e2ccff73c2279e7966d74154f25303b9f7e539ebe2b37bceda6c3dd29024e2469fe356887ed1aabb04a3d00"/227, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0100000000000000000000000000000000000000000000070000000000000000000000008000000400000000000000f7b500000000000004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000800000000000000f8000000000000000300000000000000040000000200000100000000000000004f001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000004000000006ec8700"], 0x140}}, 0x844) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001a00010029bd7000000000000220200000000000002000001414aa0000000000fbbad073a59eb5a09e80100f83e67cdb6b16f19e6dfcc5628a82f583481964f6441d0150cdc5b494632b1373e99703fe06ff541ed338bcffb07e9c7f4f2477614ceb4fefce4d9dcbefefcb26fb6c7d8aa1adef8a0caec5471b63a238afa5f6b00a1f4c96c00fc4557cc12a89ec183023b8d26c5bbc2365afd9a53996189826240000000000000001761de892788c5f82d5ae2efae70949d6"], 0x24}}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000100000000000000000000000000000000000000000000f93700ffffffff00000000"]}, 0x108) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 5.598842791s ago: executing program 1 (id=2774): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000000206010800000000000000000100000a11000300686173683a69702c706f7274000000000900020073797a30000000000500010007000000050004000016000005000500020000001c000780050015000000000008001240000000000500140006"], 0x68}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000840)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@getqdisc={0x24, 0x26, 0xe3d, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xa, 0x5}, {0xfff2, 0xb}, {0x8, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x80800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001cc0)={0x25f8, 0x37, 0x109, 0x870bd22, 0x25dfdbfd, {0x2}, [@nested={0x25e4, 0x155, 0x0, 0x1, [@nested={0x32d, 0x100, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="6ef3119389a3a709bdfb5165364e5df01f1b80c958d9bc87c24eaa15c7ca7c39945a2203d3ebdcff1d7abb1dd611cf472540b9afad6ae8322a6bea54ebb7012648ebb60ae646a2ebb1cb22e831c9ec4d98af56228f3bace607798559ff50b22b48a759bd6a6324bc22a949bd0ecd7264177d66adb960714b2e5a25add680a17356cb462c49e13c2f7e40aaee37364a7905680b5cdde6616ee6fe987dd8fadfe616f3871ef2e85191ac88d4b00b9fcd3b50868958c49fb4", @generic, @generic="313df1af206c2e58b0d3c54324c04f7bc3a4f5d2369411fd1d6cba3d43e4e92a85060ca884a3eeeb95a9535bff537cbdb270b97e66d77391f09ad308b73b6b41d44c573b5e866e29237cfe1b2d07656f657cbef84abdd5ba8916cadd239e67bc7402e8a045422dae5045d00df53f2b6086984c87c9199fd1de9b89dde9b4169a1ef429b773c15409adaced07e05643f3ea7a6672478a48c17ab0e4f73f4ffde479ca944ef3e7a36137a13736ea1fe6fdad4b4de1e2c0a339efa5f22a85077da48f1608c877189731c5c757422cca0adfee23b49d51aaabbc9bc8304e9ef64f73a9bc6ade04cb", @generic="39e20df903ecbba44fca74363fe21f254f9de4af3ee472cae939996e244eb29d919c984cb053d51ae6a6ebc0451f23f3475f4b36f2d8900e00e6c28ca6187266a5dbdb83e819a747a0fe4a6c04ec123d5d0b46185ee15fc12beb717d34e2be695853498cd4375e0207284e15e948eb3abebdb01cedcd508836ca7db51bb0de29a02cec4f39f82bcb665f831b", @generic="d9094dda919ca30bde5668221564fe8f41236a18fc380efce099b3d142adbeeeb0078f03a798f815fca2e85a84da13ec68836edf48a5854b4269e9b0cebd407c1ebe6486e0ffe6b07ae6dfa803e6948e15eec26ce6a3de8f74d63b488127c6011af8f1c32c80b6c2e1146ba0545c90f25e8679fb718728195ff6551a35275a736572405c9352023d6ecf9872cef4a94544e171462e6c4cb2e52e01b6ff1cddaf24e8c0f7befa87d4768e3c7131ec8e016022c6a0f5252a0fdb87054ecee884fed3d48bda7401c013872eb7f1d18af6d563ce09941ac86a802cfd7b72fbd6f98173182ea8d5f2ba689bf4b749ba4441f9bfff02e2716b6990"]}, @nested={0x21a7, 0x9e, 0x0, 0x1, [@nested={0x1034, 0x7b, 0x0, 0x1, [@generic, @nested={0x28, 0x6a, 0x0, 0x1, [@nested={0x4, 0x35}, @nested={0x4, 0xe5}, @nested={0x4, 0x138}, @typed={0x12, 0x11e, 0x0, 0x0, @str='cbc-cast6-avx\x00'}, @nested={0x4, 0xcf}]}, @typed={0x8, 0x81, 0x0, 0x0, @ipv4=@rand_addr=0xc630}, @generic="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"]}, @typed={0xd2, 0x7c, 0x0, 0x0, @binary="f988f5ee2a142c2154677ae34938d51158b0d7e16baf23bc0a0d085d91bb9a32175a959d023361927eb061fa4d2b092ef2fb6b90c2eecc59c50b5f6c49c76da8c1a3b7732a9fccab21fd3dfc839d8eaf0ad63073ad07ffd1196f74a03c4786b22a9d1d0ba3437db94a6e6ca1e3f4444901d88991159ca92a7b7950af88bbb07b33712d99ea360cf74dab11dbc8edf779cf964da2767c2aedc1c8d975f72b2c8e1cdda92ac9917064964598d3cb46660a1906a11038b6e285dd61bc646252a2ed30b3aa1b2400b3b8d2ff3b346a65"}, @typed={0x14, 0x15a, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x6, 0x0, 0x0, @u32=0x4}, @generic="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", @generic="d99295fc7333fdb7e22bbb764d11e63ef478fb28f54d6eb0510532c61182d9e654fe7b6835c6a46619c47b81ef5c6b09a94829dff137b3314b6362636cc3a412feff5eedf801c0d89877aba98f52b51b9ce7cb547ec97027477f4dbeff4d602652188d890dc9ec9e7719c19f68748d190db42dc180f1cf", @nested={0x4, 0x10f}, @nested={0x4, 0x118}]}, @typed={0x14, 0x129, 0x0, 0x0, @ipv6=@local}, @typed={0x4, 0x110}, @typed={0xf0, 0x12f, 0x0, 0x0, @binary="1cf5f82fc10d064a9d625924d7e3fdd342f587011877ad0bd97a44f5218662f2d43d4ee80a2cbe669a736ef57349e1bbe61bdc5958558c953195e741b396f1a6316b4d6ce59caf9a86e39eff2c0421070aedbd5f3eb3af34a9243c5313592bdc9aaa42b22b252a8f2c978f306c3249de453951ab4c256b4a229148ad1de2b95826bd9babb528d640cd53759e26119b5623f5c2f9cfa750eee22b9eda4a55bb69a145f752217b3cf8663d1c48aacbf6e2751b916ade0e11267b86814991f3e11c5b3e130e6292bc48bb7dc5b17e3f9a2ec4e9fcffad5406ad7a3844d72f0488080e64131044f7795afc8beb8d"}]}]}, 0x25f8}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$packet(0x11, 0x2, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r8, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e21, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000029000000040000002b011000000004", @ANYRES32=r8], 0x28}, 0x4044804) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000200)="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", 0x145}, {0x0}], 0x2) 4.360707225s ago: executing program 4 (id=2779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000005000000080000000f"], 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000002030102000000000000000007000008080003400000000f0900f0ff0000800101000020080001000100000f"], 0x30}, 0x1, 0x0, 0x0, 0x4000814}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)="c6", 0xfffffdd1}], 0x1}, 0x4040004) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000080), 0x4) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r6, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) getpid() ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) accept$unix(r7, 0x0, 0x0) recvmmsg(r5, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, 0x0, 0x40000) recvmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x22) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000080000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES8=r3, @ANYRESDEC=r4, @ANYBLOB="256f744aa5b08cb3eda390703a9b81c152028f64c241bd2ce036a54e6ef210c016f191e0167766ddd1461482c02c498e705cc27d2ebb07d8fdde729187a2021667fb474343c6303977be49c7aefe3d29ac9a3589e80a17ae2fe1f8e4a87dcd3c438f024c7ce8f393485381b08cda45d1701cef56966637e199bc7a", @ANYRES64=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newtaction={0x6c, 0x30, 0xffff, 0xfffffffe, 0x25dfdbfb, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaf, 0x1, 0x6, 0x1000, 0x10}, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff000000}}]}, {0xfffffffffffffd1d}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r10, @ANYBLOB="6cba4a98c2beb30b613d6aba9bff454a7c81d1f0cc91788c9d9b83a4f8fc13ec4718c1d7147dc089b2f3d8083c8c164a37d2d943882ced4dfe4c94e239fd98b32dbbce4550942318c16246134e0fca4b532899e7b22d4f86a20457c6b524fcc6bcd8219c3d105c79801974c0645fa04a71fa3d3ac3042b2a27d34766ba52bc0fb11419d94f2be1e8bdd0ff0bb2a2ff9711b6ba", @ANYBLOB="0000000000000000000000000002000000000000d53cf489f3f505729eef218a7ee258c616939bdfb38a2d824030b448a6acd98c865096166abf10b56681426a00334ddb454ca71fdb8ee303cf3c7e8bb004bab4f35918daee38b7b335036b9d032ec122f87a61de75353e4381428aa7a1f6023d0b0052f8263c94abe134cc016745a92e9d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESOCT], 0x50) 4.18530758s ago: executing program 1 (id=2782): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0x2c, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xd, 0xffe0}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0xc}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0xfffffffffffffe98, 0x1, {0xfff3, 0xffff}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff1, 0x6}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x42, 0x4, 0x2f8, 0xffffffff, 0x1d8, 0x1d8, 0x0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'vlan0\x00'}, 0x287, 0xb8, 0x118, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x10000, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278, 0x6]}, {0xffff, [0x5, 0x0, 0x0, 0x0, 0x2]}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x2c}, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x76, 0x0, {0x4ada}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x358) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8050) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "8e00000400800100", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r4, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0xc8a) writev(r4, &(0x7f0000000300)=[{&(0x7f00000005c0)="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", 0xffffffa0}, {&(0x7f0000000340)="bf67a361000138944b854b78cc4e2237f68791bd7786513b715bf9ad6389844bc809b10b216304437e8d4b9e9cec7b31a34a02854029d58ba77b51b6479ef73e43d95fb478cc230a625897", 0x4b}, {&(0x7f0000000440)="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", 0x149}], 0x3) 3.249686761s ago: executing program 4 (id=2784): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x10, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRESHEX=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r2, @ANYRESOCT=r5, @ANYRES8=r5, @ANYRES32=0x0, @ANYBLOB="96cdf8e3c3c05ebbe012692d44ab4eea040442452e41bd25ca6ad041152bed6acdc239733371a93f76aaf55b74f65709410715269b54890af0d047da2660d8b18c1fe9c15752d59055c0e289b95f455d8bc0cad231416118fa75765f1196a3", @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000500)='GPL\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7}, 0xc) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000100)={{0x2, 0x4e23, @rand_addr=0x64010102}, {0x300, @local}, 0x8, {0x2, 0x4e24, @local}, 'veth0_vlan\x00'}) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x10}, 0xa) socket$kcm(0x11, 0x2, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r10, 0x0, 0x487, &(0x7f0000000100)={{0x11, @loopback, 0x2710, 0x0, 'rr\x00'}, {@loopback=0x7f000002, 0x4e20, 0x2, 0x0, 0x8001}}, 0x44) r11 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r11, &(0x7f0000000200)={0x2, 0x7530, @loopback=0x7f000003}, 0x10) connect$inet(r11, &(0x7f0000000210)={0x2, 0x2710, @loopback}, 0x10) sendto$inet(r11, &(0x7f0000000220)='hello', 0x5, 0x0, 0x0, 0x0) r12 = socket$inet(0x2, 0x3, 0xff) sendto$inet(r12, &(0x7f0000000300)="450000380000000040017cc07f0000027f000003030339a4000000004500001c0000000040117ccc7f0000037f00000275304e2000080000", 0x38, 0x0, 0x0, 0x0) 2.507352815s ago: executing program 2 (id=2788): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@setneightbl={0x84, 0x43, 0x100, 0x70bd2c, 0x25dfdbff, {0xa}, [@NDTA_THRESH1={0x8, 0x2, 0x7}, @NDTA_THRESH3={0x8, 0x4, 0x2000401}, @NDTA_PARMS={0x48, 0x6, 0x0, 0x1, [@NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0xfffffffeffffffff}, @NDTPA_LOCKTIME={0xc, 0xf, 0x1}, @NDTPA_PROXY_QLEN={0x8, 0xe, 0x7de2}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x8}, @NDTPA_MCAST_REPROBES={0x8, 0x11, 0xa7}, @NDTPA_IFINDEX={0x8, 0x1, r2}, @NDTPA_LOCKTIME={0xc, 0xf, 0x8}]}, @NDTA_PARMS={0x18, 0x6, 0x0, 0x1, [@NDTPA_MCAST_REPROBES={0x8, 0x11, 0x101}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x7}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x28008882) 2.480564701s ago: executing program 1 (id=2789): r0 = socket$inet6(0xa, 0x80002, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x300) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0x3}, {0xfff3}}}, 0x24}}, 0x0) 2.330111828s ago: executing program 2 (id=2791): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0xad724fc17f5eaadc}, 0x4054) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x805, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) getsockopt(r3, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a0000180102801401"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) unshare(0x22020600) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x1, 0x0, 0x0) 2.229899174s ago: executing program 4 (id=2792): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x28, r1, 0x9, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r4, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r5, r5, 0x19, 0x0, @val=@uprobe_multi={0x0, &(0x7f00000001c0), 0x0, 0x9f1e}}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x44b, 0x70bd2c, 0x0, {0x7a, 0x0, 0x0, 0x0, 0xc0}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31, 0x3}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x1}}]}}}]}, 0x48}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000f40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x400, 0xb, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_DESC={0x3ac, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xec, 0x2, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3b1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x425}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa4000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe87}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0x54, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffff9a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffa7c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x114}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x807}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_DESC_CONCAT={0xdc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000001}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xbdac}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xec23}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x68ea4e98}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_SET_FIELD_LEN={0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xdcf}]}]}, @NFTA_SET_DESC_CONCAT={0xc4, 0x2, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff96}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85e6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x530}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_DESC_CONCAT={0xa8, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xef8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x19fc}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x380a}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8ff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}]}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x61f}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0x1fffffe00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa0}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWRULE={0x2e4, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x2b8, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xfd}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}, {0x30, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9a}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DIR={0x5, 0x3, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}]}}}, {0x208, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1f8, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x8, 0x1, 'SET\x00'}, @NFTA_TARGET_INFO={0xe8, 0x3, "87bcc252f0104030959ed6a2a24c8ccf1ff15bb35475385f3181e852aeacfe78a58d48b8df028bbfd7a0cedf62925737b32f5cd91943e778673ebd690d22d33131064f43597378eab640b6c464d47fdd474c452ec5efc1efedf829dedcab554ce4ae0560e472aebc0ee883514e3f999a9442de1435394d1842503b2184e448c8b79c2e0fe93f25ee165715a5a8e9d13b085bc6ae6d2cace5791d050dc9ed12a5e1d09b5778537a5d29a7a723fa9f6ccd056f056e9a03aac3d5b94fc242ac15bfa57770a282b0ecb81ea550fa5343765b4eda326cb58fd2fcc930e5d757bdf39b55fd33db"}, @NFTA_TARGET_INFO={0xf7, 0x3, "18d1d46e13a13ffc284974f4d8b49a6fabca861ecbca95acf1fa7ee9c03b1d41466e95efdae07decf46d70878b6998c676d8081253ee2950ebb7174a15962e94152a4bb9bdaf4fd5d04b711523cc5951bd7751c4d4f3f8e3cdf7337feb7e8273f28c2d246fedc7cd756ebc41f6cc16d4426c2b495890fd70abec9fc4a4019f386f2de17b3b699065d65a5796c38d7d33a55c721e57fe1c92220531485c66426a13aa24aa93dfff45a026d95a8169ebc6240ea26a646a477aa1cfa2f20300447cb7822952665c08f143779af0eb85853cb3853bee8ef483fb0e30889aa48675cd760e1e5a027d84ca029b903525b1356eef5abe"}, @NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x28, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSET={0x158, 0x9, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x2}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_USERDATA={0xca, 0xd, 0x1, 0x0, "1908f7a98920657ffc728b6bed76e4b8b71877815823ff62d724d583888a1edadff4e1f7d81db65ce2569a2e4b1307efc9560a2e796b3c4819c0c3a400d420cdf8dcc5e64e89f99a524538a9a28a89e32247acb78ca967be63e2f0f86e5a942d7f9e4a0a0d5228ea49adfa6e088d01c4d5882236610f4469d6b3e7d7b0effbf36723ba1ab3d9ebdbb6243c084b1497448f258ce16a613a7d1ba05ff933b90ae8b6c6a30bf0cb1f05e389ca95a82cee33ac7b555039c6408c7cce04061496cf6c7759126bee76"}, @NFTA_SET_USERDATA={0x29, 0xd, 0x1, 0x0, "47841ab7e4588558530ada42026201582068d4423fd5619835dd3e8ade00e1c3c18fa97b19"}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x80}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1d}]}, @NFT_MSG_DELSET={0x2ec, 0xb, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}, @NFTA_SET_DESC={0x264, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0xcc, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c07}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x562}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffa}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x30}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ef3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe08}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb34}]}]}, @NFTA_SET_DESC_CONCAT={0x28, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x12000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_CONCAT={0xf4, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3024}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}]}, {0x4}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x932a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1b4f}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x20000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x31f2}]}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0xffffffad}, @NFTA_SET_USERDATA={0x50, 0xd, 0x1, 0x0, "a9aa898d1cced9ed7c3740eaa2b157b69da04c4eb6a00af1cab06bf68f4c640b6e44b6d46151a16bfc3f97a0d41c1e2785f6d59da450c222820986c8cbf61f84385462d5f697d9ee6da4b3ff"}, @NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x18, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x11, 0xc, "e0a0eb92e0b47ee16f2b56a697"}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}]}], {0x14}}, 0xc34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40050) 1.901699418s ago: executing program 3 (id=2793): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x49, 0x0, &(0x7f00000002c0)="e0b954126387c89b6f5bec000000365ddf07104f519038d08e170fe681cc24ae6ff93b52a32e43365d0911941086c4a5394cceefc11c3bedae78b6edaa8167948cba43955f61744ed0", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.896947849s