last executing test programs: 3.03963681s ago: executing program 1 (id=1404): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x2, 0xc}, {0xe, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200000000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f0000000400000008000000080080"], 0x48) 2.795908763s ago: executing program 1 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 2.64782355s ago: executing program 2 (id=1407): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.596293433s ago: executing program 1 (id=1408): socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x3, 0x10000004, 0x8}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.368533346s ago: executing program 2 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x200}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xa8}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r2, &(0x7f0000000080)=""/41, 0x29) shutdown(r2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2800000010005fba0000", @ANYRES32=0x0, @ANYBLOB="00010000c580000008001b000000"], 0x28}}, 0x0) sendmmsg(r5, 0x0, 0x0, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000000000000000000000000aa00000004000000000a0060803b000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000019000000000004000000000000000000004000000000000000fdffffffffffffff02000000000000000000000000000000feffffffffffffff000000000000000000000000000000000000426676b800000900000000000040000105df28a5267d39c7a19623ba28d34ef829ea15c42bf3ce55e9fc301400beaa43438cbeda03ab55fe60b7"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4004}, 0x4000000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r6, 0x0, 0x48000) socket$netlink(0x10, 0x3, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) 2.212343945s ago: executing program 0 (id=1412): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xcc, 0xc}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.060820858s ago: executing program 0 (id=1413): socket$nl_route(0x10, 0x3, 0x0) socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000080)='\x00'/10, 0xa, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/10, 0xa, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'lblc\x00', 0x3, 0x10000004, 0x8}, 0x2c) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d4c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.783601368s ago: executing program 0 (id=1415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)={0x30, 0x3, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x91}, 0x20008080) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="146333e8288cf20b000000100001000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000009050003000100000008000240000000080900010073797a30000000000900020073797a32000000001400e4da03f58ab3903300001100010000000000000000000000000a00"/143], 0x80}, 0x1, 0x0, 0x0, 0x2008c040}, 0x81) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000004d00)={0x28, 0x14, 0x211, 0xfffffffd, 0x0, {0xf}, [@INET_DIAG_REQ_BYTECODE={0x11, 0x1, "e7bdd191486e8e3bf0795161b2"}]}, 0x28}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10140, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x9, 0xc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x1, 0x3, 0x6361, 0x2, 0x7, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x7f, 0x0, 0x1000, 0x1}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000010) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56741, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xfff3}, {0xb, 0xb}, {0xe, 0xb}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0)="05031400d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.74426034s ago: executing program 2 (id=1417): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf090000000000005509010000000000950000000000000085100000f5ffffffbf91000000000000b7020000010000009700000084000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$RFKILL_IOC_MAX_SIZE(0xffffffffffffffff, 0x2, &(0x7f0000000080)=0x7fffffff) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000a40012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 1.647614026s ago: executing program 4 (id=1418): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x8, [@restrict={0x10}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @enum64={0x1, 0x5, 0x0, 0x13, 0x1, 0x4, [{0x8, 0x7, 0xfffffff8}, {0xc, 0x0, 0x9}, {0xfffffff9, 0x84c3e159, 0xbc6}, {0xe, 0xaf, 0xa244}, {0xa, 0x8, 0x8}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0x9, 0x1}, {0xb, 0x5}, {0x8, 0x4}, {0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x7}}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x81, [{0x6, 0x5, 0xff}, {0xb, 0x1}, {0x1, 0x3, 0xe081}]}]}, {0x0, [0x5f, 0x71, 0x30, 0x70, 0x5f, 0x0]}}, &(0x7f0000000200)=""/125, 0x108, 0x7d, 0x1, 0xd, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691058000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe8, 0xe8, 0x8, [@restrict={0x10}, @func={0xe, 0x0, 0x0, 0xc, 0x2}, @func={0xf, 0x0, 0x0, 0xc, 0x1}, @enum64={0x1, 0x5, 0x0, 0x13, 0x1, 0x4, [{0x8, 0x7, 0xfffffff8}, {0xc, 0x0, 0x9}, {0xfffffff9, 0x84c3e159, 0xbc6}, {0xe, 0xaf, 0xa244}, {0xa, 0x8, 0x8}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0x9, 0x1}, {0x9, 0x1}, {0xb, 0x5}, {0x8, 0x4}, {0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x7}}, @union={0x6, 0x3, 0x0, 0x5, 0x1, 0x81, [{0x6, 0x5, 0xff}, {0xb, 0x1}, {0x1, 0x3, 0xe081}]}]}, {0x0, [0x5f, 0x71, 0x30, 0x70, 0x5f, 0x0]}}, &(0x7f0000000200)=""/125, 0x108, 0x7d, 0x1, 0xd, 0x10000}, 0x28) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000691058000000000004000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, r0}, 0x94) (async) 1.638552195s ago: executing program 1 (id=1419): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000030000000100000f05000000000000000100000005000000004f0030"], &(0x7f00000006c0)=""/262, 0x35, 0x106, 0x9}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) pwritev(r0, &(0x7f0000000540)=[{&(0x7f0000000640)=' 2', 0x2}], 0x1, 0x8, 0x2) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x2c, 0x14, 0xf0b, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4, 0x4}, {0xb, 0x1}, {0x0, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x5}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c082}, 0x0) (async) listen(r2, 0x220f) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x3) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xc) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) (async) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="3b203f4f937cfd3200002c001b0004000000", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x0, 0x71, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}}, 0x0, 0x0, 0x28, 0x0, "e541bd3d3aa6a0bf75e9671e8aa4b31c134f3a9db8f52e7300fe6e079f35ac2318dc045b4b9f54061f9f15abd9fd7e5550345bce05c13ed90158fbdeb70322ea3188f81890e3d200"}, 0xd8) (async) listen(r9, 0x7c2) (async) listen(r7, 0x7) (async) socket(0xa, 0x1, 0x0) listen(r1, 0x7f) r10 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r10, 0x0) (async) r11 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, &(0x7f0000000380)={0x0, 0x4, 0x4000, 0xeee}) 1.431523298s ago: executing program 4 (id=1421): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.366852522s ago: executing program 3 (id=1422): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x29, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/37}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="040044800800c800e00000027a01f380a2b4c1dbd4f221c0a1fd468ca63ae97de147e5bc2d0313377dc17591b491acf18312bee324decf810970090c77ec4ca173b12577aeb13c354245be77050365697b3b4707060c00045e46d612b09c487d7c9c94f778c0a015ecfa70d229085252956142772f9ff5a61a9b7fbc6712f8e64566b7ade87d293b81bd3cd1b2ad2852dc1dbb07d54f5544759f0eb23131b5780de6354f0714b2c5b86323969d0b4f5bd8c4489e0e7471c6a84feb9dead9d156d060a9373c7f80f4f1ec2a87efdeceec8d99c9664ee184f112929fe92da18f26929f98233f18dcbe0c638c040061800400058012fc33716331943112df1a6d89852782e376609e4a38717148d34e9d36191fe607748ad822c89800b204bd5831c55511fc4e85d09c44ef3be8ce710d034d394057d88e12db87eb032cd30fdcb489cd5ac92a44f96b6e463971c730796efaab04ce1b42faea757fc0a50c4feef468c80d7cac7db3bfd67140c04f88892b1d19a91ac5d2bef2af704fed3f92e84f78f98e97b8460000602ca31cc4edb57168863fe0e930a6030e47048c91da29a2c691894cd27b28480642302c6816b308d3eaceb9c1404c696e8a2deb97c278ca9d9b1ea4aa17255b400acdda233dde73b32098f837494e43a67bbb722f105f5ae23d8e4c9586ac0ff8c1c6c330601a9c007659ce63c0387d6692d791abdb14b8b66d6b30e5556865a6e97922f3fddcfd1a7e2cbf30b30479b4f7b824b49b1a8e5cd1ec171c8fd41bc3b14ced446eadedd90178f121d6e4d3ae3031231f39fcad0501455538f57fc305f449144d0e4f1f642ff19c53dea5322d30d680f6efdce4f7310225fa8e8a3035d925f51090e4fa74346825d16d400b9cea013e88ea47db2efbbbe73c3ae0059974efa840d4ee88ae1f85d6ba36caa8df64cbf4c1716de586b6fce1424c8bc3a0218953ea42dc7e83bda5a4319b59d7926fe04553fe79056a397ea85f6255d093a345aaf5f3d91cdce17cc9d38493e7eb952b132dc8f7953706ea7b7ff81e88a2a87f18730ca7f6f16f2c23b85f549a8b0cce6f8f0ec61fa8ba01aa114fbd63373ae3189338aa5f585a6d454733937712eb5a4cbd810c91bf5f19e0a508db8a57bdd8000000960203"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) r1 = socket(0xa, 0x3, 0x3a) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x29, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/37}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) (async) socket(0xa, 0x3, 0x3a) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) (async) 1.326502125s ago: executing program 2 (id=1423): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x200080c4) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x74, r3, 0x10, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x74}, 0x1, 0x0, 0x0, 0x811}, 0x240080d0) connect$inet(r2, &(0x7f0000000100)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000002c0)=0x8, 0x4) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) poll(0x0, 0x0, 0x7) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{0x0, 0x0, &(0x7f00000001c0)}}, {{&(0x7f0000000b80)={0xa, 0x4e20, 0x0, @empty, 0x9}, 0x1c, &(0x7f0000000d40)=[{0x0}], 0x1, &(0x7f0000000d80)=[@hopopts={{0x20, 0x29, 0x36, {0x3c, 0x1, '\x00', [@padn, @generic={0x9}, @ra={0x5, 0x2, 0x4}]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x16}}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}], 0x68}}], 0x2, 0x4040005) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) listen(r1, 0x1ad72f7) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="021800001c000000000000000000000005000600000000000a00030000000000000000000000000000000000000000000000000000000000020012000000000000000000fcffffff0600ff0000000000000000000000000000000000000000000000000001000000fe8000000000002100000000000000bb050005002b0000000a00000000000000fc010000000200000002000000000000000000000000000008001900000000000a00000000000000fe8000000000000000000000000000bb000000000a"], 0xe0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000000705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e567238809000000000000000ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce91798adc2dca8710d5c617df01f82a73f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cdde3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000004000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a519007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38}, 0x48) 1.24367088s ago: executing program 0 (id=1424): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000019300)=ANY=[], 0x48}}, 0x1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000200)={r4, 0x6}, &(0x7f0000000240)=0x8) unshare(0x600) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f00000002c0)={r4, 0x3}, &(0x7f00000003c0)=0x8) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000002140)=[{{&(0x7f0000000080)={0xa, 0x4e21, 0x81, @local, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000000c0)="9c5054a5", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f00)=ANY=[], 0x18}}], 0x2, 0x4008040) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={r4, 0x3a4}, 0x8) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000080)=0x40) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) socket$kcm(0x10, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r11 = socket(0x1, 0x803, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES32=r11], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a37b0ea) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x80, r9, 0x200, 0x0, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4b8406dc2f13c6c2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x102}}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe1, &(0x7f00000006c0)=""/225, 0x41000}, 0x94) 1.224662839s ago: executing program 1 (id=1425): sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="040128bd7000ffdbdf250a000000"], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x800) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@setlink={0x3c, 0x13, 0x1, 0x4070bd28, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x3d82, 0x1f9c6}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macvtap0\x00'}, @IFLA_PROTO_DOWN={0x5}]}, 0x3c}}, 0x20044000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)='l', 0x1}], 0x1}, 0x400c941) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001", @ANYRES8=r4, @ANYBLOB="03a4d52e557d792d7719c720b9ba26afd9fe3d52c75425dcea8daa7d61652c36717dde5752faef10d9fa08eab5a14a19b571526c44d799518b3f2516098287b0a77cfe4acc0d6bfec4a3dd9fbc700aff796bc52fae1090673e7e94c8ee276000e1c9b4e73e59b30fb83c3d8f835b0141d909dcc1ec6275d06a1ca28fb7d1b17d342a8e2e2e1a00df6ca70ebac174862274883a7611dc52063617bfa9f69d2867ca8340", @ANYRES16=r2, @ANYRES32=r4], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800"/11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYRES32=r2], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239fbd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe61}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a47000000050a010100000000000000000a00000a0900010073797a31000000000c0002400000000000000002"], 0x68}, 0x1, 0x0, 0x0, 0xb0}, 0x20008890) socket$igmp(0x2, 0x3, 0x2) sendmsg$IPSET_CMD_SAVE(r7, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x8, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x2}, 0x4000010) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007500000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000280)="c1188e99b95d02ff4284046c5ef2", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="690c359316fb", 0x6}], 0x1}}], 0x2, 0x4404c880) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="680000001000370429bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c020044800400480012800b0001006970366772650000380002800400120008000100", @ANYRES32, @ANYBLOB="14000700000000000000000000000000000000bb1400060020010000000000000000000000000001ae2882c40b25"], 0x68}, 0x1, 0x0, 0x0, 0xc810}, 0x20000000) 1.203508638s ago: executing program 4 (id=1426): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000050000000000000001000004080000000000000003000000100000000000000000000002000000000300000000000004040000350000002e"], 0x0, 0x4d}, 0x28) 1.068002057s ago: executing program 3 (id=1427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c009900f40000002e000000080026006c09000008009f01070000b0ef75fdf2c16200"], 0x38}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e02742e868fba54e3335729a5ce8", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r8, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x1, 'syz1\x00', @default, 0x2, 0x0, [@null, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r12) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r12, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x54, 0x10, 0x1, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xb}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x6, 0x0, 0x491, 0x0, 0x0, 0x0, 0x7, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) sendmsg$FOU_CMD_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000ffdbdf250300000014000700fc01000000000000000000000000000108000600ffffffff060001004e240000080008006401010108000b00", @ANYRES32, @ANYBLOB="050002000a"], 0x68}, 0x1, 0x0, 0x0, 0x81}, 0x40) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="240000001e00050300000000fedbdf25000000000800fe00", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32], 0x24}, 0x1, 0x8000000}, 0x0) 1.019380879s ago: executing program 4 (id=1428): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r1, r0, 0x80000001, 0x0) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) unshare(0x400) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x1c, r7, 0xda409aa40cc3acf1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044081}, 0x20008000) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006f80)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}}, 0x4000000) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000000040)=""/40, &(0x7f0000000080)=0x28) 844.236078ms ago: executing program 3 (id=1429): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc00", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 698.180779ms ago: executing program 4 (id=1430): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4a24, @remote}, {0x2, 0x4e27, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\b\x00\x00'], 0xdc) 612.264022ms ago: executing program 0 (id=1431): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000004580)={0x1, 0x1f, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000010000000000009f09002318110000", @ANYRES32=r0, @ANYBLOB="0000000080040000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000200000008500000086000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b70200000000000085000000d4000000b70000000064000095"], &(0x7f0000004380)='syzkaller\x00', 0x6, 0x20, &(0x7f0000000000)=""/32, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 604.696812ms ago: executing program 3 (id=1432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@assoc={0x0, 0x117, 0x4, 0x6}], 0xf}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=""/89, 0x7ffff061}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000048000000000a20000000000a0300000003f500000000070000040900010073797a300000001288000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008210001800e000100636f6e6e6c696d69740000000c000280080001400000000008000340000001"], 0xd0}}, 0x20050800) 546.452865ms ago: executing program 0 (id=1433): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x2c) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x34, r3, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x34}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000000000009500"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x5], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)}], 0x2}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060500000034e40000000002000000050001000600000005000400000000000900020073797a3100000500050005000a00000011000300686173683a69702c706f727400000000"], 