last executing test programs: 2m51.788698992s ago: executing program 4 (id=349): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "ff00000058b274e6d845167fefe42897ae48fc3c7b00000000ffa400fcff00", 0xb2, 0xc, 0x6, 0x6}, 0x3c) 2m51.439645209s ago: executing program 4 (id=354): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xac}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x2}]}}, 0x0, 0x26, 0x0, 0x1, 0x7fffffff}, 0x28) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c"], 0x1c}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001800090400150000000000002d"], 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000611082000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m51.146770815s ago: executing program 4 (id=357): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x64}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a0001000000000000000000802000000002fe00"], 0x1c}}, 0x0) 2m51.035046356s ago: executing program 4 (id=358): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000e80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f00000000c0)={0xd60, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x80000000, 0x46}}}}, [@NL80211_ATTR_TID_CONFIG={0x224, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x144, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0xfff, 0x2, 0xd53, 0xff, 0x6]}}]}, @NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0xfff, 0x7, 0xf, 0x40, 0x5, 0x3ff]}}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x8001, 0xe, 0xd, 0xffff, 0x4, 0xd, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa2b, 0x4, 0x3, 0x800, 0x100, 0x4638, 0x1, 0x7]}}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x3}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x42, 0x2, [{0x6, 0x8}, {0x1, 0x5}, {0x1, 0x5}, {0x6, 0x6}, {0x4, 0x4}, {0x7}, {0x4}, {0x3, 0x7}, {0x4, 0x2}, {0x0, 0x8}, {0x0, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x6, 0x6}, {0x2, 0x5}, {0x7, 0x3}, {0x6, 0x3}, {0x0, 0x7}, {0x5, 0x3}, {0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0x9}, {0x4, 0x3}, {0x0, 0x8}, {}, {0x3}, {0x7}, {0x0, 0x1}, {0x2, 0xa}, {0x3, 0x1}, {0x6, 0x8}, {0x1, 0x9}, {0x4, 0x1}, {0x6}, {0x6, 0x7}, {0x2, 0x1}, {0x2, 0x6}, {0x4, 0x6}, {0x3, 0x5}, {0x2, 0x7}, {0x1, 0xa}, {0x3, 0xa}, {0x2, 0x4}, {0x6}, {0x6, 0x1}, {0x3, 0x8}, {0x6, 0x7}, {0x1, 0x1}, {0x4, 0x8}, {0x7, 0x9}, {0x0, 0x5}, {0x3, 0x8}, {0x3, 0x8}, {0x7, 0x3}, {0x3, 0x8}, {0x1, 0x6}, {0x5, 0xa}, {0x3, 0x2}, {0x7, 0x1}, {0x3, 0x2}, {0x1, 0x3}]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x3, 0x4}, {0x5, 0x4}, {0x0, 0x6}, {0x4}, {0x0, 0x8}, {0x0, 0x2}, {0x7, 0x7}, {0x2, 0x2}, {0x2, 0x1}, {0x1, 0x7}, {0x0, 0x5}, {0x7, 0x1}, {0x0, 0x9}, {0x3, 0x8}, {0x2, 0x3}, {0x3, 0x1}, {0x3, 0xa}, {0x7, 0x3}, {0x1, 0x6}, {0x3}, {0x1, 0x5}, {0x4, 0x4}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x3, 0xc, 0x5096, 0x7f, 0x2, 0xe]}}]}, @NL80211_BAND_60GHZ={0x34, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x2, 0x200, 0x2, 0xe000, 0x1, 0x1, 0x3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x3, 0x1, 0x7, 0x7, 0x5, 0x9]}}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x83}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x3, 0x3, 0x7, 0xfff, 0x2, 0x26, 0x8001]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x82}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x69}]}]}, @NL80211_ATTR_TID_CONFIG={0xb1c, 0x11d, 0x0, 0x1, [{0x70c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x3ac, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x7c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x101, 0x2b, 0x5, 0xf, 0xfd79, 0x1, 0x719]}}, @NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x60, 0x12, 0x5, 0x48, 0x24, 0x4, 0x30, 0x2, 0xb, 0x1, 0x48, 0x18, 0x3, 0x3, 0x48, 0x30, 0x9, 0xd, 0x24, 0x1b, 0x3, 0xc, 0x12, 0x9]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x9, 0x9, 0x9e5, 0x5, 0x6, 0xd]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4d6c, 0x4, 0x0, 0xcb05, 0x4, 0x6, 0x0, 0x6]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x80, 0x9, 0x9, 0x1, 0x6, 0xb, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd6f, 0x101, 0x0, 0x8001, 0x2, 0x0, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x6, 0x6, 0x60, 0x3, 0x36, 0x30, 0x1, 0x1e, 0x60, 0x6, 0x6, 0x30, 0x24, 0x3, 0x4, 0x3, 0x1b, 0x36, 0x46, 0x1b, 0x60, 0x18, 0x6, 0x6, 0x48, 0x3, 0x8]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0xf, 0x2, [{0x7, 0x7}, {0x0, 0x6}, {0x0, 0x3}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x6}, {0x6, 0x3}, {0x6, 0x6}, {0x4, 0x8}, {0x3, 0x1}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x3a, 0x2, [{0x2, 0x8}, {0x7, 0xa}, {0x3, 0x9}, {0x7, 0x8}, {0x7, 0x1}, {0x1, 0x7}, {0x6, 0x8}, {0x6, 0x5}, {0x3, 0x8}, {0x2, 0xa}, {0x2, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x8}, {0x5, 0x3}, {0x2, 0x4}, {0x2, 0x1}, {0x1}, {0x2, 0x7}, {0x5, 0x1}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x4}, {0x2, 0x1}, {0x2, 0x7}, {0x2, 0x8}, {0x7, 0x9}, {0x7, 0xa}, {0x1, 0x5}, {0x1, 0x5}, {0x5, 0x5}, {0x3, 0x7}, {0x1, 0x7}, {0x5, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x5, 0x7}, {0x3, 0x3}, {0x1}, {0x3, 0x7}, {0x0, 0x2}, {0x4, 0x9}, {0x3, 0xa}, {0x6, 0x5}, {0x1, 0x9}, {0x7, 0xa}, {0x1, 0x2}, {}, {0x0, 0x5}, {0x2, 0x9}, {0x0, 0x6}, {0x3, 0x3}, {0x3}, {0x4, 0xa}]}]}, @NL80211_BAND_60GHZ={0xdc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x4, 0x8}, {0x3, 0x9}, {0x6, 0x2}, {0x2, 0x4}, {0x4, 0x3}, {0x3, 0x5}, {0x1, 0x4}, {0x1, 0x9}, {0x1, 0x1}, {0x2, 0x8}, {0x2, 0x3}, {0x1}, {0x6, 0x2}, {0x3, 0x2}, {0x7, 0x8}, {0x6, 0x3}, {0x4, 0x8}, {0x6, 0x7}, {0x1, 0x5}, {0x3, 0x3}, {0x2, 0xa}, {0x7, 0x4}, {0x7, 0x1}, {0x1, 0x8}, {0x6, 0x3}, {0x3, 0x1}, {0x4, 0x7}, {0x0, 0x7}, {0x7, 0x7}, {0x3, 0x3}, {0x4, 0x1}, {0x4, 0x4}, {0x3, 0x3}, {0x1, 0x8}, {0x1, 0x5}, {0x1, 0x2}, {0x1, 0x9}, {0x2}, {0x3, 0x7}, {0x1, 0x7}, {0x0, 0x9}, {0x2, 0xa}, {0x4, 0x2}, {0x1, 0x7}, {0x1, 0x6}, {0x4}, {0x1, 0x4}, {0x5, 0xa}, {0x3, 0x9}, {0x2, 0x1}, {0x0, 0x2}, {0x7}, {0x2, 0x8}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x9, 0x3, 0x80, 0x1, 0x3f5, 0x10, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0xfff, 0x8000, 0x5, 0x5, 0x0, 0x7, 0xc1a9]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x24, 0xc, 0x2, 0x30, 0x6, 0x18, 0x60, 0x30, 0x24, 0x2b, 0x6, 0x5, 0x2, 0x48, 0x1b, 0x9, 0x16, 0x16, 0x1b, 0x36, 0x4, 0x48, 0x16, 0x0, 0x6, 0x36]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x8ce, 0xff81, 0xfff7, 0x2, 0x6, 0x7, 0x8]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x4, 0x9}, {0x7, 0x5}, {0x6, 0x1}, {0x4, 0x2}, {0x3, 0x5}, {0x3, 0x2}, {0x6, 0x1}, {0x1}, {0x7, 0x1}, {0x2, 0x7}, {0x1, 0x2}, {0x2, 0x4}, {0x0, 0xa}, {0x3}, {0x0, 0x3}, {0x7, 0x7}, {0x4, 0x8}, {0x1, 0x4}, {0x2, 0x4}, {0x6, 0x3}, {0x3, 0x8}, {0x1, 0x7}, {0x6, 0x2}, {0x0, 0x3}, {0x7, 0x1}, {0x2, 0x9}, {0x4}, {0x7}, {0x6, 0x8}, {0x2, 0x7}, {0x3, 0x5}, {0x7}, {0x7, 0xa}]}]}, @NL80211_BAND_2GHZ={0xb4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x46, 0x2, [{0x1, 0x3}, {0x5, 0x1}, {0x1, 0x6}, {0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x0, 0x8}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x3}, {0x7, 0xa}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0x6}, {0x4}, {0x1, 0x1}, {0x1, 0x4}, {0x4, 0x3}, {0x5, 0x8}, {0x3, 0xa}, {0x0, 0x2}, {0x1, 0x1}, {0x1, 0x7}, {0x5, 0x6}, {0x2, 0x6}, {0x1, 0x5}, {0x5, 0x3}, {0x2, 0x18}, {0x4, 0x5}, {0x7, 0x3}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x2, 0x3}, {0x6, 0x5}, {0x0, 0x3}, {0x6, 0x9}, {0x5}, {0x4, 0x9}, {0x2, 0x2}, {0x7, 0x2}, {0x2, 0x4}, {0x5, 0x1}, {0x5, 0x3}, {0x3, 0x7}, {0x3, 0x3}, {0x6, 0xa}, {0x3, 0x2}, {0x0, 0x1}, {0x2}, {0x4, 0x3}, {0x5, 0x1}, {0x1, 0x2}, {0x7}, {0x2, 0x3}, {0x7, 0x3}, {0x5, 0x1f}, {0x3, 0x9}, {0x2, 0xa}, {0x5, 0xa}, {0x1, 0x9}, {0x3, 0x8}, {0x5, 0x1}, {0x3, 0xa}, {0x1, 0x8}, {0x6, 0x6}]}, @NL80211_TXRATE_HT={0x36, 0x2, [{0x6, 0x4}, {0x6, 0x2}, {0x0, 0x8}, {0x6, 0x5}, {0x4, 0x2}, {0x3, 0x4}, {0x3, 0x5}, {0x3, 0x4}, {0x4}, {0x7, 0x7}, {0x1, 0x5}, {0x7, 0x5}, {0x7, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x6, 0x4}, {0x5, 0x3}, {0x7, 0x4}, {0x4}, {0x1, 0x2}, {0x0, 0x9}, {0x5, 0x4}, {0x7, 0x3}, {0x3, 0x6}, {0x1, 0x4}, {0x4, 0x8}, {0x1, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x6}, {0x1, 0x9}, {0x4, 0x9}, {0x2, 0x3}, {0x0, 0x9}, {0x0, 0x9}, {0x6, 0x8}, {0x7}, {0x3, 0x1}, {0x0, 0x4}, {0x4, 0x3}, {0x4}, {0x0, 0xa}, {0x0, 0x9}, {0x2, 0x5}, {0x3, 0x5}, {0x7, 0x4}, {0x1}, {0x4, 0x2}, {0x5, 0xa}, {0x2, 0x4}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xf73, 0x2f9c, 0xfff, 0x3, 0x0, 0xfffa, 0x9]}}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x5, 0x24, 0x1, 0x5, 0x1]}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xb, 0x6, 0x7, 0x8, 0x4, 0x24, 0xb, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x8, 0x7f, 0x0, 0x7ff, 0x1, 0x7, 0x800]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x90, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x2b, 0x2, [{0x2}, {0x6, 0x8}, {0x5, 0xa}, {0x1, 0x6}, {0x5, 0x6}, {0x3, 0x2}, {0x2, 0x9}, {0x2, 0x17}, {0x7, 0x2}, {0x3, 0x7}, {0x6, 0x7}, {0x6, 0x2}, {0x4, 0x5}, {0x5, 0xa}, {0x6, 0x2}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0x9}, {0x1, 0x2}, {0x0, 0x1}, {0x6, 0x7}, {0x2, 0x2}, {0x7}, {0x1, 0x2}, {0x6, 0x6}, {0x7, 0x5}, {0x4, 0x9}, {0x0, 0x6}, {0x3, 0x6}, {0x7, 0x5}, {0x7}, {0x5, 0x5}, {0x3, 0x9}, {0x2, 0x8}, {0x6, 0x3}, {0x0, 0xa}, {0x5, 0x7}, {0x6, 0x6}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x24, 0x2, [{0x0, 0x8}, {0x1, 0x8}, {0x6, 0x6}, {0x0, 0x5}, {0x6, 0x5}, {0x3, 0x6}, {0x3, 0x8}, {0x7, 0x7}, {0x3, 0xa}, {0x0, 0x2}, {0x0, 0x7}, {0x3, 0x7}, {0x7, 0xa}, {0x5, 0x7}, {0x4, 0xa}, {0x6}, {0x6, 0xa}, {0x7, 0x2}, {0x0, 0x2}, {0x4}, {0x3, 0x1}, {0x2, 0x12}, {0x1, 0x5}, {0x2, 0x9}, {0x6, 0x2}, {0x2, 0x2}, {0x0, 0x2}, {0x0, 0x7}, {0x0, 0x9}, {0x3}, {0x6, 0x9}, {0x5, 