ago: executing program 2 (id=2794): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYRES64=0x0, @ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r0, @ANYBLOB], 0x48}}, 0x4008004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) recvmmsg(r6, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x4}, 0x1}], 0x1, 0x20, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000003880)=ANY=[], 0x4718}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r7, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000fd0900008500000041000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYRES64=r3], 0x50) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x82, &(0x7f0000000180), &(0x7f0000000200)=0x8) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000100)="c8d1a72cfc5da43d1d1f0e0cd056b6ae5af9c6e39f25e6376911f3c2f41898d5ba56b297882c82242e4508b2779077", &(0x7f0000000100), 0x1800, r9}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r9}, 0x38) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="4001000000000000fe88000000000075f7229900eb00000120010000000000000000000000000000fffd00004e2400000200002000000000a670dff12f51ad466cf4f31b7ec88fd844314893d0998c7e6844d4d7e458b83f0015c9c499922cfb44aa2a790a5e3a2357a3b29bc725ca03f9fe35bcd5a3b8800bd0b8a9b5017de1383dc45b3d5bee412352d49a9e69bca997ca3bccb147e6090c8a0484ecd4c072b65e2ccff73c2279e7966d74154f25303b9f7e539ebe2b37bceda6c3dd29024e2469fe356887ed1aabb04a3d00"/227, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="640101000000000000000000000000000000002032000000fc0100000000000000000000000000000000000000000000070000000000000000000000008000000400000000000000f7b500000000000004000000000000000800000000020000000000000000000001000000010000000800000000000000cc000000000000000800000000000000f8000000000000000300000000000000040000000200000100000000000000004f001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000004000000006ec8700"], 0x140}}, 0x844) connect$inet6(r8, &(0x7f0000000240)={0xa, 0x4e23, 0x27bf, @dev={0xfe, 0x80, '\x00', 0x5}, 0x3}, 0x1c) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="240000001a00010029bd7000000000000220200000000000002000001414aa0000000000fbbad073a59eb5a09e80100f83e67cdb6b16f19e6dfcc5628a82f583481964f6441d0150cdc5b494632b1373e99703fe06ff541ed338bcffb07e9c7f4f2477614ceb4fefce4d9dcbefefcb26fb6c7d8aa1adef8a0caec5471b63a238afa5f6b00a1f4c96c00fc4557cc12a89ec183023b8d26c5bbc2365afd9a53996189826240000000000000001761de892788c5f82d5ae2efae70949d6"], 0x24}}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="01000000220900"/16, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x80}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000140, 0x0, 0x0, 0x200000000170, 0x2000000001a0], 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000100000000000000000000000000000000000000000000f93700ffffffff00000000"]}, 0x108) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 1.717765113s ago: executing program 4 (id=2795): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x9, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x2, 0x9, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x800) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) ppoll(&(0x7f00000000c0)=[{r2, 0x808}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a00001400028010000b800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.717283438s ago: executing program 3 (id=2796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x700, 0x700, 0x7ff, 0x1, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x68, 0x0, 0x5, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0x12, 0x3, 0xa, [{@local, 0xff}]}, @timestamp_addr={0x44, 0x1c, 0x97, 0x1, 0xc, [{@empty, 0x9}, {@remote, 0x7}, {@multicast2, 0x4}]}, @ssrr={0x89, 0x1b, 0x59, [@local, @multicast1, @local, @multicast1, @private=0xa010101, @empty]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f00000001c0)={'sit0\x00', 0x0, 0x7840, 0x10, 0x3, 0xe477a3c, {{0x24, 0x4, 0x0, 0x6, 0x90, 0x65, 0x0, 0xa, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0xe}, @loopback, {[@timestamp={0x44, 0x24, 0xbc, 0x0, 0xa, [0x3, 0x4, 0xb8, 0x5, 0x7, 0xffffffff, 0x7ff, 0xfffffffd]}, @lsrr={0x83, 0x7, 0x4c, [@remote]}, @timestamp_prespec={0x44, 0x14, 0xc0, 0x3, 0x3, [{@loopback, 0x81}, {@loopback, 0x76}]}, @timestamp_prespec={0x44, 0x2c, 0xa3, 0x3, 0x8, [{@multicast2, 0xffffffff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x29}, {@local, 0xd458}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2, 0x773a}]}, @generic={0x44, 0xe, "03c38e0fd923eed70c882b20"}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x190, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x8081}, 0x4000000) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000005c0)={0x1, 0x10, '\x00', 0x0, &(0x7f0000000580)=[0x0, 0x0]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x6990}, 0x8) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000640)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000006c0)={0x0, 0xfff8, 0xd}, &(0x7f0000000700)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000740)={0x5, 0x8, 0xc, 0x1000, r8}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f0000000780)={r8, 0x3, 0xfffa}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000800)={r9, 0x2}, &(0x7f0000000840)=0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r10, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x0, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r10, 0x8983, &(0x7f00000009c0)={0x1, 'macsec0\x00', {}, 0x9}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), r10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r10, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x68, r11, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x3, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={r7, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r10, &(0x7f0000000d80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x78, r12, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1e}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x4c000) r14 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_LIST_RULES(r14, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8182040}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x40000) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000f40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r15, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x28, r16, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r17}, @val={0xc, 0x99, {0x401}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000001040)) 1.461711235s ago: executing program 4 (id=2797): r0 = socket(0x10, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000000)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local, 0x7800, 0x8, 0xfffffffc, 0xdc64}}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000006800e97802000000000000000a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000006800010002000000fcffff7f00000000000000000c0002000100000004040000f45dadf1652c13b280afb7bbb3822f011160b0a5136c00b2003c653ca267811ed0c75831dcfca31141df3c9959d2b8e86b92"], 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000041000701feffffff0800000002efffffffff42800c000180060006008035"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYRES64=r8, @ANYRES32, @ANYBLOB="140001", @ANYRESOCT, @ANYRESOCT], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800", @ANYRES32=r11, @ANYBLOB="08000200e4d4c21e080008004c06"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r11, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) sendmsg$nl_route(r9, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@bridge_newvlan={0x24, 0x70, 0x8, 0x70bd29, 0x25dfdbfd, {0x7, 0x0, 0x0, r4}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6, 0x2, 0xf}}]}, 0x24}}, 0x4000001) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000880)={'syztnl1\x00', 0x0}) getsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000000200)=0x7, &(0x7f0000000240)=0x2) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r8, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e23, @private=0xa010102}], 0x10) 1.442592401s ago: executing program 3 (id=2798): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) unshare(0x8040480) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r1, &(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x3}, 0xff}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r1], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x80c0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040803}, 0x4000010) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000700)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x20, r2, 0x8, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7bb, 0x7f}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={0x2c, r5, 0x1, 0x0, 0x4, {{0x2}, {@void, @val={0xc, 0x99, {0x8, 0x21}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x4}}]}]}, 0x2c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000640)=ANY=[@ANYBLOB="180000001000010000000000000000000500000a480000000c0a010100000000000000000a0000000000000900010073797a3100001c001c000380180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a00000000000000000003ffc02f24138c81ff97b40ede6611d2b928cf0c8b6302b1154cfd412b0ba8302662e6554633989f255f957caf146364d20100"/174], 0x70}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000c80)={0x26c, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_EXPRESSIONS={0x158, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x120, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x110, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0x13, 0x3, "1fdbac697b847e12a6039319a12e6b"}, @NFTA_MATCH_INFO={0xc7, 0x3, "77ae6382e47da5dbd3de2e5c90db823e0f5ff7a1b0d4fb1e163ba991789326cb5cd50dc805148c81dd86188e7f79899984c4748aaeb2c233466a7f5b7017aa067f9d70561377796a018f3a32107f6939d95a6cb93b17b880701000d0e19f5d5e4f2a221509d190a5144090a261007b2d3c3697aab3ecccab89d6773e81ded63c4c0dcdac0f13df300044822134bfc7a4bbc572a56c28e0a8a7adde965d35015c19765ec3d1e6c124055cf64a75deeb1b5ec57b8758b17e99f6c699a61d0a0116facd5d"}, @NFTA_MATCH_NAME={0xe, 0x1, 'connlimit\x00'}, @NFTA_MATCH_NAME={0x8, 0x1, 'bpf\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0xec, 0x7, 0x1, 0x0, "b74824037669f389ed005a5f274ba853a1099e5e2cdb0071f7dd7f8a8a713095326996570e41c82fa909dae5ba8eefb3e910690c9e8c540dd5915135ec3aae10e7da2631aecb8c6f6497428b13d4abdd6842a02fbbb5250dcf770a6be871c4310f75062bc3b87a96e29ca1eda8b79a3614e4eb06c1fc35c3ea7ca8550aa5b22e523205d30f06ca9f326b1047ea76054c93cd6b7f1ce0d519a8406157d886e247d51d3643cc87e4031e7bdcb2af28c8b1c37573724dc4cc3d6a530b2a671d3f9ce99d645671855fdb28241484331f457c0971c3daec6a4d59246c5ced48cf2f15976666dbaa68bb97"}]}, 0x26c}, 0x1, 0x0, 0x0, 0xc5}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.28206776s ago: executing program 1 (id=2799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000040)=ANY=[@ANYRES16, @ANYBLOB="ab7e4943391a85c7eb"], 0x0, 0xfffffffa}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0xe2, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newlink={0x40, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x42ca9}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xeaa}]}, 0x40}}, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000000400)=[{&(0x7f00000004c0)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}, {0x0}, {0x0, 0x50}], 0x4, &(0x7f0000000340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}], 0x18}, 0x24008004) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = socket$tipc(0x1e, 0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073119c00000000008510000002000000850000000200000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r4, 0x10f, 0x84, &(0x7f0000000080), &(0x7f00000001c0)=0x4) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) 1.069389482s ago: executing program 2 (id=2800): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfb, @private=0xa010100}, 0x10, &(0x7f0000002480)=[{&(0x7f00000000c0)="08007f2400000000f047", 0xa}, {0x0}], 0x2}, 0x80) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0xe, 0x0, &(0x7f0000000100)="00f3ff00"/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x20000043}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f0000000080)}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r4, &(0x7f0000000000)={&(0x7f0000000380)={0x8, 0xfbfb, @private=0xa010100}, 0x10, &(0x7f0000002480)=[{&(0x7f00000000c0)="08007f2400000000f047", 0xa}, {0x0}], 0x2}, 0x80) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@private0}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1, @ANYRESDEC=r3], &(0x7f0000000200)='GPL\x00', 0xfffffffa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r8, 0x27, 0xe, 0x0, &(0x7f0000000100)="00f3ff00"/14, 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1c, 0xf, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x20000043}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd=r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000001c0)={0x0, &(0x7f0000000080)}) (async) 1.069015564s ago: executing program 3 (id=2801): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_ext={0x1a, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x1b, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000400)=0x8) 965.518107ms ago: executing program 3 (id=2802): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x0, 0x2}, 0x10) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x7ffffc, @loopback}, 0x1c) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000feffff0000000005000000c4000005ffff00ff95"], &(0x7f0000000040)='GPL\x00'}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e22, @broadcast}, 0x2, 0x9800}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r7, 0x80487436, &(0x7f0000000540)="43210098ed") getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x8, &(0x7f0000000100)=0xa6d, &(0x7f0000000140)=0x4) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@delchain={0x44, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x4, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2c, &(0x7f0000000240)={0xbe, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e20, @broadcast}}}, 0x108) 678.394587ms ago: executing program 0 (id=2696): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xa}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8937, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 589.114819ms ago: executing program 4 (id=2803): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x65dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 10) 402.769432ms ago: executing program 3 (id=2804): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r2, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x20, 0x0) 25.753954ms ago: executing program 2 (id=2805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010040000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0x49, 0x0, &(0x7f00000002c0)="e0b954126387c89b6f5bec000000365ddf07104f519038d08e170fe681cc24ae6ff93b52a32e43365d0911941086c4a5394cceefc11c3bedae78b6edaa8167948cba43955f61744ed0", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=2806): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="4001000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e2b0005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f00000100000000000000000000000000000000000000009201000000000000060000e02cab8400ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700005350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001f00020000"], 0x140}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a0000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80800) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): ] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.051638][T12787] R13: 00007f00ee826038 R14: 00007f00ee825fa0 R15: 00007ffe8c2b2be8 [ 352.051666][T12787] [ 352.581354][T12787] debugfs: out of free dentries, can not create file 'netdev@ffff888079572700' [ 352.807649][T12799] __nla_validate_parse: 90 callbacks suppressed [ 352.807701][T12799] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2216'. [ 352.865214][T12799] sctp: [Deprecated]: syz.2.2216 (pid 12799) Use of int in maxseg socket option. [ 352.865214][T12799] Use struct sctp_assoc_value instead [ 352.977804][T12813] FAULT_INJECTION: forcing a failure. [ 352.977804][T12813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 353.021998][T12811] netlink: 'syz.3.2217': attribute type 39 has an invalid length. [ 353.074585][T12813] CPU: 0 UID: 0 PID: 12813 Comm: syz.1.2220 Not tainted syzkaller #0 PREEMPT(full) [ 353.074618][T12813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 353.074629][T12813] Call Trace: [ 353.074637][T12813] [ 353.074646][T12813] dump_stack_lvl+0xe8/0x150 [ 353.074675][T12813] should_fail_ex+0x40c/0x560 [ 353.074698][T12813] _copy_from_user+0x2d/0xb0 [ 353.074722][T12813] __copy_msghdr+0x390/0x590 [ 353.074745][T12813] ___sys_sendmsg+0x213/0x360 [ 353.074762][T12813] ? __lock_acquire+0x683/0x2cf0 [ 353.074786][T12813] ? __pfx____sys_sendmsg+0x10/0x10 [ 353.074835][T12813] ? __fget_files+0x2a/0x420 [ 353.074856][T12813] ? __fget_files+0x3a2/0x420 [ 353.074887][T12813] __x64_sys_sendmsg+0x1b1/0x290 [ 353.074908][T12813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 353.074943][T12813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.074963][T12813] do_syscall_64+0x174/0x580 [ 353.074989][T12813] ? clear_bhb_loop+0x70/0xc0 [ 353.075011][T12813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.075028][T12813] RIP: 0033:0x7f922579e0d9 [ 353.075046][T12813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 353.075061][T12813] RSP: 002b:00007f9226639028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 353.075080][T12813] RAX: ffffffffffffffda RBX: 00007f9225a25fa0 RCX: 00007f922579e0d9 [ 353.075093][T12813] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000003 [ 353.075104][T12813] RBP: 00007f9226639090 R08: 0000000000000000 R09: 0000000000000000 [ 353.075115][T12813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.075125][T12813] R13: 00007f9225a26038 R14: 00007f9225a25fa0 R15: 00007fffdfee0a98 [ 353.075155][T12813] [ 353.783656][T12836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 353.910455][T12842] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2227'. [ 354.458178][T12873] syzkaller0: entered promiscuous mode [ 354.477177][T12873] syzkaller0: entered allmulticast mode [ 354.782317][T12884] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 354.792864][T12884] net_ratelimit: 2 callbacks suppressed [ 354.792979][T12884] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 355.109697][T12894] netlink: 'syz.4.2240': attribute type 1 has an invalid length. [ 355.165448][ T33] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.197992][ T33] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.230219][ T33] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.260402][ T33] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.390481][T12904] FAULT_INJECTION: forcing a failure. [ 355.390481][T12904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 355.423413][T12904] CPU: 1 UID: 0 PID: 12904 Comm: syz.3.2246 Not tainted syzkaller #0 PREEMPT(full) [ 355.423447][T12904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.423458][T12904] Call Trace: [ 355.423466][T12904] [ 355.423474][T12904] dump_stack_lvl+0xe8/0x150 [ 355.423504][T12904] should_fail_ex+0x40c/0x560 [ 355.423528][T12904] _copy_from_user+0x2d/0xb0 [ 355.423553][T12904] kstrtouint_from_user+0xd6/0x180 [ 355.423575][T12904] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 355.423615][T12904] proc_fail_nth_write+0x8e/0x210 [ 355.423640][T12904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 355.423672][T12904] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 355.423694][T12904] vfs_write+0x296/0xba0 [ 355.423727][T12904] ? __pfx_vfs_write+0x10/0x10 [ 355.423754][T12904] ? __fget_files+0x2a/0x420 [ 355.423778][T12904] ? __fget_files+0x3a2/0x420 [ 355.423796][T12904] ? __fget_files+0x2a/0x420 [ 355.423824][T12904] ksys_write+0x150/0x270 [ 355.423849][T12904] ? __pfx_ksys_write+0x10/0x10 [ 355.423881][T12904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.423901][T12904] do_syscall_64+0x174/0x580 [ 355.423931][T12904] ? trace_irq_disable+0x3b/0x140 [ 355.423952][T12904] ? clear_bhb_loop+0x70/0xc0 [ 355.423975][T12904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.423993][T12904] RIP: 0033:0x7f29d0d5e90e [ 355.424010][T12904] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 355.424025][T12904] RSP: 002b:00007f29d1baffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.424044][T12904] RAX: ffffffffffffffda RBX: 00007f29d1bb06c0 RCX: 00007f29d0d5e90e [ 355.424057][T12904] RDX: 0000000000000001 RSI: 00007f29d1bb00a0 RDI: 0000000000000005 [ 355.424068][T12904] RBP: 00007f29d1bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 355.424080][T12904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.424091][T12904] R13: 00007f29d1026038 R14: 00007f29d1025fa0 R15: 00007ffdd6a93998 [ 355.424121][T12904] [ 355.879288][T12916] FAULT_INJECTION: forcing a failure. [ 355.879288][T12916] name failslab, interval 1, probability 0, space 0, times 0 [ 355.892261][T12916] CPU: 1 UID: 0 PID: 12916 Comm: syz.3.2251 Not tainted syzkaller #0 PREEMPT(full) [ 355.892287][T12916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 355.892297][T12916] Call Trace: [ 355.892305][T12916] [ 355.892313][T12916] dump_stack_lvl+0xe8/0x150 [ 355.892344][T12916] should_fail_ex+0x40c/0x560 [ 355.892367][T12916] should_failslab+0xa8/0x100 [ 355.892401][T12916] __kmalloc_noprof+0xfe/0x720 [ 355.892423][T12916] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 355.892450][T12916] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 355.892485][T12916] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 355.892516][T12916] genl_family_rcv_msg_doit+0xda/0x340 [ 355.892546][T12916] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 355.892573][T12916] ? __pfx_genl_get_cmd+0x10/0x10 [ 355.892594][T12916] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 355.892702][T12916] ? __dev_queue_xmit+0x29b/0x3820 [ 355.892771][T12916] genl_rcv_msg+0x614/0x7a0 [ 355.892801][T12916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.892825][T12916] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 355.892846][T12916] ? __pfx_ref_tracker_free+0x10/0x10 [ 355.892877][T12916] netlink_rcv_skb+0x226/0x4a0 [ 355.892897][T12916] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.892924][T12916] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.892958][T12916] ? down_read+0x2be/0x330 [ 355.892980][T12916] genl_rcv+0x28/0x40 [ 355.893002][T12916] netlink_unicast+0x7bb/0x940 [ 355.893032][T12916] netlink_sendmsg+0x813/0xb40 [ 355.893062][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.893087][T12916] ? aa_sock_msg_perm+0xf1/0x1b0 [ 355.893118][T12916] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.893137][T12916] sock_sendmsg_nosec+0x13a/0x180 [ 355.893164][T12916] ____sys_sendmsg+0x54e/0x850 [ 355.893190][T12916] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.893218][T12916] ? import_iovec+0x73/0xa0 [ 355.893245][T12916] ___sys_sendmsg+0x2a5/0x360 [ 355.893263][T12916] ? __lock_acquire+0x683/0x2cf0 [ 355.893290][T12916] ? __pfx____sys_sendmsg+0x10/0x10 [ 355.893345][T12916] ? __fget_files+0x2a/0x420 [ 355.893366][T12916] ? __fget_files+0x3a2/0x420 [ 355.893405][T12916] __x64_sys_sendmsg+0x1b1/0x290 [ 355.893427][T12916] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 355.893461][T12916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.893480][T12916] do_syscall_64+0x174/0x580 [ 355.893502][T12916] ? trace_irq_disable+0x3b/0x140 [ 355.893522][T12916] ? clear_bhb_loop+0x70/0xc0 [ 355.893544][T12916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.893562][T12916] RIP: 0033:0x7f29d0d9e0d9 [ 355.893581][T12916] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 355.893596][T12916] RSP: 002b:00007f29d1bb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.893615][T12916] RAX: ffffffffffffffda RBX: 00007f29d1025fa0 RCX: 00007f29d0d9e0d9 [ 355.893628][T12916] RDX: 000000000000c000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 355.893640][T12916] RBP: 00007f29d1bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 355.893652][T12916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.893663][T12916] R13: 00007f29d1026038 R14: 00007f29d1025fa0 R15: 00007ffdd6a93998 [ 355.893694][T12916] [ 356.385948][T12914] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2249'. [ 356.717154][T12927] syzkaller0: entered promiscuous mode [ 356.749370][T12927] syzkaller0: entered allmulticast mode [ 356.887043][T12944] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2256'. [ 356.957960][T12948] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2258'. [ 357.379417][T12965] openvswitch: netlink: Missing key (keys=200040, expected=80) [ 357.506673][T12971] netlink: 'syz.4.2265': attribute type 4 has an invalid length. [ 357.539913][T12971] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2265'. [ 357.622365][T12977] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2267'. [ 357.656208][T12977] netlink: 'syz.3.2267': attribute type 24 has an invalid length. [ 357.809374][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2269'. [ 357.966054][T12997] netlink: 'syz.2.2273': attribute type 4 has an invalid length. [ 357.982646][T12997] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2273'. [ 357.996870][T12987] syzkaller0: entered promiscuous mode [ 358.014361][T12987] syzkaller0: entered allmulticast mode [ 358.195967][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 358.221359][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2275'. [ 358.315540][T13005] gre0: entered promiscuous mode [ 358.335231][T13005] gre0: entered allmulticast mode [ 358.963966][T13034] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2286'. [ 359.056373][T13040] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2285'. [ 359.097753][T13037] lo speed is unknown, defaulting to 1000 [ 359.343278][T13051] block nbd0: not configured, cannot reconfigure [ 359.468649][T13057] netlink: 'syz.4.2290': attribute type 1 has an invalid length. [ 359.478355][T13057] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2290'. [ 359.512757][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 359.576127][T13059] FAULT_INJECTION: forcing a failure. [ 359.576127][T13059] name failslab, interval 1, probability 0, space 0, times 0 [ 359.583695][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2292'. [ 359.600123][T13059] CPU: 1 UID: 0 PID: 13059 Comm: syz.2.2291 Not tainted syzkaller #0 PREEMPT(full) [ 359.600148][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.600163][T13059] Call Trace: [ 359.600171][T13059] [ 359.600178][T13059] dump_stack_lvl+0xe8/0x150 [ 359.600208][T13059] should_fail_ex+0x40c/0x560 [ 359.600231][T13059] should_failslab+0xa8/0x100 [ 359.600257][T13059] __kmalloc_node_track_caller_noprof+0x100/0x730 [ 359.600283][T13059] ? ovs_nla_get_match+0x3b1/0x1840 [ 359.600300][T13059] ? ovs_nla_get_match+0x3b1/0x1840 [ 359.600323][T13059] kmemdup_noprof+0x2b/0x70 [ 359.600373][T13059] ovs_nla_get_match+0x3b1/0x1840 [ 359.600403][T13059] ? __pfx_ovs_nla_get_match+0x10/0x10 [ 359.600446][T13059] ? __kmalloc_cache_noprof+0x32d/0x660 [ 359.600470][T13059] ? __asan_memset+0x22/0x50 [ 359.600494][T13059] ovs_flow_cmd_new+0x3a5/0xea0 [ 359.600535][T13059] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 359.600600][T13059] ? __kmalloc_noprof+0x396/0x720 [ 359.600626][T13059] ? __nla_parse+0x40/0x60 [ 359.600650][T13059] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 359.600676][T13059] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 359.600708][T13059] genl_family_rcv_msg_doit+0x233/0x340 [ 359.600739][T13059] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 359.600772][T13059] ? bpf_lsm_capable+0x9/0x20 [ 359.600792][T13059] ? security_capable+0x7e/0x2c0 [ 359.600823][T13059] genl_rcv_msg+0x614/0x7a0 [ 359.600852][T13059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.600875][T13059] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 359.600900][T13059] ? __pfx_ref_tracker_free+0x10/0x10 [ 359.600928][T13059] netlink_rcv_skb+0x226/0x4a0 [ 359.600950][T13059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.600974][T13059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.601008][T13059] ? down_read+0x2be/0x330 [ 359.601031][T13059] genl_rcv+0x28/0x40 [ 359.601052][T13059] netlink_unicast+0x7bb/0x940 [ 359.601077][T13059] netlink_sendmsg+0x813/0xb40 [ 359.601104][T13059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.601129][T13059] ? aa_sock_msg_perm+0xf1/0x1b0 [ 359.601159][T13059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.601178][T13059] sock_sendmsg_nosec+0x13a/0x180 [ 359.601203][T13059] ____sys_sendmsg+0x54e/0x850 [ 359.601229][T13059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.601258][T13059] ? import_iovec+0x73/0xa0 [ 359.601284][T13059] ___sys_sendmsg+0x2a5/0x360 [ 359.601302][T13059] ? __lock_acquire+0x683/0x2cf0 [ 359.601328][T13059] ? __pfx____sys_sendmsg+0x10/0x10 [ 359.601383][T13059] ? __fget_files+0x2a/0x420 [ 359.601402][T13059] ? __fget_files+0x3a2/0x420 [ 359.601432][T13059] __x64_sys_sendmsg+0x1b1/0x290 [ 359.601455][T13059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 359.601493][T13059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.601522][T13059] do_syscall_64+0x174/0x580 [ 359.601546][T13059] ? trace_irq_disable+0x3b/0x140 [ 359.601567][T13059] ? clear_bhb_loop+0x70/0xc0 [ 359.601590][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.601615][T13059] RIP: 0033:0x7fd75b19e0d9 [ 359.601634][T13059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 359.601650][T13059] RSP: 002b:00007fd75bfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.601670][T13059] RAX: ffffffffffffffda RBX: 00007fd75b425fa0 RCX: 00007fd75b19e0d9 [ 359.601684][T13059] RDX: 000000000000c040 RSI: 0000200000000100 RDI: 0000000000000003 [ 359.601697][T13059] RBP: 00007fd75bfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 359.601708][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.601720][T13059] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 359.601750][T13059] [ 360.277255][T13063] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2293'. [ 360.685901][T13084] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2299'. [ 360.998764][T13089] bond2: option downdelay: invalid value (18446744073709551487) [ 361.049547][T13089] bond2: option downdelay: allowed values 0 - 2147483647 [ 361.121167][T13089] bond2 (unregistering): Released all slaves [ 361.363531][T13112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.417844][T13112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.469143][T13115] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2309'. [ 361.817094][T13135] FAULT_INJECTION: forcing a failure. [ 361.817094][T13135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.843473][T13135] CPU: 0 UID: 0 PID: 13135 Comm: syz.2.2314 Not tainted syzkaller #0 PREEMPT(full) [ 361.843499][T13135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.843510][T13135] Call Trace: [ 361.843518][T13135] [ 361.843527][T13135] dump_stack_lvl+0xe8/0x150 [ 361.843557][T13135] should_fail_ex+0x40c/0x560 [ 361.843582][T13135] _copy_to_iter+0x59c/0x1810 [ 361.843602][T13135] ? arch_stack_walk+0xfb/0x150 [ 361.843640][T13135] ? __pfx__copy_to_iter+0x10/0x10 [ 361.843662][T13135] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 361.843772][T13135] ? lockdep_hardirqs_on+0x7a/0x110 [ 361.843796][T13135] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 361.843826][T13135] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 361.843853][T13135] __skb_datagram_iter+0xf8/0x980 [ 361.843912][T13135] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 361.843938][T13135] skb_copy_datagram_iter+0xb5/0x240 [ 361.843962][T13135] netlink_recvmsg+0x2b9/0xa50 [ 361.843993][T13135] ? __pfx_netlink_recvmsg+0x10/0x10 [ 361.844021][T13135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 361.844049][T13135] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 361.844066][T13135] ? security_socket_recvmsg+0x7e/0x2c0 [ 361.844119][T13135] ? __pfx_netlink_recvmsg+0x10/0x10 [ 361.844140][T13135] sock_recvmsg+0x196/0x1e0 [ 361.844202][T13135] ____sys_recvmsg+0x1e6/0x4a0 [ 361.844220][T13135] ? iovec_from_user+0x87/0x250 [ 361.844250][T13135] ? __pfx_____sys_recvmsg+0x10/0x10 [ 361.844284][T13135] ? import_iovec+0x73/0xa0 [ 361.844309][T13135] ___sys_recvmsg+0x213/0x5a0 [ 361.844328][T13135] ? ktime_get_ts64+0xa9/0x410 [ 361.844353][T13135] ? __pfx____sys_recvmsg+0x10/0x10 [ 361.844377][T13135] ? __fget_files+0x2a/0x420 [ 361.844414][T13135] ? __fget_files+0x3a2/0x420 [ 361.844445][T13135] do_recvmmsg+0x31a/0x7f0 [ 361.844473][T13135] ? __pfx_do_recvmmsg+0x10/0x10 [ 361.844506][T13135] ? get_timespec64+0x119/0x1b0 [ 361.844528][T13135] ? __pfx_get_timespec64+0x10/0x10 [ 361.844561][T13135] __x64_sys_recvmmsg+0x1b7/0x250 [ 361.844584][T13135] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 361.844613][T13135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.844633][T13135] do_syscall_64+0x174/0x580 [ 361.844657][T13135] ? trace_irq_disable+0x3b/0x140 [ 361.844678][T13135] ? clear_bhb_loop+0x70/0xc0 [ 361.844700][T13135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.844717][T13135] RIP: 0033:0x7fd75b19e0d9 [ 361.844736][T13135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.844751][T13135] RSP: 002b:00007fd75bfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 361.844771][T13135] RAX: ffffffffffffffda RBX: 00007fd75b425fa0 RCX: 00007fd75b19e0d9 [ 361.844785][T13135] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 361.844798][T13135] RBP: 00007fd75bfeb090 R08: 0000200000003700 R09: 0000000000000000 [ 361.844810][T13135] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 361.844888][T13135] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 361.844918][T13135] [ 362.209088][T13139] netlink: 'syz.2.2319': attribute type 1 has an invalid length. [ 362.257772][T13143] FAULT_INJECTION: forcing a failure. [ 362.257772][T13143] name failslab, interval 1, probability 0, space 0, times 0 [ 362.272251][T13143] CPU: 1 UID: 0 PID: 13143 Comm: syz.4.2315 Not tainted syzkaller #0 PREEMPT(full) [ 362.272278][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.272289][T13143] Call Trace: [ 362.272297][T13143] [ 362.272305][T13143] dump_stack_lvl+0xe8/0x150 [ 362.272335][T13143] should_fail_ex+0x40c/0x560 [ 362.272357][T13143] ? __rhashtable_init_noprof+0x545/0xaf0 [ 362.272380][T13143] should_failslab+0xa8/0x100 [ 362.272407][T13143] __kvmalloc_node_noprof+0x176/0x860 [ 362.272435][T13143] ? __rhashtable_init_noprof+0x545/0xaf0 [ 362.272463][T13143] __rhashtable_init_noprof+0x545/0xaf0 [ 362.272490][T13143] __rhltable_init_noprof+0x26/0x70 [ 362.272511][T13143] nf_tables_newtable+0x6a7/0x1990 [ 362.272668][T13143] nfnetlink_rcv+0x1288/0x28c0 [ 362.272750][T13143] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 362.272794][T13143] ? ref_tracker_free+0x689/0x830 [ 362.272838][T13143] ? skb_clone+0x246/0x3a0 [ 362.272863][T13143] ? __netlink_deliver_tap+0x811/0x860 [ 362.272891][T13143] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.272911][T13143] ? netlink_deliver_tap+0x2e/0x1b0 [ 362.272936][T13143] netlink_unicast+0x7bb/0x940 [ 362.272966][T13143] netlink_sendmsg+0x813/0xb40 [ 362.272997][T13143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.273021][T13143] ? aa_sock_msg_perm+0xf1/0x1b0 [ 362.273051][T13143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.273070][T13143] sock_sendmsg_nosec+0x13a/0x180 [ 362.273096][T13143] ____sys_sendmsg+0x54e/0x850 [ 362.273122][T13143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.273150][T13143] ? import_iovec+0x73/0xa0 [ 362.273177][T13143] ___sys_sendmsg+0x2a5/0x360 [ 362.273196][T13143] ? __lock_acquire+0x683/0x2cf0 [ 362.273222][T13143] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.273275][T13143] ? __fget_files+0x2a/0x420 [ 362.273296][T13143] ? __fget_files+0x3a2/0x420 [ 362.273327][T13143] __x64_sys_sendmsg+0x1b1/0x290 [ 362.273350][T13143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.273387][T13143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.273407][T13143] do_syscall_64+0x174/0x580 [ 362.273432][T13143] ? trace_irq_disable+0x3b/0x140 [ 362.273452][T13143] ? clear_bhb_loop+0x70/0xc0 [ 362.273475][T13143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.273492][T13143] RIP: 0033:0x7ff50ab9e0d9 [ 362.273510][T13143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.273525][T13143] RSP: 002b:00007ff50bab9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.273544][T13143] RAX: ffffffffffffffda RBX: 00007ff50ae25fa0 RCX: 00007ff50ab9e0d9 [ 362.273558][T13143] RDX: 0000000000000010 RSI: 0000200000004e00 RDI: 0000000000000003 [ 362.273570][T13143] RBP: 00007ff50bab9090 R08: 0000000000000000 R09: 0000000000000000 [ 362.273581][T13143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.273592][T13143] R13: 00007ff50ae26038 R14: 00007ff50ae25fa0 R15: 00007fff65ceb518 [ 362.273622][T13143] [ 362.691065][T13139] 8021q: adding VLAN 0 to HW filter on device bond5 [ 362.883067][T13154] ipt_REJECT: TCP_RESET invalid for non-tcp [ 363.039171][T13144] bond5: (slave geneve2): making interface the new active one [ 363.046876][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2317'. [ 363.069294][T13144] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 363.333084][T13171] FAULT_INJECTION: forcing a failure. [ 363.333084][T13171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.355464][T13171] CPU: 1 UID: 0 PID: 13171 Comm: syz.2.2322 Not tainted syzkaller #0 PREEMPT(full) [ 363.355491][T13171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 363.355502][T13171] Call Trace: [ 363.355510][T13171] [ 363.355518][T13171] dump_stack_lvl+0xe8/0x150 [ 363.355550][T13171] should_fail_ex+0x40c/0x560 [ 363.355575][T13171] _copy_from_user+0x2d/0xb0 [ 363.355601][T13171] kstrtouint_from_user+0xd6/0x180 [ 363.355624][T13171] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 363.355660][T13171] proc_fail_nth_write+0x8e/0x210 [ 363.355686][T13171] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.355718][T13171] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 363.355741][T13171] vfs_write+0x296/0xba0 [ 363.355775][T13171] ? __pfx_vfs_write+0x10/0x10 [ 363.355802][T13171] ? __fget_files+0x2a/0x420 [ 363.355829][T13171] ? __fget_files+0x3a2/0x420 [ 363.355849][T13171] ? __fget_files+0x2a/0x420 [ 363.355879][T13171] ksys_write+0x150/0x270 [ 363.355906][T13171] ? __pfx_ksys_write+0x10/0x10 [ 363.355940][T13171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.355961][T13171] do_syscall_64+0x174/0x580 [ 363.355989][T13171] ? trace_irq_disable+0x3b/0x140 [ 363.356010][T13171] ? clear_bhb_loop+0x70/0xc0 [ 363.356033][T13171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.356051][T13171] RIP: 0033:0x7fd75b15e90e [ 363.356070][T13171] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 363.356084][T13171] RSP: 002b:00007fd75bfeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 363.356103][T13171] RAX: ffffffffffffffda RBX: 00007fd75bfeb6c0 RCX: 00007fd75b15e90e [ 363.356117][T13171] RDX: 0000000000000001 RSI: 00007fd75bfeb0a0 RDI: 0000000000000005 [ 363.356129][T13171] RBP: 00007fd75bfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 363.356140][T13171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.356157][T13171] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 363.356188][T13171] [ 363.873338][T13189] netlink: 'syz.2.2328': attribute type 1 has an invalid length. [ 363.959220][T13191] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2329'. [ 364.162460][T13197] FAULT_INJECTION: forcing a failure. [ 364.162460][T13197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.221580][T13197] CPU: 0 UID: 0 PID: 13197 Comm: syz.2.2332 Not tainted syzkaller #0 PREEMPT(full) [ 364.221606][T13197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.221618][T13197] Call Trace: [ 364.221625][T13197] [ 364.221634][T13197] dump_stack_lvl+0xe8/0x150 [ 364.221665][T13197] should_fail_ex+0x40c/0x560 [ 364.221689][T13197] _copy_to_iter+0x59c/0x1810 [ 364.221708][T13197] ? arch_stack_walk+0xfb/0x150 [ 364.221747][T13197] ? __pfx__copy_to_iter+0x10/0x10 [ 364.221767][T13197] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 364.221790][T13197] ? lockdep_hardirqs_on+0x7a/0x110 [ 364.221814][T13197] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 364.221837][T13197] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 364.221863][T13197] __skb_datagram_iter+0xf8/0x980 [ 364.221885][T13197] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 364.221913][T13197] skb_copy_datagram_iter+0xb5/0x240 [ 364.221938][T13197] netlink_recvmsg+0x2b9/0xa50 [ 364.221969][T13197] ? __pfx_netlink_recvmsg+0x10/0x10 [ 364.221994][T13197] ? aa_sock_msg_perm+0xf1/0x1b0 [ 364.222020][T13197] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 364.222037][T13197] ? security_socket_recvmsg+0x7e/0x2c0 [ 364.222056][T13197] ? __pfx_netlink_recvmsg+0x10/0x10 [ 364.222076][T13197] sock_recvmsg+0x196/0x1e0 [ 364.222104][T13197] ____sys_recvmsg+0x1e6/0x4a0 [ 364.222122][T13197] ? iovec_from_user+0x87/0x250 [ 364.222151][T13197] ? __pfx_____sys_recvmsg+0x10/0x10 [ 364.222185][T13197] ? import_iovec+0x73/0xa0 [ 364.222210][T13197] ___sys_recvmsg+0x213/0x5a0 [ 364.222228][T13197] ? ktime_get_ts64+0xa9/0x410 [ 364.222250][T13197] ? __pfx____sys_recvmsg+0x10/0x10 [ 364.222273][T13197] ? __fget_files+0x2a/0x420 [ 364.222306][T13197] ? __fget_files+0x3a2/0x420 [ 364.222333][T13197] do_recvmmsg+0x31a/0x7f0 [ 364.222360][T13197] ? __pfx_do_recvmmsg+0x10/0x10 [ 364.222392][T13197] ? get_timespec64+0x119/0x1b0 [ 364.222415][T13197] ? __pfx_get_timespec64+0x10/0x10 [ 364.222447][T13197] __x64_sys_recvmmsg+0x1b7/0x250 [ 364.222471][T13197] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 364.222507][T13197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.222525][T13197] do_syscall_64+0x174/0x580 [ 364.222548][T13197] ? trace_irq_disable+0x3b/0x140 [ 364.222569][T13197] ? clear_bhb_loop+0x70/0xc0 [ 364.222591][T13197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.222609][T13197] RIP: 0033:0x7fd75b19e0d9 [ 364.222626][T13197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.222642][T13197] RSP: 002b:00007fd75bfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 364.222662][T13197] RAX: ffffffffffffffda RBX: 00007fd75b425fa0 RCX: 00007fd75b19e0d9 [ 364.222676][T13197] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 364.222688][T13197] RBP: 00007fd75bfeb090 R08: 0000200000003700 R09: 0000000000000000 [ 364.222699][T13197] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 364.222711][T13197] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 364.222740][T13197] [ 365.117998][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2330'. [ 365.738717][T13241] FAULT_INJECTION: forcing a failure. [ 365.738717][T13241] name failslab, interval 1, probability 0, space 0, times 0 [ 365.774188][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.1.2345 Not tainted syzkaller #0 PREEMPT(full) [ 365.774213][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 365.774224][T13241] Call Trace: [ 365.774232][T13241] [ 365.774240][T13241] dump_stack_lvl+0xe8/0x150 [ 365.774270][T13241] should_fail_ex+0x40c/0x560 [ 365.774295][T13241] should_failslab+0xa8/0x100 [ 365.774328][T13241] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 365.774350][T13241] ? skb_clone+0x212/0x3a0 [ 365.774369][T13241] ? skb_clone+0x212/0x3a0 [ 365.774395][T13241] skb_clone+0x212/0x3a0 [ 365.774419][T13241] __netlink_deliver_tap+0x413/0x860 [ 365.774451][T13241] ? netlink_deliver_tap+0x2e/0x1b0 [ 365.774473][T13241] netlink_deliver_tap+0x19c/0x1b0 [ 365.774495][T13241] netlink_unicast+0x77f/0x940 [ 365.774525][T13241] netlink_sendmsg+0x813/0xb40 [ 365.774555][T13241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.774579][T13241] ? aa_sock_msg_perm+0xf1/0x1b0 [ 365.774610][T13241] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.774629][T13241] sock_sendmsg_nosec+0x13a/0x180 [ 365.774656][T13241] ____sys_sendmsg+0x54e/0x850 [ 365.774680][T13241] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.774708][T13241] ? import_iovec+0x73/0xa0 [ 365.774734][T13241] ___sys_sendmsg+0x2a5/0x360 [ 365.774753][T13241] ? __lock_acquire+0x683/0x2cf0 [ 365.774780][T13241] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.774833][T13241] ? __fget_files+0x2a/0x420 [ 365.774854][T13241] ? __fget_files+0x3a2/0x420 [ 365.774885][T13241] __x64_sys_sendmsg+0x1b1/0x290 [ 365.774908][T13241] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.774946][T13241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.774975][T13241] do_syscall_64+0x174/0x580 [ 365.774999][T13241] ? trace_irq_disable+0x3b/0x140 [ 365.775020][T13241] ? clear_bhb_loop+0x70/0xc0 [ 365.775042][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.775060][T13241] RIP: 0033:0x7f922579e0d9 [ 365.775083][T13241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.775098][T13241] RSP: 002b:00007f9226639028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.775118][T13241] RAX: ffffffffffffffda RBX: 00007f9225a25fa0 RCX: 00007f922579e0d9 [ 365.775131][T13241] RDX: 000000002000c810 RSI: 0000200000000040 RDI: 0000000000000006 [ 365.775151][T13241] RBP: 00007f9226639090 R08: 0000000000000000 R09: 0000000000000000 [ 365.775162][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.775172][T13241] R13: 00007f9225a26038 R14: 00007f9225a25fa0 R15: 00007fffdfee0a98 [ 365.775201][T13241] [ 366.842023][T13266] lwtunnel_output(): recursion limit reached on datapath [ 366.899932][T13266] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2353'. [ 367.222977][T13285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2357'. [ 367.244853][T13274] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20001 [ 367.269514][T13285] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2357'. [ 367.418365][T13293] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2358'. [ 367.543624][T13303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2361'. [ 367.744807][T13313] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2363'. [ 367.816627][T13306] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 367.871373][T13306] bond6 (unregistering): Released all slaves [ 367.937922][T13315] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2363'. [ 368.345573][T13336] sctp: [Deprecated]: syz.2.2368 (pid 13336) Use of int in max_burst socket option. [ 368.345573][T13336] Use struct sctp_assoc_value instead [ 368.805036][T13340] sctp: [Deprecated]: syz.3.2369 (pid 13340) Use of int in max_burst socket option. [ 368.805036][T13340] Use struct sctp_assoc_value instead [ 369.395924][T13348] SET target dimension over the limit! [ 369.818093][T13351] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2372'. [ 370.257961][T13288] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 370.425310][T13356] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 370.437531][T13355] tipc: Resetting bearer [ 370.513783][T13355] tipc: Disabling bearer [ 370.667387][T13372] netlink: 84 bytes leftover after parsing attributes in process `syz.1.2377'. [ 370.747613][T13377] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2378'. [ 370.897011][T13355] team0 (unregistering): Port device vlan2 removed [ 371.028102][T13368] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 371.245599][T13372] bridge0: entered allmulticast mode [ 371.305543][T13375] pim6reg: entered allmulticast mode [ 371.324184][T13392] sctp: [Deprecated]: syz.3.2380 (pid 13392) Use of int in max_burst socket option. [ 371.324184][T13392] Use struct sctp_assoc_value instead [ 371.631169][T13394] netlink: 'syz.0.2381': attribute type 1 has an invalid length. [ 371.683894][T13394] netlink: 'syz.0.2381': attribute type 2 has an invalid length. [ 371.949872][T13408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2385'. [ 372.039395][T13413] ipip0: entered promiscuous mode [ 372.180366][T13419] FAULT_INJECTION: forcing a failure. [ 372.180366][T13419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.215303][T13419] CPU: 0 UID: 0 PID: 13419 Comm: syz.0.2388 Not tainted syzkaller #0 PREEMPT(full) [ 372.215333][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 372.215344][T13419] Call Trace: [ 372.215352][T13419] [ 372.215360][T13419] dump_stack_lvl+0xe8/0x150 [ 372.215390][T13419] should_fail_ex+0x40c/0x560 [ 372.215412][T13419] _copy_to_iter+0x59c/0x1810 [ 372.215430][T13419] ? arch_stack_walk+0xfb/0x150 [ 372.215469][T13419] ? __pfx__copy_to_iter+0x10/0x10 [ 372.215490][T13419] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 372.215513][T13419] ? lockdep_hardirqs_on+0x7a/0x110 [ 372.215537][T13419] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 372.215558][T13419] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 372.215583][T13419] __skb_datagram_iter+0xf8/0x980 [ 372.215605][T13419] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 372.215632][T13419] skb_copy_datagram_iter+0xb5/0x240 [ 372.215657][T13419] netlink_recvmsg+0x2b9/0xa50 [ 372.215687][T13419] ? __pfx_netlink_recvmsg+0x10/0x10 [ 372.215712][T13419] ? aa_sock_msg_perm+0xf1/0x1b0 [ 372.215738][T13419] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 372.215754][T13419] ? security_socket_recvmsg+0x7e/0x2c0 [ 372.215771][T13419] ? __pfx_netlink_recvmsg+0x10/0x10 [ 372.215789][T13419] sock_recvmsg+0x196/0x1e0 [ 372.215815][T13419] ____sys_recvmsg+0x1e6/0x4a0 [ 372.215832][T13419] ? iovec_from_user+0x87/0x250 [ 372.215857][T13419] ? __pfx_____sys_recvmsg+0x10/0x10 [ 372.215887][T13419] ? import_iovec+0x73/0xa0 [ 372.215908][T13419] ___sys_recvmsg+0x213/0x5a0 [ 372.215926][T13419] ? ktime_get_ts64+0xa9/0x410 [ 372.215951][T13419] ? __pfx____sys_recvmsg+0x10/0x10 [ 372.215972][T13419] ? __fget_files+0x2a/0x420 [ 372.216010][T13419] ? __fget_files+0x3a2/0x420 [ 372.216041][T13419] do_recvmmsg+0x31a/0x7f0 [ 372.216069][T13419] ? __pfx_do_recvmmsg+0x10/0x10 [ 372.216099][T13419] ? get_timespec64+0x119/0x1b0 [ 372.216121][T13419] ? __pfx_get_timespec64+0x10/0x10 [ 372.216153][T13419] __x64_sys_recvmmsg+0x1b7/0x250 [ 372.216176][T13419] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 372.216205][T13419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.216224][T13419] do_syscall_64+0x174/0x580 [ 372.216253][T13419] ? trace_irq_disable+0x3b/0x140 [ 372.216274][T13419] ? clear_bhb_loop+0x70/0xc0 [ 372.216296][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.216314][T13419] RIP: 0033:0x7f00ee59e0d9 [ 372.216332][T13419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.216346][T13419] RSP: 002b:00007f00ef418028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 372.216365][T13419] RAX: ffffffffffffffda RBX: 00007f00ee825fa0 RCX: 00007f00ee59e0d9 [ 372.216375][T13419] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 372.216386][T13419] RBP: 00007f00ef418090 R08: 0000200000003700 R09: 0000000000000000 [ 372.216398][T13419] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 372.216409][T13419] R13: 00007f00ee826038 R14: 00007f00ee825fa0 R15: 00007ffe8c2b2be8 [ 372.216437][T13419] [ 372.969709][T13433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2389'. [ 373.147051][T13432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.175016][T13432] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.204697][T13432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.265974][T13432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.296893][T13432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.342413][T13432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 373.362825][T13432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 373.390048][T13432] veth1_vlan: left promiscuous mode [ 373.421429][T13432] veth0_vlan: left promiscuous mode [ 373.434863][T13432] veth0_vlan: entered promiscuous mode [ 373.452323][T13432] veth1_vlan: entered promiscuous mode [ 373.476144][T13432] veth1_macvtap: left promiscuous mode [ 373.494178][T13432] veth0_macvtap: left promiscuous mode [ 373.507358][T13432] veth0_macvtap: entered promiscuous mode [ 373.524594][T13432] veth1_macvtap: entered promiscuous mode [ 373.559484][T13432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 373.578560][T13432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 373.604057][T13432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 373.621028][T13432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 373.646924][T13432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.682177][T13432] 8021q: adding VLAN 0 to HW filter on device bond2 [ 373.705962][T13432] 8021q: adding VLAN 0 to HW filter on device bond3 [ 373.720928][T13432] 8021q: adding VLAN 0 to HW filter on device bond4 [ 373.729562][T13432] 8021q: adding VLAN 0 to HW filter on device bond5 [ 373.812148][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.819368][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.874753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.881900][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.909911][T13454] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2399'. [ 374.004493][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.023875][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.086087][ T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 374.145082][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.181226][T13460] x_tables: duplicate underflow at hook 1 [ 374.191618][T13458] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2401'. [ 374.201445][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.260171][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 374.327184][T13464] l2tp_ppp: sess 2/0: no socket in recv [ 374.498603][T13474] FAULT_INJECTION: forcing a failure. [ 374.498603][T13474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.527799][T13475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2406'. [ 374.542184][T13474] CPU: 0 UID: 0 PID: 13474 Comm: syz.2.2407 Not tainted syzkaller #0 PREEMPT(full) [ 374.542208][T13474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 374.542218][T13474] Call Trace: [ 374.542224][T13474] [ 374.542232][T13474] dump_stack_lvl+0xe8/0x150 [ 374.542262][T13474] should_fail_ex+0x40c/0x560 [ 374.542284][T13474] _copy_from_user+0x2d/0xb0 [ 374.542306][T13474] ___sys_sendmsg+0x1c6/0x360 [ 374.542326][T13474] ? __lock_acquire+0x683/0x2cf0 [ 374.542348][T13474] ? __pfx____sys_sendmsg+0x10/0x10 [ 374.542399][T13474] ? __fget_files+0x2a/0x420 [ 374.542420][T13474] ? __fget_files+0x3a2/0x420 [ 374.542449][T13474] __x64_sys_sendmsg+0x1b1/0x290 [ 374.542470][T13474] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 374.542504][T13474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.542522][T13474] do_syscall_64+0x174/0x580 [ 374.542545][T13474] ? trace_irq_disable+0x3b/0x140 [ 374.542564][T13474] ? clear_bhb_loop+0x70/0xc0 [ 374.542583][T13474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.542599][T13474] RIP: 0033:0x7fd75b19e0d9 [ 374.542615][T13474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 374.542630][T13474] RSP: 002b:00007fd75bfca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 374.542659][T13474] RAX: ffffffffffffffda RBX: 00007fd75b426090 RCX: 00007fd75b19e0d9 [ 374.542672][T13474] RDX: 0000000004008050 RSI: 0000200000000100 RDI: 0000000000000003 [ 374.542684][T13474] RBP: 00007fd75bfca090 R08: 0000000000000000 R09: 0000000000000000 [ 374.542695][T13474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.542706][T13474] R13: 00007fd75b426128 R14: 00007fd75b426090 R15: 00007ffc63126d48 [ 374.542734][T13474] [ 374.785049][T13479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2410'. [ 375.324655][T13496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2416'. [ 375.425478][T13499] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2417'. [ 375.497478][T13499] netlink: 'syz.0.2417': attribute type 10 has an invalid length. [ 375.546549][T13505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 375.565869][T13499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2417'. [ 375.607523][T13508] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2418'. [ 375.996265][T13516] nbd1: detected capacity change from 0 to 63 [ 376.127831][ T50] block nbd1: Receive control failed (result -32) [ 376.304813][T13535] netlink: 'syz.3.2425': attribute type 4 has an invalid length. [ 376.362867][T13535] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2425'. [ 376.532230][T13534] syzkaller0: entered promiscuous mode [ 376.553156][T13534] syzkaller0: entered allmulticast mode [ 376.574807][T13543] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2429'. [ 376.831704][T13557] netlink: 'syz.1.2430': attribute type 1 has an invalid length. [ 376.962333][T13561] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2430'. [ 377.002013][T13563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2433'. [ 377.918316][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 378.730060][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.796455][T13580] netlink: 'syz.4.2439': attribute type 4 has an invalid length. [ 380.823198][T13580] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2439'. [ 380.919307][T13591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2437'. [ 381.079994][T13599] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2446'. [ 381.311439][T13610] netlink: 192 bytes leftover after parsing attributes in process `syz.1.2449'. [ 381.440314][T13615] sctp: [Deprecated]: syz.3.2452 (pid 13615) Use of int in max_burst socket option. [ 381.440314][T13615] Use struct sctp_assoc_value instead [ 381.767578][T13630] IPVS: set_ctl: invalid protocol: 98 127.0.0.1:20002 [ 382.052967][T13637] FAULT_INJECTION: forcing a failure. [ 382.052967][T13637] name failslab, interval 1, probability 0, space 0, times 0 [ 382.093616][T13637] CPU: 1 UID: 0 PID: 13637 Comm: syz.2.2460 Not tainted syzkaller #0 PREEMPT(full) [ 382.093643][T13637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.093654][T13637] Call Trace: [ 