0x58}}, 0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$nl_route(r5, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000000000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 459.892683ms ago: executing program 4 (id=1434): sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES8, @ANYRESDEC, @ANYBLOB="000229bd7000fcdbdf250b00000008000300030000000c00068006000100020000"], 0x28}, 0x1, 0x0, 0x0, 0x4080}, 0x8040) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)=ANY=[], 0x50) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001f80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000002040)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001fc0), &(0x7f0000002000)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002300)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000040000000000000f7ffffff0800000000004000"], &(0x7f0000000200)='GPL\x00', 0x2fe, 0x1000, &(0x7f0000000d40)=""/4096, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001d80)={0x405, 0x5}, 0x8, 0x10, &(0x7f0000001dc0)={0x4, 0x5, 0x402, 0xc5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000002240)=[0xffffffffffffffff, r2, 0xffffffffffffffff, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000002280)=[{0x2000004, 0x5, 0x4, 0x8}, {0x1, 0x2, 0x0, 0x9}, {0x0, 0x5, 0xa}, {0x5, 0x5, 0x6, 0x4}, {0x4, 0x5, 0x8, 0xf}], 0x10, 0xffffff7a}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r6 = socket$netlink(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xa00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x8000) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0xc008094) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) 343.642471ms ago: executing program 3 (id=1435): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x1) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f0000000600feffffff000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) 306.099755ms ago: executing program 2 (id=1436): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x800000003, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r1) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 159.641711ms ago: executing program 1 (id=1437): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettaction={0x18, 0x32, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8040) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x8800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x153}, {&(0x7f0000000bc0)="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", 0x1c9}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859", 0x20}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573c21df5435e3b81aaba048fa4264d4c15513c91e9230a8e4b7635b5", 0xd0}], 0x4, 0x0, 0x0, 0x900}}], 0x1, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=@newqdisc={0x48, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1b}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1}]}}]}, 0x48}}, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2, @dev={0xac, 0x14, 0x14, 0x10}}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f00000002c0)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x12, r8, 0x0) getsockopt$inet_buf(r7, 0x0, 0x29, &(0x7f0000000000)=""/137, &(0x7f0000695ffc)=0xbf) sendmsg$key(r0, &(0x7f0000000500)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001000000000000000afcff000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) 116.132798ms ago: executing program 2 (id=1438): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x2, 0x3, 0xff) (async) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0xc2, 0x4) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket(0x22, 0x3, 0x4) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000280)={r5, r5, 0xfffb, 0x0, 0x0, 0x9, 0x9b, 0x2, 0x5508, 0xff, 0x0, 0x5, 'syz0\x00'}) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)={{0x14, 0x10, 0x1, 0x0, 0x2000000}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8001, 0x4e23, 0x401, 0x2, 0x80, 0x80, 0x16, r7, 0xee01}, {0xfff, 0x4, 0x100000001, 0x6, 0x4, 0xdf4, 0x8}, {0x2, 0x3, 0x2, 0x2}, 0x1, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in6=@local, 0x4d3, 0x50}, 0x2, @in=@remote, 0x3507, 0x2, 0x3, 0xb, 0x80, 0x1, 0x4}}, 0xe8) (async) setsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010100}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x8001, 0x4e23, 0x401, 0x2, 0x80, 0x80, 0x16, r7, 0xee01}, {0xfff, 0x4, 0x100000001, 0x6, 0x4, 0xdf4, 0x8}, {0x2, 0x3, 0x2, 0x2}, 0x1, 0x0, 0x2, 0x0, 0x2, 0x2}, {{@in6=@local, 0x4d3, 0x50}, 0x2, @in=@remote, 0x3507, 0x2, 0x3, 0xb, 0x80, 0x1, 0x4}}, 0xe8) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000240)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f00000002c0)=""/199, 0xc7}], 0x1, 0x0, 0x0, 0x4c880}, 0x48800) socket(0x10, 0x803, 0x0) (async) r8 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x4000007f, &(0x7f00000003c0)="02009a0d0d800000620588f29c36e4cc081f6c7b436d37494525fc52fad5336cfc1e58ec916bbeff3b53a35a977ff733a92394d25aad546afe156dbfcf2e96289f37c741e9ba65a24ff51f563acae5f7e1998465", 0x53) (async) setsockopt(r0, 0x84, 0x4000007f, &(0x7f00000003c0)="02009a0d0d800000620588f29c36e4cc081f6c7b436d37494525fc52fad5336cfc1e58ec916bbeff3b53a35a977ff733a92394d25aad546afe156dbfcf2e96289f37c741e9ba65a24ff51f563acae5f7e1998465", 0x53) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0xc104}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x2, 0x4, 0x8, 0xd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000080)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000080)=@framed={{}, [@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES16=r2, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) 0s ago: executing program 3 (id=1439): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x20, 0x10, 0x44b, 0x0, 0x0, {0x7a}}, 0x20}}, 0x4040080) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e00000001200090500000000000000000800bb0000000000c500008008000000", @ANYRES32=0x0, @ANYBLOB="110000003a5d5db2542b5b5e265c5c4000000000d52791db233d0896402d1267b86ac517a485a23d0c3da32ce8f9b19fe043d3a672b0601c63c4f9c0bf2dc42c77065f2e"], 0xe0}], 0x1}, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f0000000200)={0x0, 0xa00, 0x20}, &(0x7f0000002380)=0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000804000000080020000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r4, &(0x7f00000004c0), 0x0}, 0x20) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = socket$netlink(0x10, 0x3, 0xb) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700), 0x15, 0x140, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=@newtaction={0x228, 0x30, 0x300, 0x0, 0x25dfdbff, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_TRUNC_SIZE={0x0, 0x4, 0x1}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}, {0x1b8, 0x1, [@m_mpls={0x78, 0x1f, 0x0, 0x0, {{0x9}, {0xfffffffffffffeaa, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x1483a}, @TCA_MPLS_TTL={0x5, 0x7, 0x9b}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0x81, 0x5, 0x2, 0x8000}, 0x3}}]}, {0x1d, 0x6, "47d4384eee12252827a0d35def5d100c9937ee46490a070872"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x13c, 0x19, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7ff, 0xd, 0x20000000, 0x101, 0xa}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x8, 0x2, 0x7, 0xfff}, 0x6}}]}, {0xcf, 0x6, "f4100a07b391d0901f770a72586d97d572d3f94d7f56b73ff9eb04302444e1692336275340f0af5cf76f35bdb0935f3e0053be9e0f45f16fe55778197c65916ea54f4ce5a148d8f492af5fc21216b207c24b85ad51b8b5d4235c63a1b9774292b95436254e805421a816404bb2c4aad53fdacb98055602bb5612fc1d21eb14748c007f210b477ea4dfd9610562bc558d205abd7f8b9919fccf3e3532a90aa6f8263717b53a42fe30b78addd3c52c38b0cf4f0ebc4d4668f20b145986a51dbf77bc66ac738a6bb7cd671842"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x228}}, 0x20040000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7], 0x90}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r8, 0x84, 0x2, &(0x7f0000000600)={0xfdf9, 0x8, 0x1f}, 0x8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x1c, 0x0, "246575a4000000004fb62fe6bce0eef5607264c7f28557a8046964d292934c2a2bb1dcc5a80c0107040000000000001e0000009000000000000800"}, 0xf0) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000e80)={@in={{0x2, 0x0, @private=0xa010100}}, 0x0, 0x0, 0x22, 0x0, "70a59b8ef73b52114bf0854b6d184de8fb2add2d2bb9149a8c9b8ad1ff7568565a98f80146847b0c6c4698efb8d42bed462e33eef5219090f01c40a3103cf5a30f2c0cdc339b7665ca4fe3c1d75e3fda"}, 0xd8) kernel console output (not intermixed with test programs): [ 90.733310][ T5829] veth0_vlan: entered promiscuous mode [ 90.748844][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.777864][ T5829] veth1_vlan: entered promiscuous mode [ 90.901591][ T5829] veth0_macvtap: entered promiscuous mode [ 90.925687][ T5829] veth1_macvtap: entered promiscuous mode [ 90.951228][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.958938][ T5828] veth0_vlan: entered promiscuous mode [ 91.024241][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.048570][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.063943][ T5828] veth1_vlan: entered promiscuous mode [ 91.103437][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.136635][ T5830] veth0_vlan: entered promiscuous mode [ 91.145766][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.156077][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.190285][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.199253][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.214170][ T5830] veth1_vlan: entered promiscuous mode [ 91.227205][ T5845] veth0_vlan: entered promiscuous mode [ 91.286931][ T5828] veth0_macvtap: entered promiscuous mode [ 91.297055][ T5845] veth1_vlan: entered promiscuous mode [ 91.320353][ T5828] veth1_macvtap: entered promiscuous mode [ 91.357316][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.376358][ T5830] veth0_macvtap: entered promiscuous mode [ 91.380099][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.421668][ T5843] Bluetooth: hci2: command tx timeout [ 91.433106][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.442266][ T5830] veth1_macvtap: entered promiscuous mode [ 91.449133][ T5827] veth0_vlan: entered promiscuous mode [ 91.480441][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.494284][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.503874][ T5843] Bluetooth: hci3: command tx timeout [ 91.506004][ T5834] Bluetooth: hci1: command tx timeout [ 91.509537][ T5837] Bluetooth: hci0: command tx timeout [ 91.527250][ T5845] veth0_macvtap: entered promiscuous mode [ 91.533309][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.546276][ T5845] veth1_macvtap: entered promiscuous mode [ 91.553056][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.562691][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.573737][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.583742][ T5837] Bluetooth: hci4: command tx timeout [ 91.595257][ T5827] veth1_vlan: entered promiscuous mode [ 91.614027][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.638679][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.680976][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.698350][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.728226][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.757483][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793582][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.803548][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.827012][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.913188][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.922000][ T10] cfg80211: failed to load regulatory.db [ 91.945011][ T5827] veth0_macvtap: entered promiscuous mode [ 91.977601][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.007803][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.018102][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.031871][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.040537][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.055226][ T5827] veth1_macvtap: entered promiscuous mode [ 92.102350][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.120845][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.128714][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.183928][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.206529][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.217771][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.220720][ T5953] syz.0.7 uses obsolete (PF_INET,SOCK_PACKET) [ 92.233090][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.269250][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.304305][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.318509][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.330684][ T1353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.355986][ T1353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.363435][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.451869][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.470336][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.577555][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.591410][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.708518][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.750291][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.781013][ T5967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9'. [ 92.938277][ T1353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.962084][ T1353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.977661][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 93.049243][ T5972] warning: `syz.3.11' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.440477][ T5994] FAULT_INJECTION: forcing a failure. [ 93.440477][ T5994] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 93.479459][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.4.16 Not tainted syzkaller #0 PREEMPT(full) [ 93.479485][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 93.479505][ T5994] Call Trace: [ 93.479512][ T5994] [ 93.479520][ T5994] dump_stack_lvl+0xe8/0x150 [ 93.479560][ T5994] should_fail_ex+0x412/0x560 [ 93.479593][ T5994] _copy_from_user+0x2d/0xb0 [ 93.479624][ T5994] ___sys_sendmsg+0x1c6/0x360 [ 93.479661][ T5994] ? __pfx____sys_sendmsg+0x10/0x10 [ 93.479723][ T5994] ? __fget_files+0x2a/0x420 [ 93.479741][ T5994] ? __fget_files+0x3a0/0x420 [ 93.479768][ T5994] __x64_sys_sendmsg+0x1bd/0x2a0 [ 93.479801][ T5994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 93.479837][ T5994] ? __pfx_ksys_write+0x10/0x10 [ 93.479914][ T5994] do_syscall_64+0x14d/0xf80 [ 93.479938][ T5994] ? trace_irq_disable+0x3b/0x150 [ 93.479974][ T5994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.479994][ T5994] ? clear_bhb_loop+0x40/0x90 [ 93.480019][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.480039][ T5994] RIP: 0033:0x7f5be5f9c819 [ 93.480064][ T5994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.480080][ T5994] RSP: 002b:00007f5be6dd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 93.480102][ T5994] RAX: ffffffffffffffda RBX: 00007f5be6215fa0 RCX: 00007f5be5f9c819 [ 93.480117][ T5994] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 93.480128][ T5994] RBP: 00007f5be6dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 93.480140][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.480151][ T5994] R13: 00007f5be6216038 R14: 00007f5be6215fa0 R15: 00007ffdb89ed0b8 [ 93.480182][ T5994] [ 93.504978][ T5837] Bluetooth: hci2: command tx timeout [ 93.599629][ T5843] Bluetooth: hci0: command tx timeout [ 93.631467][ T5837] Bluetooth: hci3: command tx timeout [ 93.637029][ T5834] Bluetooth: hci1: command tx timeout [ 93.659988][ T5145] Bluetooth: hci4: command tx timeout [ 94.027388][ T6004] Cannot find add_set index 0 as target [ 94.323495][ T6020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 94.477993][ T6025] netlink: 144 bytes leftover after parsing attributes in process `syz.2.29'. [ 94.487344][ T6026] macvtap0: entered promiscuous mode [ 94.515495][ T6033] netlink: 27 bytes leftover after parsing attributes in process `syz.1.28'. [ 94.554166][ T6013] openvswitch: netlink: Tunnel attr 333 out of range max 16 [ 94.747487][ T6030] bond1 (unregistering): Released all slaves [ 94.919850][ T6037] netlink: 44 bytes leftover after parsing attributes in process `syz.2.31'. [ 94.947869][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.4.32'. [ 95.148652][ T6051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 95.364495][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 95.403949][ T6057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.35'. [ 95.426152][ T5930] IPVS: starting estimator thread 0... [ 95.522269][ T6062] IPVS: using max 28 ests per chain, 67200 per kthread [ 95.689143][ T6068] syzkaller0: entered promiscuous mode [ 95.713907][ T6068] syzkaller0: entered allmulticast mode [ 96.234440][ T6092] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.244468][ T6083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 96.415222][ T6090] syzkaller0: entered promiscuous mode [ 96.425675][ T6090] syzkaller0: entered allmulticast mode [ 96.895366][ T6127] Zero length message leads to an empty skb [ 98.064087][ T6126] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 98.177565][ T6146] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 98.802535][ T6171] ip6gretap1: entered promiscuous mode [ 98.826654][ T6171] ip6gretap1: entered allmulticast mode [ 98.940848][ T6180] FAULT_INJECTION: forcing a failure. [ 98.940848][ T6180] name failslab, interval 1, probability 0, space 0, times 1 [ 98.967023][ T6179] __nla_validate_parse: 8 callbacks suppressed [ 98.967045][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.4.68'. [ 98.992961][ T6180] CPU: 1 UID: 0 PID: 6180 Comm: syz.3.69 Not tainted syzkaller #0 PREEMPT(full) [ 98.992989][ T6180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 98.993002][ T6180] Call Trace: [ 98.993010][ T6180] [ 98.993019][ T6180] dump_stack_lvl+0xe8/0x150 [ 98.993055][ T6180] should_fail_ex+0x412/0x560 [ 98.993103][ T6180] should_failslab+0xa8/0x100 [ 98.993131][ T6180] ? skb_clone+0x212/0x3a0 [ 98.993153][ T6180] kmem_cache_alloc_noprof+0x87/0x650 [ 98.993185][ T6180] skb_clone+0x212/0x3a0 [ 98.993210][ T6180] __netlink_deliver_tap+0x404/0x850 [ 98.993254][ T6180] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.993287][ T6180] netlink_deliver_tap+0x19c/0x1b0 [ 98.993319][ T6180] netlink_sendskb+0x68/0x140 [ 98.993349][ T6180] netlink_rcv_skb+0x2b6/0x4b0 [ 98.993381][ T6180] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 98.993412][ T6180] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 