0xa}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x0, 0xa}, {0x4, 0x1}, {0x7, 0x4}, {0x2, 0x2}, {0x5, 0xa}, {0x4, 0x2}, {0x3, 0x7}, {0x4, 0x9}, {0x2}, {0x6, 0x6}, {0x0, 0x8}, {0x4, 0x8}, {0x3, 0x5}, {0x0, 0xa}, {}, {0x1, 0x9}, {0x6, 0x4}, {0x3, 0x9}, {0x1, 0x1}, {0x1, 0x8}, {0x7, 0x7}, {0x1, 0x8}, {}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0x9}, {0x1, 0x2}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x5, 0x5, 0x48, 0x18, 0x1, 0x2, 0x36, 0x16, 0x5, 0x1, 0x36, 0x6, 0x5]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x18}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x344, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xb0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xc9, 0x95, 0x3, 0x0, 0x0, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x7, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x4, 0x3}, {0x1, 0x2}, {0x0, 0x5}, {0x6, 0x1}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x6}, {0x1, 0x3}, {0x1, 0xa}, {0x3, 0x7}, {0x2, 0x2}, {0x1, 0x1}, {0x6, 0x5}, {0x4, 0x6}, {0x3, 0x5}, {0x7, 0x7}, {0x4, 0xa}, {0x4, 0x1}, {0x4, 0x5}, {0x4}, {0x0, 0x9}, {0x6, 0x9}, {0x6, 0x1}, {0x1, 0x1}, {0x2, 0xa}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x9}, {0x3, 0x3}, {0x0, 0x6}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0x6}, {0x1, 0x9}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0x8}, {0x1, 0x2}, {0x2, 0x5}, {0x4, 0x4}, {0x0, 0x5}, {0x1, 0x5}, {0x6, 0x4}, {0x5, 0x6}, {0x1, 0x8}, {0x1, 0x6}, {0x4, 0x6}, {0x1}, {0x7, 0x6}, {0x2, 0x6}, {0x2, 0x1}, {0x1, 0x5}, {0x1}, {0x3, 0x1}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0x9}, {0x5, 0x5}, {0x1, 0x7}, {0x5, 0x7}, {0x1, 0x1}, {0x2, 0x2}, {0x0, 0x4}, {0x5, 0x7}, {0x7, 0x3}, {0x5, 0x5}, {0x1, 0x7}, {0x3, 0x1}, {0x6, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x2}]}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x1, 0xa}, {0x5, 0xa}, {0x5, 0x2}, {0x2, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0xa}, {0x5, 0x2}, {0x1, 0xa}, {0x2, 0x8}, {0x6, 0x8}, {0x2, 0x7}, {0x1, 0x2}, {0x4, 0x7}, {0x3, 0x7}, {0x0, 0x5}, {0x2, 0xa}, {0x3, 0x1}, {0x0, 0x4}, {0x6, 0x1}, {0x2, 0x5}, {0x3, 0x7}, {0x1, 0x9}, {}, {0x0, 0x3}, {0x3, 0xa}, {0x2, 0x4}, {0x4, 0x8}, {}, {0x5, 0x9}, {0x0, 0x5}, {0x4, 0x9}, {0x6, 0x2}, {0x5, 0xa}, {0x6, 0x4}, {0x2, 0x2}, {0x1, 0xa}, {0x4, 0x3}, {0x5, 0x9}, {0x0, 0x3}, {0x2, 0x2}, {0x3, 0xa}, {0x3, 0x8}, {0x6, 0x8}, {0x4, 0x9}, {0x3, 0x8}, {0x5, 0x5}, {0x2, 0x7}, {0x0, 0x7}, {0x7, 0x1}]}]}, @NL80211_BAND_60GHZ={0x80, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x46, 0x2, [{0x1}, {0x1, 0x4}, {0x5, 0x9}, {0x5, 0x1}, {0x0, 0x6}, {0x4, 0x9}, {0x0, 0x7}, {0x5, 0x9}, {0x5, 0x4}, {0x2}, {0x3, 0x6}, {0x1, 0x4}, {0x1, 0x5}, {0x7, 0xa}, {0x0, 0x1}, {0x0, 0x7}, {0x4, 0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x6}, {0x1}, {0x1, 0x5}, {}, {0x6, 0x3}, {0x3, 0xa}, {0x1, 0x5}, {0x6, 0x4}, {0x3, 0x4}, {0x3, 0x18}, {0x7, 0x5}, {0x1, 0xa}, {0x7, 0x9}, {0x4, 0x4}, {0x2, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x3, 0x4}, {0x5, 0x8}, {0x6, 0x4}, {0x4, 0x1}, {0x0, 0x4}, {0x1, 0x2}, {0x4, 0x9}, {0x4, 0x4}, {0x5, 0x3}, {0x2, 0x6}, {0x2, 0x6}, {0x1, 0xa}, {0x2, 0x6}, {0x2}, {0x1, 0x6}, {0x2, 0x6}, {0x5, 0xa}, {0x7, 0x8}, {0x3, 0x3}, {0x7, 0x4}, {0x6, 0x1}, {0x7, 0xa}, {0x1, 0xa}, {0x7, 0x3}, {0x3, 0x7}, {0x1, 0x6}, {0x0, 0x5}, {0x1, 0x5}, {0x4, 0x1}, {}]}, @NL80211_TXRATE_HT={0xc, 0x2, [{0x0, 0x1}, {0x5, 0xa}, {0x3, 0x8}, {0x2, 0x4}, {0x3, 0x6}, {0x0, 0x8}, {0x6, 0x1}, {0x7, 0x6}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xde5, 0x8001, 0xfffb, 0x1, 0x6, 0x2, 0x4, 0x40]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x8, 0x7, 0x200, 0x1ff, 0x0, 0x2, 0x6]}}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x7, 0x7, 0xab4a, 0x5, 0x8, 0x7, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x0, 0x9}, {0x7, 0x6}, {0x1, 0x5}, {0x1, 0x1}, {0x1}, {0x6, 0x3}, {0x1, 0x5}, {0x5, 0x3}, {0x0, 0x7}, {0x4}, {0x6, 0x5}, {0x4, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x5, 0x8}, {0x6, 0x5}, {0x6, 0x6}, {0x0, 0x3}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x7}, {0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x2, 0x2}, {0x1, 0x3}, {0x2, 0x1c}, {0x2, 0x5}, {0x2, 0xa}, {0x2, 0x4}, {0x4, 0x7}, {0x4}, {0x2}, {0x0, 0x8}, {0x4, 0x3}, {0x2}, {0x7, 0x8}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x5}, {0x1, 0x1}, {0x7}, {0x2, 0x8}, {0x1, 0x5}, {0x3, 0xa}, {0x3, 0x7}, {0x5, 0x9}, {0x3, 0x6}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x8}, {0x2, 0x3}, {}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x7ff, 0x4, 0x8, 0x67, 0x0, 0x3, 0x5]}}]}, @NL80211_BAND_6GHZ={0x78, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6c, 0x18, 0x2, 0x48, 0x60, 0x3a, 0x16, 0x1b, 0x6, 0x1, 0x4, 0x12, 0x16, 0x3, 0x48, 0x5, 0x1b, 0x6c, 0x1b, 0x6, 0x6, 0x3, 0x18]}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x5, 0x3}, {}, {0x1}, {0x3, 0x2}, {0x4, 0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x4, 0x2}, {0x7, 0x9}, {0x3, 0x1d}, {0x1, 0x6}, {0x6, 0x4}, {0x5, 0x3}, {0x0, 0x4}, {0x0, 0x3}, {0x1, 0x4}, {0x1, 0x3}, {0x7, 0x8}, {0x2, 0x1}, {0x2, 0x9}, {0x4, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x6, 0x4}, {0x3, 0x6}, {0x5}, {0x0, 0x6}, {0x2, 0x9}, {0x2, 0x6}, {0x1, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x4}, {0x3, 0x5}, {}, {0x3, 0x9}, {0x0, 0x1}, {0x4, 0x4}, {0x6, 0x9}, {0x3, 0x8}, {0x1, 0x1}, {0x3, 0x6}, {0x1, 0x7}, {0x1, 0x2}, {0x2, 0x9}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x2, 0x0, 0xa, 0x80, 0x1, 0x6, 0x1ff]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x36, 0x5, 0x48, 0xc, 0xf5, 0x12, 0x52, 0xb, 0x2, 0x6c, 0x24, 0x6]}]}, @NL80211_BAND_60GHZ={0xc, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x58, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x30, 0x3, 0x30, 0x2, 0x3f, 0xb, 0x5, 0x3, 0x9, 0x29, 0xc, 0x2, 0x12, 0x3]}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x60, 0x1, 0x4, 0x1, 0x2, 0x9, 0x1b, 0x6c, 0x36, 0x6, 0x4, 0x24, 0x12, 0x5, 0xc, 0x9, 0x60, 0x24, 0x2]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x7fff, 0x6, 0x8000, 0xfff8, 0x8, 0x5d0, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x2, 0x8, 0x2, 0x1, 0x6, 0x5, 0xfffa]}}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x4613, 0x6, 0x2, 0x5, 0x8, 0x9f28, 0x3, 0x7f]}}, @NL80211_TXRATE_HT={0x5, 0x2, [{0x3, 0x1}]}, @NL80211_TXRATE_HT={0x2f, 0x2, [{0x0, 0x6}, {0x1, 0x3}, {0x1, 0x8}, {0x1, 0x8}, {0x1}, {0x4, 0x8}, {0x1, 0x7}, {0x1, 0x7}, {0x5, 0x7}, {0x4, 0xa}, {0x1, 0x9}, {0x2, 0x9}, {0x1, 0x9}, {0x5, 0x7}, {0x4, 0x1}, {0x1, 0x7}, {0x2, 0x1}, {0x1, 0x6}, {0x1}, {0x0, 0x3}, {0x7, 0x7}, {}, {0x2, 0xa}, {0x4, 0x1}, {0x3, 0x9}, {0x6, 0x2}, {0x0, 0x4}, {0x2, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x0, 0x4}, {0x7, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0xa}, {0x4, 0x4}, {0x6, 0x8}, {0x1, 0x1}, {0x5, 0x3}, {0x3, 0x9}, {0x0, 0x6}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x9, 0xfffd, 0x9, 0x339, 0x9, 0xfcbe, 0xf1]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x18, 0x10d271e371dadf2d, 0xab1d18772803fad9, 0x3, 0x60, 0x78, 0xc, 0x16, 0x24, 0x3, 0x12, 0xc, 0x1b, 0x60]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x11, 0x1, [0x30, 0x30, 0x30, 0x4, 0x12, 0x6c, 0x24, 0x30, 0x4, 0x9, 0x1, 0x60, 0x2]}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x67}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x38}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xa}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x58, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5f}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x58}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x7fffffff}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}, {0x120, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x108, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x0, 0x8001, 0x3ff, 0x6, 0xd, 0x4, 0x4]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0x38f, 0x1, 0x9, 0x8001, 0x5, 0x9f91]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x12, 0x1, 0x6, 0x18, 0x9, 0x3, 0x16, 0x2, 0x48, 0x16, 0x6, 0x20, 0x18, 0x30, 0x36, 0x4, 0x16, 0x36, 0x6, 0x48, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x0, 0x5}, {0x4}, {0x2, 0x1}, {0x5, 0x6}, {0x5, 0x8}, {0x4, 0x9}, {0x0, 0x9}, {0x5, 0x6}, {0x3, 0x7}, {0x4, 0x3}, {0x4, 0x5}, {0x2, 0x7}, {0x0, 0xa}, {0x6, 0xa}, {0x7, 0x9}, {0x5, 0x9}, {0x1, 0x8}, {0x6, 0x3}, {0x4, 0xa}, {0x0, 0x7}, {0x3, 0x5}, {0x7}, {0x2, 0x1}, {0x3}, {0x3, 0x7}, {0x0, 0x6}, {0x2, 0xa}, {0x7, 0x2}, {0x6, 0x8}, {0x6, 0x1}, {0x1, 0x4}, {0x1, 0xa}, {0x0, 0x4}, {0x1, 0x5}]}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x7, 0x8}, {0x4, 0x1}, {0x6, 0x1}, {0x0, 0x7}, {0x7}, {0x7, 0x1}, {}, {0x2, 0x7}, {0x6, 0x9}, {0x0, 0xa}, {0x7, 0x7}, {0x5, 0xa}, {0x4, 0x3}, {0x4, 0x7}, {0x7, 0x3}, {0x1, 0x1}, {0x2}, {0x0, 0x4}, {0x7, 0x7}, {0x0, 0x2}, {0x0, 0x9}, {0x3, 0x1}, {0x1, 0x3}, {0x7, 0x7}, {0x7, 0x6}, {0x7, 0x7}, {0x0, 0x6}, {0x3, 0x1}, {0x1, 0x4}, {0x5, 0x8}, {0x0, 0x7}, {0x7, 0x6}, {0x2, 0x8}, {0x4, 0x3}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0xa}, {0x4, 0x7}, {0x2, 0x9}, {0x2, 0xa}, {0x0, 0x5}, {0x4, 0x1}, {0x7, 0x6}, {0x1, 0x3}, {0x0, 0x8}, {0x3, 0x5}, {0x5, 0x2}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x3}, {0x2, 0x8}, {0x3, 0xa}, {0x1}, {0x5, 0x8}, {0x5, 0x9}, {0x5, 0x8}, {0x0, 0x7}, {0x6}, {0x6, 0x5}, {0x2, 0x3}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x9, 0x400, 0x7, 0xfff8, 0x6, 0x2]}}]}]}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x771}]}, {0x238, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x21c, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x400, 0x8, 0x7, 0x2, 0x1, 0xe, 0x7, 0x40]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf, 0x3, 0x4, 0x1b, 0x7ed6, 0x5, 0x9, 0x4]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x2, 0x6c, 0x6, 