382.093662][T13637] [ 382.093670][T13637] dump_stack_lvl+0xe8/0x150 [ 382.093701][T13637] should_fail_ex+0x40c/0x560 [ 382.093726][T13637] should_failslab+0xa8/0x100 [ 382.093753][T13637] __kmalloc_noprof+0xfe/0x720 [ 382.093775][T13637] ? trace_kmem_cache_alloc+0x29/0xe0 [ 382.093794][T13637] ? tnode_new+0xc7/0x3b0 [ 382.093894][T13637] ? tnode_new+0xc7/0x3b0 [ 382.093906][T13637] ? kmem_cache_alloc_noprof+0x308/0x5f0 [ 382.093924][T13637] tnode_new+0xc7/0x3b0 [ 382.093940][T13637] fib_insert_alias+0x9e0/0x10f0 [ 382.094004][T13637] fib_table_insert+0x671/0x1b10 [ 382.094043][T13637] ? fib_new_table+0x14b/0x3f0 [ 382.094068][T13637] inet_rtm_newroute+0x14f/0x250 [ 382.094087][T13637] ? __local_bh_enable_ip+0xd0/0x130 [ 382.094104][T13637] ? __dev_queue_xmit+0x29b/0x3820 [ 382.094125][T13637] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 382.094167][T13637] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 382.094186][T13637] rtnetlink_rcv_msg+0x802/0xc00 [ 382.094209][T13637] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 382.094226][T13637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.094242][T13637] ? ref_tracker_free+0x689/0x830 [ 382.094268][T13637] ? __pfx_ref_tracker_free+0x10/0x10 [ 382.094298][T13637] netlink_rcv_skb+0x226/0x4a0 [ 382.094321][T13637] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 382.094341][T13637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 382.094401][T13637] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.094421][T13637] ? netlink_deliver_tap+0x2e/0x1b0 [ 382.094447][T13637] netlink_unicast+0x7bb/0x940 [ 382.094477][T13637] netlink_sendmsg+0x813/0xb40 [ 382.094508][T13637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.094533][T13637] ? aa_sock_msg_perm+0xf1/0x1b0 [ 382.094564][T13637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 382.094584][T13637] sock_sendmsg_nosec+0x13a/0x180 [ 382.094611][T13637] ____sys_sendmsg+0x54e/0x850 [ 382.094637][T13637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 382.094666][T13637] ? import_iovec+0x73/0xa0 [ 382.094693][T13637] ___sys_sendmsg+0x2a5/0x360 [ 382.094712][T13637] ? __lock_acquire+0x683/0x2cf0 [ 382.094739][T13637] ? __pfx____sys_sendmsg+0x10/0x10 [ 382.094795][T13637] ? __fget_files+0x2a/0x420 [ 382.094815][T13637] ? __fget_files+0x3a2/0x420 [ 382.094847][T13637] __x64_sys_sendmsg+0x1b1/0x290 [ 382.094869][T13637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 382.094907][T13637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.094925][T13637] do_syscall_64+0x174/0x580 [ 382.094948][T13637] ? trace_irq_disable+0x3b/0x140 [ 382.094966][T13637] ? clear_bhb_loop+0x70/0xc0 [ 382.094987][T13637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.095005][T13637] RIP: 0033:0x7fd75b19e0d9 [ 382.095022][T13637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.095037][T13637] RSP: 002b:00007fd75bfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 382.095057][T13637] RAX: ffffffffffffffda RBX: 00007fd75b425fa0 RCX: 00007fd75b19e0d9 [ 382.095071][T13637] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 382.095082][T13637] RBP: 00007fd75bfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 382.095094][T13637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.095105][T13637] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 382.095135][T13637] [ 382.644935][T13655] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2463'. [ 383.013554][T13665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2467'. [ 383.098725][T13668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2467'. [ 383.215551][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2469'. [ 383.277591][T13676] FAULT_INJECTION: forcing a failure. [ 383.277591][T13676] name failslab, interval 1, probability 0, space 0, times 0 [ 383.353127][T13676] CPU: 1 UID: 0 PID: 13676 Comm: syz.0.2469 Not tainted syzkaller #0 PREEMPT(full) [ 383.353154][T13676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.353165][T13676] Call Trace: [ 383.353173][T13676] [ 383.353182][T13676] dump_stack_lvl+0xe8/0x150 [ 383.353213][T13676] should_fail_ex+0x40c/0x560 [ 383.353237][T13676] should_failslab+0xa8/0x100 [ 383.353272][T13676] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 383.353294][T13676] ? security_inode_alloc+0x39/0x310 [ 383.353321][T13676] ? security_inode_alloc+0x39/0x310 [ 383.353352][T13676] security_inode_alloc+0x39/0x310 [ 383.353380][T13676] inode_init_always_gfp+0x97e/0xd30 [ 383.353407][T13676] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 383.353432][T13676] alloc_inode+0x82/0x1b0 [ 383.353455][T13676] new_inode+0x1f/0x170 [ 383.353479][T13676] debugfs_create_dir+0x68/0x350 [ 383.353507][T13676] ieee80211_debugfs_recreate_netdev+0x1cc/0x14c0 [ 383.353649][T13676] ? __pfx_ieee80211_debugfs_recreate_netdev+0x10/0x10 [ 383.353690][T13676] drv_remove_interface+0x1eb/0x580 [ 383.353754][T13676] ieee80211_do_stop+0x19fa/0x2410 [ 383.353808][T13676] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 383.353856][T13676] ieee80211_stop+0x1ab/0x200 [ 383.353970][T13676] ? __pfx_ieee80211_stop+0x10/0x10 [ 383.353993][T13676] __dev_close_many+0x366/0x6e0 [ 383.354022][T13676] ? __pfx___dev_close_many+0x10/0x10 [ 383.354041][T13676] ? __dev_change_flags+0x2e2/0x820 [ 383.354062][T13676] ? __local_bh_enable_ip+0xd0/0x130 [ 383.354086][T13676] __dev_change_flags+0x3f5/0x820 [ 383.354107][T13676] ? __pfx___dev_change_flags+0x10/0x10 [ 383.354121][T13676] ? __pfx___irq_work_queue_local+0x10/0x10 [ 383.354137][T13676] ? console_unlock+0x150/0x1c0 [ 383.354160][T13676] netif_change_flags+0x7c/0x1b0 [ 383.354176][T13676] do_setlink+0xdd6/0x4670 [ 383.354191][T13676] ? __wake_up_klogd+0xe6/0x120 [ 383.354208][T13676] ? __pfx_vprintk_emit+0x10/0x10 [ 383.354231][T13676] ? __pfx_do_setlink+0x10/0x10 [ 383.354244][T13676] ? __lock_acquire+0x683/0x2cf0 [ 383.354277][T13676] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.354298][T13676] ? rcu_is_watching+0x15/0xb0 [ 383.354326][T13676] ? do_trace_netlink_extack+0x80/0x1d0 [ 383.354390][T13676] ? __mutex_trylock_common+0x15f/0x270 [ 383.354412][T13676] ? __pfx___mutex_trylock_common+0x10/0x10 [ 383.354432][T13676] ? rcu_is_watching+0x15/0xb0 [ 383.354449][T13676] ? trace_contention_end+0x3d/0x140 [ 383.354468][T13676] ? __mutex_lock+0x30d/0x1550 [ 383.354500][T13676] ? rtnl_newlink+0xc10/0x1c30 [ 383.354514][T13676] ? __pfx___mutex_lock+0x10/0x10 [ 383.354539][T13676] ? full_name_hash+0x92/0xe0 [ 383.354560][T13676] rtnl_newlink+0x15a3/0x1c30 [ 383.354583][T13676] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.354594][T13676] ? do_syscall_64+0x174/0x580 [ 383.354638][T13676] ? kasan_quarantine_put+0xbb/0x1f0 [ 383.354653][T13676] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.354673][T13676] ? nlmon_xmit+0xb0/0x100 [ 383.354772][T13676] ? kmem_cache_free+0x182/0x650 [ 383.354797][T13676] ? __lock_acquire+0x683/0x2cf0 [ 383.354817][T13676] ? __dev_queue_xmit+0x29b/0x3820 [ 383.354835][T13676] ? __local_bh_enable_ip+0xd0/0x130 [ 383.354849][T13676] ? lockdep_hardirqs_on+0x7a/0x110 [ 383.354865][T13676] ? __dev_queue_xmit+0x29b/0x3820 [ 383.354878][T13676] ? __local_bh_enable_ip+0xd0/0x130 [ 383.354890][T13676] ? __dev_queue_xmit+0x29b/0x3820 [ 383.354910][T13676] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 383.354924][T13676] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.354946][T13676] ? __pfx_rtnl_newlink+0x10/0x10 [ 383.354957][T13676] rtnetlink_rcv_msg+0x802/0xc00 [ 383.354973][T13676] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 383.354985][T13676] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.354997][T13676] ? ref_tracker_free+0x689/0x830 [ 383.355014][T13676] ? __pfx_ref_tracker_free+0x10/0x10 [ 383.355037][T13676] netlink_rcv_skb+0x226/0x4a0 [ 383.355054][T13676] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 383.355068][T13676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.355093][T13676] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.355107][T13676] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.355125][T13676] netlink_unicast+0x7bb/0x940 [ 383.355147][T13676] netlink_sendmsg+0x813/0xb40 [ 383.355170][T13676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.355188][T13676] ? aa_sock_msg_perm+0xf1/0x1b0 [ 383.355213][T13676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.355227][T13676] sock_sendmsg_nosec+0x13a/0x180 [ 383.355249][T13676] ____sys_sendmsg+0x54e/0x850 [ 383.355282][T13676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.355306][T13676] ? import_iovec+0x73/0xa0 [ 383.355328][T13676] ___sys_sendmsg+0x2a5/0x360 [ 383.355341][T13676] ? __lock_acquire+0x683/0x2cf0 [ 383.355360][T13676] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.355401][T13676] ? __fget_files+0x2a/0x420 [ 383.355416][T13676] ? __fget_files+0x3a2/0x420 [ 383.355439][T13676] __x64_sys_sendmsg+0x1b1/0x290 [ 383.355458][T13676] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.355487][T13676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.355503][T13676] do_syscall_64+0x174/0x580 [ 383.355523][T13676] ? trace_irq_disable+0x3b/0x140 [ 383.355541][T13676] ? clear_bhb_loop+0x70/0xc0 [ 383.355562][T13676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.355578][T13676] RIP: 0033:0x7f00ee59e0d9 [ 383.355595][T13676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.355609][T13676] RSP: 002b:00007f00ef418028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.355627][T13676] RAX: ffffffffffffffda RBX: 00007f00ee825fa0 RCX: 00007f00ee59e0d9 [ 383.355639][T13676] RDX: 0000000000000080 RSI: 0000200000000280 RDI: 0000000000000003 [ 383.355649][T13676] RBP: 00007f00ef418090 R08: 0000000000000000 R09: 0000000000000000 [ 383.355660][T13676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.355669][T13676] R13: 00007f00ee826038 R14: 00007f00ee825fa0 R15: 00007ffe8c2b2be8 [ 383.355699][T13676] [ 383.359159][T13676] debugfs: out of free dentries, can not create directory 'netdev:wlan0' [ 383.835720][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 384.094843][T13693] openvswitch: netlink: Multiple metadata blocks provided [ 384.107341][T13693] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2477'. [ 384.391811][T13706] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2481'. [ 384.657361][T13717] syz_tun (unregistering): left allmulticast mode [ 385.029167][T13733] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 385.073169][T13737] openvswitch: netlink: Message has 8 unknown bytes. [ 385.356084][T13746] sctp: [Deprecated]: syz.3.2493 (pid 13746) Use of int in max_burst socket option. [ 385.356084][T13746] Use struct sctp_assoc_value instead [ 385.581645][T13754] sctp: [Deprecated]: syz.3.2496 (pid 13754) Use of int in max_burst socket option. [ 385.581645][T13754] Use struct sctp_assoc_value instead [ 385.740266][T13765] syzkaller1: entered promiscuous mode [ 385.753021][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 385.766301][T13765] syzkaller1: entered allmulticast mode [ 386.071585][T13771] bridge4: entered promiscuous mode [ 386.100704][T13771] bridge4: entered allmulticast mode [ 386.120854][T13778] __nla_validate_parse: 5 callbacks suppressed [ 386.120873][T13778] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2501'. [ 386.167563][T13773] batadv_slave_1: entered promiscuous mode [ 386.197385][T13773] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2501'. [ 386.228972][T13773] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2501'. [ 386.260232][T13772] batadv_slave_1: left promiscuous mode [ 386.784167][T13808] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 386.800230][T13809] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2511'. [ 386.815395][T13808] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2512'. [ 387.118470][T13817] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2514'. [ 387.177558][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2515'. [ 387.251169][T13823] FAULT_INJECTION: forcing a failure. [ 387.251169][T13823] name failslab, interval 1, probability 0, space 0, times 0 [ 387.267111][T13823] CPU: 0 UID: 0 PID: 13823 Comm: syz.3.2517 Not tainted syzkaller #0 PREEMPT(full) [ 387.267137][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.267147][T13823] Call Trace: [ 387.267156][T13823] [ 387.267165][T13823] dump_stack_lvl+0xe8/0x150 [ 387.267195][T13823] should_fail_ex+0x40c/0x560 [ 387.267221][T13823] should_failslab+0xa8/0x100 [ 387.267248][T13823] __kmalloc_noprof+0xfe/0x720 [ 387.267270][T13823] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 387.267296][T13823] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 387.267329][T13823] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 387.267360][T13823] genl_family_rcv_msg_doit+0xda/0x340 [ 387.267387][T13823] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 387.267417][T13823] ? apparmor_capable+0x126/0x170 [ 387.267439][T13823] ? bpf_lsm_capable+0x9/0x20 [ 387.267458][T13823] ? security_capable+0x7e/0x2c0 [ 387.267488][T13823] genl_rcv_msg+0x614/0x7a0 [ 387.267519][T13823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.267542][T13823] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 387.267574][T13823] ? __pfx_ref_tracker_free+0x10/0x10 [ 387.267605][T13823] netlink_rcv_skb+0x226/0x4a0 [ 387.267626][T13823] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.267651][T13823] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.267687][T13823] ? down_read+0x2be/0x330 [ 387.267710][T13823] genl_rcv+0x28/0x40 [ 387.267731][T13823] netlink_unicast+0x7bb/0x940 [ 387.267761][T13823] netlink_sendmsg+0x813/0xb40 [ 387.267791][T13823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.267816][T13823] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.267846][T13823] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.267866][T13823] sock_sendmsg_nosec+0x13a/0x180 [ 387.267892][T13823] ____sys_sendmsg+0x54e/0x850 [ 387.267918][T13823] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.267947][T13823] ? import_iovec+0x73/0xa0 [ 387.267974][T13823] ___sys_sendmsg+0x2a5/0x360 [ 387.267991][T13823] ? __lock_acquire+0x683/0x2cf0 [ 387.268015][T13823] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.268063][T13823] ? __fget_files+0x2a/0x420 [ 387.268083][T13823] ? __fget_files+0x3a2/0x420 [ 387.268114][T13823] __x64_sys_sendmsg+0x1b1/0x290 [ 387.268134][T13823] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.268164][T13823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.268181][T13823] do_syscall_64+0x174/0x580 [ 387.268204][T13823] ? trace_irq_disable+0x3b/0x140 [ 387.268224][T13823] ? clear_bhb_loop+0x70/0xc0 [ 387.268246][T13823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.268263][T13823] RIP: 0033:0x7f29d0d9e0d9 [ 387.268278][T13823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.268293][T13823] RSP: 002b:00007f29d1bb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.268312][T13823] RAX: ffffffffffffffda RBX: 00007f29d1025fa0 RCX: 00007f29d0d9e0d9 [ 387.268325][T13823] RDX: 000000000000c040 RSI: 0000200000000100 RDI: 0000000000000003 [ 387.268337][T13823] RBP: 00007f29d1bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 387.268348][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.268358][T13823] R13: 00007f29d1026038 R14: 00007f29d1025fa0 R15: 00007ffdd6a93998 [ 387.268383][T13823] [ 387.605384][T13817] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 387.634002][T13817] bond6 (unregistering): Released all slaves [ 387.708442][T13827] FAULT_INJECTION: forcing a failure. [ 387.708442][T13827] name failslab, interval 1, probability 0, space 0, times 0 [ 387.740179][T13829] FAULT_INJECTION: forcing a failure. [ 387.740179][T13829] name failslab, interval 1, probability 0, space 0, times 0 [ 387.749051][T13826] netlink: 'syz.0.2518': attribute type 4 has an invalid length. [ 387.756379][T13829] CPU: 0 UID: 0 PID: 13829 Comm: syz.3.2519 Not tainted syzkaller #0 PREEMPT(full) [ 387.756406][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.756417][T13829] Call Trace: [ 387.756425][T13829] [ 387.756434][T13829] dump_stack_lvl+0xe8/0x150 [ 387.756463][T13829] should_fail_ex+0x40c/0x560 [ 387.756488][T13829] should_failslab+0xa8/0x100 [ 387.756514][T13829] __kmalloc_cache_noprof+0xa8/0x660 [ 387.756548][T13829] ? sctp_association_new+0x89/0x25d0 [ 387.756687][T13829] ? sctp_association_new+0x89/0x25d0 [ 387.756712][T13829] ? sctp_has_association+0x2f/0x1f0 [ 387.756762][T13829] sctp_association_new+0x89/0x25d0 [ 387.756785][T13829] ? sctp_has_association+0x2f/0x1f0 [ 387.756812][T13829] sctp_connect_new_asoc+0x2e4/0x6b0 [ 387.756889][T13829] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 387.756915][T13829] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 387.756940][T13829] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 387.756963][T13829] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 387.756987][T13829] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 387.757007][T13829] ? security_sctp_bind_connect+0x7e/0x2c0 [ 387.757030][T13829] sctp_sendmsg+0x159b/0x2d00 [ 387.757068][T13829] ? __pfx_sctp_sendmsg+0x10/0x10 [ 387.757098][T13829] ? aa_sk_perm+0x6d5/0x900 [ 387.757162][T13829] ? __might_fault+0xaf/0x130 [ 387.757184][T13829] ? sock_rps_record_flow+0x19/0x350 [ 387.757241][T13829] ? inet_sendmsg+0x298/0x320 [ 387.757261][T13829] ? __pfx_inet_sendmsg+0x10/0x10 [ 387.757279][T13829] sock_sendmsg_nosec+0x10e/0x180 [ 387.757305][T13829] __sys_sendto+0x408/0x5a0 [ 387.757321][T13829] ? ksys_write+0x1e6/0x270 [ 387.757348][T13829] ? __pfx___sys_sendto+0x10/0x10 [ 387.757363][T13829] ? __mutex_unlock_slowpath+0x731/0x900 [ 387.757414][T13829] ? __pfx_ksys_write+0x10/0x10 [ 387.757440][T13829] __x64_sys_sendto+0xde/0x100 [ 387.757458][T13829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.757478][T13829] do_syscall_64+0x174/0x580 [ 387.757501][T13829] ? trace_irq_disable+0x3b/0x140 [ 387.757529][T13829] ? clear_bhb_loop+0x70/0xc0 [ 387.757550][T13829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.757567][T13829] RIP: 0033:0x7f29d0d9e0d9 [ 387.757584][T13829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.757598][T13829] RSP: 002b:00007f29d1bb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 387.757618][T13829] RAX: ffffffffffffffda RBX: 00007f29d1025fa0 RCX: 00007f29d0d9e0d9 [ 387.757631][T13829] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 387.757642][T13829] RBP: 00007f29d1bb0090 R08: 0000200000000380 R09: 0000000000000010 [ 387.757654][T13829] R10: 000000000000ffdc R11: 0000000000000246 R12: 0000000000000001 [ 387.757665][T13829] R13: 00007f29d1026038 R14: 00007f29d1025fa0 R15: 00007ffdd6a93998 [ 387.757693][T13829] [ 387.812665][T13827] CPU: 0 UID: 0 PID: 13827 Comm: syz.2.2516 Not tainted syzkaller #0 PREEMPT(full) [ 387.812691][T13827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.812702][T13827] Call Trace: [ 387.812711][T13827] [ 387.812722][T13827] dump_stack_lvl+0xe8/0x150 [ 387.812754][T13827] should_fail_ex+0x40c/0x560 [ 387.812778][T13827] should_failslab+0xa8/0x100 [ 387.812804][T13827] __kmalloc_noprof+0xfe/0x720 [ 387.812826][T13827] ? ieee80211_assign_beacon+0x6d3/0x2030 [ 387.812927][T13827] ? ieee80211_assign_beacon+0x6d3/0x2030 [ 387.812957][T13827] ieee80211_assign_beacon+0x6d3/0x2030 [ 387.813003][T13827] ieee80211_start_ap+0x1d69/0x3540 [ 387.813035][T13827] ? cfg80211_chandef_valid+0xa75/0xe60 [ 387.813094][T13827] ? __pfx_ieee80211_start_ap+0x10/0x10 [ 387.813109][T13827] ? cfg80211_find_elem_match+0x1bf/0x200 [ 387.813176][T13827] ? __pfx_nl80211_calculate_ap_capabilities+0x10/0x10 [ 387.813255][T13827] rdev_start_ap+0xf3/0x270 [ 387.813282][T13827] nl80211_start_ap+0x1fa7/0x26f0 [ 387.813349][T13827] ? __pfx_nl80211_start_ap+0x10/0x10 [ 387.813374][T13827] ? nl80211_pre_doit+0x53d/0x890 [ 387.813398][T13827] genl_family_rcv_msg_doit+0x233/0x340 [ 387.813430][T13827] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 387.813466][T13827] ? bpf_lsm_capable+0x9/0x20 [ 387.813486][T13827] ? security_capable+0x7e/0x2c0 [ 387.813523][T13827] genl_rcv_msg+0x614/0x7a0 [ 387.813552][T13827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.813574][T13827] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 387.813596][T13827] ? __pfx_nl80211_start_ap+0x10/0x10 [ 387.813615][T13827] ? __pfx_nl80211_post_doit+0x10/0x10 [ 387.813635][T13827] ? __pfx_ref_tracker_free+0x10/0x10 [ 387.813665][T13827] netlink_rcv_skb+0x226/0x4a0 [ 387.813686][T13827] ? __pfx_genl_rcv_msg+0x10/0x10 [ 387.813711][T13827] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 387.813744][T13827] ? down_read+0x2be/0x330 [ 387.813767][T13827] genl_rcv+0x28/0x40 [ 387.813788][T13827] netlink_unicast+0x7bb/0x940 [ 387.813817][T13827] netlink_sendmsg+0x813/0xb40 [ 387.813846][T13827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.813870][T13827] ? aa_sock_msg_perm+0xf1/0x1b0 [ 387.813903][T13827] ? __pfx_netlink_sendmsg+0x10/0x10 [ 387.813921][T13827] sock_sendmsg_nosec+0x13a/0x180 [ 387.813947][T13827] ____sys_sendmsg+0x54e/0x850 [ 387.813971][T13827] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.813999][T13827] ? import_iovec+0x73/0xa0 [ 387.814025][T13827] ___sys_sendmsg+0x2a5/0x360 [ 387.814042][T13827] ? __lock_acquire+0x683/0x2cf0 [ 387.814068][T13827] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.814121][T13827] ? __fget_files+0x2a/0x420 [ 387.814141][T13827] ? __fget_files+0x3a2/0x420 [ 387.814172][T13827] __x64_sys_sendmsg+0x1b1/0x290 [ 387.814193][T13827] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.814224][T13827] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.814241][T13827] do_syscall_64+0x174/0x580 [ 387.814263][T13827] ? trace_irq_disable+0x3b/0x140 [ 387.814280][T13827] ? clear_bhb_loop+0x70/0xc0 [ 387.814301][T13827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.814317][T13827] RIP: 0033:0x7fd75b19e0d9 [ 387.814334][T13827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.814350][T13827] RSP: 002b:00007fd75bfeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.814370][T13827] RAX: ffffffffffffffda RBX: 00007fd75b425fa0 RCX: 00007fd75b19e0d9 [ 387.814382][T13827] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 387.814391][T13827] RBP: 00007fd75bfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 387.814403][T13827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.814413][T13827] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 387.814444][T13827] [ 388.254482][T13836] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 388.262086][T13826] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2518'. [ 388.716627][T13852] netlink: 'syz.0.2526': attribute type 1 has an invalid length. [ 388.831725][T13850] bond6: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 388.862976][T13850] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2526'. [ 388.900576][T13863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2529'. [ 388.920857][T13854] veth14: entered promiscuous mode [ 388.941570][T13854] bond6: (slave veth14): Enslaving as a backup interface with a down link [ 388.985424][T13850] 8021q: adding VLAN 0 to HW filter on device bond6 [ 388.991823][ T58] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 389.165456][ T48] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 389.226086][T13873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.277716][T13873] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 389.556225][T13887] netlink: 'syz.4.2536': attribute type 4 has an invalid length. [ 390.365557][ T58] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.395135][ T58] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.438165][ T58] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.468394][ T58] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.805916][T13929] FAULT_INJECTION: forcing a failure. [ 390.805916][T13929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.836595][T13930] netlink: 'syz.3.2549': attribute type 4 has an invalid length. [ 390.854297][T13929] CPU: 1 UID: 0 PID: 13929 Comm: syz.4.2551 Not tainted syzkaller #0 PREEMPT(full) [ 390.854324][T13929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.854335][T13929] Call Trace: [ 390.854342][T13929] [ 390.854350][T13929] dump_stack_lvl+0xe8/0x150 [ 390.854379][T13929] should_fail_ex+0x40c/0x560 [ 390.854402][T13929] _copy_from_user+0x2d/0xb0 [ 390.854426][T13929] __sys_bpf+0x2e7/0xd90 [ 390.854455][T13929] ? __pfx___sys_bpf+0x10/0x10 [ 390.854485][T13929] ? __fget_files+0x2a/0x420 [ 390.854523][T13929] ? ksys_write+0x242/0x270 [ 390.854549][T13929] ? __pfx_ksys_write+0x10/0x10 [ 390.854577][T13929] __x64_sys_bpf+0xba/0xd0 [ 390.854596][T13929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.854616][T13929] do_syscall_64+0x174/0x580 [ 390.854650][T13929] ? trace_irq_disable+0x3b/0x140 [ 390.854671][T13929] ? clear_bhb_loop+0x70/0xc0 [ 390.854693][T13929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.854711][T13929] RIP: 0033:0x7ff50ab9e0d9 [ 390.854729][T13929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.854743][T13929] RSP: 002b:00007ff50bab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.854763][T13929] RAX: ffffffffffffffda RBX: 00007ff50ae25fa0 RCX: 00007ff50ab9e0d9 [ 390.854777][T13929] RDX: 0000000000000050 RSI: 0000200000000940 RDI: 000000000000000a [ 390.854788][T13929] RBP: 00007ff50bab9090 R08: 0000000000000000 R09: 0000000000000000 [ 390.854799][T13929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.854811][T13929] R13: 00007ff50ae26038 R14: 00007ff50ae25fa0 R15: 00007fff65ceb518 [ 390.854840][T13929] [ 391.341063][T13948] netlink: 'syz.4.2558': attribute type 1 has an invalid length. [ 391.515797][T13948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 391.659651][T13959] __nla_validate_parse: 6 callbacks suppressed [ 391.659672][T13959] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2561'. [ 391.691418][T13960] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 391.821028][T13972] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.140956][T13984] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2568'. [ 392.206464][T13982] vxcan0: entered allmulticast mode [ 392.212321][T13984] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2568'. [ 392.247634][T13989] xt_hashlimit: max too large, truncated to 1048576 [ 392.279330][T13989] xt_hashlimit: overflow, try lower: 137438953472/8 [ 392.351772][T13979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2566'. [ 392.701402][T13998] netlink: 'syz.2.2571': attribute type 4 has an invalid length. [ 392.721633][T13998] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2571'. [ 393.028533][T14004] x_tables: duplicate underflow at hook 2 [ 393.088401][T14006] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2575'. [ 393.209792][T14011] FAULT_INJECTION: forcing a failure. [ 393.209792][T14011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.237346][T14011] CPU: 0 UID: 0 PID: 14011 Comm: syz.1.2578 Not tainted syzkaller #0 PREEMPT(full) [ 393.237372][T14011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.237383][T14011] Call Trace: [ 393.237391][T14011] [ 393.237399][T14011] dump_stack_lvl+0xe8/0x150 [ 393.237430][T14011] should_fail_ex+0x40c/0x560 [ 393.237454][T14011] _copy_to_user+0x31/0xb0 [ 393.237480][T14011] simple_read_from_buffer+0xe1/0x170 [ 393.237507][T14011] proc_fail_nth_read+0x1bb/0x230 [ 393.237534][T14011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.237559][T14011] ? rw_verify_area+0x24a/0x4c0 [ 393.237585][T14011] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.237607][T14011] vfs_read+0x213/0xa80 [ 393.237638][T14011] ? __pfx_vfs_read+0x10/0x10 [ 393.237664][T14011] ? do_sys_openat2+0x14e/0x200 [ 393.237683][T14011] ? kmem_cache_free+0x182/0x650 [ 393.237703][T14011] ? fd_install+0x94/0x3d0 [ 393.237736][T14011] ksys_read+0x150/0x270 [ 393.237763][T14011] ? __pfx_ksys_read+0x10/0x10 [ 393.237793][T14011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.237812][T14011] do_syscall_64+0x174/0x580 [ 393.237837][T14011] ? trace_irq_disable+0x3b/0x140 [ 393.237858][T14011] ? clear_bhb_loop+0x70/0xc0 [ 393.237880][T14011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.237897][T14011] RIP: 0033:0x7f922575e90e [ 393.237914][T14011] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 393.237928][T14011] RSP: 002b:00007f9226638fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.237948][T14011] RAX: ffffffffffffffda RBX: 00007f92266396c0 RCX: 00007f922575e90e [ 393.237970][T14011] RDX: 000000000000000f RSI: 00007f92266390a0 RDI: 0000000000000003 [ 393.237981][T14011] RBP: 00007f9226639090 R08: 0000000000000000 R09: 0000000000000000 [ 393.237992][T14011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.238004][T14011] R13: 00007f9225a26038 R14: 00007f9225a25fa0 R15: 00007fffdfee0a98 [ 393.238033][T14011] [ 393.678566][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2577'. [ 394.279586][T14045] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2587'. [ 394.427739][T14055] ip6tnl2: entered allmulticast mode [ 394.447376][T14049] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 394.480407][T14055] netlink: 'syz.2.2589': attribute type 1 has an invalid length. [ 394.523078][T14055] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2589'. [ 394.596634][T14058] xt_hashlimit: size too large, truncated to 1048576 [ 394.708751][ T30] audit: type=1804 audit(1786558849.824:6): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2591" name="/newroot/511/cgroup.controllers" dev="tmpfs" ino=2618 res=1 errno=0 [ 394.774829][ T30] audit: type=1800 audit(1786558849.824:7): pid=14064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2591" name="cgroup.controllers" dev="tmpfs" ino=2618 res=0 errno=0 [ 395.839058][T14108] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2605'. [ 395.933063][T14108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.297407][T14130] netlink: 'syz.1.2614': attribute type 26 has an invalid length. [ 396.319343][T14130] netlink: 'syz.1.2614': attribute type 26 has an invalid length. [ 396.762461][T14156] __nla_validate_parse: 12 callbacks suppressed [ 396.795122][T14156] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2623'. [ 396.890481][T14167] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2625'. [ 397.181194][T14178] FAULT_INJECTION: forcing a failure. [ 397.181194][T14178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.205714][T14180] FAULT_INJECTION: forcing a failure. [ 397.205714][T14180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.221517][T14178] CPU: 0 UID: 0 PID: 14178 Comm: syz.0.2630 Not tainted syzkaller #0 PREEMPT(full) [ 397.221541][T14178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.221552][T14178] Call Trace: [ 397.221558][T14178] [ 397.221566][T14178] dump_stack_lvl+0xe8/0x150 [ 397.221594][T14178] should_fail_ex+0x40c/0x560 [ 397.221617][T14178] _copy_from_iter+0x1d3/0x1660 [ 397.221637][T14178] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 397.221665][T14178] ? __pfx_policy_nodemask+0x10/0x10 [ 397.221687][T14178] ? unwind_next_frame+0x8f/0x2550 [ 397.221712][T14178] ? __pfx__copy_from_iter+0x10/0x10 [ 397.221736][T14178] ? alloc_pages_mpol+0x24a/0x380 [ 397.221769][T14178] copy_page_from_iter+0x219/0x2d0 [ 397.221794][T14178] tun_get_user+0x1bf1/0x4370 [ 397.221821][T14178] ? tun_get_user+0x6e7/0x4370 [ 397.221860][T14178] ? aa_file_perm+0x4ed/0x15f0 [ 397.221878][T14178] ? __pfx_tun_get_user+0x10/0x10 [ 397.221903][T14178] ? __lock_acquire+0x683/0x2cf0 [ 397.221940][T14178] ? ref_tracker_alloc+0x341/0x4b0 [ 397.221959][T14178] ? get_pid_task+0x20/0x1f0 [ 397.221983][T14178] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 397.222004][T14178] ? tun_get+0x1c/0x2f0 [ 397.222026][T14178] ? tun_get+0x1c/0x2f0 [ 397.222057][T14178] ? tun_get+0x1c/0x2f0 [ 397.222078][T14178] ? tun_get+0x1c/0x2f0 [ 397.222105][T14178] tun_chr_write_iter+0x113/0x200 [ 397.222138][T14178] vfs_write+0x612/0xba0 [ 397.222171][T14178] ? __pfx_vfs_write+0x10/0x10 [ 397.222204][T14178] ? __fget_files+0x2a/0x420 [ 397.222235][T14178] ksys_write+0x150/0x270 [ 397.222262][T14178] ? __pfx_ksys_write+0x10/0x10 [ 397.222294][T14178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.222314][T14178] do_syscall_64+0x174/0x580 [ 397.222340][T14178] ? trace_irq_disable+0x3b/0x140 [ 397.222362][T14178] ? clear_bhb_loop+0x70/0xc0 [ 397.222385][T14178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.222402][T14178] RIP: 0033:0x7f00ee55e90e [ 397.222421][T14178] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 397.222437][T14178] RSP: 002b:00007f00ef417fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 397.222457][T14178] RAX: ffffffffffffffda RBX: 00007f00ef4186c0 RCX: 00007f00ee55e90e [ 397.222471][T14178] RDX: 000000000000002a RSI: 0000200000000000 RDI: 00000000000000c8 [ 397.222482][T14178] RBP: 00007f00ef418090 R08: 0000000000000000 R09: 0000000000000000 [ 397.222492][T14178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.222501][T14178] R13: 00007f00ee826038 R14: 00007f00ee825fa0 R15: 00007ffe8c2b2be8 [ 397.222526][T14178] [ 397.480683][T14180] CPU: 0 UID: 0 PID: 14180 Comm: syz.2.2631 Not tainted syzkaller #0 PREEMPT(full) [ 397.480708][T14180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.480718][T14180] Call Trace: [ 397.480726][T14180] [ 397.480735][T14180] dump_stack_lvl+0xe8/0x150 [ 397.480764][T14180] should_fail_ex+0x40c/0x560 [ 397.480789][T14180] _copy_to_user+0x31/0xb0 [ 397.480815][T14180] simple_read_from_buffer+0xe1/0x170 [ 397.480840][T14180] proc_fail_nth_read+0x1bb/0x230 [ 397.480867][T14180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.480894][T14180] ? rw_verify_area+0x24a/0x4c0 [ 397.480920][T14180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.480943][T14180] vfs_read+0x213/0xa80 [ 397.480972][T14180] ? __pfx___mutex_lock+0x10/0x10 [ 397.480999][T14180] ? __pfx_vfs_read+0x10/0x10 [ 397.481025][T14180] ? __fget_files+0x2a/0x420 [ 397.481051][T14180] ? __fget_files+0x3a2/0x420 [ 397.481071][T14180] ? __fget_files+0x2a/0x420 [ 397.481108][T14180] ksys_read+0x150/0x270 [ 397.481135][T14180] ? __pfx_ksys_read+0x10/0x10 [ 397.481166][T14180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.481189][T14180] do_syscall_64+0x174/0x580 [ 397.481213][T14180] ? trace_irq_disable+0x3b/0x140 [ 397.481233][T14180] ? clear_bhb_loop+0x70/0xc0 [ 397.481254][T14180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.481269][T14180] RIP: 0033:0x7fd75b15e90e [ 397.481285][T14180] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 397.481299][T14180] RSP: 002b:00007fd75bfeafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.481316][T14180] RAX: ffffffffffffffda RBX: 00007fd75bfeb6c0 RCX: 00007fd75b15e90e [ 397.481328][T14180] RDX: 000000000000000f RSI: 00007fd75bfeb0a0 RDI: 0000000000000004 [ 397.481340][T14180] RBP: 00007fd75bfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 397.481350][T14180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.481360][T14180] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 397.481386][T14180] [ 398.202158][T14199] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2638'. [ 398.238783][T14201] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2639'. [ 398.294071][T14200] FAULT_INJECTION: forcing a failure. [ 398.294071][T14200] name failslab, interval 1, probability 0, space 0, times 0 [ 398.337188][T14200] CPU: 1 UID: 0 PID: 14200 Comm: syz.3.2636 Not tainted syzkaller #0 PREEMPT(full) [ 398.337214][T14200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.337224][T14200] Call Trace: [ 398.337232][T14200] [ 398.337240][T14200] dump_stack_lvl+0xe8/0x150 [ 398.337271][T14200] should_fail_ex+0x40c/0x560 [ 398.337295][T14200] should_failslab+0xa8/0x100 [ 398.337320][T14200] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 398.337340][T14200] ? local_lock_release+0x9c/0x160 [ 398.337368][T14200] ? __alloc_skb+0x1d7/0x7a0 [ 398.337383][T14200] ? __alloc_skb+0x1d7/0x7a0 [ 398.337405][T14200] __alloc_skb+0x1d7/0x7a0 [ 398.337427][T14200] netlink_dump+0x1e7/0xee0 [ 398.337459][T14200] ? __pfx_netlink_dump+0x10/0x10 [ 398.337488][T14200] ? netlink_recvmsg+0x5bf/0xa50 [ 398.337507][T14200] ? kmem_cache_free+0x182/0x650 [ 398.337535][T14200] netlink_recvmsg+0x683/0xa50 [ 398.337562][T14200] ? __pfx_netlink_recvmsg+0x10/0x10 [ 398.337587][T14200] ? __lock_acquire+0x683/0x2cf0 [ 398.337613][T14200] ? aa_sock_msg_perm+0xf1/0x1b0 [ 398.337640][T14200] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 398.337656][T14200] ? security_socket_recvmsg+0x7e/0x2c0 [ 398.337675][T14200] ? __pfx_netlink_recvmsg+0x10/0x10 [ 398.337695][T14200] sock_recvmsg+0x196/0x1e0 [ 398.337719][T14200] ____sys_recvmsg+0x1e6/0x4a0 [ 398.337746][T14200] ? __pfx_____sys_recvmsg+0x10/0x10 [ 398.337781][T14200] ? import_iovec+0x73/0xa0 [ 398.337807][T14200] ___sys_recvmsg+0x213/0x5a0 [ 398.337831][T14200] ? __pfx____sys_recvmsg+0x10/0x10 [ 398.337855][T14200] ? __fget_files+0x2a/0x420 [ 398.337891][T14200] ? __fget_files+0x3a2/0x420 [ 398.337916][T14200] do_recvmmsg+0x31a/0x7f0 [ 398.337943][T14200] ? __pfx_do_recvmmsg+0x10/0x10 [ 398.337973][T14200] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 398.338011][T14200] ? __fget_files+0x3a2/0x420 [ 398.338042][T14200] __x64_sys_recvmmsg+0x198/0x250 [ 398.338065][T14200] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 398.338094][T14200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.338113][T14200] do_syscall_64+0x174/0x580 [ 398.338137][T14200] ? trace_irq_disable+0x3b/0x140 [ 398.338157][T14200] ? clear_bhb_loop+0x70/0xc0 [ 398.338179][T14200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.338196][T14200] RIP: 0033:0x7f29d0d9e0d9 [ 398.338217][T14200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.338230][T14200] RSP: 002b:00007f29d1b8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 398.338249][T14200] RAX: ffffffffffffffda RBX: 00007f29d1026090 RCX: 00007f29d0d9e0d9 [ 398.338263][T14200] RDX: 0000000000000001 RSI: 0000200000003840 RDI: 0000000000000007 [ 398.338274][T14200] RBP: 00007f29d1b8f090 R08: 0000000000000000 R09: 0000000000000000 [ 398.338285][T14200] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 398.338296][T14200] R13: 00007f29d1026128 R14: 00007f29d1026090 R15: 00007ffdd6a93998 [ 398.338326][T14200] [ 398.649499][T14206] bridge_slave_0: left allmulticast mode [ 398.655557][T14206] bridge_slave_0: left promiscuous mode [ 398.661469][T14206] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.147763][T14221] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2644'. [ 399.491642][T14206] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.510778][T14206] bond0: (slave bond_slave_0): Releasing backup interface [ 399.550960][T14206] bond0: (slave bond_slave_1): Releasing backup interface [ 399.604883][T14206] team0: Port device team_slave_0 removed [ 399.623146][T14206] team0: Port