98.993455][ T6180] ? bpf_lsm_capable+0x9/0x20 [ 98.993486][ T6180] ? security_capable+0x7e/0x2c0 [ 98.993527][ T6180] nfnetlink_rcv+0x2c0/0x27b0 [ 98.993565][ T6180] ? __local_bh_enable_ip+0xd0/0x130 [ 98.993595][ T6180] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.993620][ T6180] ? __dev_queue_xmit+0x2b6/0x3980 [ 98.993640][ T6180] ? __local_bh_enable_ip+0xd0/0x130 [ 98.993666][ T6180] ? __dev_queue_xmit+0x2b6/0x3980 [ 98.993688][ T6180] ? __dev_queue_xmit+0x1fe5/0x3980 [ 98.993708][ T6180] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 98.993749][ T6180] ? __dev_queue_xmit+0x2b6/0x3980 [ 98.993777][ T6180] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 98.993812][ T6180] ? __pfx___dev_queue_xmit+0x10/0x10 [ 98.993842][ T6180] ? ref_tracker_free+0x693/0x840 [ 98.993868][ T6180] ? __pfx_ref_tracker_free+0x10/0x10 [ 98.993888][ T6180] ? __asan_memcpy+0x40/0x70 [ 98.993908][ T6180] ? __skb_clone+0x63/0x7a0 [ 98.993933][ T6180] ? __skb_clone+0x483/0x7a0 [ 98.993961][ T6180] ? skb_clone+0x246/0x3a0 [ 98.993985][ T6180] ? __netlink_deliver_tap+0x807/0x850 [ 98.994016][ T6180] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.994054][ T6180] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.994093][ T6180] ? netlink_deliver_tap+0x2e/0x1b0 [ 98.994130][ T6180] netlink_unicast+0x75c/0x8e0 [ 98.994170][ T6180] netlink_sendmsg+0x813/0xb40 [ 98.994212][ T6180] ? __pfx_netlink_sendmsg+0x10/0x10 [ 98.994247][ T6180] ? aa_sock_msg_perm+0xf1/0x1b0 [ 98.994271][ T6180] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 98.994301][ T6180] ____sys_sendmsg+0x972/0x9f0 [ 98.994344][ T6180] ? __pfx_____sys_sendmsg+0x10/0x10 [ 98.994388][ T6180] ? import_iovec+0x73/0xa0 [ 98.994418][ T6180] ___sys_sendmsg+0x2a5/0x360 [ 98.994458][ T6180] ? __pfx____sys_sendmsg+0x10/0x10 [ 98.994531][ T6180] ? __fget_files+0x2a/0x420 [ 98.994551][ T6180] ? __fget_files+0x3a0/0x420 [ 98.994582][ T6180] __x64_sys_sendmsg+0x1bd/0x2a0 [ 98.994620][ T6180] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 98.994665][ T6180] ? __pfx_ksys_write+0x10/0x10 [ 98.994703][ T6180] do_syscall_64+0x14d/0xf80 [ 98.994728][ T6180] ? trace_irq_disable+0x3b/0x150 [ 98.994747][ T6180] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.994769][ T6180] ? clear_bhb_loop+0x40/0x90 [ 98.994796][ T6180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.994818][ T6180] RIP: 0033:0x7f6b4639c819 [ 98.994837][ T6180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.994855][ T6180] RSP: 002b:00007f6b4731b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 98.994878][ T6180] RAX: ffffffffffffffda RBX: 00007f6b46615fa0 RCX: 00007f6b4639c819 [ 98.994893][ T6180] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 98.994907][ T6180] RBP: 00007f6b4731b090 R08: 0000000000000000 R09: 0000000000000000 [ 98.994919][ T6180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.994932][ T6180] R13: 00007f6b46616038 R14: 00007f6b46615fa0 R15: 00007ffe11efce08 [ 98.994966][ T6180] [ 99.576920][ T6189] dummy0: entered promiscuous mode [ 99.591454][ T6189] vlan2: entered promiscuous mode [ 99.616425][ T6186] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 99.990588][ T6206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 100.227419][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 100.331768][ T6216] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 100.447780][ T6224] FAULT_INJECTION: forcing a failure. [ 100.447780][ T6224] name failslab, interval 1, probability 0, space 0, times 0 [ 100.473150][ T6224] CPU: 0 UID: 0 PID: 6224 Comm: syz.0.83 Not tainted syzkaller #0 PREEMPT(full) [ 100.473178][ T6224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 100.473190][ T6224] Call Trace: [ 100.473199][ T6224] [ 100.473207][ T6224] dump_stack_lvl+0xe8/0x150 [ 100.473244][ T6224] should_fail_ex+0x412/0x560 [ 100.473284][ T6224] should_failslab+0xa8/0x100 [ 100.473313][ T6224] ? skb_clone+0x212/0x3a0 [ 100.473334][ T6224] kmem_cache_alloc_noprof+0x87/0x650 [ 100.473367][ T6224] skb_clone+0x212/0x3a0 [ 100.473392][ T6224] __netlink_deliver_tap+0x404/0x850 [ 100.473438][ T6224] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.473471][ T6224] netlink_deliver_tap+0x19c/0x1b0 [ 100.473504][ T6224] netlink_sendskb+0x68/0x140 [ 100.473535][ T6224] netlink_rcv_skb+0x2b6/0x4b0 [ 100.473572][ T6224] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 100.473603][ T6224] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 100.473652][ T6224] ? bpf_lsm_capable+0x9/0x20 [ 100.473683][ T6224] ? security_capable+0x7e/0x2c0 [ 100.473731][ T6224] nfnetlink_rcv+0x2c0/0x27b0 [ 100.473772][ T6224] ? __local_bh_enable_ip+0xd0/0x130 [ 100.473801][ T6224] ? lockdep_hardirqs_on+0x7a/0x110 [ 100.473826][ T6224] ? __dev_queue_xmit+0x2b6/0x3980 [ 100.473846][ T6224] ? __local_bh_enable_ip+0xd0/0x130 [ 100.473873][ T6224] ? __dev_queue_xmit+0x2b6/0x3980 [ 100.473894][ T6224] ? __dev_queue_xmit+0x1fe5/0x3980 [ 100.473913][ T6224] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.473953][ T6224] ? __dev_queue_xmit+0x2b6/0x3980 [ 100.473980][ T6224] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 100.474013][ T6224] ? __pfx___dev_queue_xmit+0x10/0x10 [ 100.474042][ T6224] ? ref_tracker_free+0x693/0x840 [ 100.474068][ T6224] ? __pfx_ref_tracker_free+0x10/0x10 [ 100.474108][ T6224] ? skb_clone+0x246/0x3a0 [ 100.474132][ T6224] ? __netlink_deliver_tap+0x807/0x850 [ 100.474161][ T6224] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.474198][ T6224] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.474228][ T6224] ? netlink_deliver_tap+0x2e/0x1b0 [ 100.474265][ T6224] netlink_unicast+0x75c/0x8e0 [ 100.474304][ T6224] netlink_sendmsg+0x813/0xb40 [ 100.474346][ T6224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 100.474381][ T6224] ? aa_sock_msg_perm+0xf1/0x1b0 [ 100.474403][ T6224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 100.474432][ T6224] ____sys_sendmsg+0x972/0x9f0 [ 100.474475][ T6224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 100.474518][ T6224] ? import_iovec+0x73/0xa0 [ 100.474548][ T6224] ___sys_sendmsg+0x2a5/0x360 [ 100.474587][ T6224] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.474658][ T6224] ? __fget_files+0x2a/0x420 [ 100.474676][ T6224] ? __fget_files+0x3a0/0x420 [ 100.474707][ T6224] __x64_sys_sendmsg+0x1bd/0x2a0 [ 100.474752][ T6224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 100.474795][ T6224] ? __pfx_ksys_write+0x10/0x10 [ 100.474832][ T6224] do_syscall_64+0x14d/0xf80 [ 100.474857][ T6224] ? trace_irq_disable+0x3b/0x150 [ 100.474875][ T6224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.474897][ T6224] ? clear_bhb_loop+0x40/0x90 [ 100.474923][ T6224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.474944][ T6224] RIP: 0033:0x7f4b4159c819 [ 100.474977][ T6224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.474993][ T6224] RSP: 002b:00007f4b423ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.475014][ T6224] RAX: ffffffffffffffda RBX: 00007f4b41815fa0 RCX: 00007f4b4159c819 [ 100.475029][ T6224] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000003 [ 100.475042][ T6224] RBP: 00007f4b423ca090 R08: 0000000000000000 R09: 0000000000000000 [ 100.475054][ T6224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.475065][ T6224] R13: 00007f4b41816038 R14: 00007f4b41815fa0 R15: 00007ffec487ba28 [ 100.475098][ T6224] [ 101.164768][ T6235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 101.683780][ T6262] FAULT_INJECTION: forcing a failure. [ 101.683780][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.699639][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.0.95 Not tainted syzkaller #0 PREEMPT(full) [ 101.699664][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 101.699675][ T6262] Call Trace: [ 101.699683][ T6262] [ 101.699690][ T6262] dump_stack_lvl+0xe8/0x150 [ 101.699723][ T6262] should_fail_ex+0x412/0x560 [ 101.699757][ T6262] _copy_to_user+0x31/0xb0 [ 101.699781][ T6262] simple_read_from_buffer+0xe1/0x170 [ 101.699814][ T6262] proc_fail_nth_read+0x1bb/0x230 [ 101.699846][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.699878][ T6262] ? rw_verify_area+0x2a6/0x4d0 [ 101.699899][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.699930][ T6262] vfs_read+0x20c/0xa70 [ 101.699950][ T6262] ? fdget_pos+0x246/0x320 [ 101.699973][ T6262] ? __pfx___mutex_lock+0x10/0x10 [ 101.700001][ T6262] ? __pfx_vfs_read+0x10/0x10 [ 101.700026][ T6262] ? __fget_files+0x2a/0x420 [ 101.700050][ T6262] ? __fget_files+0x3a0/0x420 [ 101.700069][ T6262] ? __fget_files+0x2a/0x420 [ 101.700098][ T6262] ksys_read+0x150/0x270 [ 101.700125][ T6262] ? __pfx_ksys_read+0x10/0x10 [ 101.700161][ T6262] do_syscall_64+0x14d/0xf80 [ 101.700191][ T6262] ? trace_irq_disable+0x3b/0x150 [ 101.700210][ T6262] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.700232][ T6262] ? clear_bhb_loop+0x40/0x90 [ 101.700258][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.700279][ T6262] RIP: 0033:0x7f4b4155d04e [ 101.700299][ T6262] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 101.700317][ T6262] RSP: 002b:00007f4b423c9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.700339][ T6262] RAX: ffffffffffffffda RBX: 00007f4b423ca6c0 RCX: 00007f4b4155d04e [ 101.700354][ T6262] RDX: 000000000000000f RSI: 00007f4b423ca0a0 RDI: 0000000000000004 [ 101.700367][ T6262] RBP: 00007f4b423ca090 R08: 0000000000000000 R09: 0000000000000000 [ 101.700380][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.700392][ T6262] R13: 00007f4b41816038 R14: 00007f4b41815fa0 R15: 00007ffec487ba28 [ 101.700426][ T6262] [ 101.938089][ T6266] netlink: 'syz.4.96': attribute type 10 has an invalid length. [ 102.009252][ T6266] team0: Port device dummy0 added [ 102.049492][ T6265] veth0: entered promiscuous mode [ 102.056761][ T6265] bond0: entered promiscuous mode [ 102.087828][ T6265] bond_slave_0: entered promiscuous mode [ 102.127880][ T6265] bond_slave_1: entered promiscuous mode [ 102.315117][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.103'. [ 102.461563][ T6287] geneve1: entered promiscuous mode [ 102.517037][ T6287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.532991][ T6287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 102.543181][ T6291] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 102.562158][ T6291] bond1: (slave lo): Enslaving as an active interface with an up link [ 102.573383][ T6291] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 102.590120][ T6260] bond0: left promiscuous mode [ 102.596580][ T6286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 102.627852][ T6260] bond_slave_0: left promiscuous mode [ 102.646597][ T6260] bond_slave_1: left promiscuous mode [ 102.670399][ T6260] veth0: left promiscuous mode [ 103.487806][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.1.119'. [ 103.515254][ T6324] netlink: 40 bytes leftover after parsing attributes in process `syz.3.120'. [ 103.618740][ T6328] macvtap0: entered promiscuous mode [ 103.734265][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.118'. [ 104.053169][ T6349] netlink: 'syz.3.129': attribute type 30 has an invalid length. [ 104.120623][ T6351] erspan0: entered promiscuous mode [ 104.127176][ T6351] macsec1: entered promiscuous mode [ 104.149891][ T6351] erspan0: left promiscuous mode [ 104.216895][ T6349] bond1: option arp_missed_max: invalid value (0) [ 104.239802][ T6349] bond1: option arp_missed_max: allowed values 1 - 255 [ 104.294474][ T6349] bond1 (unregistering): Released all slaves [ 104.437907][ T6368] __nla_validate_parse: 5 callbacks suppressed [ 104.437928][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.132'. [ 104.477776][ T6368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.132'. [ 105.349245][ T6406] netlink: 'syz.2.134': attribute type 1 has an invalid length. [ 105.969786][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 105.989078][ T6432] netlink: 68 bytes leftover after parsing attributes in process `syz.2.138'. [ 106.182972][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 106.194742][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.3.136'. [ 106.235705][ T6422] netlink: 8 bytes leftover after parsing attributes in process `syz.3.136'. [ 106.265428][ T6443] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.136'. [ 106.363435][ T6445] syzkaller0: entered promiscuous mode [ 106.386105][ T6445] 0: reclassify loop, rule prio 0, protocol 800 [ 106.808265][ T6464] vlan2: entered promiscuous mode [ 106.825558][ T6467] Driver unsupported XDP return value 0 on prog (id 36) dev N/A, expect packet loss! [ 107.399681][ T6490] netlink: 'syz.4.160': attribute type 1 has an invalid length. [ 107.457535][ T6490] bond1: entered promiscuous mode [ 107.463167][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.490282][ T6493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 107.501603][ T6494] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 107.516640][ T6494] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 107.529984][ T6494] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 107.662444][ T6496] netlink: 24 bytes leftover after parsing attributes in process `syz.2.161'. [ 108.455175][ T6531] netlink: 'syz.2.173': attribute type 1 has an invalid length. [ 108.489784][ T6531] bond1: entered promiscuous mode [ 108.496757][ T6531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.516017][ T6531] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 108.528701][ T6531] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 108.539511][ T6531] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 108.769287][ T6540] geneve1: entered promiscuous mode [ 108.797381][ T6542] netlink: 'syz.2.177': attribute type 61 has an invalid length. [ 108.821520][ T5840] IPVS: starting estimator thread 0... [ 108.859542][ T6540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.941948][ T6545] IPVS: using max 30 ests per chain, 72000 per kthread [ 108.956365][ T6539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.229517][ T6561] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 109.235827][ T6562] netlink: 'syz.4.180': attribute type 1 has an invalid length. [ 109.384838][ T6561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 109.445181][ T6563] bond2: (slave geneve2): making interface the new active one [ 109.461259][ T6563] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 109.556797][ T6405] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 109.606801][ T6405] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 109.651943][ T6405] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 109.698399][ T6578] netlink: 'syz.0.183': attribute type 12 has an invalid length. [ 109.710159][ T6405] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 109.748247][ T6581] IPVS: set_ctl: invalid protocol: 41 0.0.0.0:20001 [ 110.008926][ T6588] ¾x9ÿ: left allmulticast mode [ 110.037350][ T6594] netlink: 'syz.1.189': attribute type 4 has an invalid length. [ 110.050621][ T6588] ¾x9ÿ: left promiscuous mode [ 110.056547][ T6588] bridge0: port 1(1¾x9ÿ) entered disabled state [ 110.180717][ T6598] netlink: 'syz.1.189': attribute type 13 has an invalid length. [ 110.188798][ T6598] netlink: 'syz.1.189': attribute type 17 has an invalid length. [ 110.467624][ T6588] bridge_slave_1: left allmulticast mode [ 110.479462][ T6588] bridge_slave_1: left promiscuous mode [ 110.492103][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.676476][ T6588] bond0: (slave bond_slave_0): Releasing backup interface [ 110.698473][ T6588] bond0: (slave bond_slave_1): Releasing backup interface [ 110.725622][ T6588] team0: Port device team_slave_0 removed [ 110.774290][ T6588] team0: Port device team_slave_1 removed [ 110.782072][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.791962][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.811420][ T6588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.819109][ T6588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.830287][ T6588] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.982259][ T6598] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 111.001975][ T6608] syzkaller0: entered promiscuous mode [ 111.007607][ T6608] syzkaller0: entered allmulticast mode [ 111.025849][ T6602] team0: Mode changed to "activebackup" [ 111.053740][ T6622] __nla_validate_parse: 4 callbacks suppressed [ 111.053759][ T6622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.191'. [ 111.130568][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.192'. [ 111.436383][ T6635] netlink: 'syz.1.194': attribute type 63 has an invalid length. [ 111.479892][ T6635] netlink: 44 bytes leftover after parsing attributes in process `syz.1.194'. [ 111.543317][ T6637] geneve1: entered promiscuous mode [ 111.606194][ T6637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.654719][ T6643] netlink: 'syz.1.194': attribute type 63 has an invalid length. [ 111.668579][ T6639] syzkaller0: entered promiscuous mode [ 111.678427][ T6639] syzkaller0: entered allmulticast mode [ 111.688868][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.195'. [ 111.707452][ T6636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.734845][ T6643] netlink: 288 bytes leftover after parsing attributes in process `syz.1.194'. [ 111.844254][ T6648] syzkaller0: entered promiscuous mode [ 111.863729][ T6648] syzkaller0: entered allmulticast mode [ 112.050724][ T6659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 112.479979][ T6674] dummy0: entered promiscuous mode [ 112.485327][ T6674] vlan2: entered promiscuous mode [ 112.528033][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'. [ 112.875138][ T6672] syz.0.202 (6672) used greatest stack depth: 17600 bytes left [ 113.187621][ T6710] netlink: 4 bytes leftover after parsing attributes in process `syz.0.211'. [ 113.627999][ T6728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.674761][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.214'. [ 113.789972][ T6710] batadv_slave_0: entered promiscuous mode [ 113.800290][ T6710] macsec1: entered promiscuous mode [ 113.812348][ T6710] macsec1: entered allmulticast mode [ 113.820471][ T6710] batadv_slave_0: entered allmulticast mode [ 113.837662][ T6710] batadv_slave_0: left allmulticast mode [ 113.860274][ T6710] batadv_slave_0: left promiscuous mode [ 113.944148][ T6724] geneve1: entered promiscuous mode [ 113.964200][ T6401] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.981057][ T6722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.005626][ T6401] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.041655][ T6401] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.145721][ T6401] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.723760][ T6769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.220'. [ 115.653070][ T6813] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20002 [ 115.678319][ T6817] IPVS: set_ctl: invalid protocol: 94 224.0.0.1:20003 [ 115.693929][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.2.234'. [ 115.746337][ T6820] netlink: 'syz.2.234': attribute type 1 has an invalid length. [ 115.768705][ T6820] netlink: 'syz.2.234': attribute type 2 has an invalid length. [ 115.846189][ T6825] Bluetooth: MGMT ver 1.23 [ 116.224997][ T6842] __nla_validate_parse: 3 callbacks suppressed [ 116.225018][ T6842] netlink: 12 bytes leftover after parsing attributes in process `syz.0.240'. [ 116.888565][ T6873] netlink: 16 bytes leftover after parsing attributes in process `syz.3.247'. [ 117.198302][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.247'. [ 117.444957][ T6890] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 117.571789][ T6898] netlink: 892 bytes leftover after parsing attributes in process `syz.2.253'. [ 117.592382][ T6891] netlink: 'syz.1.252': attribute type 1 has an invalid length. [ 117.603051][ T6890] bond1: entered promiscuous mode [ 117.608540][ T6890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 117.641271][ T6897] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 117.654933][ T6897] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 117.672039][ T6897] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 118.107209][ T6913] netlink: 12 bytes leftover after parsing attributes in process `syz.2.259'. [ 118.503145][ T6933] netlink: 892 bytes leftover after parsing attributes in process `syz.3.265'. [ 118.821095][ T6943] netlink: 'syz.0.268': attribute type 2 has an invalid length. [ 118.829473][ T6943] netlink: 'syz.0.268': attribute type 11 has an invalid length. [ 118.837298][ T6943] netlink: 132 bytes leftover after parsing attributes in process `syz.0.268'. [ 119.644759][ T6955] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 119.793733][ T6964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 119.815935][ T6964] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 119.978910][ T6967] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 120.007305][ T6969] netlink: 892 bytes leftover after parsing attributes in process `syz.3.277'. [ 120.595470][ T6989] macvtap0: entered promiscuous mode [ 121.570651][ T7037] FAULT_INJECTION: forcing a failure. [ 121.570651][ T7037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.584193][ T7037] CPU: 1 UID: 0 PID: 7037 Comm: syz.4.295 Not tainted syzkaller #0 PREEMPT(full) [ 121.584220][ T7037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 121.584234][ T7037] Call Trace: [ 121.584242][ T7037] [ 121.584250][ T7037] dump_stack_lvl+0xe8/0x150 [ 121.584299][ T7037] should_fail_ex+0x412/0x560 [ 121.584339][ T7037] _copy_from_user+0x2d/0xb0 [ 121.584367][ T7037] ___sys_sendmsg+0x1c6/0x360 [ 121.584408][ T7037] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.584486][ T7037] ? __fget_files+0x2a/0x420 [ 121.584505][ T7037] ? __fget_files+0x3a0/0x420 [ 121.584535][ T7037] __x64_sys_sendmsg+0x1bd/0x2a0 [ 121.584572][ T7037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 121.584616][ T7037] ? __pfx_ksys_write+0x10/0x10 [ 121.584653][ T7037] do_syscall_64+0x14d/0xf80 [ 121.584679][ T7037] ? trace_irq_disable+0x3b/0x150 [ 121.584697][ T7037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.584719][ T7037] ? clear_bhb_loop+0x40/0x90 [ 121.584745][ T7037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.584766][ T7037] RIP: 0033:0x7f5be5f9c819 [ 121.584791][ T7037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.584809][ T7037] RSP: 002b:00007f5be6dd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.584838][ T7037] RAX: ffffffffffffffda RBX: 00007f5be6215fa0 RCX: 00007f5be5f9c819 [ 121.584854][ T7037] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 121.584867][ T7037] RBP: 00007f5be6dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 121.584880][ T7037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.584892][ T7037] R13: 00007f5be6216038 R14: 00007f5be6215fa0 R15: 00007ffdb89ed0b8 [ 121.584924][ T7037] [ 121.810584][ T5832] block nbd0: Receive control failed (result -32) [ 121.818963][ T5145] block nbd0: Receive control failed (result -32) [ 121.822226][ T5842] block nbd0: Receive control failed (result -32) [ 121.850006][ T5839] block nbd0: Receive control failed (result -32) [ 121.856657][ T7032] block nbd0: Receive control failed (result -32) [ 121.876017][ T7041] bridge_slave_1: left allmulticast mode [ 121.914360][ T7041] bridge_slave_1: left promiscuous mode [ 121.963829][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.012603][ T7041] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 122.284285][ T7058] netlink: 'syz.4.300': attribute type 11 has an invalid length. [ 122.319010][ T7058] netlink: 'syz.4.300': attribute type 1 has an invalid length. [ 122.323400][ T7060] __nla_validate_parse: 5 callbacks suppressed [ 122.323468][ T7060] netlink: 892 bytes leftover after parsing attributes in process `syz.3.302'. [ 122.348706][ T7058] netlink: 96 bytes leftover after parsing attributes in process `syz.4.300'. [ 122.369136][ T7058] netlink: 1 bytes leftover after parsing attributes in process `syz.4.300'. [ 122.609730][ T7075] netlink: 'syz.4.304': attribute type 39 has an invalid length. [ 122.653191][ T7079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 122.711957][ T7079] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 122.720492][ T7079] netlink: 'syz.1.307': attribute type 2 has an invalid length. [ 122.727301][ T7082] FAULT_INJECTION: forcing a failure. [ 122.727301][ T7082] name failslab, interval 1, probability 0, space 0, times 0 [ 122.741594][ T7082] CPU: 0 UID: 0 PID: 7082 Comm: syz.3.308 Not tainted syzkaller #0 PREEMPT(full) [ 122.741618][ T7082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.741631][ T7082] Call Trace: [ 122.741638][ T7082] [ 122.741647][ T7082] dump_stack_lvl+0xe8/0x150 [ 122.741681][ T7082] should_fail_ex+0x412/0x560 [ 122.741719][ T7082] should_failslab+0xa8/0x100 [ 122.741749][ T7082] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 122.741774][ T7082] ? __alloc_skb+0x186/0x7d0 [ 122.741801][ T7082] ? __alloc_skb+0x1d0/0x7d0 [ 122.741827][ T7082] ? __local_bh_enable_ip+0xd0/0x130 [ 122.741859][ T7082] __alloc_skb+0x1d0/0x7d0 [ 122.741892][ T7082] netlink_sendmsg+0x5d4/0xb40 [ 122.741933][ T7082] ? __pfx_netlink_sendmsg+0x10/0x10 [ 122.741967][ T7082] ? aa_sock_msg_perm+0xf1/0x1b0 [ 122.741987][ T7082] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 122.742012][ T7082] ____sys_sendmsg+0x972/0x9f0 [ 122.742049][ T7082] ? __pfx_____sys_sendmsg+0x10/0x10 [ 122.742087][ T7082] ? import_iovec+0x73/0xa0 [ 122.742114][ T7082] ___sys_sendmsg+0x2a5/0x360 [ 122.742153][ T7082] ? __pfx____sys_sendmsg+0x10/0x10 [ 122.742215][ T7082] ? __fget_files+0x2a/0x420 [ 122.742231][ T7082] ? __fget_files+0x3a0/0x420 [ 122.742256][ T7082] __x64_sys_sendmsg+0x1bd/0x2a0 [ 122.742286][ T7082] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 122.742335][ T7082] ? __pfx_ksys_write+0x10/0x10 [ 122.742368][ T7082] do_syscall_64+0x14d/0xf80 [ 122.742392][ T7082] ? trace_irq_disable+0x3b/0x150 [ 122.742410][ T7082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.742431][ T7082] ? clear_bhb_loop+0x40/0x90 [ 122.742456][ T7082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.742476][ T7082] RIP: 0033:0x7f6b4639c819 [ 122.742495][ T7082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.742511][ T7082] RSP: 002b:00007f6b4731b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 122.742532][ T7082] RAX: ffffffffffffffda RBX: 00007f6b46615fa0 RCX: 00007f6b4639c819 [ 122.742547][ T7082] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 122.742559][ T7082] RBP: 00007f6b4731b090 R08: 0000000000000000 R09: 0000000000000000 [ 122.742572][ T7082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.742583][ T7082] R13: 00007f6b46616038 R14: 00007f6b46615fa0 R15: 00007ffe11efce08 [ 122.742613][ T7082] [ 123.213248][ T7095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.312'. [ 123.439915][ T7104] netlink: 892 bytes leftover after parsing attributes in process `syz.0.315'. [ 123.518315][ T7105] bond1: option lacp_active: mode dependency failed, not supported in mode balance-alb(6) [ 123.581381][ T7105] bond1 (unregistering): Released all slaves [ 123.772574][ T5840] IPVS: starting estimator thread 0... [ 123.843826][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 123.869923][ T7124] IPVS: using max 26 ests per chain, 62400 per kthread [ 123.952093][ T7130] veth0_to_batadv: entered promiscuous mode [ 123.962348][ T7130] veth0_to_batadv: entered allmulticast mode [ 124.327838][ T7148] netlink: 36 bytes leftover after parsing attributes in process `syz.3.323'. [ 124.451654][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.2.324'. [ 124.611271][ T7165] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 124.667926][ T7167] netlink: 'syz.1.328': attribute type 1 has an invalid length. [ 124.839238][ T7167] bond2: entered promiscuous mode [ 124.858042][ T7167] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.922078][ T7168] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.974285][ T7168] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 124.985838][ T7168] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 126.272866][ T7221] veth0: entered promiscuous mode [ 126.292635][ T7222] veth0: left promiscuous mode [ 126.518511][ T7234] netlink: 'syz.2.345': attribute type 23 has an invalid length. [ 127.439417][ T7267] dummy0: entered promiscuous mode [ 127.447738][ T7264] __nla_validate_parse: 4 callbacks suppressed [ 127.447757][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.355'. [ 127.450454][ T7267] vlan2: entered promiscuous mode [ 127.698294][ T7278] netlink: 27 bytes leftover after parsing attributes in process `syz.2.360'. [ 127.887827][ T7287] netlink: 868 bytes leftover after parsing attributes in process `syz.4.367'. [ 127.901477][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.366'. [ 127.919079][ T7289] batadv_slave_0: entered promiscuous mode [ 127.926289][ T7289] macsec1: entered promiscuous mode [ 127.931870][ T7289] macsec1: entered allmulticast mode [ 127.937411][ T7289] batadv_slave_0: entered allmulticast mode [ 127.947628][ T7289] batadv_slave_0: left allmulticast mode [ 127.954782][ T7289] batadv_slave_0: left promiscuous mode [ 128.407411][ T7305] dummy0: entered promiscuous mode [ 128.415221][ T7305] vlan2: entered promiscuous mode [ 128.618602][ T7309] FAULT_INJECTION: forcing a failure. [ 128.618602][ T7309] name failslab, interval 1, probability 0, space 0, times 0 [ 128.699677][ T7309] CPU: 1 UID: 0 PID: 7309 Comm: syz.4.373 Not tainted syzkaller #0 PREEMPT(full) [ 128.699706][ T7309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 128.699727][ T7309] Call Trace: [ 128.699735][ T7309] [ 128.699744][ T7309] dump_stack_lvl+0xe8/0x150 [ 128.699778][ T7309] should_fail_ex+0x412/0x560 [ 128.699817][ T7309] should_failslab+0xa8/0x100 [ 128.699848][ T7309] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 128.699873][ T7309] ? __alloc_skb+0x186/0x7d0 [ 128.699902][ T7309] ? __alloc_skb+0x1d0/0x7d0 [ 128.699929][ T7309] ? __local_bh_enable_ip+0xd0/0x130 [ 128.699962][ T7309] __alloc_skb+0x1d0/0x7d0 [ 128.699992][ T7309] ? netlink_ack_tlv_len+0x6c/0x210 [ 128.700026][ T7309] netlink_ack+0x146/0xa50 [ 128.700073][ T7309] netlink_rcv_skb+0x2b6/0x4b0 [ 128.700104][ T7309] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 128.700135][ T7309] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 128.700178][ T7309] ? bpf_lsm_capable+0x9/0x20 [ 128.700208][ T7309] ? security_capable+0x7e/0x2c0 [ 128.700248][ T7309] nfnetlink_rcv+0x2c0/0x27b0 [ 128.700298][ T7309] ? __local_bh_enable_ip+0xd0/0x130 [ 128.700325][ T7309] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.700350][ T7309] ? __dev_queue_xmit+0x2b6/0x3980 [ 128.700371][ T7309] ? __local_bh_enable_ip+0xd0/0x130 [ 128.700397][ T7309] ? __dev_queue_xmit+0x2b6/0x3980 [ 128.700418][ T7309] ? __dev_queue_xmit+0x1fe5/0x3980 [ 128.700438][ T7309] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 128.700477][ T7309] ? __dev_queue_xmit+0x2b6/0x3980 [ 128.700505][ T7309] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 128.700539][ T7309] ? __pfx___dev_queue_xmit+0x10/0x10 [ 128.700569][ T7309] ? ref_tracker_free+0x693/0x840 [ 128.700593][ T7309] ? __pfx_ref_tracker_free+0x10/0x10 [ 128.700634][ T7309] ? skb_clone+0x246/0x3a0 [ 128.700665][ T7309] ? __netlink_deliver_tap+0x807/0x850 [ 128.700695][ T7309] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.700742][ T7309] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.700773][ T7309] ? netlink_deliver_tap+0x2e/0x1b0 [ 128.700809][ T7309] netlink_unicast+0x75c/0x8e0 [ 128.700850][ T7309] netlink_sendmsg+0x813/0xb40 [ 128.700891][ T7309] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.700927][ T7309] ? aa_sock_msg_perm+0xf1/0x1b0 [ 128.700949][ T7309] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 128.700978][ T7309] ____sys_sendmsg+0x972/0x9f0 [ 128.701022][ T7309] ? __pfx_____sys_sendmsg+0x10/0x10 [ 128.701065][ T7309] ? import_iovec+0x73/0xa0 [ 128.701095][ T7309] ___sys_sendmsg+0x2a5/0x360 [ 128.701135][ T7309] ? __pfx____sys_sendmsg+0x10/0x10 [ 128.701206][ T7309] ? __fget_files+0x2a/0x420 [ 128.701225][ T7309] ? __fget_files+0x3a0/0x420 [ 128.701256][ T7309] __x64_sys_sendmsg+0x1bd/0x2a0 [ 128.701294][ T7309] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 128.701337][ T7309] ? __pfx_ksys_write+0x10/0x10 [ 128.701374][ T7309] do_syscall_64+0x14d/0xf80 [ 128.701399][ T7309] ? trace_irq_disable+0x3b/0x150 [ 128.701418][ T7309] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.701440][ T7309] ? clear_bhb_loop+0x40/0x90 [ 128.701467][ T7309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.701500][ T7309] RIP: 0033:0x7f5be5f9c819 [ 128.701520][ T7309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.701536][ T7309] RSP: 002b:00007f5be6dd4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 128.701557][ T7309] RAX: ffffffffffffffda RBX: 00007f5be6215fa0 RCX: 00007f5be5f9c819 [ 128.701572][ T7309] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 128.701585][ T7309] RBP: 00007f5be6dd4090 R08: 0000000000000000 R09: 0000000000000000 [ 128.701597][ T7309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.701608][ T7309] R13: 00007f5be6216038 R14: 00007f5be6215fa0 R15: 00007ffdb89ed0b8 [ 128.701658][ T7309] [ 129.349590][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 129.446374][ T6396] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.469024][ T7322] netlink: 4 bytes leftover after parsing attributes in process `syz.2.376'. [ 129.478824][ T6396] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.511969][ T6396] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.525928][ T6396] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 129.850543][ T7342] netlink: 212916 bytes leftover after parsing attributes in process `syz.3.384'. [ 130.146502][ T7354] FAULT_INJECTION: forcing a failure. [ 130.146502][ T7354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.194665][ T7354] CPU: 0 UID: 0 PID: 7354 Comm: syz.2.388 Not tainted syzkaller #0 PREEMPT(full) [ 130.194695][ T7354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 130.194707][ T7354] Call Trace: [ 130.194716][ T7354] [ 130.194725][ T7354] dump_stack_lvl+0xe8/0x150 [ 130.194763][ T7354] should_fail_ex+0x412/0x560 [ 130.194803][ T7354] _copy_to_user+0x31/0xb0 [ 130.194833][ T7354] simple_read_from_buffer+0xe1/0x170 [ 130.194871][ T7354] proc_fail_nth_read+0x1bb/0x230 [ 130.194907][ T7354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.194944][ T7354] ? rw_verify_area+0x2a6/0x4d0 [ 130.194967][ T7354] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 130.195001][ T7354] vfs_read+0x20c/0xa70 [ 130.195023][ T7354] ? fdget_pos+0x246/0x320 [ 130.195049][ T7354] ? __pfx___mutex_lock+0x10/0x10 [ 130.195077][ T7354] ? __pfx_vfs_read+0x10/0x10 [ 130.195102][ T7354] ? __fget_files+0x2a/0x420 [ 130.195127][ T7354] ? __fget_files+0x3a0/0x420 [ 130.195146][ T7354] ? __fget_files+0x2a/0x420 [ 130.195176][ T7354] ksys_read+0x150/0x270 [ 130.195203][ T7354] ? __pfx_ksys_read+0x10/0x10 [ 130.195240][ T7354] do_syscall_64+0x14d/0xf80 [ 130.195265][ T7354] ? trace_irq_disable+0x3b/0x150 [ 130.195284][ T7354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.195306][ T7354] ? clear_bhb_loop+0x40/0x90 [ 130.195332][ T7354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.195353][ T7354] RIP: 0033:0x7fdd3135d04e [ 130.195372][ T7354] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 130.195390][ T7354] RSP: 002b:00007fdd32322fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 130.195412][ T7354] RAX: ffffffffffffffda RBX: 00007fdd323236c0 RCX: 00007fdd3135d04e [ 130.195427][ T7354] RDX: 000000000000000f RSI: 00007fdd323230a0 RDI: 0000000000000004 [ 130.195440][ T7354] RBP: 00007fdd32323090 R08: 0000000000000000 R09: 0000000000000000 [ 130.195453][ T7354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 130.195465][ T7354] R13: 00007fdd31616038 R14: 00007fdd31615fa0 R15: 00007fff384d92b8 [ 130.195509][ T7354] [ 130.674383][ T7365] IPv6: NLM_F_CREATE should be specified when creating new route [ 130.729728][ T7365] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.737342][ T7365] IPv6: NLM_F_CREATE should be set when creating new route [ 130.744762][ T7365] IPv6: NLM_F_CREATE should be set when creating new route [ 130.752044][ T7365] IPv6: NLM_F_CREATE should be set when creating new route [ 130.860680][ T7369] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 130.951173][ T7369] bond3 (unregistering): Released all slaves [ 131.034770][ T7373] IPVS: ip_vs_add_dest(): server weight less than zero [ 131.106395][ T7383] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 131.308805][ T7390] netlink: 'syz.4.396': attribute type 9 has an invalid length. [ 131.355424][ T7390] netlink: 'syz.4.396': attribute type 6 has an invalid length. [ 131.391491][ T7390] netlink: 'syz.4.396': attribute type 7 has an invalid length. [ 131.399185][ T7390] netlink: 'syz.4.396': attribute type 8 has an invalid length. [ 131.451253][ T7396] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 132.357692][ T7421] netlink: 36 bytes leftover after parsing attributes in process `syz.1.408'. [ 132.420537][ T7421] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 132.760577][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.411'. [ 132.905636][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.912379][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.994972][ T7436] netlink: 860 bytes leftover after parsing attributes in process `syz.3.412'. [ 133.061417][ T7438] netlink: 'syz.4.414': attribute type 11 has an invalid length. [ 133.119011][ T7438] netlink: 'syz.4.414': attribute type 1 has an invalid length. [ 133.143907][ T7438] netlink: 96 bytes leftover after parsing attributes in process `syz.4.414'. [ 133.161506][ T7438] netlink: 1 bytes leftover after parsing attributes in process `syz.4.414'. [ 133.281665][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 133.325957][ T7444] macsec1: entered promiscuous mode [ 133.337971][ T7444] batadv_slave_0: entered promiscuous mode [ 133.354970][ T7444] macsec1: entered allmulticast mode [ 133.368874][ T7444] batadv_slave_0: entered allmulticast mode [ 133.377717][ T7444] batadv_slave_0: left allmulticast mode [ 133.391741][ T7444] batadv_slave_0: left promiscuous mode [ 133.428524][ T7447] netlink: 27 bytes leftover after parsing attributes in process `syz.4.416'. [ 133.443772][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.416'. [ 133.766787][ T7458] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 134.015697][ T7464] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 134.075193][ T7471] netlink: 'syz.2.423': attribute type 8 has an invalid length. [ 134.099060][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 134.298560][ T7471] bond0: entered promiscuous mode [ 134.306272][ T7471] gretap0: entered promiscuous mode [ 134.338950][ T7471] bond0: left promiscuous mode [ 134.348129][ T7471] gretap0: left promiscuous mode [ 134.374822][ T7481] netlink: 860 bytes leftover after parsing attributes in process `syz.4.425'. [ 134.583856][ T7486] netlink: 'syz.2.426': attribute type 11 has an invalid length. [ 134.671644][ T7486] netlink: 'syz.2.426': attribute type 1 has an invalid length. [ 134.682354][ T7486] netlink: 96 bytes leftover after parsing attributes in process `syz.2.426'. [ 134.750893][ T7484] syzkaller0: entered promiscuous mode [ 134.783012][ T7484] syzkaller0: entered allmulticast mode [ 134.876160][ T7491] batadv_slave_0: entered promiscuous mode [ 134.893506][ T7491] macsec1: entered promiscuous mode [ 134.940768][ T7491] macsec1: entered allmulticast mode [ 134.949452][ T7491] batadv_slave_0: entered allmulticast mode [ 134.972523][ T7491] batadv_slave_0: left allmulticast mode [ 135.008857][ T7491] batadv_slave_0: left promiscuous mode [ 136.798159][ T7505] team0: Port device team_slave_0 removed [ 136.840855][ T7515] x_tables: ip6_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 137.485761][ T7532] netlink: 'syz.1.439': attribute type 11 has an invalid length. [ 137.606000][ T7534] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 138.470436][ T7554] __nla_validate_parse: 10 callbacks suppressed [ 138.470456][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.445'. [ 138.484278][ T7553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.447'. [ 138.547901][ T7557] netlink: 772 bytes leftover after parsing attributes in process `syz.4.448'. [ 138.559472][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 138.588968][ T7554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 138.619730][ T7554] netlink: 'syz.2.445': attribute type 3 has an invalid length. [ 138.636082][ T7554] netlink: 88 bytes leftover after parsing attributes in process `syz.2.445'. [ 138.655416][ T7554] netlink: 13 bytes leftover after parsing attributes in process `syz.2.445'. [ 139.048360][ T7573] netlink: 44 bytes leftover after parsing attributes in process `syz.0.453'. [ 139.067621][ T7573] netlink: 35 bytes leftover after parsing attributes in process `syz.0.453'. [ 139.080233][ T7573] netlink: 'syz.0.453': attribute type 5 has an invalid length. [ 139.088147][ T7573] netlink: 'syz.0.453': attribute type 6 has an invalid length. [ 139.096128][ T7573] netlink: 35 bytes leftover after parsing attributes in process `syz.0.453'. [ 139.643113][ T7592] netlink: 'syz.4.460': attribute type 1 has an invalid length. [ 139.729838][ T7594] vlan2: entered promiscuous mode [ 139.735060][ T7594] dummy0: entered promiscuous mode [ 139.823760][ T7602] netlink: 'syz.3.462': attribute type 10 has an invalid length. [ 139.871475][ T7602] batadv0: entered promiscuous mode [ 139.880163][ T7602] batadv0: entered allmulticast mode [ 139.927252][ T7602] bridge0: port 3(batadv0) entered blocking state [ 139.942400][ T7602] bridge0: port 3(batadv0) entered disabled state [ 139.974110][ T7602] bridge0: port 3(batadv0) entered blocking state [ 139.980750][ T7602] bridge0: port 3(batadv0) entered forwarding state [ 140.410599][ T6403] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 140.420248][ T6403] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 140.571633][ T7634] 8021q: VLANs not supported on sit0 [ 141.005624][ T7651] tipc: Started in network mode [ 141.014831][ T7651] tipc: Node identity ac14140f, cluster identity 4711 [ 141.043962][ T7651] tipc: New replicast peer: 255.255.255.255 [ 141.062073][ T7651] tipc: Enabled bearer , priority 10 [ 141.340665][ T7662] netlink: 'syz.0.480': attribute type 4 has an invalid length. [ 141.481131][ T7662] .`: renamed from bond0 (while UP) [ 141.649018][ T7666] geneve1: entered promiscuous mode [ 141.669235][ T7667] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 141.690581][ T463] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.715265][ T7666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.720074][ T463] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.758613][ T463] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.799424][ T463] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.800991][ T7664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.928791][ T7672] ipip0: entered promiscuous mode [ 142.142732][ T7684] netlink: 'syz.1.487': attribute type 1 has an invalid length. [ 142.352120][ T798] tipc: Node number set to 2886997007 [ 142.563225][ T7697] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 142.583403][ T7699] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.649985][ T7697] bond3: entered promiscuous mode [ 142.655479][ T7697] 8021q: adding VLAN 0 to HW filter on device bond3 [ 142.716452][ T7703] vlan2: entered allmulticast mode [ 142.748231][ T7703] bond3: entered allmulticast mode [ 142.804445][ T7697] bond3: (slave bridge2): making interface the new active one [ 142.812460][ T7697] bridge2: entered promiscuous mode [ 142.817867][ T7697] bridge2: entered allmulticast mode [ 142.826985][ T7697] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 142.836543][ T7713] FAULT_INJECTION: forcing a failure. [ 142.836543][ T7713] name failslab, interval 1, probability 0, space 0, times 0 [ 142.849670][ T7713] CPU: 1 UID: 0 PID: 7713 Comm: syz.1.496 Not tainted syzkaller #0 PREEMPT(full) [ 142.849694][ T7713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 142.849706][ T7713] Call Trace: [ 142.849712][ T7713] [ 142.849720][ T7713] dump_stack_lvl+0xe8/0x150 [ 142.849751][ T7713] should_fail_ex+0x412/0x560 [ 142.849784][ T7713] should_failslab+0xa8/0x100 [ 142.849808][ T7713] ? skb_clone+0x212/0x3a0 [ 142.849826][ T7713] kmem_cache_alloc_noprof+0x87/0x650 [ 142.849848][ T7713] ? __netlink_lookup+0xc6/0x8b0 [ 142.849884][ T7713] skb_clone+0x212/0x3a0 [ 142.849908][ T7713] __netlink_deliver_tap+0x404/0x850 [ 142.849948][ T7713] ? netlink_deliver_tap+0x2e/0x1b0 [ 142.849995][ T7713] netlink_deliver_tap+0x19c/0x1b0 [ 142.850025][ T7713] netlink_unicast+0x730/0x8e0 [ 142.850072][ T7713] netlink_sendmsg+0x813/0xb40 [ 142.850107][ T7713] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.850144][ T7713] ? aa_sock_msg_perm+0xf1/0x1b0 [ 142.850166][ T7713] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 142.850194][ T7713] ____sys_sendmsg+0x972/0x9f0 [ 142.850233][ T7713] ? __pfx_____sys_sendmsg+0x10/0x10 [ 142.850271][ T7713] ? import_iovec+0x73/0xa0 [ 142.850298][ T7713] ___sys_sendmsg+0x2a5/0x360 [ 142.850335][ T7713] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.850396][ T7713] ? __fget_files+0x2a/0x420 [ 142.850413][ T7713] ? __fget_files+0x3a0/0x420 [ 142.850451][ T7713] __x64_sys_sendmsg+0x1bd/0x2a0 [ 142.850488][ T7713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 142.850537][ T7713] ? __pfx_ksys_write+0x10/0x10 [ 142.850572][ T7713] do_syscall_64+0x14d/0xf80 [ 142.850594][ T7713] ? trace_irq_disable+0x3b/0x150 [ 142.850612][ T7713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.850632][ T7713] ? clear_bhb_loop+0x40/0x90 [ 142.850658][ T7713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.850679][ T7713] RIP: 0033:0x7fe25d59c819 [ 142.850699][ T7713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.850719][ T7713] RSP: 002b:00007fe25b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.850741][ T7713] RAX: ffffffffffffffda RBX: 00007fe25d816090 RCX: 00007fe25d59c819 [ 142.850756][ T7713] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000000 [ 142.850770][ T7713] RBP: 00007fe25b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.850782][ T7713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.850794][ T7713] R13: 00007fe25d816128 R14: 00007fe25d816090 R15: 00007ffd70144688 [ 142.850825][ T7713] [ 143.121919][ T7699] syzkaller0: entered promiscuous mode [ 143.127462][ T7699] syzkaller0: entered allmulticast mode [ 143.505472][ T7726] __nla_validate_parse: 18 callbacks suppressed [ 143.505494][ T7726] netlink: 12 bytes leftover after parsing attributes in process `syz.4.501'. [ 143.646072][ T7730] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 143.801065][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.504'. [ 143.821096][ T7740] netem: incorrect ge model size [ 143.836692][ T7740] netem: change failed [ 144.039381][ T7754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.509'. [ 144.088486][ T7748] bond0: option mode: invalid value (254) [ 144.096524][ T7748] bond0 (unregistering): Released all slaves [ 144.280246][ T7756] macvtap0: entered promiscuous mode [ 144.362632][ T7760] netlink: 27 bytes leftover after parsing attributes in process `syz.3.510'. [ 144.588788][ T7770] netlink: 'syz.0.516': attribute type 28 has an invalid length. [ 144.598494][ T7770] netlink: 40 bytes leftover after parsing attributes in process `syz.0.516'. [ 144.828589][ T7779] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 144.857301][ T7779] syzkaller1: linktype set to 825 [ 144.881797][ T7784] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.898374][ T7779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.519'. [ 144.926788][ T7784] netlink: 4 bytes leftover after parsing attributes in process `syz.1.520'. [ 144.979277][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.173228][ T7796] netlink: 7 bytes leftover after parsing attributes in process `syz.2.526'. [ 145.185754][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'. [ 145.195660][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.526'. [ 145.306996][ T7806] FAULT_INJECTION: forcing a failure. [ 145.306996][ T7806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.344338][ T7806] CPU: 0 UID: 0 PID: 7806 Comm: syz.3.527 Not tainted syzkaller #0 PREEMPT(full) [ 145.344366][ T7806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 145.344379][ T7806] Call Trace: [ 145.344387][ T7806] [ 145.344395][ T7806] dump_stack_lvl+0xe8/0x150 [ 145.344431][ T7806] should_fail_ex+0x412/0x560 [ 145.344470][ T7806] _copy_from_iter+0x1d3/0x1670 [ 145.344492][ T7806] ? rcu_is_watching+0x15/0xb0 [ 145.344525][ T7806] ? trace_kmem_cache_alloc+0x29/0xf0 [ 145.344547][ T7806] ? __build_skb+0x62/0x440 [ 145.344578][ T7806] ? __build_skb+0x62/0x440 [ 145.344607][ T7806] ? __pfx__copy_from_iter+0x10/0x10 [ 145.344633][ T7806] ? __build_skb+0x2a2/0x440 [ 145.344663][ T7806] ? netlink_sendmsg+0x650/0xb40 [ 145.344694][ T7806] ? skb_put+0x11b/0x210 [ 145.344727][ T7806] netlink_sendmsg+0x6c0/0xb40 [ 145.344767][ T7806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.344802][ T7806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 145.344825][ T7806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 145.344853][ T7806] ____sys_sendmsg+0x972/0x9f0 [ 145.344895][ T7806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.344936][ T7806] ? import_iovec+0x73/0xa0 [ 145.344964][ T7806] ___sys_sendmsg+0x2a5/0x360 [ 145.345010][ T7806] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.345080][ T7806] ? __fget_files+0x2a/0x420 [ 145.345100][ T7806] ? __fget_files+0x3a0/0x420 [ 145.345129][ T7806] __x64_sys_sendmsg+0x1bd/0x2a0 [ 145.345165][ T7806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.345208][ T7806] ? __pfx_ksys_write+0x10/0x10 [ 145.345251][ T7806] do_syscall_64+0x14d/0xf80 [ 145.345277][ T7806] ? trace_irq_disable+0x3b/0x150 [ 145.345296][ T7806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.345317][ T7806] ? clear_bhb_loop+0x40/0x90 [ 145.345343][ T7806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.345365][ T7806] RIP: 0033:0x7f6b4639c819 [ 145.345384][ T7806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.345402][ T7806] RSP: 002b:00007f6b4731b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.345423][ T7806] RAX: ffffffffffffffda RBX: 00007f6b46615fa0 RCX: 00007f6b4639c819 [ 145.345438][ T7806] RDX: 0000000000000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 145.345451][ T7806] RBP: 00007f6b4731b090 R08: 0000000000000000 R09: 0000000000000000 [ 145.345464][ T7806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.345475][ T7806] R13: 00007f6b46616038 R14: 00007f6b46615fa0 R15: 00007ffe11efce08 [ 145.345508][ T7806] [ 146.440128][ T7852] netlink: 'syz.1.540': attribute type 1 has an invalid length. [ 146.483932][ T7852] bond3: entered promiscuous mode [ 146.521070][ T7852] 8021q: adding VLAN 0 to HW filter on device bond3 [ 146.697552][ T7856] 8021q: adding VLAN 0 to HW filter on device bond4 [ 146.707298][ T7856] bond3: (slave bond4): making interface the new active one [ 146.715325][ T7856] bond4: entered promiscuous mode [ 146.721619][ T7856] bond3: (slave bond4): Enslaving as an active interface with an up link [ 146.863877][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 147.030493][ T7876] FAULT_INJECTION: forcing a failure. [ 147.030493][ T7876] name failslab, interval 1, probability 0, space 0, times 0 [ 147.076774][ T7876] CPU: 1 UID: 0 PID: 7876 Comm: syz.1.547 Not tainted syzkaller #0 PREEMPT(full) [ 147.076814][ T7876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 147.076827][ T7876] Call Trace: [ 147.076835][ T7876] [ 147.076844][ T7876] dump_stack_lvl+0xe8/0x150 [ 147.076881][ T7876] should_fail_ex+0x412/0x560 [ 147.076921][ T7876] should_failslab+0xa8/0x100 [ 147.076952][ T7876] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 147.076980][ T7876] ? __alloc_skb+0x1d0/0x7d0 [ 147.077008][ T7876] ? __local_bh_enable_ip+0xd0/0x130 [ 147.077042][ T7876] __alloc_skb+0x1d0/0x7d0 [ 147.077072][ T7876] ? netlink_ack_tlv_len+0x6c/0x210 [ 147.077106][ T7876] netlink_ack+0x146/0xa50 [ 147.077133][ T7876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.077156][ T7876] ? __pfx_tipc_nl_node_set_key+0x10/0x10 [ 147.077200][ T7876] netlink_rcv_skb+0x2b6/0x4b0 [ 147.077232][ T7876] ? __pfx_genl_rcv_msg+0x10/0x10 [ 147.077257][ T7876] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 147.077303][ T7876] ? down_read+0x272/0x2e0 [ 147.077331][ T7876] ? genl_rcv+0xd/0x40 [ 147.077356][ T7876] genl_rcv+0x28/0x40 [ 147.077376][ T7876] netlink_unicast+0x75c/0x8e0 [ 147.077416][ T7876] netlink_sendmsg+0x813/0xb40 [ 147.077457][ T7876] ? __pfx_netlink_sendmsg+0x10/0x10 [ 147.077493][ T7876] ? aa_sock_msg_perm+0xf1/0x1b0 [ 147.077516][ T7876] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 147.077546][ T7876] ____sys_sendmsg+0x972/0x9f0 [ 147.077589][ T7876] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.077632][ T7876] ? import_iovec+0x73/0xa0 [ 147.077662][ T7876] ___sys_sendmsg+0x2a5/0x360 [ 147.077702][ T7876] ? __pfx____sys_sendmsg+0x10/0x10 [ 147.077773][ T7876] ? __fget_files+0x2a/0x420 [ 147.077793][ T7876] ? __fget_files+0x3a0/0x420 [ 147.077848][ T7876] __x64_sys_sendmsg+0x1bd/0x2a0 [ 147.077884][ T7876] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 147.077929][ T7876] ? __pfx_ksys_write+0x10/0x10 [ 147.077966][ T7876] do_syscall_64+0x14d/0xf80 [ 147.077992][ T7876] ? trace_irq_disable+0x3b/0x150 [ 147.078010][ T7876] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.078032][ T7876] ? clear_bhb_loop+0x40/0x90 [ 147.078057][ T7876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.078078][ T7876] RIP: 0033:0x7fe25d59c819 [ 147.078097][ T7876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.078114][ T7876] RSP: 002b:00007fe25b7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.078137][ T7876] RAX: ffffffffffffffda RBX: 00007fe25d816090 RCX: 00007fe25d59c819 [ 147.078152][ T7876] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000004 [ 147.078166][ T7876] RBP: 00007fe25b7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.078179][ T7876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.078191][ T7876] R13: 00007fe25d816128 R14: 00007fe25d816090 R15: 00007ffd70144688 [ 147.078224][ T7876] [ 147.934850][ T7891] netlink: Conntrack attr has 3 unknown bytes [ 148.125301][ T7893] hsr_slave_1 (unregistering): left promiscuous mode [ 148.811240][ T7920] __nla_validate_parse: 4 callbacks suppressed [ 148.811261][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.560'. [ 148.829213][ T7922] netlink: 'syz.1.561': attribute type 1 has an invalid length. [ 149.006739][ T7922] bond5: entered promiscuous mode [ 149.066034][ T7922] bond5: entered allmulticast mode [ 149.073424][ T7922] 8021q: adding VLAN 0 to HW filter on device bond5 [ 149.104144][ T7936] xt_policy: output policy not valid in PREROUTING and INPUT [ 149.192941][ T7936] ve: renamed from ip6gre0 [ 149.261607][ T7926] erspan1: entered allmulticast mode [ 149.345413][ T7926] bond5: (slave erspan1): making interface the new active one [ 149.373077][ T7926] erspan1: entered promiscuous mode [ 149.397058][ T7926] bond5: (slave erspan1): Enslaving as an active interface with an up link [ 149.625283][ T7948] IPv6: addrconf: prefix option has invalid lifetime [ 149.801256][ T7954] netlink: 14 bytes leftover after parsing attributes in process `syz.0.570'. [ 149.940660][ T7957] tipc: Started in network mode [ 149.951702][ T7957] tipc: Node identity 166362bcf8e3, cluster identity 4711 [ 149.959875][ T7957] tipc: Enabled bearer , priority 0 [ 149.984617][ T7957] syzkaller0: entered promiscuous mode [ 149.993523][ T7957] syzkaller0: entered allmulticast mode [ 150.149256][ T7953] tipc: Resetting bearer [ 150.213499][ T7953] tipc: Disabling bearer [ 150.309894][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.571'. [ 