0x5, 0x60, 0x90, 0x30, 0xb, 0xc, 0x18, 0x4, 0x18, 0x1, 0x9, 0x4, 0x16, 0x0, 0x1b, 0x30, 0xc, 0x4, 0x48, 0x6, 0x48, 0x18, 0x1, 0x36, 0x60]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x3, 0x1, 0x0, 0x40]}}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x5, 0x1b, 0xc, 0x18, 0x5, 0x30, 0x6, 0x48, 0x24, 0x1b, 0x30, 0x3, 0x1b, 0x6, 0x6, 0xb, 0x6c, 0x3, 0x4, 0x5, 0x3, 0x12, 0x2, 0x60, 0x16, 0x60]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x21, 0x2, [{0x6, 0x8}, {0x4, 0x8}, {0x1, 0x3}, {0x2, 0xa}, {0x2, 0x4}, {0x3, 0x2}, {0x0, 0x8}, {0x6, 0x6}, {0x6, 0xa}, {0x7, 0x9}, {0x2, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x0, 0x4}, {0x5, 0x2}, {0x1, 0x9}, {0x0, 0x6}, {0x0, 0x8}, {0x7, 0x2}, {0x3, 0xa}, {0x2, 0x8}, {0x2, 0xa}, {0x7, 0x3}, {0x3, 0x4}, {0x1, 0x5}, {0x2, 0x9}, {0x3, 0x1}, {0x6, 0x5}, {0x4, 0x8}]}]}, @NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x5, 0x200, 0x1, 0xfff6, 0xa3b9, 0x8, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x58, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0xff, 0x8, 0x3, 0xfde2, 0x6, 0x8634]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x2f4, 0x7f, 0x2, 0xcb8f, 0x1, 0x7fff, 0x67]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x30, 0x18, 0x14, 0x4, 0x9, 0x18, 0x4, 0x16, 0x48, 0x6c, 0x1b, 0x21, 0x5, 0x16, 0x4, 0x48, 0x6, 0x24, 0x3, 0x2, 0x18]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xc, 0x9, 0x2, 0x101, 0xfff, 0x7fff, 0x5]}}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x7, 0x9}, {0x1, 0x6}, {0x3, 0x7}, {0x2, 0x5}, {0x0, 0x8}, {0x3, 0x1}, {0x6, 0xa}, {0x2, 0x1}, {0x0, 0x6}, {0x5, 0x8}, {0x1, 0x9}, {0x7, 0x2}, {0x1, 0x9}, {0x4, 0x1}, {0x2, 0x6}, {0x5, 0x1}, {0x1, 0x6}, {0x0, 0x5}, {0x3, 0x1}, {0x0, 0x2}, {0x2, 0x9}, {0x2, 0x1}, {0x5, 0x2}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x5}, {0x5, 0x7}, {0x0, 0x3}, {0x6, 0x9}, {0x4, 0x4}, {0x0, 0x1}, {0x4, 0x3}, {0x2, 0x8}]}, @NL80211_TXRATE_HT={0x1f, 0x2, [{0x1, 0x7}, {0x2, 0x9}, {0x6, 0x1}, {0x5, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x3, 0x2}, {0x2, 0x1}, {0x3, 0x3}, {0x3, 0x4}, {0x0, 0xa}, {0x4}, {0x3, 0x4}, {0x1, 0x9}, {0x5, 0x7}, {0x1, 0xa}, {0x3}, {0x6, 0x3}, {0x1, 0x2}, {0x3, 0x2}, {0x7, 0x3}, {0x5, 0x5}, {0x1, 0x4}, {0x3, 0x7}, {0x3, 0x5}, {0x0, 0x2}, {0x2, 0x6}]}]}, @NL80211_BAND_2GHZ={0x2c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x5, 0x1, [0x16]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}]}]}, 0xd60}, 0x1, 0x0, 0x0, 0x20}, 0x24008040) (async) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x30, r2, 0x0, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2ef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x14) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001000)={0x100, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x5}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xbc, 0xbe, "c73a26d5e10a5885e0a0b0576d5b4419ae5ee5eab8c2cf6bbbb901d013991742ce74c8990f6701e5400a6fb4649f0c2b303095cd40a06713b6418f27aebc1a8cfcb22ad55fd6d0d752aa713bef8ffe8526714448a764347f288865427d82157b8ba70a21f9191962452a77a03f11fa94ee67bb467443816f50fd0c9e9c6e7cd4637041f46af548819bc988528f7dc4e0baa06b6af1a72dde3f105d754dc2aded27d5d4955d299d990718976f49fee0cab04f61a726ea337f"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x1ed}, @NL80211_ATTR_STA_WME={0x4}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_CAPABILITY={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x100}, 0x1, 0x0, 0x0, 0x14}, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000011c0), r0) (async) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000001200)={@rand_addr, @empty, 0x0}, &(0x7f0000001240)=0xc) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001440)={'sit0\x00', &(0x7f0000001280)={'gre0\x00', 0x0, 0x7, 0x700, 0x1, 0x2, {{0x5c, 0x4, 0x3, 0x9, 0x170, 0x67, 0x0, 0xc, 0x29, 0x0, @broadcast, @broadcast, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x7f, 0x0, 0xe, [0x4, 0x4, 0x8001, 0x6]}, @lsrr={0x83, 0x17, 0x2e, [@loopback, @local, @multicast1, @multicast2, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0xf5, 0x3, 0xd, [{@empty, 0x54}, {@multicast1, 0xf}, {@private=0xa010102}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x3}, {@rand_addr=0x64010101, 0x6}]}, @timestamp={0x44, 0x10, 0xe4, 0x0, 0x5, [0xfffffffb, 0x5, 0xa30d]}, @cipso={0x86, 0x52, 0x0, [{0x2, 0x12, "4d4d187f8da830d403be50b024722d84"}, {0x1, 0x12, "b4a9348cafbc51a37d565d8a0c74ec60"}, {0x0, 0xa, "d75833b8ad38fa8c"}, {0x7, 0x4, "508a"}, {0x3, 0xf, "d570aebff4228d8876cd22cebb"}, {0x0, 0x8, "ce07b997f838"}, {0x6, 0x3, '~'}]}, @ssrr={0x89, 0xb, 0xfd, [@private=0xa010102, @multicast2]}, @timestamp_prespec={0x44, 0x14, 0x35, 0x3, 0x9, [{@broadcast, 0x8}, {@empty, 0xffffff20}]}, @cipso={0x86, 0x80, 0x3, [{0x7, 0xd, "a39eaf8964f496db44c5fb"}, {0x1, 0xa, "77c7aef5aa7a8a95"}, {0x5, 0x11, "9721ecac9542b9dda065db6aa02427"}, {0x2, 0xf, "5fb7d929632ea5e018a295c515"}, {0x6, 0x10, "fdf79d3b65adbfa342ded21fc687"}, {0x1, 0xa, "5ed74af3efe97b41"}, {0x6, 0x2}, {0x6, 0xf, "323caaf9e82439c86dc4bbac3a"}, {0x1, 0x7, "03744b3136"}, {0x1, 0x11, "37173619ffabcf253bb2a58cd02763"}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000001540)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x74, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000015c0), r1) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000016c0)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x54, r6, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x58004) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(r7, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x1c, r8, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004005) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001900)={&(0x7f0000001880)={0x44, r2, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "9c71da40ffbc165337d67bc4820c53bf"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0xfff0}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x80) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000019c0), r0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x34, r9, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x4}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001b00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x34, r2, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1c4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x8040) (async) r11 = socket(0x6, 0x800, 0x1) socket$netlink(0x10, 0x3, 0x4) (async) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001c40), r11) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000001ec0)={&(0x7f0000001c00), 0xc, &(0x7f0000001e80)={&(0x7f0000001c80)={0x1d4, r12, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x4c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6f55}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xbb7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffff13cf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x400}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, 0x716800}}}}]}, @TIPC_NLA_NODE={0x4c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "b01f82eea90f6c22d415fd520ed9d63e90e67533ad220cf6cc1548c564d5"}}]}, @TIPC_NLA_MEDIA={0x54, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x48f}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4008001}, 0x40000) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000001f40), r11) sendmsg$DEVLINK_CMD_GET(r13, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002000)={&(0x7f0000001f80)={0x6c, r14, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r11, 0x0, 0x10, &(0x7f00000020c0)={{{@in6=@initdev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@empty}}, &(0x7f00000021c0)=0xe8) (async) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000002200)=0x0) (async) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000002240)={0x0}, &(0x7f0000002280)=0xc) sendmsg$netlink(r13, &(0x7f00000028c0)={&(0x7f0000002080)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002580)=[{&(0x7f00000022c0)={0xf8, 0x19, 0x20, 0x70bd29, 0x25dfdbfd, "", [@nested={0xd0, 0x136, 0x0, 0x1, [@typed={0x8, 0x5f, 0x0, 0x0, @uid=r15}, @nested={0x4, 0x9}, @nested={0x4, 0x51}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0xb425}, @nested={0x4, 0x33}, @typed={0x8, 0x140, 0x0, 0x0, @pid=r16}, @typed={0x14, 0x13, 0x0, 0x0, @str='veth1_to_batadv\x00'}, @generic="9ca0f635103602e337253378ebff58ed615cce67facb65c1d04009a8f46d6526579e5bf88d92d0702b083a9ce092551e7525f275dc816ebfe4c039c1553fe705381ec6c458df55f21cb68bd82d8882f3b84454a12547c392a71780b2e62b1b00b50ca7c5064df126a9c7f55dccc154360e1f69a810f3aa031cc08551a435d3c684a0cae79806fecfc71a92f936472372"]}, @typed={0x8, 0xa9, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0x7b, 0x0, 0x0, @pid=r17}, @typed={0x8, 0x71, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0xf8}, {&(0x7f00000023c0)={0x19c, 0x2e, 0x300, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x10}, @generic="80c7e371601b75177445d53ea43bebf0e5eaf039c909eec71c6377cf9eedde78cd01af4b6d0a92301035ddc0c7384814782240387c9fed3f62df3f409ff233f15b06ee86b1739410f2fb9f6a5a8cdc850d0a8d0a0fd723ea7baca0b7dff22baf89d9937adb29f3026b5ca811bdb6586cae0b8544a20c16e2757796f483128b88a071cc06950f37876260f3ce41691e902831b2112dc10a373e24b63e9dece4a4f8adddca33564acbf0d911db74b3d3249ecf300c7364683ba38f42cecb2d6d508f230be4eb2670d8109a80aec24e0dd62c77d08ca92323c766a25fbf7414907933", @typed={0x8, 0xc7, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x6, 0xa6, 0x0, 0x0, @str='@\x00'}, @generic='Z', @generic="37d27040700e79fe23bd411147a7947baa488f547dd6b6ac3a076b3fe4138903039282933d0a1b0f8dcb212307af0f43880209bca89534d04566973e4e2b7eeed65eb2b9ad30f08450bedf7f7e52618e784deecf10e43fbb94a5effeb8f007692e859692b4cb30f4df9bc9020bf991f5ce17ebb98dc9c8a09297aa8fba518eee63f3b05d04955423b529dc61d2c7a01cdbb6"]}, 0x19c}], 0x2, &(0x7f0000002800)=[@rights={{0x2c, 