device team_slave_1 removed [ 399.637069][T14206] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.645979][T14206] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.656071][T14206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 399.739037][T14207] team0: Device xfrm0 is of different type [ 399.866138][T14237] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 399.909962][T14237] FAULT_INJECTION: forcing a failure. [ 399.909962][T14237] name failslab, interval 1, probability 0, space 0, times 0 [ 399.922675][T14237] CPU: 1 UID: 0 PID: 14237 Comm: syz.2.2649 Not tainted syzkaller #0 PREEMPT(full) [ 399.922700][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 399.922719][T14237] Call Trace: [ 399.922727][T14237] [ 399.922735][T14237] dump_stack_lvl+0xe8/0x150 [ 399.922766][T14237] should_fail_ex+0x40c/0x560 [ 399.922792][T14237] should_failslab+0xa8/0x100 [ 399.922818][T14237] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 399.922839][T14237] ? skb_clone+0x212/0x3a0 [ 399.922858][T14237] ? skb_clone+0x212/0x3a0 [ 399.922877][T14237] ? run_filter+0x23/0x270 [ 399.923042][T14237] skb_clone+0x212/0x3a0 [ 399.923059][T14237] ? packet_rcv+0x563/0x16f0 [ 399.923084][T14237] packet_rcv+0x65d/0x16f0 [ 399.923125][T14237] __netif_receive_skb_core+0x2705/0x30b0 [ 399.923156][T14237] ? __lock_acquire+0x683/0x2cf0 [ 399.923181][T14237] ? stack_depot_save_flags+0x33/0x800 [ 399.923199][T14237] ? __lock_acquire+0x683/0x2cf0 [ 399.923222][T14237] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 399.923245][T14237] ? kasan_save_track+0x4f/0x80 [ 399.923265][T14237] ? kasan_save_track+0x3e/0x80 [ 399.923284][T14237] ? __kasan_slab_alloc+0x6c/0x80 [ 399.923304][T14237] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 399.923322][T14237] ? __build_skb+0x62/0x440 [ 399.923338][T14237] ? build_skb+0x23/0x180 [ 399.923351][T14237] ? tun_get_user+0x1c4d/0x4370 [ 399.923369][T14237] ? tun_chr_write_iter+0x113/0x200 [ 399.923387][T14237] ? vfs_write+0x612/0xba0 [ 399.923409][T14237] ? ksys_write+0x150/0x270 [ 399.923430][T14237] ? do_syscall_64+0x174/0x580 [ 399.923469][T14237] ? netif_receive_skb+0x102/0xbf0 [ 399.923491][T14237] ? netif_receive_skb+0x102/0xbf0 [ 399.923514][T14237] netif_receive_skb+0x1fe/0xbf0 [ 399.923542][T14237] ? __pfx_netif_receive_skb+0x10/0x10 [ 399.923564][T14237] ? rcu_is_watching+0x15/0xb0 [ 399.923585][T14237] ? tun_rx_batched+0x185/0x790 [ 399.923607][T14237] tun_rx_batched+0x1de/0x790 [ 399.923633][T14237] ? __pfx_tun_rx_batched+0x10/0x10 [ 399.923655][T14237] ? tun_get_user+0x2717/0x4370 [ 399.923677][T14237] ? tun_get_user+0x2717/0x4370 [ 399.923696][T14237] ? tun_get_user+0x23cb/0x4370 [ 399.923728][T14237] ? tun_get_user+0x23cb/0x4370 [ 399.923749][T14237] ? __local_bh_enable_ip+0xd0/0x130 [ 399.923768][T14237] ? tun_get_user+0x2717/0x4370 [ 399.923789][T14237] ? tun_get_user+0x2717/0x4370 [ 399.923809][T14237] tun_get_user+0x2b44/0x4370 [ 399.923849][T14237] ? aa_file_perm+0x4ed/0x15f0 [ 399.923866][T14237] ? __pfx_tun_get_user+0x10/0x10 [ 399.923886][T14237] ? __lock_acquire+0x683/0x2cf0 [ 399.923918][T14237] ? ref_tracker_alloc+0x341/0x4b0 [ 399.923937][T14237] ? ktime_get+0x45/0x220 [ 399.923956][T14237] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 399.923976][T14237] ? tun_get+0x1c/0x2f0 [ 399.923997][T14237] ? tun_get+0x1c/0x2f0 [ 399.924023][T14237] ? tun_get+0x1c/0x2f0 [ 399.924044][T14237] ? tun_get+0x1c/0x2f0 [ 399.924070][T14237] tun_chr_write_iter+0x113/0x200 [ 399.924097][T14237] vfs_write+0x612/0xba0 [ 399.924129][T14237] ? __pfx_vfs_write+0x10/0x10 [ 399.924160][T14237] ? __fget_files+0x2a/0x420 [ 399.924188][T14237] ksys_write+0x150/0x270 [ 399.924214][T14237] ? __pfx_ksys_write+0x10/0x10 [ 399.924245][T14237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.924265][T14237] do_syscall_64+0x174/0x580 [ 399.924288][T14237] ? trace_irq_disable+0x3b/0x140 [ 399.924308][T14237] ? clear_bhb_loop+0x70/0xc0 [ 399.924335][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.924353][T14237] RIP: 0033:0x7fd75b15e90e [ 399.924370][T14237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 399.924385][T14237] RSP: 002b:00007fd75bfeafb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 399.924405][T14237] RAX: ffffffffffffffda RBX: 00007fd75bfeb6c0 RCX: 00007fd75b15e90e [ 399.924419][T14237] RDX: 000000000000005e RSI: 0000200000000540 RDI: 00000000000000c8 [ 399.924431][T14237] RBP: 00007fd75bfeb090 R08: 0000000000000000 R09: 0000000000000000 [ 399.924443][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.924453][T14237] R13: 00007fd75b426038 R14: 00007fd75b425fa0 R15: 00007ffc63126d48 [ 399.924483][T14237] [ 400.414678][T14244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2652'. [ 400.432854][T14240] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 400.740085][T14254] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2654'. [ 401.107544][T14267] vlan4: entered allmulticast mode [ 401.113331][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 401.158042][T14267] bridge0: port 3(vlan4) entered blocking state [ 401.188227][T14267] bridge0: port 3(vlan4) entered disabled state [ 401.206455][T14267] vlan4: entered promiscuous mode [ 401.262969][T14267] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2658'. [ 402.102166][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2661'. [ 402.251027][T14294] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2665'. [ 402.481000][T14313] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2669'. [ 403.047848][T14329] netlink: 'syz.0.2675': attribute type 16 has an invalid length. [ 403.093678][T14329] netlink: 'syz.0.2675': attribute type 17 has an invalid length. [ 403.112637][T14325] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2675'. [ 403.415168][T14329] tunl0: left promiscuous mode [ 403.507563][T14333] openvswitch: netlink: Key type 272 is out of range max 32 [ 403.657210][T14329] geneve1: left promiscuous mode [ 403.679072][T14329] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 403.761481][T14329] vlan2: left promiscuous mode [ 403.775136][T14329] bridge0: left promiscuous mode [ 403.795315][T14329] bridge1: left allmulticast mode [ 403.838893][T14329] vlan3: left allmulticast mode [ 403.853841][T14329] hsr0: left allmulticast mode [ 403.862918][T14329] hsr_slave_0: left allmulticast mode [ 403.878797][T14329] hsr_slave_1: left allmulticast mode [ 403.911754][T14329] ipip0: left promiscuous mode [ 403.931850][T14329] veth14: left promiscuous mode [ 403.951494][T14329] bridge0: port 3(vlan4) entered blocking state [ 403.958014][T14329] bridge0: port 3(vlan4) entered forwarding state [ 404.014243][ T48] bond6: (slave ip6gretap1): link status up again after 0 ms [ 404.084101][ T48] bond6: (slave ip6gretap1): link status up again after 0 ms [ 404.106572][T14339] A link change request failed with some changes committed already. Interface syzkaller1 may have been left with an inconsistent configuration, please check. [ 404.127947][ T48] bond6: (slave ip6gretap1): link status up again after 0 ms [ 404.138630][T14352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2681'. [ 404.149072][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 404.164634][T14354] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 404.180065][ T48] bond6: (slave veth14): link status definitely up, 10000 Mbps full duplex [ 404.204959][ T48] bond6: active interface up! [ 404.397866][T14358] FAULT_INJECTION: forcing a failure. [ 404.397866][T14358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.420787][T14358] CPU: 1 UID: 0 PID: 14358 Comm: syz.0.2683 Not tainted syzkaller #0 PREEMPT(full) [ 404.420814][T14358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 404.420824][T14358] Call Trace: [ 404.420832][T14358] [ 404.420840][T14358] dump_stack_lvl+0xe8/0x150 [ 404.420873][T14358] should_fail_ex+0x40c/0x560 [ 404.420897][T14358] _copy_to_user+0x31/0xb0 [ 404.420922][T14358] simple_read_from_buffer+0xe1/0x170 [ 404.420954][T14358] proc_fail_nth_read+0x1bb/0x230 [ 404.420980][T14358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.421007][T14358] ? rw_verify_area+0x24a/0x4c0 [ 404.421034][T14358] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.421056][T14358] vfs_read+0x213/0xa80 [ 404.421086][T14358] ? __pfx___mutex_lock+0x10/0x10 [ 404.421112][T14358] ? __pfx_vfs_read+0x10/0x10 [ 404.421138][T14358] ? __fget_files+0x2a/0x420 [ 404.421164][T14358] ? __fget_files+0x3a2/0x420 [ 404.421184][T14358] ? __fget_files+0x2a/0x420 [ 404.421214][T14358] ksys_read+0x150/0x270 [ 404.421240][T14358] ? __pfx_ksys_read+0x10/0x10 [ 404.421273][T14358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.421293][T14358] do_syscall_64+0x174/0x580 [ 404.421319][T14358] ? clear_bhb_loop+0x70/0xc0 [ 404.421341][T14358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.421359][T14358] RIP: 0033:0x7f00ee55e90e [ 404.421376][T14358] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.421390][T14358] RSP: 002b:00007f00ef417fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.421410][T14358] RAX: ffffffffffffffda RBX: 00007f00ef4186c0 RCX: 00007f00ee55e90e [ 404.421423][T14358] RDX: 000000000000000f RSI: 00007f00ef4180a0 RDI: 0000000000000006 [ 404.421434][T14358] RBP: 00007f00ef418090 R08: 0000000000000000 R09: 0000000000000000 [ 404.421445][T14358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 404.421456][T14358] R13: 00007f00ee826038 R14: 00007f00ee825fa0 R15: 00007ffe8c2b2be8 [ 404.421494][T14358] [ 404.652048][T14366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 404.709305][ T641] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 404.744601][ T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.763602][ T58] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.776055][ T8239] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 404.843157][ T136] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 405.052821][ T8239] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 405.435765][ T5710] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 405.976930][T14385] netlink: 'syz.0.2692': attribute type 5 has an invalid length. [ 406.568463][ T4926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 406.584251][ T4926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 406.594457][ T4926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 406.607351][ T4926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 406.621783][ T4926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 406.810716][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2693'. [ 407.048622][T14410] lo speed is unknown, defaulting to 1000 [ 407.381355][ T30] audit: type=1800 audit(1786558862.494:8): pid=14398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2693" name="memory.events" dev="tmpfs" ino=2786 res=0 errno=0 [ 407.635261][ T5609] syz_tun (unregistering): left allmulticast mode [ 407.879667][T14402] lo speed is unknown, defaulting to 1000 [ 408.315817][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.337431][T14439] FAULT_INJECTION: forcing a failure. [ 408.337431][T14439] name failslab, interval 1, probability 0, space 0, times 0 [ 408.355437][ T58] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.392643][T14439] CPU: 0 UID: 0 PID: 14439 Comm: syz.4.2702 Not tainted syzkaller #0 PREEMPT(full) [ 408.392670][T14439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 408.392682][T14439] Call Trace: [ 408.392690][T14439] [ 408.392698][T14439] dump_stack_lvl+0xe8/0x150 [ 408.392729][T14439] should_fail_ex+0x40c/0x560 [ 408.392755][T14439] should_failslab+0xa8/0x100 [ 408.392781][T14439] __kmalloc_cache_noprof+0xa8/0x660 [ 408.392803][T14439] ? sctp_association_new+0x89/0x25d0 [ 408.392826][T14439] ? sctp_association_new+0x89/0x25d0 [ 408.392851][T14439] ? sctp_has_association+0x2f/0x1f0 [ 408.392874][T14439] sctp_association_new+0x89/0x25d0 [ 408.392898][T14439] ? sctp_has_association+0x2f/0x1f0 [ 408.392924][T14439] sctp_connect_new_asoc+0x2e4/0x6b0 [ 408.392953][T14439] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 408.392989][T14439] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 408.393008][T14439] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 408.393027][T14439] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 408.393047][T14439] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 408.393063][T14439] ? security_sctp_bind_connect+0x7e/0x2c0 [ 408.393085][T14439] sctp_sendmsg+0x159b/0x2d00 [ 408.393122][T14439] ? __pfx_sctp_sendmsg+0x10/0x10 [ 408.393145][T14439] ? aa_sk_perm+0x6d5/0x900 [ 408.393167][T14439] ? __might_fault+0xaf/0x130 [ 408.393186][T14439] ? sock_rps_record_flow+0x19/0x350 [ 408.393204][T14439] ? inet_sendmsg+0x298/0x320 [ 408.393220][T14439] ? __pfx_inet_sendmsg+0x10/0x10 [ 408.393235][T14439] sock_sendmsg_nosec+0x10e/0x180 [ 408.393258][T14439] __sys_sendto+0x408/0x5a0 [ 408.393272][T14439] ? ksys_write+0x1e6/0x270 [ 408.393294][T14439] ? __pfx___sys_sendto+0x10/0x10 [ 408.393307][T14439] ? __mutex_unlock_slowpath+0x731/0x900 [ 408.393354][T14439] ? __pfx_ksys_write+0x10/0x10 [ 408.393382][T14439] __x64_sys_sendto+0xde/0x100 [ 408.393400][T14439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.393419][T14439] do_syscall_64+0x174/0x580 [ 408.393441][T14439] ? clear_bhb_loop+0x70/0xc0 [ 408.393463][T14439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.393479][T14439] RIP: 0033:0x7ff50ab9e0d9 [ 408.393497][T14439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.393511][T14439] RSP: 002b:00007ff50bab9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 408.393531][T14439] RAX: ffffffffffffffda RBX: 00007ff50ae25fa0 RCX: 00007ff50ab9e0d9 [ 408.393544][T14439] RDX: 0000000000034000 RSI: 0000200000000300 RDI: 0000000000000003 [ 408.393556][T14439] RBP: 00007ff50bab9090 R08: 0000200000000380 R09: 0000000000000010 [ 408.393568][T14439] R10: 000000000000ffdc R11: 0000000000000246 R12: 0000000000000001 [ 408.393579][T14439] R13: 00007ff50ae26038 R14: 00007ff50ae25fa0 R15: 00007fff65ceb518 [ 408.393608][T14439] [ 408.714317][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 408.806022][ T50] Bluetooth: hci5: command tx timeout [ 408.919653][T14432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.950321][T14432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 409.054389][T14432] veth0_to_team: left promiscuous mode [ 409.112911][T14432] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 409.142908][T14432] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 409.202894][T14432] veth1_vlan: left promiscuous mode [ 409.218847][T14432] veth0_vlan: left promiscuous mode [ 409.240618][T14432] veth0_vlan: entered promiscuous mode [ 409.262219][T14432] veth1_vlan: entered promiscuous mode [ 409.294986][T14432] veth1_macvtap: left promiscuous mode [ 409.309535][T14432] veth0_macvtap: left promiscuous mode [ 409.330033][T14432] veth0_macvtap: entered promiscuous mode [ 409.344285][T14432] veth1_macvtap: entered promiscuous mode [ 409.369621][T14432] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.395459][T14432] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.414101][T14432] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.424071][T14432] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.450325][T14432] veth0_to_team: entered promiscuous mode [ 409.467671][T14432] 8021q: adding VLAN 0 to HW filter on device bond1 [ 409.573373][T14453] xt_hashlimit: size too large, truncated to 1048576 [ 409.602802][ T641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.632417][T14456] net_ratelimit: 23 callbacks suppressed [ 409.632437][T14456] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.663062][T14457] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2705'. [ 409.677993][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.712075][ T58] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.812987][ T48] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.886096][ T33] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.134174][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.171421][ T58] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.234071][T14476] netlink: 'syz.3.2711': attribute type 3 has an invalid length. [ 410.283892][ T641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.341319][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.388273][ T5702] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.397380][ T48] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.519127][T14486] netlink: 7994 bytes leftover after parsing attributes in process `syz.2.2715'. [ 410.520840][T14484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2714'. [ 410.545079][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.569152][ T58] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.604119][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2714'. [ 410.687481][ T5702] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.774144][ T5702] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.854479][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 410.874146][ T4926] Bluetooth: hci5: command tx timeout [ 410.927279][T14492] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2716'. [ 411.245872][T14402] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.266326][T14402] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.286613][T14402] bridge_slave_0: entered allmulticast mode [ 411.302702][T14402] bridge_slave_0: entered promiscuous mode [ 411.317648][T14510] bond0: option arp_validate: invalid value (55553) [ 411.362300][T14402] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.379720][T14515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 411.394430][T14402] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.408620][T14402] bridge_slave_1: entered allmulticast mode [ 411.428614][T14402] bridge_slave_1: entered promiscuous mode [ 411.465121][ T48] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 411.598440][T14515] syzkaller0: entered promiscuous mode [ 411.611475][T14515] syzkaller0: entered allmulticast mode [ 411.646555][T14402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.690210][T14525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 411.706819][ T58] vlan4: left allmulticast mode [ 411.716316][ T58] vlan4: left promiscuous mode [ 411.724382][ T58] bridge0: port 3(vlan4) entered disabled state [ 411.738555][ T58] bridge_slave_1: left allmulticast mode [ 411.757630][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.772743][ T58] bridge_slave_0: left allmulticast mode [ 411.783898][ T58] bridge_slave_0: left promiscuous mode [ 411.793276][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.054844][ T58] bond6 (unregistering): (slave ip6gretap1): Releasing backup interface [ 412.065006][ T58] bond6 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 7a:68:ac:48:ce:c6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 412.518329][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.534846][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.546468][ T58] bond0 (unregistering): Released all slaves [ 412.564431][ T58] bond1 (unregistering): Released all slaves [ 412.587657][ T58] bond2 (unregistering): Released all slaves [ 412.621351][ T58] bond3 (unregistering): Released all slaves [ 412.643847][ T58] bond4 (unregistering): Released all slaves [ 412.664720][ T58] bond5 (unregistering): Released all slaves [ 412.695047][ T58] bond6 (unregistering): (slave veth14): Removing an