150.423662][ T7976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.574'. [ 151.114819][ T8000] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 151.140644][ T8000] bond6: entered promiscuous mode [ 151.146053][ T8000] 8021q: adding VLAN 0 to HW filter on device bond6 [ 151.260386][ T8004] netlink: 27 bytes leftover after parsing attributes in process `syz.1.582'. [ 151.467868][ T8006] netlink: 'syz.2.583': attribute type 2 has an invalid length. [ 151.490800][ T8006] !: entered promiscuous mode [ 151.499075][ T8006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.583'. [ 151.513149][ T8006] netem: incorrect ge model size [ 151.518161][ T8006] netem: change failed [ 151.876551][ T8017] netlink: 12 bytes leftover after parsing attributes in process `syz.4.586'. [ 151.913067][ T8019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.587'. [ 151.948872][ T8021] netlink: 'syz.4.586': attribute type 1 has an invalid length. [ 151.974107][ T8017] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.992055][ T8021] vxlan0: entered promiscuous mode [ 152.003610][ T8021] bond4: (slave vxlan0): Enslaving as an active interface with an up link [ 152.023947][ T6396] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.069856][ T6401] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.081816][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 152.112643][ T6401] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.121683][ T8023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 152.130201][ T8021] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 152.190166][ T6401] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 153.424986][ T8078] openvswitch: netlink: Flow key attr not present in new flow. [ 153.940572][ T8093] __nla_validate_parse: 7 callbacks suppressed [ 153.940591][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 153.987001][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.615'. [ 154.004844][ T8091] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.615'. [ 154.682150][ T8117] netlink: 27 bytes leftover after parsing attributes in process `syz.1.623'. [ 154.702523][ T8118] netlink: 'syz.2.624': attribute type 28 has an invalid length. [ 154.812823][ T8122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.828698][ T8122] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 154.838672][ T8121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.976513][ T8126] netlink: 132 bytes leftover after parsing attributes in process `syz.0.628'. [ 155.079028][ T8128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.629'. [ 155.088322][ T8128] netlink: 43 bytes leftover after parsing attributes in process `syz.0.629'. [ 155.099067][ T8128] netlink: 'syz.0.629': attribute type 5 has an invalid length. [ 155.107471][ T8128] netlink: 43 bytes leftover after parsing attributes in process `syz.0.629'. [ 155.691183][ T8140] netlink: 'syz.2.634': attribute type 11 has an invalid length. [ 155.978554][ T8148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.638'. [ 156.145779][ T8157] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.167722][ T8156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.600114][ T8163] macvtap0: entered promiscuous mode [ 156.879103][ T8178] netlink: 'syz.2.647': attribute type 11 has an invalid length. [ 157.020795][ T8182] bridge0: port 3(syz_tun) entered blocking state [ 157.028138][ T8182] bridge0: port 3(syz_tun) entered disabled state [ 157.035879][ T8182] syz_tun: entered allmulticast mode [ 157.044428][ T8182] syz_tun: entered promiscuous mode [ 157.050946][ T8182] bridge0: port 3(syz_tun) entered blocking state [ 157.057857][ T8182] bridge0: port 3(syz_tun) entered forwarding state [ 157.655677][ T8208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.669974][ T8207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.696917][ T8210] gre1: entered promiscuous mode [ 157.790299][ T8210] xt_l2tp: v2 doesn't support IP mode [ 158.030449][ T8222] netlink: 'syz.3.661': attribute type 11 has an invalid length. [ 158.360779][ T8233] netlink: 'syz.2.663': attribute type 2 has an invalid length. [ 159.123184][ T8261] __nla_validate_parse: 17 callbacks suppressed [ 159.123204][ T8261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.675'. [ 159.295497][ T8263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 159.311125][ T8266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.352981][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.676'. [ 159.371780][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.531703][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.679'. [ 160.002636][ T8295] Bluetooth: MGMT ver 1.23 [ 160.031660][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 160.254346][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.689'. [ 160.395636][ T8305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.689'. [ 160.543210][ T8314] netlink: 27 bytes leftover after parsing attributes in process `syz.0.691'. [ 160.615590][ T8316] Bluetooth: MGMT ver 1.23 [ 160.753178][ T8323] xt_cluster: you have exceeded the maximum number of cluster nodes (2359328 > 32) [ 160.936925][ T8330] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 161.050495][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 161.196707][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.700'. [ 161.427721][ T8358] netlink: 268 bytes leftover after parsing attributes in process `syz.4.703'. [ 161.517700][ T8346] 8021q: adding VLAN 0 to HW filter on device bond4 [ 161.569662][ T8346] bond3: (slave bond4): Enslaving as an active interface with an up link [ 161.587661][ T8351] netdevsim netdevsim1 netdevsim0: IPsec offload requires 128 bit authentication [ 161.620007][ T8345] bond3: (slave bond4): Error -95 calling ndo_bpf [ 163.107649][ T8409] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001 [ 164.068865][ T8432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.111104][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.332108][ T8445] __nla_validate_parse: 7 callbacks suppressed [ 164.332129][ T8445] netlink: 16 bytes leftover after parsing attributes in process `syz.3.734'. [ 164.924382][ T8470] bridge0: port 1(erspan0) entered blocking state [ 164.934650][ T8470] bridge0: port 1(erspan0) entered disabled state [ 164.969660][ T8470] erspan0: entered allmulticast mode [ 164.990442][ T8446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.732'. [ 164.994088][ T8470] erspan0: entered promiscuous mode [ 165.042761][ T8476] erspan0: left allmulticast mode [ 165.051311][ T8476] erspan0: left promiscuous mode [ 165.075084][ T8479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.745'. [ 165.085527][ T8476] bridge0: port 1(erspan0) entered disabled state [ 165.125826][ T8479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.745'. [ 165.174835][ T8478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.744'. [ 165.205190][ T8478] netem: incorrect ge model size [ 165.222036][ T8478] netem: change failed [ 165.249580][ T8474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'. [ 165.291172][ T8484] netlink: 'syz.3.744': attribute type 29 has an invalid length. [ 165.449757][ T8490] netlink: 40 bytes leftover after parsing attributes in process `syz.0.748'. [ 165.535922][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.3.750'. [ 165.973283][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.751'. [ 166.431384][ T8510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.453161][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz.2.752'. [ 166.480481][ T8509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.588824][ T8512] syzkaller1: entered promiscuous mode [ 166.595586][ T8512] syzkaller1: entered allmulticast mode [ 167.093690][ T8525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.817311][ T8531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.883059][ T8531] bond0: (slave bond2): Enslaving as an active interface with an up link [ 167.964743][ T8541] bond0 (unregistering): (slave bond2): Releasing backup interface [ 167.997195][ T8541] bond0 (unregistering): Released all slaves [ 168.550898][ T8571] netlink: 'syz.4.771': attribute type 1 has an invalid length. [ 168.742861][ T8575] bond5: (slave bridge4): Enslaving as a backup interface with an up link [ 168.837790][ T8579] macvlan2: entered promiscuous mode [ 168.853527][ T8579] macvlan2: entered allmulticast mode [ 168.881846][ T8579] bond5: entered promiscuous mode [ 168.907518][ T8579] bridge4: entered promiscuous mode [ 168.928760][ T8579] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.109454][ T8579] bond5: left promiscuous mode [ 169.116607][ T8579] bridge4: left promiscuous mode [ 169.298724][ T8571] macvlan2: entered promiscuous mode [ 169.325390][ T8571] macvlan2: entered allmulticast mode [ 169.360834][ T8571] bond5: entered promiscuous mode [ 169.387927][ T8571] bridge4: entered promiscuous mode [ 169.408309][ T8571] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 169.444886][ T8571] bond5: left promiscuous mode [ 169.460739][ T8571] bridge4: left promiscuous mode [ 169.752350][ T8606] syzkaller0: entered promiscuous mode [ 169.758093][ T8606] syzkaller0: entered allmulticast mode [ 170.009122][ T8623] __nla_validate_parse: 9 callbacks suppressed [ 170.009141][ T8623] netlink: 892 bytes leftover after parsing attributes in process `syz.3.784'. [ 170.193710][ T8629] netlink: 12 bytes leftover after parsing attributes in process `syz.0.785'. [ 170.643874][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 170.658775][ T8650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.789'. [ 173.970068][ T8705] ve: renamed from sit0 (while UP) [ 175.393962][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.816'. [ 175.402888][ T8743] netlink: 'syz.0.816': attribute type 20 has an invalid length. [ 175.437763][ T8743] netlink: 'syz.0.816': attribute type 21 has an invalid length. [ 175.490055][ T8749] bond7: option arp_interval: invalid value (18446744073709551615) [ 175.498125][ T8749] bond7: option arp_interval: allowed values 0 - 2147483647 [ 175.566758][ T8749] bond7 (unregistering): Released all slaves [ 175.725129][ T8746] syzkaller0: entered promiscuous mode [ 175.742146][ T8746] syzkaller0: entered allmulticast mode [ 177.487127][ T8783] netlink: 20 bytes leftover after parsing attributes in process `syz.3.827'. [ 177.561647][ T8791] netlink: 24 bytes leftover after parsing attributes in process `syz.2.830'. [ 177.701280][ T8800] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 177.721877][ T8798] netlink: 'syz.1.832': attribute type 11 has an invalid length. [ 178.405765][ T8832] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20002 [ 178.433602][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.842'. [ 178.448323][ T8832] netlink: 'syz.1.843': attribute type 13 has an invalid length. [ 178.469405][ T8832] netlink: 'syz.1.843': attribute type 17 has an invalid length. [ 178.493147][ T8832] netlink: 'syz.1.843': attribute type 27 has an invalid length. [ 178.544832][ T8841] netlink: 684 bytes leftover after parsing attributes in process `syz.0.842'. [ 178.561675][ T8820] syzkaller0: entered promiscuous mode [ 178.568305][ T8820] syzkaller0: entered allmulticast mode [ 178.600165][ T8834] team_slave_0: entered promiscuous mode [ 178.606033][ T8834] team_slave_1: entered promiscuous mode [ 178.612650][ T8834] macvtap1: entered promiscuous mode [ 178.618001][ T8834] team0: entered promiscuous mode [ 178.624850][ T8834] macvtap1: entered allmulticast mode [ 178.632771][ T8834] team0: entered allmulticast mode [ 178.638234][ T8834] team_slave_0: entered allmulticast mode [ 178.644296][ T8834] team_slave_1: entered allmulticast mode [ 178.651565][ T8834] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 178.659728][ T8836] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 178.680328][ T8832] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 178.868410][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 178.883461][ T8847] netlink: 8 bytes leftover after parsing attributes in process `syz.4.846'. [ 178.973631][ T8852] netlink: 'syz.4.847': attribute type 11 has an invalid length. [ 180.306541][ T8865] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'. [ 180.805051][ T8889] netlink: 'syz.2.861': attribute type 11 has an invalid length. [ 180.907127][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.3.860'. [ 180.957258][ T8893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.860'. [ 181.023488][ T8900] openvswitch: netlink: IP tunnel TTL not specified. [ 181.085391][ T8898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.862'. [ 181.175680][ T8900] syzkaller0: entered promiscuous mode [ 181.204319][ T8900] syzkaller0: entered allmulticast mode [ 181.264786][ T8910] netlink: 'syz.3.866': attribute type 1 has an invalid length. [ 181.352528][ T8917] netlink: 'syz.1.868': attribute type 1 has an invalid length. [ 181.437025][ T8910] bond1: entered promiscuous mode [ 181.450732][ T8910] 8021q: adding VLAN 0 to HW filter on device bond1 [ 181.492626][ T8925] netlink: 20 bytes leftover after parsing attributes in process `syz.2.872'. [ 182.748346][ T8915] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 182.761134][ T8915] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 182.771663][ T8915] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 182.792808][ T8917] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 183.123674][ T8946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.878'. [ 183.246843][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz.3.879'. [ 184.166860][ T8987] netlink: 144 bytes leftover after parsing attributes in process `syz.1.891'. [ 184.417137][ T8992] netlink: 16 bytes leftover after parsing attributes in process `syz.1.893'. [ 184.596242][ T8997] syzkaller1: entered promiscuous mode [ 184.607711][ T8997] syzkaller1: entered allmulticast mode [ 184.625554][ T8999] netlink: 92 bytes leftover after parsing attributes in process `syz.3.895'. [ 184.790878][ T9005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.899'. [ 186.512297][ T9043] syzkaller1: entered promiscuous mode [ 186.566010][ T9043] syzkaller1: entered allmulticast mode [ 186.803153][ T9052] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 186.994168][ T9052] bond2: entered promiscuous mode [ 187.000393][ T9052] 8021q: adding VLAN 0 to HW filter on device bond2 [ 187.033046][ T9054] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.046500][ T9054] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 187.058497][ T9054] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 187.093526][ T9065] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.147248][ T9063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.549871][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'. [ 190.285625][ T9071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 190.483228][ T9128] netlink: 'syz.3.936': attribute type 1 has an invalid length. [ 190.583268][ T9128] bond3: entered promiscuous mode [ 190.587333][ T9138] netlink: 36 bytes leftover after parsing attributes in process `syz.1.939'. [ 190.629553][ T9128] 8021q: adding VLAN 0 to HW filter on device bond3 [ 190.662267][ T9137] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 190.728425][ T9137] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 190.796235][ T9137] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 190.816461][ T9147] netlink: 48 bytes leftover after parsing attributes in process `syz.4.937'. [ 192.297594][ T9184] netlink: 36 bytes leftover after parsing attributes in process `syz.1.951'. [ 192.339725][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.953'. [ 193.254506][ T9221] netlink: 'syz.3.965': attribute type 4 has an invalid length. [ 193.324001][ T9221] netlink: 17 bytes leftover after parsing attributes in process `syz.3.965'. [ 193.663360][ T9230] netlink: 12 bytes leftover after parsing attributes in process `syz.3.968'. [ 193.987677][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 194.008634][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'. [ 194.033023][ T9245] syzkaller0: entered promiscuous mode [ 194.055105][ T9245] syzkaller0: entered allmulticast mode [ 194.303455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.310120][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.317130][ T9254] netlink: 260 bytes leftover after parsing attributes in process `syz.1.974'. [ 194.360798][ T9256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 194.636413][ T798] IPVS: starting estimator thread 0... [ 194.642767][ T9262] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 194.671100][ T9262] netlink: 'syz.0.978': attribute type 13 has an invalid length. [ 194.700273][ T9262] netlink: 'syz.0.978': attribute type 17 has an invalid length. [ 194.715562][ T9266] netlink: 27 bytes leftover after parsing attributes in process `syz.2.979'. [ 194.741209][ T9265] IPVS: using max 28 ests per chain, 67200 per kthread [ 194.842575][ T9262] 8021q: adding VLAN 0 to HW filter on device .