0x1, 0x1, [r1, r1, r11, r13, r13, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, r11, r1, 0xffffffffffffffff, r1]}}, @cred={{0x1c}}], 0x98, 0x50}, 0x20008800) 2m50.914513264s ago: executing program 4 (id=360): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000440)={0xffffffffffffffff}) recvmsg$kcm(r1, &(0x7f0000000680)={&(0x7f0000000480)=@nl=@proc, 0x80, &(0x7f0000000980)=[{&(0x7f0000000500)=""/122, 0x7a}, {&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/189, 0xbd}, {&(0x7f0000000640)=""/9, 0x9}, {&(0x7f0000000700)=""/106, 0x6a}, {&(0x7f0000000780)=""/108, 0x6c}, {&(0x7f0000000800)=""/94, 0x5e}, {&(0x7f0000000880)=""/241, 0xf1}], 0x8, &(0x7f0000000a00)=""/115, 0x73}, 0x40) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x8000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x3, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r3, 0x301, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000006900097203000000fbdbdf2500000100000032098ce20a00"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20008090) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r6 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000140)={0x7, [0xc, 0x0, 0x4, 0x1ff, 0x3, 0x7, 0x3]}, &(0x7f0000000180)=0x12) r7 = socket$kcm(0x11, 0x5, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r8, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000100)=[{0x28, 0x0, 0xf9, 0xfffff030}, {0x4d, 0x0, 0x0, 0x3}, {0x6}]}, 0x10) sendmsg$kcm(r7, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xe00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x0) 2m50.448438272s ago: executing program 4 (id=365): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2b, 0x1, 0x2, 0x25dfdbfc, "", [@nested={0x107, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be"]}]}, 0x118}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 2m50.149528683s ago: executing program 32 (id=365): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x118, 0x2b, 0x1, 0x2, 0x25dfdbfc, "", [@nested={0x107, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be"]}]}, 0x118}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xe, &(0x7f0000003fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x171}, 0x48) 2.087988273s ago: executing program 1 (id=2729): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}, 0x104}, {{0x0, 0x0, 0x0}, 0x80000001}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f00000029c0)=""/190, 0xbe}, {&(0x7f00000028c0)=""/224, 0xe0}, {&(0x7f0000002b80)=""/4100, 0x1004}, {&(0x7f0000000340)=""/71, 0x47}, {&(0x7f00000000c0)=""/252, 0xfc}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0xb}, {{0x0, 0x0, 0x0}, 0x10001}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x7}], 0x9, 0x4022, 0x0) 1.852625782s ago: executing program 1 (id=2735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a3a0000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000054000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005080007006e61740014"], 0xf0}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) ioctl$TUNSETQUEUE(r1, 0x40086602, &(0x7f00000002c0)={'ipvlan0\x00'}) 1.227416745s ago: executing program 1 (id=2742): sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, 0x0, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000000)={0x4, 0x3}, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000180)=0x4) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r3, 0x8b32, &(0x7f0000000040)) 1.148542249s ago: executing program 2 (id=2743): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="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", 0x517}], 0x1, &(0x7f0000001600)}}], 0x1, 0x800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.148104383s ago: executing program 3 (id=2744): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x15, &(0x7f0000000080)={&(0x7f00000001c0)=@mpls_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x10, 0x0, 0xff, 0x0, 0xfe, 0x7}}, 0x1c}}, 0x20040800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000800)={'sit0\x00', @local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000001a00), r4) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x28, r5, 0x409, 0x70bd26, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0xc0d0}, 0x4028044) syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r0) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000006b0100000005000502000000000800030000000000"], 0x24}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00deff0f00010000000000000000160000000a20000000000a01010000000000000000050000000900010073797a30000e00005c000000030a03000000000000000000050000000900010073790500000000000000000012080003400000000014000300776c616e30000000000000000000000000000000000000000a", @ANYRES64, @ANYBLOB="b76acd9f85e90cfcd06f2d5e207ca8f3486155253a0c6d5369a27148d4a0c336fa22f25761232053c7aa0b47704cf11bfd4f72bfaf3680bcc8f8c8ab45cf3fdeb672e8d0963fd6f3505ab675e79e322a", @ANYRESOCT=r1, @ANYRES64=r1, @ANYRES8=r3, @ANYRES8=r6, @ANYRES64=r6], 0xa4}}, 0x0) sendmsg$inet(r3, &(0x7f00000007c0)={&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000240)="b3f21cc41d65a90b7d20c990c8bbaab7a2457fab3380ee7eb9a4eceadd97feda2c66d8d7ffb67e4d9d4d6d22a19bf3d38fa44bc5e7d7981e898b856590f555f5b5c7e8d235abfe93d197fed70412e1e68709236ad269d26a818f1bd9bf719dabd91a3468b783a1384d519e69564455bc280a904770d0ecc8f4d520430d0e28e5a7d2345ee471d7e54061bc22989811703843630ac18964c1de434cb75807589fdd61dd1f9702729f287ef677e1ab77195ae0509815061be824df7a98615ce0970b5c3511964baa99438402b1eab23fe1ad1edfabe741536576c7e853", 0xdc}, {&(0x7f0000000340)="1b21917427437f921cbf6f63acde5d83fc", 0x11}, {&(0x7f0000000380)="a68aabcc1c13a0c2690f00ed8b85fa5a3e7d8048ad8c91d01dd3d78e428c5b9e414b6358b5d229402f657603030dbb65e58dc80ed4acbf8ab762016087cdb70bf54a8b2c443a7aab1fb60a85944bac85d45733e212331fdd4069", 0x5a}, {&(0x7f0000000400)="98619ea54d68a9f2e1c6fc7077d1ba28462100cdc53674a6ab1b92431a93078cb6b0dd82bb47e7afcf6369f9aafeadcbe6b9ba79ba92f89bffeb226ac2f5a90cab679d5f545389508a2701f97e0bc419a723888e013b6a8012e33a7d1296f0bdbdc237d3a64b6695f53e576d6e9357313d4593635eef42bbe2c7521b1eac28831ae585a62c75abb4e4e39674ecf98fb93a69ea9feddd14f9e64532d537f94a336789e61e0aad7fe37033f011aa9feb39b6d58a63a787898be741e550c06abc9dc529ba1e8cb0e9147ec5a0f50e091d225686e3e26d258be1935737697f0d577dca4a02662741c2438b7588224f8d9343ac4ac850e204", 0xf6}, {&(0x7f0000000500)="e898dc95536c26e0140edb7e54fb98ccc642169ea4a8d5e8b526bb0bf7742713ab57c52b21895d6dc6cd334db3b42e4b98056fdb186e33f28e87dd38399485fc3d860b949dd13d70327fa25053b182268451b26018eb5ed4943ad30b52e75be889fe060c5ff24b23cb8e5af7d4a6eb0f2dbcfaefaf42ca", 0x77}, {&(0x7f0000000580)="ef564784b3e694a7adb2c44f803bce8d04334bb83691030b602a4791d0554e446a17045aec16a0062f0d", 0x2a}, {&(0x7f00000005c0)="fd9d73ab28529ff23c32fd8adc9098289445a87d217d4ca86167abd1bc22b9451a066d9f69c370ad6a61d946ada001c8fafa3b5169374a2c9881778aa84eebcb403631ca23c18a02a87baae3669128780f3f7145e6b95d81b3ef21677fd389c84906f153fcae21bc2e3951a7dd83dff2203b538c5cc70287299de316ed2ce7353087f6711f63ac465153dabc3b2f259619d3ac5afc5c8861edd54f68703ba03cebfd84d268657dceffa85c3c151a321de9f606d7d53265e5a104c4ba7e820e84bf723a873cb444", 0xc7}], 0x7, &(0x7f0000000740)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x34, 0x0, 0x7, {[@rr={0x7, 0x1b, 0xdf, [@broadcast, @dev={0xac, 0x14, 0x14, 0x2d}, @multicast1, @dev={0xac, 0x14, 0x14, 0x12}, @local, @rand_addr=0x64010101]}, @lsrr={0x83, 0x7, 0x6d, [@local]}, @end]}}}], 0x50}, 0x24000800) 1.097201192s ago: executing program 5 (id=2745): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r1, 0x200000000114, 0x8, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x69}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900010073797a30000000002c000000030a05000000000000000000020000000900010073797a30000000000900030073797a32"], 0x80}}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0xffffff63}], 0x1, 0x20}}], 0x48, 0x20000005}, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"/4117, @ANYRES32, @ANYBLOB="0800d400", @ANYRES32=0x0, @ANYBLOB="0400f48040001000a282ab1bf10b036d0c79b16f1a56074852dec6c1f9947257ac94b0783957b6e394f7fbcf1a8e4ecd55ede3b8f189ea8ec6f0e4eea10016b6c4e0ad3900000008008100", @ANYRES32, @ANYBLOB="0c0004800c4e", @ANYBLOB='-N'], 0x1084}, 0x1, 0x0, 0x0, 0xc000}, 0xc004) getsockname(r0, &(0x7f0000001240)=@in6={0xa, 0x0, 0x0, @initdev}, &(0x7f00000012c0)=0x80) syz_emit_ethernet(0x14, &(0x7f0000001500)={@local, @local, @void, {@generic={0x8863, "5aa772f37902"}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 1.064758142s ago: executing program 2 (id=2746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000480), &(0x7f00000004c0)=0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x5c, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0xc090) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x2, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, 0x11, 0x0, @empty=0x4000, @dev={0xac, 0x14, 0x14, 0x15}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@local, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1, 0x1000}, {}, {@loopback}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@local, 0x800}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x4}]}]}}}}}}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x400, 0xffffffff, 0x0, 0x1e0, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@dst={{0x48}, {0x4, 0x9, 0x1, [0x3, 0x8575, 0x9, 0xfff, 0x8, 0x101, 0x1, 0x101, 0x8, 0x5, 0x800, 0xb9e, 0x6, 0x8, 0x7, 0x4], 0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffffff, 0xffffff00], 0x4e24, 0x4e21, 0x4e21, 0x4e23, 0x8a, 0xffff, 0x5, 0x2, 0x3fd}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYRESHEX=r1], 0x50}, 0x1, 0x0, 0x0, 0x2041}, 0x40082) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c0000000107050000000000000000000a0000020c000640000000055f0000000c00064000000000000002000c00024000000000000000930900010073797a31000000000c000340000073797a3000"/92], 