active aggregator [ 412.706405][ T58] bond6 (unregistering): (slave veth14): Releasing backup interface [ 412.719141][ T58] bond6 (unregistering): Released all slaves [ 412.741649][T14402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.786942][T14527] bond0: option arp_validate: invalid value (55553) [ 412.955189][ T4926] Bluetooth: hci5: command tx timeout [ 413.026757][T14552] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 413.077870][T14402] team0: Port device team_slave_0 added [ 413.138593][T14402] team0: Port device team_slave_1 added [ 413.152895][ T58] tipc: Disabling bearer [ 413.168174][ T58] tipc: Left network mode [ 413.342945][T14402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.371026][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.474996][T14402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.514071][ T58] IPVS: stopping master sync thread 6576 ... [ 413.535565][T14402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.554719][T14402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 413.609043][T14402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.051921][T14584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2740'. [ 414.162761][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 414.270715][T14402] hsr_slave_0: entered promiscuous mode [ 414.280238][T14402] hsr_slave_1: entered promiscuous mode [ 414.291833][T14402] debugfs: 'hsr0' already exists in 'hsr' [ 414.299036][T14402] Cannot create hsr debugfs directory [ 414.627758][T14576] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 414.908406][T14607] netlink: zone id is out of range [ 414.927949][T14607] netlink: zone id is out of range [ 414.938081][T14607] netlink: zone id is out of range [ 414.954799][T14607] netlink: zone id is out of range [ 414.966542][T14607] netlink: zone id is out of range [ 414.988709][T14607] netlink: zone id is out of range [ 415.001396][T14607] netlink: zone id is out of range [ 415.026498][ T58] hsr_slave_0: left promiscuous mode [ 415.033021][ T4926] Bluetooth: hci5: command tx timeout [ 415.049923][T14597] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2746'. [ 415.059637][ T58] hsr_slave_1: left promiscuous mode [ 415.074142][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 415.094263][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 415.111104][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.127877][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.159657][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2750'. [ 415.172382][ T58] veth1_macvtap: left promiscuous mode [ 415.195244][ T58] veth0_macvtap: left promiscuous mode [ 415.209899][ T58] veth1_vlan: left promiscuous mode [ 415.218952][ T58] veth0_vlan: left promiscuous mode [ 416.278732][ T58] team0 (unregistering): Port device team_slave_1 removed [ 416.314695][ T58] team0 (unregistering): Port device team_slave_0 removed [ 416.366203][T14629] block nbd0: not configured, cannot reconfigure [ 416.468305][T14629] netlink: 'syz.3.2755': attribute type 142 has an invalid length. [ 417.307534][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2761'. [ 417.340422][T14655] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2761'. [ 417.356006][ T58] IPVS: stop unused estimator thread 0... [ 417.747809][T14664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2765'. [ 417.851002][T14667] IPVS: rr: FWM 3 0x00000003 - no destination available [ 417.943558][T14668] syzkaller0: entered promiscuous mode [ 417.971120][T14668] syzkaller0: entered allmulticast mode [ 418.137237][T14402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.173826][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 418.193983][T14402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.228001][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 418.256129][T14402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.354091][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 418.382828][T14402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.419792][T14402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 418.512098][T14686] syzkaller0: entered promiscuous mode [ 418.528879][T14686] syzkaller0: entered allmulticast mode [ 418.619871][T14686] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 418.643895][T14686] bond7 (unregistering): Released all slaves [ 418.789097][T14684] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 418.806302][T14684] bond7 (unregistering): Released all slaves [ 418.812168][T14708] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2776'. [ 419.271541][T14728] Bluetooth: MGMT ver 1.23 [ 419.306755][T14728] FAULT_INJECTION: forcing a failure. [ 419.306755][T14728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.322033][T14728] CPU: 1 UID: 0 PID: 14728 Comm: syz.4.2777 Not tainted syzkaller #0 PREEMPT(full) [ 419.322060][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.322071][T14728] Call Trace: [ 419.322079][T14728] [ 419.322088][T14728] dump_stack_lvl+0xe8/0x150 [ 419.322119][T14728] should_fail_ex+0x40c/0x560 [ 419.322143][T14728] _copy_to_user+0x31/0xb0 [ 419.322169][T14728] simple_read_from_buffer+0xe1/0x170 [ 419.322197][T14728] proc_fail_nth_read+0x1bb/0x230 [ 419.322224][T14728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.322250][T14728] ? rw_verify_area+0x24a/0x4c0 [ 419.322276][T14728] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 419.322297][T14728] vfs_read+0x213/0xa80 [ 419.322326][T14728] ? __pfx___mutex_lock+0x10/0x10 [ 419.322352][T14728] ? __pfx_vfs_read+0x10/0x10 [ 419.322376][T14728] ? __fget_files+0x2a/0x420 [ 419.322401][T14728] ? __fget_files+0x3a2/0x420 [ 419.322420][T14728] ? __fget_files+0x2a/0x420 [ 419.322449][T14728] ksys_read+0x150/0x270 [ 419.322475][T14728] ? __pfx_ksys_read+0x10/0x10 [ 419.322506][T14728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.322534][T14728] do_syscall_64+0x174/0x580 [ 419.322555][T14728] ? trace_irq_disable+0x3b/0x140 [ 419.322574][T14728] ? clear_bhb_loop+0x70/0xc0 [ 419.322595][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.322611][T14728] RIP: 0033:0x7ff50ab5e90e [ 419.322628][T14728] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 419.322643][T14728] RSP: 002b:00007ff50bab8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 419.322660][T14728] RAX: ffffffffffffffda RBX: 00007ff50bab96c0 RCX: 00007ff50ab5e90e [ 419.322671][T14728] RDX: 000000000000000f RSI: 00007ff50bab90a0 RDI: 0000000000000003 [ 419.322683][T14728] RBP: 00007ff50bab9090 R08: 0000000000000000 R09: 0000000000000000 [ 419.322695][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.322706][T14728] R13: 00007ff50ae26038 R14: 00007ff50ae25fa0 R15: 00007fff65ceb518 [ 419.322737][T14728] [ 419.908417][T14735] FAULT_INJECTION: forcing a failure. [ 419.908417][T14735] name failslab, interval 1, probability 0, space 0, times 0 [ 419.913897][T14402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.987418][T14735] CPU: 1 UID: 0 PID: 14735 Comm: syz.3.2780 Not tainted syzkaller #0 PREEMPT(full) [ 419.987443][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 419.987454][T14735] Call Trace: [ 419.987461][T14735] [ 419.987470][T14735] dump_stack_lvl+0xe8/0x150 [ 419.987501][T14735] should_fail_ex+0x40c/0x560 [ 419.987524][T14735] should_failslab+0xa8/0x100 [ 419.987548][T14735] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 419.987570][T14735] ? skb_clone+0x212/0x3a0 [ 419.987589][T14735] ? skb_clone+0x212/0x3a0 [ 419.987614][T14735] skb_clone+0x212/0x3a0 [ 419.987634][T14735] __netlink_deliver_tap+0x413/0x860 [ 419.987667][T14735] ? netlink_deliver_tap+0x2e/0x1b0 [ 419.987689][T14735] netlink_deliver_tap+0x19c/0x1b0 [ 419.987722][T14735] netlink_unicast+0x77f/0x940 [ 419.987749][T14735] netlink_sendmsg+0x813/0xb40 [ 419.987776][T14735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.987799][T14735] ? aa_sock_msg_perm+0xf1/0x1b0 [ 419.987830][T14735] ? __pfx_netlink_sendmsg+0x10/0x10 [ 419.987848][T14735] sock_sendmsg_nosec+0x13a/0x180 [ 419.987876][T14735] ____sys_sendmsg+0x54e/0x850 [ 419.987901][T14735] ? __pfx_____sys_sendmsg+0x10/0x10 [ 419.987926][T14735] ? import_iovec+0x73/0xa0 [ 419.987952][T14735] ___sys_sendmsg+0x2a5/0x360 [ 419.987970][T14735] ? __lock_acquire+0x683/0x2cf0 [ 419.987995][T14735] ? __pfx____sys_sendmsg+0x10/0x10 [ 419.988052][T14735] ? __fget_files+0x2a/0x420 [ 419.988072][T14735] ? __fget_files+0x3a2/0x420 [ 419.988098][T14735] __x64_sys_sendmsg+0x1b1/0x290 [ 419.988118][T14735] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 419.988151][T14735] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.988170][T14735] do_syscall_64+0x174/0x580 [ 419.988194][T14735] ? trace_irq_disable+0x3b/0x140 [ 419.988215][T14735] ? clear_bhb_loop+0x70/0xc0 [ 419.988236][T14735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.988253][T14735] RIP: 0033:0x7f29d0d9e0d9 [ 419.988270][T14735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.988284][T14735] RSP: 002b:00007f29d1bb0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 419.988304][T14735] RAX: ffffffffffffffda RBX: 00007f29d1025fa0 RCX: 00007f29d0d9e0d9 [ 419.988317][T14735] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 419.988326][T14735] RBP: 00007f29d1bb0090 R08: 0000000000000000 R09: 0000000000000000 [ 419.988337][T14735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 419.988347][T14735] R13: 00007f29d1026038 R14: 00007f29d1025fa0 R15: 00007ffdd6a93998 [ 419.988375][T14735] [ 419.995857][T14402] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.012634][T14735] openvswitch: netlink: Missing key (keys=40, expected=100) [ 420.064720][ T641] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.269664][ T641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.322850][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2779'. [ 420.362791][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2779'. [ 420.415722][ T641] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.422943][ T641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.666820][T14753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2783'. [ 421.019325][T14760] IPVS: rr: UDP 127.0.0.1:10000 - no destination available [ 421.117969][T14762] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2785'. [ 421.521477][T14402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 421.592712][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 421.659742][T14402] veth0_vlan: entered promiscuous mode [ 421.716477][T14402] veth1_vlan: entered promiscuous mode [ 421.767912][T14778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2790'. [ 421.779940][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2789'. [ 421.935025][T14784] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap0 [ 421.966960][T14784] batman_adv: batadv0: Adding interface: gretap0 [ 421.984386][T14784] batman_adv: batadv0: The MTU of interface gretap0 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 422.038424][T14784] batman_adv: batadv0: Interface activated: gretap0 [ 422.126058][T14402] veth0_macvtap: entered promiscuous mode [ 422.174294][T14402] veth1_macvtap: entered promiscuous mode [ 422.257507][T14402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.330207][T14402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.399283][T14796] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.424825][T14797] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.507058][ T1169] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.541725][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2794'. [ 422.563794][ T1169] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.683031][ T33] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.751044][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.763316][T14804] netlink: 'syz.3.2798': attribute type 3 has an invalid length. [ 422.791833][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 422.926074][T14811] netlink: 'syz.4.2797': attribute type 4 has an invalid length. [ 422.930968][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 422.938141][ T33] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.953016][ T50] Bluetooth: hci5: command 0x0405 tx timeout [ 422.966304][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.000279][T14812] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2797'. [ 423.062947][T14812] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 423.168343][T14807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 423.198222][ T6514] lo speed is unknown, defaulting to 1000 [ 423.215662][ T6514] syz0: Port: 1 Link DOWN [ 423.221870][T14822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2802'. [ 423.528245][T14836] FAULT_INJECTION: forcing a failure. [ 423.528245][T14836] name failslab, interval 1, probability 0, space 0, times 0 [ 423.582810][T14836] CPU: 0 UID: 0 PID: 14836 Comm: syz.4.2803 Not tainted syzkaller #0 PREEMPT(full) [ 423.582837][T14836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.582848][T14836] Call Trace: [ 423.582857][T14836] [ 423.582865][T14836] dump_stack_lvl+0xe8/0x150 [ 423.582895][T14836] should_fail_ex+0x40c/0x560 [ 423.582920][T14836] should_failslab+0xa8/0x100 [ 423.582946][T14836] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 423.582968][T14836] ? skb_clone+0x212/0x3a0 [ 423.582988][T14836] ? skb_clone+0x212/0x3a0 [ 423.583015][T14836] skb_clone+0x212/0x3a0 [ 423.583034][T14836] __netlink_deliver_tap+0x413/0x860 [ 423.583066][T14836] ? netlink_deliver_tap+0x2e/0x1b0 [ 423.583088][T14836] netlink_deliver_tap+0x19c/0x1b0 [ 423.583110][T14836] netlink_unicast+0x77f/0x940 [ 423.583144][T14836] netlink_sendmsg+0x813/0xb40 [ 423.583174][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.583208][T14836] ? aa_sock_msg_perm+0xf1/0x1b0 [ 423.583239][T14836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.583259][T14836] sock_sendmsg_nosec+0x13a/0x180 [ 423.583286][T14836] ____sys_sendmsg+0x54e/0x850 [ 423.583312][T14836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.583342][T14836] ? import_iovec+0x73/0xa0 [ 423.583368][T14836] ___sys_sendmsg+0x2a5/0x360 [ 423.583387][T14836] ? __lock_acquire+0x683/0x2cf0 [ 423.583413][T14836] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.583431][T14836] ? __lock_acquire+0x683/0x2cf0 [ 423.583458][T14836] ? kstrtouint+0x6e/0xe0 [ 423.583517][T14836] __sys_sendmmsg+0x273/0x4d0 [ 423.583543][T14836] ? __pfx___sys_sendmmsg+0x10/0x10 [ 423.583573][T14836] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 423.583614][T14836] ? ksys_write+0x242/0x270 [ 423.583641][T14836] ? __pfx_ksys_write+0x10/0x10 [ 423.583671][T14836] __x64_sys_sendmmsg+0xa0/0xc0 [ 423.583691][T14836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.583709][T14836] do_syscall_64+0x174/0x580 [ 423.583732][T14836] ? trace_irq_disable+0x3b/0x140 [ 423.583753][T14836] ? clear_bhb_loop+0x70/0xc0 [ 423.583776][T14836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.583793][T14836] RIP: 0033:0x7ff50ab9e0d9 [ 423.583809][T14836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.583823][T14836] RSP: 002b:00007ff50bab9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 423.583841][T14836] RAX: ffffffffffffffda RBX: 00007ff50ae25fa0 RCX: 00007ff50ab9e0d9 [ 423.583852][T14836] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 423.583864][T14836] RBP: 00007ff50bab9090 R08: 0000000000000000 R09: 0000000000000000 [ 423.583873][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 423.583881][T14836] R13: 00007ff50ae26038 R14: 00007ff50ae25fa0 R15: 00007fff65ceb518 [ 423.583909][T14836] [ 423.584055][T14836] netlink: 'syz.4.2803': attribute type 14 has an invalid length. [ 424.433469][ T33] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 424.439753][ T33] CPU: 0 UID: 0 PID: 33 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 424.449091][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 424.459252][ T33] Workqueue: events_unbound cfg80211_wiphy_work [ 424.465596][ T33] RIP: 0010:mac80211_hwsim_link_info_changed+0x4d1/0x1010 [ 424.472838][ T33] Code: 0b 49 89 fc e8 40 c5 06 fb 4c 89 e7 48 c7 07 00 00 00 00 41 c6 44 1e 04 f8 eb 2b e8 19 2b 99 fa e9 d1 fd ff ff 44 89 e0 31 d2 f6 29 d1 48 69 f1 e8 03 00 00 48 8b 7c 24 48 31 d2 b9 05 00 00 [ 424.492551][ T33] RSP: 0018:ffffc90000a97880 EFLAGS: 00010246 [ 424.498644][ T33] RAX: 00000000194bb121 RBX: dffffc0000000000 RCX: 0000000000000000 [ 424.506736][ T33] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c4bba80 [ 424.514720][ T33] RBP: ffffc90000a97978 R08: ffffffff90575c37 R09: 1ffffffff20aeb86 [ 424.522744][ T33] R10: dffffc0000000000 R11: fffffbfff20aeb87 R12: 00000000194bb121 [ 424.530816][ T33] R13: ffff888056207c08 R14: 1ffff92000152f1c R15: 0000000000000200 [ 424.538803][ T33] FS: 0000000000000000(0000) GS:ffff888124f57000(0000) knlGS:0000000000000000 [ 424.547747][ T33] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.554433][ T33] CR2: 0000200000000000 CR3: 000000006a710000 CR4: 00000000003526f0 [ 424.562506][ T33] Call Trace: [ 424.565801][ T33] [ 424.568756][ T33] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 424.575557][ T33] ? __pfx_mac80211_hwsim_link_info_changed+0x10/0x10 [ 424.582347][ T33] drv_link_info_changed+0x4ba/0x810 [ 424.587661][ T33] ieee80211_offchannel_return+0x383/0x500 [ 424.593574][ T33] ? __pfx_mac80211_hwsim_sw_scan_complete+0x10/0x10 [ 424.600277][ T33] __ieee80211_scan_completed+0x734/0xb20 [ 424.606072][ T33] cfg80211_wiphy_work+0x29e/0x420 [ 424.611211][ T33] ? process_scheduled_works+0xa20/0x14e0 [ 424.616946][ T33] process_scheduled_works+0xa8e/0x14e0 [ 424.622593][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.628605][ T33] ? assign_work+0x3cf/0x5d0 [ 424.633254][ T33] worker_thread+0xa47/0xfb0 [ 424.637870][ T33] ? __kthread_parkme+0x71/0x1f0 [ 424.642825][ T33] kthread+0x388/0x470 [ 424.647006][ T33] ? __pfx_worker_thread+0x10/0x10 [ 424.652154][ T33] ? __pfx_kthread+0x10/0x10 [ 424.656759][ T33] ret_from_fork+0x514/0xb70 [ 424.661494][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 424.666623][ T33] ? __switch_to+0xc89/0x1420 [ 424.671309][ T33] ? __pfx_kthread+0x10/0x10 [ 424.675920][ T33] ret_from_fork_asm+0x1a/0x30 [ 424.680733][ T33] [ 424.683772][ T33] Modules linked in: [ 424.689354][ T33] ---[ end trace 0000000000000000 ]--- [ 424.699227][ T33] RIP: 0010:mac80211_hwsim_link_info_changed+0x4d1/0x1010 [ 424.706916][ T33] Code: 0b 49 89 fc e8 40 c5 06 fb 4c 89 e7 48 c7 07 00 00 00 00 41 c6 44 1e 04 f8 eb 2b e8 19 2b 99 fa e9 d1 fd ff ff 44 89 e0 31 d2 f6 29 d1 48 69 f1 e8 03 00 00 48 8b 7c 24 48 31 d2 b9 05 00 00 [ 424.727418][ T33] RSP: 0018:ffffc90000a97880 EFLAGS: 00010246 [ 424.733780][ T33] RAX: 00000000194bb121 RBX: dffffc0000000000 RCX: 0000000000000000 [ 424.741986][ T33] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8c4bba80 [ 424.754519][ T33] RBP: ffffc90000a97978 R08: ffffffff90575c37 R09: 1ffffffff20aeb86 [ 424.762832][ T33] R10: dffffc0000000000 R11: fffffbfff20aeb87 R12: 00000000194bb121 [ 424.771170][ T33] R13: ffff888056207c08 R14: 1ffff92000152f1c R15: 0000000000000200 [ 424.779593][ T33] FS: 0000000000000000(0000) GS:ffff888124f57000(0000) knlGS:0000000000000000 [ 424.789372][ T33] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 424.814752][ T33] CR2: 0000001b33413ff8 CR3: 000000007bb92000 CR4: 00000000003526f0 [ 424.836895][ T33] Kernel panic - not syncing: Fatal exception [ 424.843321][ T33] Kernel Offset: disabled [ 424.847704][ T33] Rebooting in 86400 seconds..