` [ 194.891586][ T9262] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.697403][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 195.780226][ T9285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.985'. [ 195.941256][ T9290] netlink: 36 bytes leftover after parsing attributes in process `syz.2.989'. [ 196.297639][ T9310] netlink: 'syz.2.992': attribute type 21 has an invalid length. [ 197.211165][ T9328] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 197.424767][ T9333] vlan2: entered promiscuous mode [ 197.449228][ T9333] erspan0: entered promiscuous mode [ 198.140896][ T9364] netlink: 'syz.4.1012': attribute type 2 has an invalid length. [ 198.312815][ T9372] syzkaller1: entered promiscuous mode [ 198.318372][ T9372] syzkaller1: entered allmulticast mode [ 198.386362][ T9372] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 201.440168][ T9379] syzkaller0: entered promiscuous mode [ 201.445712][ T9379] syzkaller0: entered allmulticast mode [ 201.455675][ T30] audit: type=1107 audit(1776221525.968:2): pid=9378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 201.485580][ T9381] __nla_validate_parse: 3 callbacks suppressed [ 201.485599][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 201.613561][ T9381] ip6tnl1: entered allmulticast mode [ 201.737572][ T9386] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1019'. [ 201.913986][ T9396] netlink: 'syz.1.1023': attribute type 5 has an invalid length. [ 201.932127][ T9396] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.1023'. [ 202.372476][ T9410] netlink: 'syz.0.1027': attribute type 1 has an invalid length. [ 202.446028][ T9418] netlink: 27 bytes leftover after parsing attributes in process `syz.4.1026'. [ 202.482443][ T9410] bond0: entered promiscuous mode [ 202.491130][ T9410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.497554][ T9405] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1025'. [ 202.507030][ T9405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1025'. [ 202.547480][ T9405] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1025'. [ 202.610755][ T9415] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 202.623562][ T9415] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 202.658490][ T9415] bond0: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 202.702263][ T9405] netlink: 'syz.1.1025': attribute type 16 has an invalid length. [ 202.716412][ T9405] netlink: 'syz.1.1025': attribute type 17 has an invalid length. [ 202.813242][ T9402] bridge0: port 3(syz_tun) entered disabled state [ 202.863567][ T9402] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.888349][ T9402] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.963960][ T9405] bridge0: port 3(syz_tun) entered blocking state [ 202.970685][ T9405] bridge0: port 3(syz_tun) entered forwarding state [ 203.009770][ T9405] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 203.168614][ T9429] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1030'. [ 203.232697][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 203.256525][ T9430] syzkaller0: entered promiscuous mode [ 203.287479][ T9429] ipvlan1: entered promiscuous mode [ 203.308217][ T9429] ipvlan1: left promiscuous mode [ 203.368746][ T9436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.403191][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1032'. [ 203.443831][ T9433] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.542564][ T9441] netlink: 'syz.2.1036': attribute type 12 has an invalid length. [ 203.564668][ T9441] netlink: 'syz.2.1036': attribute type 11 has an invalid length. [ 203.758368][ T9451] veth0: entered promiscuous mode [ 203.764982][ T9451] bond0: entered promiscuous mode [ 203.770654][ T9451] bond_slave_0: entered promiscuous mode [ 203.776737][ T9451] bond_slave_1: entered promiscuous mode [ 203.824322][ T9449] bond0: left promiscuous mode [ 203.849426][ T9449] bond_slave_0: left promiscuous mode [ 203.875396][ T9449] bond_slave_1: left promiscuous mode [ 203.890077][ T9449] veth0: left promiscuous mode [ 204.648849][ T9495] netlink: 'syz.3.1056': attribute type 10 has an invalid length. [ 204.665762][ T9495] hsr0: entered promiscuous mode [ 204.673764][ T9495] bridge0: port 4(hsr0) entered blocking state [ 204.681370][ T9495] bridge0: port 4(hsr0) entered disabled state [ 204.688078][ T9495] hsr0: entered allmulticast mode [ 204.693744][ T9495] hsr_slave_0: entered allmulticast mode [ 204.709966][ T9495] hsr_slave_1: entered allmulticast mode [ 204.722805][ T9495] bridge0: port 4(hsr0) entered blocking state [ 204.729138][ T9495] bridge0: port 4(hsr0) entered forwarding state [ 204.754398][ T9499] dvmrp0: entered allmulticast mode [ 204.802364][ T9500] netlink: 'syz.3.1056': attribute type 27 has an invalid length. [ 205.646421][ T9536] bond6: ARP target 9.0.0.0 is already present [ 205.653997][ T9536] bond6: option arp_ip_target: invalid value (9) [ 205.697015][ T9536] bond6 (unregistering): Released all slaves [ 205.763185][ T9546] tipc: Started in network mode [ 205.783190][ T9546] tipc: Node identity ac14140f, cluster identity 4711 [ 205.813734][ T9546] tipc: Enabled bearer , priority 10 [ 206.293804][ T9570] netlink: 'syz.3.1083': attribute type 64 has an invalid length. [ 206.498714][ T9577] bond6 (unregistering): Released all slaves [ 206.617445][ T9580] __nla_validate_parse: 8 callbacks suppressed [ 206.617464][ T9580] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1088'. [ 206.644892][ T9583] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1089'. [ 206.836294][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1091'. [ 206.923325][ T9599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1091'. [ 206.981483][ T9604] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1091'. [ 207.041305][ T798] tipc: Node number set to 2886997007 [ 207.084362][ T9599] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 207.123840][ T9599] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 207.178577][ T9599] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 207.185528][ T9604] bridge0: port 3(syz_tun) entered disabled state [ 207.291681][ T9604] syz_tun (unregistering): left allmulticast mode [ 207.298403][ T9604] syz_tun (unregistering): left promiscuous mode [ 207.315272][ T9604] bridge0: port 3(syz_tun) entered disabled state [ 207.664655][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 207.931345][ T9634] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 207.962731][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 207.983469][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 208.537954][ T9661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1112'. [ 208.624034][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1114'. [ 208.648059][ T9667] 8021q: VLANs not supported on ip_vti0 [ 208.663227][ T9666] 8021q: VLANs not supported on ip_vti0 [ 209.011870][ T9682] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 210.222680][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.355687][ T9728] vlan2: entered allmulticast mode [ 210.373117][ T9728] vlan0: entered allmulticast mode [ 210.409672][ T9728] veth0_vlan: entered allmulticast mode [ 211.208469][ T9770] syzkaller1: entered promiscuous mode [ 211.243482][ T9770] syzkaller1: entered allmulticast mode [ 211.744260][ T9706] Bluetooth: hci2: command 0x0406 tx timeout [ 211.751382][ T7031] Bluetooth: hci0: command 0x0406 tx timeout [ 211.757465][ T7031] Bluetooth: hci3: command 0x0406 tx timeout [ 211.763673][ T9706] Bluetooth: hci1: command 0x0406 tx timeout [ 211.856581][ T9800] syzkaller0: entered promiscuous mode [ 211.893482][ T9800] syzkaller0: entered allmulticast mode [ 212.265238][ T9819] __nla_validate_parse: 4 callbacks suppressed [ 212.265251][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1152'. [ 212.281779][ T9819] netem: incorrect ge model size [ 212.286964][ T9819] netem: change failed [ 214.631554][ T9785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.931681][ T9847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1159'. [ 215.215247][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1162'. [ 215.354758][ T30] audit: type=1804 audit(1776221539.858:3): pid=9863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1162" name="/newroot/224/cgroup.controllers" dev="tmpfs" ino=1172 res=1 errno=0 [ 215.434711][ T30] audit: type=1800 audit(1776221539.878:4): pid=9863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1162" name="cgroup.controllers" dev="tmpfs" ino=1172 res=0 errno=0 [ 215.492900][ T9868] openvswitch: netlink: Key type 348 is out of range max 32 [ 215.666313][ T9874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1166'. [ 215.911889][ T9890] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1172'. [ 216.112045][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1169'. [ 216.159203][ T9901] dummy0: entered allmulticast mode [ 216.169321][ T9901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1174'. [ 216.184923][ T9901] netlink: 536 bytes leftover after parsing attributes in process `syz.4.1174'. [ 216.935234][ T798] IPVS: starting estimator thread 0... [ 217.040516][ T9907] IPVS: using max 38 ests per chain, 91200 per kthread [ 218.641978][ T9874] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.955770][ T9930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 218.971903][ T9926] syzkaller0: entered promiscuous mode [ 218.998214][ T9926] syzkaller0: entered allmulticast mode [ 219.211452][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1185'. [ 219.828426][ T9959] IPVS: Scheduler module ip_vs_ not found [ 219.981422][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1192'. [ 220.612606][ T9990] netlink: 'syz.1.1199': attribute type 1 has an invalid length. [ 220.845742][ T9990] 8021q: adding VLAN 0 to HW filter on device bond7 [ 220.928179][ T9998] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1201'. [ 220.999815][ T9990] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1199'. [ 221.065817][ T9991] bond7: (slave veth3): Enslaving as an active interface with a down link [ 221.165507][ T9993] bond7: (slave dummy0): making interface the new active one [ 221.204529][ T9993] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 221.244669][T10004] netlink: 324 bytes leftover after parsing attributes in process `syz.3.1203'. [ 221.305326][ T9990] bond7: (slave dummy0): Releasing active interface [ 221.499534][T10012] netlink: 'syz.2.1205': attribute type 1 has an invalid length. [ 221.915242][T10030] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1215'. [ 221.961737][T10030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.040422][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1216'. [ 222.078107][T10040] netlink: 'syz.0.1216': attribute type 1 has an invalid length. [ 222.112153][T10040] netlink: 'syz.0.1216': attribute type 2 has an invalid length. [ 222.170562][T10041] batman_adv: batadv0: Adding interface: gretap1 [ 222.197800][T10041] batman_adv: batadv0: The MTU of interface gretap1 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 222.224859][T10041] batman_adv: batadv0: Interface activated: gretap1 [ 222.735391][T10067] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1223'. [ 222.755658][ T6405] tipc: Subscription rejected, illegal request [ 222.947667][T10068] syzkaller0: entered promiscuous mode [ 222.969338][T10068] syzkaller0: entered allmulticast mode [ 223.690635][T10119] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1235'. [ 224.721037][T10128] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 224.729034][T10128] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1238'. [ 224.738340][T10128] netlink: 'syz.1.1238': attribute type 1 has an invalid length. [ 224.746843][T10128] netlink: 634 bytes leftover after parsing attributes in process `syz.1.1238'. [ 224.756299][T10128] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1238'. [ 225.180465][T10098] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1231'. [ 225.193354][T10098] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1231'. [ 225.209606][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1236'. [ 225.920259][T10160] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1246'. [ 226.018154][T10160] tipc: Enabling of bearer rejected, already enabled [ 226.556594][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 226.606802][T10182] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 226.865998][T10187] netlink: 27 bytes leftover after parsing attributes in process `syz.0.1253'. [ 227.541035][T10199] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 227.548448][T10199] IPv6: NLM_F_CREATE should be set when creating new route [ 227.555766][T10199] IPv6: NLM_F_CREATE should be set when creating new route [ 227.566192][T10199] lo: entered allmulticast mode [ 227.573339][T10199] tunl0: entered allmulticast mode [ 227.600609][T10199] gre0: entered allmulticast mode [ 227.665430][T10199] gretap0: entered allmulticast mode [ 227.706523][T10199] erspan0: entered allmulticast mode [ 227.735575][T10199] ip_vti0: entered allmulticast mode [ 227.741950][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 227.750880][T10199] ip6_vti0: entered allmulticast mode [ 227.758870][T10199] ve: entered allmulticast mode [ 227.765171][T10199] ip6tnl0: entered allmulticast mode [ 227.775768][T10199] ip6gre0: entered allmulticast mode [ 227.804187][T10199] syz_tun: entered allmulticast mode [ 227.817275][T10199] ip6gretap0: entered allmulticast mode [ 227.832565][T10199] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.840322][T10199] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.864669][T10199] bridge0: entered allmulticast mode [ 227.888754][T10199] vcan0: entered allmulticast mode [ 227.907426][T10199] bond0: entered allmulticast mode [ 227.920739][T10199] bond_slave_0: entered allmulticast mode [ 227.934784][T10199] bond_slave_1: entered allmulticast mode [ 227.969718][T10199] team0: entered allmulticast mode [ 227.976623][T10199] team_slave_1: entered allmulticast mode [ 228.057938][T10199] nlmon0: entered allmulticast mode [ 228.086558][T10199] caif0: entered allmulticast mode [ 228.121857][T10199] batadv0: entered allmulticast mode [ 228.170270][T10199] vxcan0: entered allmulticast mode [ 228.176565][T10199] vxcan1: entered allmulticast mode [ 228.240499][T10199] veth0: entered allmulticast mode [ 228.287858][T10199] veth1: entered allmulticast mode [ 228.313191][T10244] IPVS: set_ctl: invalid protocol: 46 127.0.0.1:20001 [ 228.627552][T10199] wg1: entered allmulticast mode [ 228.747733][T10199] wg2: entered allmulticast mode [ 228.810444][T10199] veth0_to_bridge: entered allmulticast mode [ 230.132481][T10199] veth1_to_bridge: entered allmulticast mode [ 230.195933][T10199] veth0_to_bond: entered allmulticast mode [ 230.260725][T10199] veth1_to_bond: entered allmulticast mode [ 230.295699][T10199] veth1_to_team: entered allmulticast mode [ 230.323844][T10252] netlink: 'syz.2.1267': attribute type 1 has an invalid length. [ 230.361661][T10199] veth0_to_batadv: entered allmulticast mode [ 230.391631][T10199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.511617][T10199] batadv_slave_0: entered allmulticast mode [ 230.534944][T10199] veth1_to_batadv: entered allmulticast mode [ 230.581328][T10199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.588812][T10199] batadv_slave_1: entered allmulticast mode [ 230.616112][T10261] __nla_validate_parse: 3 callbacks suppressed [ 230.616133][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 230.641978][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1270'. [ 230.656418][T10199] xfrm0: entered allmulticast mode [ 230.673907][T10199] veth0_to_hsr: entered allmulticast mode [ 230.685859][T10199] hsr_slave_0: entered allmulticast mode [ 230.714246][T10199] veth1_to_hsr: entered allmulticast mode [ 230.832197][T10199] hsr_slave_1: entered allmulticast mode [ 230.873021][T10199] hsr0: entered allmulticast mode [ 230.910007][T10199] veth1_vlan: entered allmulticast mode [ 230.942219][T10199] veth0_vlan: entered allmulticast mode [ 231.025691][T10199] vlan0: entered allmulticast mode [ 231.040065][T10199] vlan1: entered allmulticast mode [ 231.055994][T10199] macvlan0: entered allmulticast mode [ 231.079596][T10199] macvlan1: entered allmulticast mode [ 231.092119][T10199] ipvlan0: entered allmulticast mode [ 231.097553][T10199] ipvlan1: entered allmulticast mode [ 231.113492][T10199] veth1_macvtap: entered allmulticast mode [ 231.125571][T10199] veth0_macvtap: entered allmulticast mode [ 231.148466][T10199] macvtap0: left promiscuous mode [ 231.154856][T10199] macvtap0: entered allmulticast mode [ 231.164743][T10199] macsec0: entered allmulticast mode [ 231.185989][T10199] geneve0: entered allmulticast mode [ 231.192497][T10199] geneve1: left promiscuous mode [ 231.197646][T10199] geneve1: entered allmulticast mode [ 231.213274][T10199] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 231.227427][T10199] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 231.257942][T10199] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 231.271016][T10199] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 231.281009][T10199] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 231.289027][T10199] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 231.296789][T10199] bond1: left promiscuous mode [ 231.302988][T10199] bond1: entered allmulticast mode [ 231.315780][T10199] bond2: entered allmulticast mode [ 231.321782][T10199] geneve2: entered allmulticast mode [ 231.336073][T10199] ip6gre1: entered allmulticast mode [ 231.342517][T10199] ip6_vti1: entered allmulticast mode [ 231.348141][T10199] bridge1: entered allmulticast mode [ 231.353793][T10199] mac80211_hwsim hwsim15 wlan2: entered allmulticast mode [ 231.361643][T10199] ipvlan2: entered allmulticast mode [ 231.367581][T10199] bond3: left promiscuous mode [ 231.373370][T10199] bridge2: left promiscuous mode [ 231.386902][T10199] bond4: entered allmulticast mode [ 231.392298][T10199] vxlan0: entered allmulticast mode [ 231.401877][T10199] vxlan0: left promiscuous mode [ 231.415494][T10199] bridge3: entered allmulticast mode [ 231.431386][T10199] veth2: entered allmulticast mode [ 231.436682][T10199] veth3: entered allmulticast mode [ 231.443416][T10199] bond5: entered allmulticast mode [ 231.448634][T10199] bridge4: entered allmulticast mode [ 231.455754][T10199] veth4: entered allmulticast mode [ 231.461921][T10199] veth5: entered allmulticast mode [ 231.469205][T10199] bridge5: entered allmulticast mode [ 231.475060][T10199] veth6: entered allmulticast mode [ 231.482471][T10199] veth7: entered allmulticast mode [ 231.601238][ T6405] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.619521][ T6405] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 231.736664][ T6405] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.752197][ T6405] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 231.822418][ T6405] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.865352][ T6405] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 231.902682][ T6396] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.916232][ T6396] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 231.972699][T10293] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1276'. [ 232.079052][T10298] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.1278'. [ 232.094553][T10300] netlink: 'syz.1.1279': attribute type 1 has an invalid length. [ 232.278278][T10300] bond8: entered promiscuous mode [ 232.285054][T10300] 8021q: adding VLAN 0 to HW filter on device bond8 [ 232.302227][T10303] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 232.315004][T10303] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 232.325753][T10303] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 233.352043][T10338] bond5 (unregistering): Released all slaves [ 233.486715][T10349] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1294'. [ 233.620109][T10365] syzkaller1: entered promiscuous mode [ 233.629414][T10365] syzkaller1: entered allmulticast mode [ 233.765516][T10371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 233.814281][T10371] veth5: entered promiscuous mode [ 234.025673][T10382] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 234.565825][T10414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1316'. [ 234.584492][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1316'. [ 