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 926.370363ms ago: executing program 2 (id=2747): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000004060103000000000000150b70e900040500010007000000050001000700000005000100070000000500010007c51487a2a86d17c300000005000100070000000900020073797a300000000048780238c78bbb69190a2adfb510c2867c38b84bb73e8f7cc8c3454b6d32e8e0f8da93390fbd0c4414b3d83d060b06d6c4039dab02cce15ea227f81abfcf63489074b93ae763be2c758797df4f92d43f34d0ebc572e28169d694ac7eb9944d43a80e5552b4d4"], 0x50}, 0x1, 0x0, 0x0, 0x2041}, 0x40082) 923.873531ms ago: executing program 1 (id=2748): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0x300, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001, 0x2800}}}}}, 0x0) 923.248513ms ago: executing program 5 (id=2749): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c00028014001800000000000000000000000000000000011500160002000000040012000500170000000000"], 0x60}}, 0x0) 828.536973ms ago: executing program 1 (id=2750): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0x6400}, 0x0) 828.177147ms ago: executing program 3 (id=2751): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r3, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000090) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8}}, 0x3, 0x8000}, &(0x7f0000000400)=0x90) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async) bind$ax25(r3, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20044000}, 0x20000090) (async) 826.070467ms ago: executing program 2 (id=2752): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016002000024006000200035c0461c1d60008000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef409001b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e4cde205a214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc", 0xce}], 0x1}, 0x20000000) 778.404752ms ago: executing program 1 (id=2753): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f00000000c0)=[{0x9c}, {0x6}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f00000004c0)="5f74a874eec639d0a431865ae40232b2c254da19197c3cca19", 0x19}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r2, 0x84, 0x1e, &(0x7f0000000000), 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000000)) 738.152395ms ago: executing program 5 (id=2754): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket(0x2, 0x800, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x5, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x40}, 0xe) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvmsg$unix(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x120) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 616.56376ms ago: executing program 2 (id=2755): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xfe}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x8}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0xa}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x20, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffde5) 615.897919ms ago: executing program 0 (id=2756): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="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", 0x517}], 0x1, &(0x7f0000001600)}}], 0x1, 0x800) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0xe2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 579.376596ms ago: executing program 3 (id=2757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, 0x0, 0x4, 0x3}, 0x14}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x30, r2, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1209c70ed62435c0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x8050) 541.88218ms ago: executing program 2 (id=2758): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x2}}, 0x8) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r1) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r5, 0x6, 0xc, 0x0, &(0x7f0000000280)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) r7 = socket$inet(0x2, 0x2, 0x1) bind$inet(r7, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$inet(0x2, 0x2, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) close(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000007c0)=ANY=[@ANYBLOB="186500000a000000000000000700000018270000", @ANYRES32, @ANYBLOB="06000000000000007c86fcff01000000e418540030642f46c878423f1608498ef562a5bbc06d43fb9fd1825e0acd"], &(0x7f00000003c0)='syzkaller\x00', 0xfffffffb, 0x94, &(0x7f0000000400)=""/148, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x4, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x12, 0x9, 0x8, 0x200}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000700), &(0x7f0000000940)=[{0x5, 0x2, 0xc, 0xb}, {0x2, 0x4, 0xd, 0xb}, {0x4, 0x4, 0x0, 0xb}, {0x1, 0x1, 0xb, 0xd}, {0x0, 0x1, 0x5, 0xa}, {0x0, 0x2, 0xd, 0x6}, {0x4, 0x3, 0x5, 0x1}, {0x5, 0x4, 0xe, 0x6}, {0x3, 0x1, 0x4, 0xb}], 0x10, 0x10001}, 0x94) sendmsg$nl_route(r4, 0x0, 0x24048840) syz_emit_ethernet(0x22, &(0x7f0000000080)={@local, @random="8fa2608d7a99", @void, {@ipv4={0x88a2, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @broadcast}}}}}, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0xc, &(0x7f00000006c0)=0xfffffffd, 0x4) syz_emit_ethernet(0x4e, &(0x7f0000000ac0)=ANY=[@ANYRESHEX=r3, @ANYRES32=r1, @ANYRESHEX=r8, @ANYRES32=r7, @ANYRESHEX=r5, @ANYRES16=r7, @ANYBLOB="85afa0af2679464304207af761f07f365d1cb3382ddf2d3b5e69194ff65d5c140f4800e103ea084fa31cc0ee86b8381cfd2d3e58b205edafd6941eb1e527726b5cf3733a211957db994741160cb7049bb1060b26277ce9145a15270dc284b8a6fd10c511adeb91f0d5d5cb1aa369c27bb04a90d19f7f70df72ecc3d57cbcc79bfa43efb04796af79025674644e39bdfe28a06101383baa99e5be58b867bfa0905a93d582df2d62dba10085716128594639c118b400ec99ee306b6871a74540ae7ea8770589dd28fd577248cc76bd614ceebeafa476260b10d53738", @ANYRES32=r5, @ANYRESOCT=0x0, @ANYRES64=r5], 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000d00ac9d362f68c80f0000000000"], 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x11}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0xc, &(0x7f00000000c0), 0xfff1}, 0x90) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "c4915c7f49541ce8", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00\b\x00', "be0ea450d5a5fd03"}, 0x38) recvmmsg(r3, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0}, 0xafd}], 0x1, 0x40002000, 0x0) socket$igmp6(0xa, 0x3, 0x2) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000004060103000000000000150b70e900040500010007000000050001000700000005000100070000000500010007c51487a2a86d17c300000005000100070000000900020073797a300000000048780238c78bbb69190a2adfb510c2867c38b84bb73e8f7cc8c3454b6d32e8e0f8da93390fbd0c4414b3d83d060b06d6c4039dab02cce15ea227f81abfcf63489074b93ae763be2c758797df4f92d43f34d0ebc572e28169d694ac7eb9944d43a80e5552b4d4"], 0x50}, 0x1, 0x0, 0x0, 0x2041}, 0x40082) 460.531439ms ago: executing program 0 (id=2759): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000fcdbdf2520010000000000000080ffffff000000fc020000000000000000000000000000000000004e2100000a0000005f000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2000) 422.820397ms ago: executing program 3 (id=2760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0xd8, 0xd8, 0xd8, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x3e020000, 0xb0, 0xd8, 0x0, {0x88000000}, [@common=@set={{0x40}, {{0x3, [0x0, 0x0, 0x0, 0x0, 0x2]}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@rand_addr=0x64010102, @private=0xa010101, 0xffffff00, 0xff000000, 'netpci0\x00', 'wlan1\x00', {0xff}, {}, 0x4, 0x0, 0x43}, 0x0, 0x70, 0xc0, 0x0, {0x122}, [@common=@ttl={{0x28}, {0x1, 0xe}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xd, 0x6, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xffffffff, 0xffffffff, 'batadv_slave_1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x4, 0x2, 0x47}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) 408.511924ms ago: executing program 0 (id=2761): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x58, 0x0, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x58}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000008000340000000000800024000000000080006400000a40208000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) (async, rerun: 64) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @empty}, 0x2b3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, 0x400}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x81b21000) (async, rerun: 32) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x170, 0x170, 0x5, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x1}, @enum={0xf, 0x2, 0x0, 0x6, 0x4, [{0x1, 0xf3}, {0xc, 0x1}]}, @union={0x0, 0x3, 0x0, 0x5, 0x1, 0x1000, [{0xc, 0x4, 0x6}, {0x10, 0x4, 0xc648}, {0xa, 0x5, 0x2}]}, @enum64={0xf, 0xa, 0x0, 0x13, 0x1, 0x2, [{0xa, 0xfe, 0x7fff}, {0x5, 0x3, 0x6}, {0xd, 0x4, 0xffff}, {0x7, 0x6, 0x6}, {0x7, 0x8, 0x6}, {0xd, 0xe5, 0x23}, {0x4, 0xb12d, 0x7}, {0xe, 0x2, 0x200000}, {0x10, 0x3ff, 0x8}, {0xd, 0x6, 0x2}]}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @struct={0xf, 0x7, 0x0, 0x4, 0x1, 0x8, [{0x7, 0x3, 0x4}, {0x0, 0x4, 0xfffffffe}, {0xb, 0x1, 0x10}, {0xf, 0x3}, {0x6, 0x5, 0x3}, {0xb, 0x0, 0x3}, {0xf, 0x3, 0x3}]}, @struct={0x6, 0x2, 0x0, 0x4, 0x1, 0x7, [{0xe, 0x4, 0x1}, {0x8, 0x4, 0x3}]}]}, {0x0, [0x5f, 0x5f, 0x62]}}, &(0x7f0000000100)=""/71, 0x18d, 0x47, 0x0, 0x800, 0x10000}, 0x28) (async, rerun: 32) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x1, 0xb3, 0x3, 0x1082a, r2, 0x80800, '\x00', 0x0, r3, 0x3, 0x1, 0x3, 0x1, @void, @value, @value=r4}, 0x50) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r6, 0x29, 0x11, 0x0, 0x0) (async) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 300.666114ms ago: executing program 5 (id=2762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="5000000004060103000000000000150b70e900040500010007000000050001000700000005000100070000000500010007c51487a2a86d17c300000005000100070000000900020073797a300000000048780238c78bbb69190a2adfb510c2867c38b84bb73e8f7cc8c3454b6d32e8e0f8da93390fbd0c4414b3d83d060b06d6c4039dab02cce15ea227f81abfcf63489074b93ae763be2c758797df4f92d43f34d0ebc572e28169d694ac7eb9944d43a80e5552b4d4"], 0x50}, 0x1, 0x0, 0x0, 0x2041}, 0x40082) 291.406787ms ago: executing program 3 (id=2763): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 258.488133ms ago: executing program 0 (id=2764): sendmsg$NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x78, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5c}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x9}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x200}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x1}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc}, @NL80211_ATTR_NOACK_MAP={0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x6}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xcad}]}, 0x78}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0x140, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_bpf={{0x8}, {0x4c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x34, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @filter_kind_options=@f_bpf={{0x8}, {0xb8, 0x2, [@TCA_BPF_ACT={0xb4, 0x1, [@m_connmark={0xb0, 0xa, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffffe, 0x9, 0x3, 0x3, 0x1}}}]}, {0x62, 0x6, "7d1c2f218ab42f594fe5adbe85eea4a07891f03c95b96ccd9c2cc998aa5257967475522c2ef4397c75e5cd9a15b78828602efb5bb8d8f18605fd1d4ac132fc6229edf4a2184213ba5ea94b254ee4adfe495b418382819811503deec2cd16"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 200.239051ms ago: executing program 5 (id=2765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) accept$nfc_llcp(r2, &(0x7f0000000340), &(0x7f0000000180)=0x60) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="6003169e58f4f15fe1da4741cb69937ad2435bf42ee684e21583aad79fe3", 0x1e}, {&(0x7f00000014c0)="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", 0xf2a}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) accept$nfc_llcp(r2, &(0x7f0000000340), &(0x7f0000000180)=0x60) (async) sendmmsg$alg(r1, &(0x7f00000012c0)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="6003169e58f4f15fe1da4741cb69937ad2435bf42ee684e21583aad79fe3", 0x1e}, {&(0x7f00000014c0)="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", 0xf2a}], 0x2, 0x0, 0x0, 0x20000000}], 0x1, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000019280)=@ipv6_newrule={0x30, 0x1a, 0x1, 0x0, 0x0, {0x81, 0x14}, [@FRA_SRC={0x14, 0x2, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MEMBERSHIP_INTVL={0xc}, @IFLA_BR_MCAST_LAST_MEMBER_INTVL={0xc}]}}}]}, 0x4c}}, 0x0) (async) 145.652203ms ago: executing program 3 (id=2766): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x400300, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 144.752918ms ago: executing program 0 (id=2767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x104}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000c00)=""/196, 0xc4}, {&(0x7f00000028c0)=""/236, 0xec}, {&(0x7f0000003bc0)=""/4101, 0x1005}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f0000000b00)=""/252, 0xfc}, {&(0x7f0000000740)=""/251, 0xfb}], 0x6}, 0xb}], 0x4, 0x4022, 0x0) 238.101µs ago: executing program 5 (id=2768): setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000040)=0x2, 0x4) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x4, 0x8, 0x0, 0x400, 0x30, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x20, 0x7, 0x8}}) r2 = socket(0x11, 0x800000003, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x26, 0x0, @void}, 0x10) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r5, 0x4) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)={0x30, r7, 0x8d61ddcfedb48df, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x408}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x54, r7, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r9, 0x0, 0x60, &(0x7f0000007c40)={'filter\x00', 0x0, [0x5, 0xfffff801, 0x7f]}, &(0x7f0000007cc0)=0x44) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000500)) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r13, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x5c, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xd, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}, @TCA_U32_INDEV={0x14, 0x8, 'wlan1\x00'}]}}]}, 0x88}}, 0x20000000) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FIOCLEX(r14, 0x5451) r15 = socket$inet(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r15, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) socket$netlink(0x10, 0x3, 0x10) 0s ago: executing program 0 (id=2769): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe4ff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): cess `syz.5.781'. [ 169.311626][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.5.792'. [ 170.991491][ T8270] netlink: 'syz.2.823': attribute type 3 has an invalid length. [ 172.016901][ T8322] netlink: 104 bytes leftover after parsing attributes in process `syz.3.849'. [ 173.680429][ T8383] netlink: 'syz.5.875': attribute type 1 has an invalid length. [ 173.688881][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.5.875'. [ 174.047894][ T8397] syzkaller0: entered allmulticast mode [ 174.073387][ T8397] syzkaller0: entered promiscuous mode [ 174.080997][ T8394] syzkaller0: left promiscuous mode [ 174.087769][ T8394] syzkaller0: left allmulticast mode [ 174.510269][ T8414] netlink: 'syz.5.888': attribute type 1 has an invalid length. [ 174.533118][ T8414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.888'. [ 175.495575][ T8444] netlink: 'syz.5.902': attribute type 1 has an invalid length. [ 175.530102][ T8444] netlink: 4 bytes leftover after parsing attributes in process `syz.5.902'. [ 175.743085][ T8471] netlink: 'syz.5.911': attribute type 12 has an invalid length. [ 175.753968][ T8473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.908'. [ 175.767129][ T8473] netlink: 16 bytes leftover after parsing attributes in process `syz.3.908'. [ 175.806680][ T8473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.908'. [ 175.827188][ T8473] netlink: 36 bytes leftover after parsing attributes in process `syz.3.908'. [ 175.881419][ T8481] netlink: 'syz.5.915': attribute type 12 has an invalid length. [ 176.461824][ T8508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.924'. [ 176.471831][ T8508] hsr_slave_0: left promiscuous mode [ 176.482748][ T8508] hsr_slave_1: left promiscuous mode [ 176.583329][ T8514] syz_tun: entered allmulticast mode [ 176.589982][ T8514] macvlan0: entered allmulticast mode [ 176.597895][ T8513] syz_tun: left allmulticast mode [ 176.868492][ T8505] netlink: 'syz.0.923': attribute type 1 has an invalid length. [ 176.888648][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.923'. [ 176.910112][ T8529] syz_tun: entered allmulticast mode [ 177.195337][ T8541] netlink: 36 bytes leftover after parsing attributes in process `syz.2.935'. [ 177.387586][ T8545] netlink: 'syz.1.939': attribute type 1 has an invalid length. [ 177.842738][ T8581] macvlan0: entered allmulticast mode [ 177.931034][ T8585] openvswitch: netlink: Flow key attr not present in new flow. [ 178.333037][ T8590] netlink: 'syz.2.956': attribute type 1 has an invalid length. [ 178.589100][ T8605] syz_tun: entered allmulticast mode [ 178.619073][ T8605] macvlan0: entered allmulticast mode [ 178.635091][ T8605] veth1_vlan: entered allmulticast mode [ 178.644901][ T8604] syz_tun: left allmulticast mode [ 178.683554][ T8613] Cannot find set identified by id 3 to match [ 178.696980][ T8614] __nla_validate_parse: 6 callbacks suppressed [ 178.697000][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 178.749568][ T8617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.966'. [ 178.769071][ T8617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.966'. [ 178.812638][ T8617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.966'. [ 178.834787][ T8617] netlink: 36 bytes leftover after parsing attributes in process `syz.0.966'. [ 179.923792][ T8668] netlink: 'syz.1.988': attribute type 10 has an invalid length. [ 180.400058][ T8698] FAULT_INJECTION: forcing a failure. [ 180.400058][ T8698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 180.414996][ T8698] CPU: 0 UID: 0 PID: 8698 Comm: syz.3.1000 Not tainted syzkaller #0 PREEMPT(full) [ 180.415025][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 180.415037][ T8698] Call Trace: [ 180.415045][ T8698] [ 180.415054][ T8698] dump_stack_lvl+0x189/0x250 [ 180.415083][ T8698] ? __pfx____ratelimit+0x10/0x10 [ 180.415113][ T8698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.415133][ T8698] ? __pfx__printk+0x10/0x10 [ 180.415155][ T8698] ? __might_fault+0xb0/0x130 [ 180.415188][ T8698] should_fail_ex+0x414/0x560 [ 180.415234][ T8698] _copy_from_user+0x2d/0xb0 [ 180.415261][ T8698] ___sys_sendmsg+0x158/0x2a0 [ 180.415285][ T8698] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.415349][ T8698] ? __fget_files+0x2a/0x420 [ 180.415373][ T8698] ? __fget_files+0x3a0/0x420 [ 180.415409][ T8698] __x64_sys_sendmsg+0x19b/0x260 [ 180.415432][ T8698] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.415462][ T8698] ? __pfx_ksys_write+0x10/0x10 [ 180.415488][ T8698] ? do_syscall_64+0xbe/0xfa0 [ 180.415512][ T8698] do_syscall_64+0xfa/0xfa0 [ 180.415529][ T8698] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.415548][ T8698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.415567][ T8698] ? clear_bhb_loop+0x60/0xb0 [ 180.415591][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.415609][ T8698] RIP: 0033:0x7f2b5858efc9 [ 180.415627][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.415643][ T8698] RSP: 002b:00007f2b59366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.415666][ T8698] RAX: ffffffffffffffda RBX: 00007f2b587e5fa0 RCX: 00007f2b5858efc9 [ 180.415680][ T8698] RDX: 0000000004008064 RSI: 0000200000000480 RDI: 0000000000000003 [ 180.415693][ T8698] RBP: 00007f2b59366090 R08: 0000000000000000 R09: 0000000000000000 [ 180.415704][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.415715][ T8698] R13: 00007f2b587e6038 R14: 00007f2b587e5fa0 R15: 00007ffdf30c4398 [ 180.415749][ T8698] [ 181.160733][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1010'. [ 181.215302][ T9] IPVS: starting estimator thread 0... [ 181.263968][ T8729] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1014'. [ 181.314163][ T8726] IPVS: using max 25 ests per chain, 60000 per kthread [ 181.325616][ T8732] netlink: 'syz.0.1015': attribute type 12 has an invalid length. [ 181.399746][ T8732] bond4: option primary_reselect: invalid value (255) [ 181.416424][ T8732] bond4 (unregistering): Released all slaves [ 182.009677][ T8755] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 182.017990][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1024'. [ 182.116885][ T8760] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1026'. [ 182.266429][ T8768] ip6gretap0: entered promiscuous mode [ 182.272922][ T8768] ip6gretap0: entered allmulticast mode [ 182.860598][ T8792] netlink: 'syz.5.1038': attribute type 1 has an invalid length. [ 182.888044][ T8792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1038'. [ 182.998431][ T8802] syz_tun: entered allmulticast mode [ 183.006938][ T8800] syz_tun: left allmulticast mode [ 183.432275][ T8829] syz_tun: entered allmulticast mode [ 183.440048][ T8828] syz_tun: left allmulticast mode [ 183.677796][ T8841] netlink: 'syz.0.1061': attribute type 4 has an invalid length. [ 183.853201][ T8850] syz_tun: entered allmulticast mode [ 183.871834][ T8848] syz_tun: left allmulticast mode [ 183.976933][ T8860] Cannot find set identified by id 3 to match [ 184.123520][ T8851] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 184.163502][ T8851] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 184.219632][ T8874] syz_tun: entered allmulticast mode [ 184.526240][ T8889] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1081'. [ 184.536441][ T8883] netlink: 'syz.5.1077': attribute type 1 has an invalid length. [ 184.546809][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1077'. [ 185.264615][ T8923] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1093'. [ 185.683282][ T8940] syzkaller0: entered allmulticast mode [ 185.718520][ T8940] syzkaller0 (unregistering): left allmulticast mode [ 186.895641][ T8966] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 186.939177][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1111'. [ 187.241947][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1130'. [ 187.261436][ T9009] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1130'. [ 187.402915][ T9018] 8021q: VLANs not supported on ip6gre0 [ 187.419698][ T9018] netlink: 14436 bytes leftover after parsing attributes in process `syz.1.1134'. [ 187.431527][ T9018] openvswitch: netlink: Missing key (keys=40, expected=100) [ 188.098831][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1148'. [ 188.202491][ T9063] macvlan2: entered promiscuous mode [ 188.215126][ T9063] macvlan2: entered allmulticast mode [ 188.238044][ T9063] bond2: (slave macvlan2): Opening slave failed [ 188.444820][ T9075] syz_tun: entered allmulticast mode [ 188.453123][ T9074] syz_tun: left allmulticast mode [ 188.588692][ T9085] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 189.156048][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1173'. [ 189.220347][ T9114] macvtap0: entered promiscuous mode [ 189.392765][ T9123] syzkaller1: entered promiscuous mode [ 189.398791][ T9123] syzkaller1: entered allmulticast mode [ 189.484412][ T9131] syz_tun: entered allmulticast mode [ 189.562077][ T9128] syz_tun: left allmulticast mode [ 189.693352][ T9143] netlink: 'syz.0.1185': attribute type 1 has an invalid length. [ 189.788044][ T9143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 189.838751][ T9151] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 189.878356][ T9141] veth3: entered promiscuous mode [ 189.898917][ T9141] bond4: (slave veth3): Enslaving as an active interface with an up link [ 189.912326][ T9151] netlink: 'syz.2.1188': attribute type 1 has an invalid length. [ 190.313652][ T9169] 8021q: VLANs not supported on ip6gre0 [ 190.328805][ T9169] netlink: 14436 bytes leftover after parsing attributes in process `syz.0.1195'. [ 190.338872][ T9169] openvswitch: netlink: Missing key (keys=40, expected=100) [ 190.402536][ T9173] syz_tun: entered allmulticast mode [ 190.427255][ T9170] syz_tun: left allmulticast mode [ 191.043109][ T9204] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.161450][ T9204] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.303268][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1216'. [ 191.371055][ T9204] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.414405][ T9217] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1216'. [ 191.438682][ T9224] FAULT_INJECTION: forcing a failure. [ 191.438682][ T9224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.463916][ T9224] CPU: 1 UID: 0 PID: 9224 Comm: syz.1.1217 Not tainted syzkaller #0 PREEMPT(full) [ 191.463945][ T9224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 191.463957][ T9224] Call Trace: [ 191.463966][ T9224] [ 191.463975][ T9224] dump_stack_lvl+0x189/0x250 [ 191.464002][ T9224] ? __pfx____ratelimit+0x10/0x10 [ 191.464033][ T9224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.464055][ T9224] ? __pfx__printk+0x10/0x10 [ 191.464076][ T9224] ? __might_fault+0xb0/0x130 [ 191.464111][ T9224] should_fail_ex+0x414/0x560 [ 191.464147][ T9224] _copy_from_iter+0x1de/0x1790 [ 191.464175][ T9224] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 191.464211][ T9224] ? policy_nodemask+0x27c/0x720 [ 191.464242][ T9224] ? __pfx__copy_from_iter+0x10/0x10 [ 191.464277][ T9224] ? set_page_refcounted+0xa0/0x1e0 [ 191.464301][ T9224] ? page_copy_sane+0x4e/0x280 [ 191.464325][ T9224] copy_page_from_iter+0xdd/0x170 [ 191.464352][ T9224] tun_get_user+0x1d7b/0x3e90 [ 191.464385][ T9224] ? tun_get_user+0x6f6/0x3e90 [ 191.464418][ T9224] ? aa_file_perm+0x44d/0x1550 [ 191.464440][ T9224] ? __pfx_tun_get_user+0x10/0x10 [ 191.464462][ T9224] ? _parse_integer_limit+0x1ae/0x1f0 [ 191.464491][ T9224] ? __lock_acquire+0xab9/0xd20 [ 191.464523][ T9224] ? ref_tracker_alloc+0x318/0x460 [ 191.464540][ T9224] ? __lock_acquire+0xab9/0xd20 [ 191.464566][ T9224] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 191.464591][ T9224] ? tun_get+0x1c/0x2f0 [ 191.464619][ T9224] ? tun_get+0x1c/0x2f0 [ 191.464641][ T9224] ? tun_get+0x1c/0x2f0 [ 191.464668][ T9224] tun_chr_write_iter+0x113/0x200 [ 191.464694][ T9224] vfs_write+0x5c9/0xb30 [ 191.464720][ T9224] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 191.464743][ T9224] ? __pfx_vfs_write+0x10/0x10 [ 191.464775][ T9224] ? __fget_files+0x2a/0x420 [ 191.464807][ T9224] ksys_write+0x145/0x250 [ 191.464830][ T9224] ? __pfx_ksys_write+0x10/0x10 [ 191.464853][ T9224] ? do_syscall_64+0xbe/0xfa0 [ 191.464876][ T9224] do_syscall_64+0xfa/0xfa0 [ 191.464892][ T9224] ? lockdep_hardirqs_on+0x9c/0x150 [ 191.464910][ T9224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.464929][ T9224] ? clear_bhb_loop+0x60/0xb0 [ 191.464953][ T9224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.464972][ T9224] RIP: 0033:0x7ffb00b8da7f [ 191.464991][ T9224] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 191.465007][ T9224] RSP: 002b:00007ffb01980000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 191.465030][ T9224] RAX: ffffffffffffffda RBX: 00007ffb00de5fa0 RCX: 00007ffb00b8da7f [ 191.465044][ T9224] RDX: 0000000000000046 RSI: 0000200000000140 RDI: 00000000000000c8 [ 191.465057][ T9224] RBP: 00007ffb01980090 R08: 0000000000000000 R09: 0000000000000000 [ 191.465069][ T9224] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001 [ 191.465080][ T9224] R13: 00007ffb00de6038 R14: 00007ffb00de5fa0 R15: 00007ffc57453998 [ 191.465115][ T9224] [ 191.862382][ T9204] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.080120][ T1039] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.113528][ T1039] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.166932][ T1039] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.205798][ T50] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.054863][ T9271] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1237'. [ 193.112126][ T9278] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1237'. [ 193.249756][ T9282] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1241'. [ 193.277946][ T9282] openvswitch: netlink: Flow key attr not present in new flow. [ 193.378351][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1245'. [ 193.577816][ T9301] netlink: 'syz.5.1249': attribute type 12 has an invalid length. [ 193.947569][ T9326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1259'. [ 194.061604][ T9334] netlink: 'syz.3.1263': attribute type 12 has an invalid length. [ 194.315560][ T9348] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1268'. [ 194.517836][ T9354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1272'. [ 195.597989][ T9400] syz_tun: entered allmulticast mode [ 195.616692][ T9399] syz_tun: left allmulticast mode [ 195.756736][ T9408] __nla_validate_parse: 5 callbacks suppressed [ 195.757045][ T9408] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1294'. [ 195.797259][ T9408] openvswitch: netlink: Flow key attr not present in new flow. [ 196.021428][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1298'. [ 196.060459][ T9425] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 