234.597200][T10414] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1316'. [ 234.664340][ T6405] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.677851][ T6405] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.687485][ T6405] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.701834][ T6405] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 234.816190][T10417] netlink: 'syz.1.1318': attribute type 6 has an invalid length. [ 234.826146][T10417] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1318'. [ 235.146109][T10438] batadv_slave_1: entered promiscuous mode [ 235.420730][T10440] batadv_slave_1: left promiscuous mode [ 235.447351][T10446] syzkaller0: entered promiscuous mode [ 235.453609][T10446] syzkaller0: entered allmulticast mode [ 236.181119][T10471] __nla_validate_parse: 8 callbacks suppressed [ 236.181141][T10471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 236.491196][T10487] netlink: 'syz.4.1339': attribute type 1 has an invalid length. [ 236.529893][T10487] bond6: entered promiscuous mode [ 236.535541][T10487] 8021q: adding VLAN 0 to HW filter on device bond6 [ 236.645938][T10487] bond6: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 236.668944][T10487] bond6: (slave ipvlan3): The slave device specified does not support setting the MAC address [ 236.683213][T10487] bond6: (slave ipvlan3): Setting fail_over_mac to active for active-backup mode [ 236.775736][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 236.802191][T10497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1343'. [ 237.234479][T10516] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1348'. [ 237.237465][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 237.279612][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 237.317472][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 237.353466][T10523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 237.362724][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 237.371829][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 237.401080][T10526] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 237.421993][T10526] CPU: 1 UID: 0 PID: 10526 Comm: syz.3.1353 Not tainted syzkaller #0 PREEMPT(full) [ 237.422022][T10526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 237.422036][T10526] Call Trace: [ 237.422046][T10526] [ 237.422055][T10526] dump_stack_lvl+0xe8/0x150 [ 237.422093][T10526] sysfs_warn_dup+0x8e/0xa0 [ 237.422126][T10526] sysfs_do_create_link_sd+0xc0/0x110 [ 237.422161][T10526] device_add_class_symlinks+0x1cf/0x240 [ 237.422197][T10526] device_add+0x475/0xb70 [ 237.422232][T10526] wiphy_register+0x1dc5/0x2dc0 [ 237.422277][T10526] ? __pfx_wiphy_register+0x10/0x10 [ 237.422302][T10526] ? __pfx_netdev_run_todo+0x10/0x10 [ 237.422325][T10526] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 237.422362][T10526] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 237.422392][T10526] ieee80211_register_hw+0x3d82/0x4a70 [ 237.422417][T10526] ? __lock_acquire+0x6b5/0x2cf0 [ 237.422471][T10526] ? ieee80211_register_hw+0x1911/0x4a70 [ 237.422526][T10526] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 237.422562][T10526] ? __hrtimer_setup+0x181/0x200 [ 237.422592][T10526] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 237.422620][T10526] mac80211_hwsim_new_radio+0x3334/0x5ba0 [ 237.422687][T10526] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 237.422719][T10526] ? kstrndup+0xbf/0x160 [ 237.422760][T10526] hwsim_new_radio_nl+0xf6a/0x1c00 [ 237.422820][T10526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 237.422865][T10526] ? rcu_is_watching+0x15/0xb0 [ 237.422896][T10526] ? trace_kmalloc+0x2a/0x110 [ 237.422929][T10526] ? __nla_parse+0x40/0x60 [ 237.422959][T10526] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 237.422985][T10526] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 237.423020][T10526] genl_family_rcv_msg_doit+0x22a/0x330 [ 237.423054][T10526] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 237.423095][T10526] ? bpf_lsm_capable+0x9/0x20 [ 237.423126][T10526] ? security_capable+0x7e/0x2c0 [ 237.423167][T10526] genl_rcv_msg+0x61c/0x7a0 [ 237.423200][T10526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.423223][T10526] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 237.423273][T10526] netlink_rcv_skb+0x232/0x4b0 [ 237.423305][T10526] ? __pfx_genl_rcv_msg+0x10/0x10 [ 237.423330][T10526] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 237.423379][T10526] ? down_read+0x272/0x2e0 [ 237.423405][T10526] ? genl_rcv+0xd/0x40 [ 237.423437][T10526] genl_rcv+0x28/0x40 [ 237.423457][T10526] netlink_unicast+0x75c/0x8e0 [ 237.423498][T10526] netlink_sendmsg+0x813/0xb40 [ 237.423539][T10526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 237.423575][T10526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 237.423599][T10526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 237.423629][T10526] ____sys_sendmsg+0x972/0x9f0 [ 237.423662][T10526] ? futex_unqueue+0x211/0x240 [ 237.423699][T10526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 237.423744][T10526] ? import_iovec+0x73/0xa0 [ 237.423775][T10526] ___sys_sendmsg+0x2a5/0x360 [ 237.423816][T10526] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.423864][T10526] ? futex_wait+0x29a/0x380 [ 237.423929][T10526] ? __fget_files+0x2a/0x420 [ 237.423948][T10526] ? __fget_files+0x3a0/0x420 [ 237.423980][T10526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 237.424017][T10526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 237.424061][T10526] ? rcu_is_watching+0x15/0xb0 [ 237.424108][T10526] do_syscall_64+0x14d/0xf80 [ 237.424134][T10526] ? trace_irq_disable+0x3b/0x150 [ 237.424153][T10526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.424175][T10526] ? clear_bhb_loop+0x40/0x90 [ 237.424202][T10526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.424224][T10526] RIP: 0033:0x7f6b4639c819 [ 237.424245][T10526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.424263][T10526] RSP: 002b:00007f6b472fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.424287][T10526] RAX: ffffffffffffffda RBX: 00007f6b46616090 RCX: 00007f6b4639c819 [ 237.424303][T10526] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000007 [ 237.424317][T10526] RBP: 00007f6b46432c91 R08: 0000000000000000 R09: 0000000000000000 [ 237.424330][T10526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 237.424343][T10526] R13: 00007f6b46616128 R14: 00007f6b46616090 R15: 00007ffe11efce08 [ 237.424380][T10526] [ 237.928019][T10532] netlink: 'syz.1.1356': attribute type 4 has an invalid length. [ 238.171395][T10540] netlink: 'syz.1.1359': attribute type 1 has an invalid length. [ 238.333335][T10540] bond9: entered promiscuous mode [ 238.351893][T10540] 8021q: adding VLAN 0 to HW filter on device bond9 [ 238.400036][T10547] bond9: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 238.417467][T10555] netlink: 'syz.3.1362': attribute type 1 has an invalid length. [ 238.434393][T10547] bond9: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 238.445163][T10547] bond9: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 238.512606][T10555] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 239.455047][ T7032] Bluetooth: hci4: link tx timeout [ 239.472878][ T7032] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 239.904557][T10609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 239.992530][T10611] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 240.005279][T10609] tipc: Enabled bearer , priority 0 [ 240.043797][T10608] tipc: Disabling bearer [ 240.394395][T10611] netlink: 'syz.0.1385': attribute type 11 has an invalid length. [ 240.658239][T10637] netlink: 'syz.2.1396': attribute type 1 has an invalid length. [ 240.730652][T10642] netlink: 'syz.1.1395': attribute type 1 has an invalid length. [ 240.760305][T10637] bond5: entered promiscuous mode [ 240.769511][T10637] 8021q: adding VLAN 0 to HW filter on device bond5 [ 240.787672][T10643] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.806055][T10643] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 240.817017][T10643] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 240.831418][T10646] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 240.903517][T10642] bond10: entered promiscuous mode [ 240.909089][T10642] 8021q: adding VLAN 0 to HW filter on device bond10 [ 240.987063][T10644] bond10: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 241.008672][T10644] bond10: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 241.023284][T10644] bond10: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 241.229183][T10657] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 241.308362][T10657] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 241.398137][T10668] __nla_validate_parse: 7 callbacks suppressed [ 241.398156][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1403'. [ 241.501332][ T7032] Bluetooth: hci4: command 0x0405 tx timeout [ 241.891159][T10681] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 242.608800][T10700] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1414'. [ 242.726880][T10707] syzkaller0: entered promiscuous mode [ 242.776806][T10707] syzkaller0: entered allmulticast mode [ 242.914679][T10708] netlink: 'syz.2.1417': attribute type 6 has an invalid length. [ 243.093133][T10723] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 243.102282][T10723] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1422'. [ 243.114344][T10723] netlink: 'syz.3.1422': attribute type 1 has an invalid length. [ 243.124754][T10723] netlink: 638 bytes leftover after parsing attributes in process `syz.3.1422'. [ 243.161303][T10723] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1422'. [ 243.404507][T10740] netlink: 27 bytes leftover after parsing attributes in process `syz.1.1425'. [ 243.454117][T10738] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1427'. [ 243.667562][T10746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1429'. [ 243.743822][T10748] syzkaller1: entered promiscuous mode [ 243.759541][T10748] syzkaller1: entered allmulticast mode [ 243.891453][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1433'. [ 244.017572][T10757] netlink: 'syz.4.1434': attribute type 10 has an invalid length. [ 244.061860][T10757] netlink: 'syz.4.1434': attribute type 10 has an invalid length. [ 244.073529][T10757] dummy0: left allmulticast mode [ 244.094406][T10757] team0: Port device dummy0 removed [ 244.118244][T10757] dummy0: entered allmulticast mode [ 244.124609][T10757] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 244.433489][T10770] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1439'. [ 244.503670][T10770] bridge0: entered promiscuous mode [ 244.530057][T10770] ip6gretap0: entered promiscuous mode [ 244.600261][T10219] [ 244.602655][T10219] ============================================ [ 244.608869][T10219] WARNING: possible recursive locking detected [ 244.615051][T10219] syzkaller #0 Not tainted [ 244.619486][T10219] -------------------------------------------- [ 244.625655][T10219] kworker/0:11/10219 is trying to acquire lock: [ 244.631918][T10219] ffff8880791acfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 244.641024][T10219] [ 244.641024][T10219] but task is already holding lock: [ 244.648412][T10219] ffff888029a5cfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 244.657650][T10219] [ 244.657650][T10219] other info that might help us debug this: [ 244.665738][T10219] Possible unsafe locking scenario: [ 244.665738][T10219] [ 244.673235][T10219] CPU0 [ 244.676550][T10219] ---- [ 244.679859][T10219] lock(&hsr->seqnr_lock); [ 244.684402][T10219] lock(&hsr->seqnr_lock); [ 244.689001][T10219] [ 244.689001][T10219] *** DEADLOCK *** [ 244.689001][T10219] [ 244.697170][T10219] May be due to missing lock nesting notation [ 244.697170][T10219] [ 244.705522][T10219] 13 locks held by kworker/0:11/10219: [ 244.711012][T10219] #0: ffff888032361148 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 244.721785][T10219] #1: ffffc90003757c40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 244.734989][T10219] #2: ffff8880372a6538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 244.744272][T10219] #3: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 244.753570][T10219] #4: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 244.762671][T10219] #5: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3980 [ 244.772663][T10219] #6: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 244.781882][T10219] #7: ffff888029a5cfb0 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 244.791450][T10219] #8: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xbb/0x2a80 [ 244.801009][T10219] #9: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3980 [ 244.811085][T10219] #10: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1990 [ 244.820465][T10219] #11: ffffffff8e75e600 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3980 [ 244.830548][T10219] #12: ffffffff8e75e5a0 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 244.839958][T10219] [ 244.839958][T10219] stack backtrace: [ 244.845986][T10219] CPU: 0 UID: 0 PID: 10219 Comm: kworker/0:11 Not tainted syzkaller #0 PREEMPT(full) [ 244.846015][T10219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 244.846030][T10219] Workqueue: mld mld_ifc_work [ 244.846061][T10219] Call Trace: [ 244.846069][T10219] [ 244.846077][T10219] dump_stack_lvl+0xe8/0x150 [ 244.846109][T10219] print_deadlock_bug+0x279/0x290 [ 244.846144][T10219] __lock_acquire+0x253f/0x2cf0 [ 244.846178][T10219] ? skb_network_protocol+0x23d/0x400 [ 244.846200][T10219] ? netif_skb_features+0xdf0/0x1480 [ 244.846222][T10219] lock_acquire+0xf0/0x2e0 [ 244.846249][T10219] ? hsr_dev_xmit+0x237/0x360 [ 244.846281][T10219] ? __pfx_netif_skb_features+0x10/0x10 [ 244.846302][T10219] ? hsr_dev_xmit+0x237/0x360 [ 244.846332][T10219] _raw_spin_lock_bh+0x36/0x50 [ 244.846354][T10219] ? hsr_dev_xmit+0x237/0x360 [ 244.846383][T10219] hsr_dev_xmit+0x237/0x360 [ 244.846413][T10219] ? hsr_dev_xmit+0x2d/0x360 [ 244.846444][T10219] dev_hard_start_xmit+0x2d8/0x870 [ 244.846473][T10219] __dev_queue_xmit+0x14d9/0x3980 [ 244.846499][T10219] ? __dev_queue_xmit+0x2b6/0x3980 [ 244.846522][T10219] ? ebt_do_table+0x2665/0x2830 [ 244.846544][T10219] ? ebt_do_table+0x2665/0x2830 [ 244.846568][T10219] ? __pfx___dev_queue_xmit+0x10/0x10 [ 244.846602][T10219] ? br_nf_post_routing+0x219/0xfe0 [ 244.846646][T10219] br_dev_queue_push_xmit+0x370/0x4b0 [ 244.846677][T10219] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 244.846708][T10219] NF_HOOK+0x360/0x3f0 [ 244.846738][T10219] ? NF_HOOK+0xa2/0x3f0 [ 244.846766][T10219] ? __pfx_NF_HOOK+0x10/0x10 [ 244.846793][T10219] ? ret_from_fork+0x51e/0xb90 [ 244.846822][T10219] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 244.846859][T10219] br_forward_finish+0xd3/0x130 [ 244.846886][T10219] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 244.846917][T10219] ? __pfx_br_forward_finish+0x10/0x10 [ 244.846946][T10219] NF_HOOK+0x360/0x3f0 [ 244.846976][T10219] ? NF_HOOK+0xa2/0x3f0 [ 244.847004][T10219] ? __pfx_NF_HOOK+0x10/0x10 [ 244.847040][T10219] ? __pfx_br_forward_finish+0x10/0x10 [ 244.847071][T10219] ? __skb_clone+0x483/0x7a0 [ 244.847089][T10219] ? br_handle_vlan+0x61/0x530 [ 244.847116][T10219] __br_forward+0x397/0x540 [ 244.847145][T10219] ? __pfx_br_forward_finish+0x10/0x10 [ 244.847177][T10219] br_flood+0x6ee/0xb80 [ 244.847213][T10219] ? br_dev_xmit+0x193/0x1990 [ 244.847235][T10219] br_dev_xmit+0x12bd/0x1990 [ 244.847257][T10219] ? br_dev_xmit+0x193/0x1990 [ 244.847283][T10219] ? __pfx_br_dev_xmit+0x10/0x10 [ 244.847310][T10219] ? netif_close_many+0x290/0x420 [ 244.847344][T10219] dev_hard_start_xmit+0x2d8/0x870 [ 244.847373][T10219] __dev_queue_xmit+0x14d9/0x3980 [ 244.847398][T10219] ? __dev_queue_xmit+0x2b6/0x3980 [ 244.847420][T10219] ? trace_kmem_cache_alloc+0x29/0xf0 [ 244.847444][T10219] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 244.847470][T10219] ? __pfx___dev_queue_xmit+0x10/0x10 [ 244.847491][T10219] ? __asan_memcpy+0x40/0x70 [ 244.847512][T10219] ? __pskb_copy_fclone+0x9c8/0xff0 [ 244.847533][T10219] ? __asan_memcpy+0x40/0x70 [ 244.847554][T10219] ? __pskb_copy_fclone+0x9c8/0xff0 [ 244.847581][T10219] ? hsr_create_tagged_frame+0x8cd/0xe10 [ 244.847602][T10219] ? hsr_addr_subst_dest+0x30d/0xa90 [ 244.847644][T10219] hsr_forward_skb+0x167e/0x2a80 [ 244.847665][T10219] ? ret_from_fork_asm+0x1a/0x30 [ 244.847701][T10219] ? hsr_forward_skb+0xbb/0x2a80 [ 244.847723][T10219] ? __pfx_hsr_forward_skb+0x10/0x10 [ 244.847744][T10219] ? do_raw_spin_lock+0x12b/0x2f0 [ 244.847767][T10219] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 244.847789][T10219] ? __pfx_netif_skb_features+0x10/0x10 [ 244.847811][T10219] ? hsr_dev_xmit+0x237/0x360 [ 244.847842][T10219] hsr_dev_xmit+0x242/0x360 [ 244.847870][T10219] ? hsr_dev_xmit+0x2d/0x360 [ 244.847901][T10219] dev_hard_start_xmit+0x2d8/0x870 [ 244.847929][T10219] __dev_queue_xmit+0x14d9/0x3980 [ 244.847955][T10219] ? __dev_queue_xmit+0x2b6/0x3980 [ 244.847981][T10219] ? __local_bh_enable_ip+0xd0/0x130 [ 244.848011][T10219] ? __pfx___dev_queue_xmit+0x10/0x10 [ 244.848032][T10219] ? neigh_connected_output+0x1ea/0x460 [ 244.848062][T10219] ? eth_header+0x11b/0x200 [ 244.848083][T10219] ? __asan_memcpy+0x40/0x70 [ 244.848115][T10219] ? ip6_output+0x126/0x550 [ 244.848140][T10219] ip6_output+0x340/0x550 [ 244.848167][T10219] ? __pfx_ip6_output+0x10/0x10 [ 244.848193][T10219] NF_HOOK+0x177/0x4f0 [ 244.848220][T10219] ? __pfx_NF_HOOK+0x10/0x10 [ 244.848247][T10219] ? __pfx_dst_output+0x10/0x10 [ 244.848273][T10219] ? lockdep_hardirqs_on+0x7a/0x110 [ 244.848298][T10219] ? __local_bh_enable_ip+0xd0/0x130 [ 244.848325][T10219] ? icmp6_dst_alloc+0x3a6/0x440 [ 244.848354][T10219] mld_sendpack+0x8b4/0xe40 [ 244.848381][T10219] ? look_up_lock_class+0x57/0x110 [ 244.848413][T10219] ? mld_sendpack+0x213/0xe40 [ 244.848438][T10219] ? __pfx_mld_sendpack+0x10/0x10 [ 244.848476][T10219] mld_ifc_work+0x835/0xe70 [ 244.848503][T10219] ? process_scheduled_works+0xa8d/0x18c0 [ 244.848532][T10219] process_scheduled_works+0xb6e/0x18c0 [ 244.848577][T10219] ? __pfx_process_scheduled_works+0x10/0x10 [ 244.848608][T10219] ? assign_work+0x3d5/0x5e0 [ 244.848643][T10219] worker_thread+0xa53/0xfc0 [ 244.848687][T10219] kthread+0x388/0x470 [ 244.848708][T10219] ? __pfx_worker_thread+0x10/0x10 [ 244.848735][T10219] ? __pfx_kthread+0x10/0x10 [ 244.848756][T10219] ret_from_fork+0x51e/0xb90 [ 244.848785][T10219] ? __pfx_ret_from_fork+0x10/0x10 [ 244.848812][T10219] ? __switch_to+0xc7d/0x1450 [ 244.848838][T10219] ? __pfx_kthread+0x10/0x10 [ 244.848858][T10219] ret_from_fork_asm+0x1a/0x30 [ 244.848899][T10219]