196.074568][ T9425] team0: Device macvtap1 is already an upper device of the team interface [ 196.117975][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1303'. [ 196.332991][ T9446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1307'. [ 196.356361][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1307'. [ 196.375865][ T9446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1307'. [ 196.390347][ T9446] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1307'. [ 196.690533][ T9469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1316'. [ 197.140627][ T9498] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1324'. [ 197.169041][ T9498] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1324'. [ 197.396049][ T9514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.801694][ T9524] Cannot find set identified by id 3 to match [ 198.252687][ T9545] macvlan2: entered promiscuous mode [ 198.261977][ T9545] macvlan2: entered allmulticast mode [ 198.277259][ T9545] bond3: (slave macvlan2): Opening slave failed [ 198.739511][ T9579] 8021q: VLANs not supported on ip6gre0 [ 198.762435][ T9579] openvswitch: netlink: Missing key (keys=40, expected=100) [ 199.210785][ T9605] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 199.257522][ T9605] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 200.533166][ T9679] Cannot find set identified by id 3 to match [ 200.788779][ T9687] __nla_validate_parse: 16 callbacks suppressed [ 200.788792][ T9687] netlink: 284 bytes leftover after parsing attributes in process `syz.0.1400'. [ 200.800242][ T9691] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1401'. [ 200.815083][ T9691] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1401'. [ 200.825833][ T9691] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1401'. [ 200.835823][ T9691] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1401'. [ 200.855338][ T9687] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1400'. [ 201.050103][ T9699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'. [ 201.061003][ T9699] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1405'. [ 201.217962][ T9706] netlink: 'syz.0.1408': attribute type 12 has an invalid length. [ 201.311652][ T9710] FAULT_INJECTION: forcing a failure. [ 201.311652][ T9710] name failslab, interval 1, probability 0, space 0, times 1 [ 201.325782][ T9710] CPU: 0 UID: 0 PID: 9710 Comm: syz.0.1409 Not tainted syzkaller #0 PREEMPT(full) [ 201.325809][ T9710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 201.325821][ T9710] Call Trace: [ 201.325829][ T9710] [ 201.325838][ T9710] dump_stack_lvl+0x189/0x250 [ 201.325866][ T9710] ? __pfx____ratelimit+0x10/0x10 [ 201.325895][ T9710] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.325916][ T9710] ? __pfx__printk+0x10/0x10 [ 201.325942][ T9710] ? __pfx___might_resched+0x10/0x10 [ 201.325966][ T9710] ? fs_reclaim_acquire+0x7d/0x100 [ 201.325995][ T9710] should_fail_ex+0x414/0x560 [ 201.326028][ T9710] should_failslab+0xa8/0x100 [ 201.326055][ T9710] kmem_cache_alloc_node_noprof+0x77/0x710 [ 201.326075][ T9710] ? __alloc_skb+0x112/0x2d0 [ 201.326100][ T9710] ? netlink_autobind+0xdb/0x300 [ 201.326133][ T9710] __alloc_skb+0x112/0x2d0 [ 201.326163][ T9710] netlink_sendmsg+0x5c6/0xb30 [ 201.326201][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.326229][ T9710] ? __lock_acquire+0xab9/0xd20 [ 201.326251][ T9710] ? aa_sock_msg_perm+0xf1/0x1d0 [ 201.326286][ T9710] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 201.326309][ T9710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 201.326336][ T9710] __sock_sendmsg+0x21c/0x270 [ 201.326363][ T9710] sock_write_iter+0x279/0x360 [ 201.326388][ T9710] ? __pfx_sock_write_iter+0x10/0x10 [ 201.326430][ T9710] ? bpf_lsm_file_permission+0x9/0x20 [ 201.326455][ T9710] ? security_file_permission+0x75/0x290 [ 201.326491][ T9710] vfs_write+0x5c9/0xb30 [ 201.326517][ T9710] ? __pfx_sock_write_iter+0x10/0x10 [ 201.326539][ T9710] ? __pfx_vfs_write+0x10/0x10 [ 201.326570][ T9710] ? __fget_files+0x2a/0x420 [ 201.326603][ T9710] ksys_write+0x145/0x250 [ 201.326626][ T9710] ? __pfx_ksys_write+0x10/0x10 [ 201.326650][ T9710] ? do_syscall_64+0xbe/0xfa0 [ 201.326674][ T9710] do_syscall_64+0xfa/0xfa0 [ 201.326690][ T9710] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.326708][ T9710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.326726][ T9710] ? clear_bhb_loop+0x60/0xb0 [ 201.326749][ T9710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.326766][ T9710] RIP: 0033:0x7f442b58efc9 [ 201.326784][ T9710] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.326800][ T9710] RSP: 002b:00007f442c4ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 201.326822][ T9710] RAX: ffffffffffffffda RBX: 00007f442b7e5fa0 RCX: 00007f442b58efc9 [ 201.326837][ T9710] RDX: 00000000000000fc RSI: 00002000000002c0 RDI: 0000000000000003 [ 201.326848][ T9710] RBP: 00007f442c4ad090 R08: 0000000000000000 R09: 0000000000000000 [ 201.326859][ T9710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.326870][ T9710] R13: 00007f442b7e6038 R14: 00007f442b7e5fa0 R15: 00007ffff1dd0428 [ 201.326901][ T9710] [ 201.351683][ T9696] IPVS: nq: FWM 3 0x00000003 - no destination available [ 201.630670][ T5913] IPVS: starting estimator thread 0... [ 201.733883][ T9712] IPVS: using max 24 ests per chain, 57600 per kthread [ 201.959882][ T9735] netlink: 'syz.5.1417': attribute type 4 has an invalid length. [ 201.998937][ T9735] netlink: 'syz.5.1417': attribute type 4 has an invalid length. [ 202.044510][ T9739] FAULT_INJECTION: forcing a failure. [ 202.044510][ T9739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.085014][ T9739] CPU: 1 UID: 0 PID: 9739 Comm: syz.0.1420 Not tainted syzkaller #0 PREEMPT(full) [ 202.085043][ T9739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 202.085054][ T9739] Call Trace: [ 202.085062][ T9739] [ 202.085071][ T9739] dump_stack_lvl+0x189/0x250 [ 202.085099][ T9739] ? __pfx____ratelimit+0x10/0x10 [ 202.085130][ T9739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.085151][ T9739] ? __pfx__printk+0x10/0x10 [ 202.085171][ T9739] ? __might_fault+0xb0/0x130 [ 202.085206][ T9739] should_fail_ex+0x414/0x560 [ 202.085243][ T9739] _copy_from_user+0x2d/0xb0 [ 202.085270][ T9739] sctp_getsockopt_local_addrs+0x105/0xf00 [ 202.085296][ T9739] ? __lock_acquire+0xab9/0xd20 [ 202.085339][ T9739] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 202.085361][ T9739] ? __local_bh_enable_ip+0x12d/0x1c0 [ 202.085387][ T9739] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.085409][ T9739] ? __local_bh_enable_ip+0x12d/0x1c0 [ 202.085455][ T9739] sctp_getsockopt+0x695/0xb60 [ 202.085478][ T9739] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 202.085506][ T9739] do_sock_getsockopt+0x372/0x450 [ 202.085539][ T9739] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 202.085568][ T9739] ? do_syscall_64+0xa0/0xfa0 [ 202.085585][ T9739] ? __fget_files+0x2a/0x420 [ 202.085607][ T9739] ? __fget_files+0x3a0/0x420 [ 202.085638][ T9739] ? __fget_files+0x2a/0x420 [ 202.085670][ T9739] __x64_sys_getsockopt+0x1a5/0x250 [ 202.085702][ T9739] ? do_syscall_64+0xa0/0xfa0 [ 202.085721][ T9739] ? do_syscall_64+0xa0/0xfa0 [ 202.085744][ T9739] do_syscall_64+0xfa/0xfa0 [ 202.085760][ T9739] ? lockdep_hardirqs_on+0x9c/0x150 [ 202.085778][ T9739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.085797][ T9739] ? clear_bhb_loop+0x60/0xb0 [ 202.085820][ T9739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.085838][ T9739] RIP: 0033:0x7f442b58efc9 [ 202.085855][ T9739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.085870][ T9739] RSP: 002b:00007f442c4ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 202.085891][ T9739] RAX: ffffffffffffffda RBX: 00007f442b7e5fa0 RCX: 00007f442b58efc9 [ 202.085905][ T9739] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 202.085916][ T9739] RBP: 00007f442c4ad090 R08: 0000200000000180 R09: 0000000000000000 [ 202.085927][ T9739] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000001 [ 202.085938][ T9739] R13: 00007f442b7e6038 R14: 00007f442b7e5fa0 R15: 00007ffff1dd0428 [ 202.085973][ T9739] [ 202.455485][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 202.483132][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1424'. [ 203.094278][ T9771] syzkaller1: entered promiscuous mode [ 203.111805][ T9771] syzkaller1: entered allmulticast mode [ 203.154564][ T9771] syzkaller1: left promiscuous mode [ 203.159881][ T9771] syzkaller1: left allmulticast mode [ 203.170391][ T9790] netlink: 'syz.2.1438': attribute type 10 has an invalid length. [ 203.194968][ T9787] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 203.201127][ T9787] syzkaller0: Linktype set failed because interface is up [ 203.211779][ T1039] syzkaller0: tun_net_xmit 76 [ 203.217780][ T1039] syzkaller0: tun_net_xmit 48 [ 203.239341][ T5913] syzkaller0: tun_net_xmit 76 [ 203.505587][ T5913] syzkaller0: tun_net_xmit 76 [ 203.790283][ T5887] syzkaller0: tun_net_xmit 76 [ 203.888875][ T5904] syzkaller0: tun_net_xmit 76 [ 204.191524][ T9809] openvswitch: netlink: Flow key attr not present in new flow. [ 206.586749][ T5831] Bluetooth: hci3: command 0x0406 tx timeout [ 206.592944][ T5831] Bluetooth: hci1: command 0x0406 tx timeout [ 206.597837][ T5834] Bluetooth: hci0: command 0x0c1a tx timeout [ 206.608982][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 206.637738][ T9868] netlink: 'syz.1.1466': attribute type 22 has an invalid length. [ 206.663403][ T9868] __nla_validate_parse: 6 callbacks suppressed [ 206.663422][ T9868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 206.745047][ T9870] netlink: 'syz.1.1466': attribute type 22 has an invalid length. [ 206.773225][ T9870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1466'. [ 206.790003][ T5904] IPVS: starting estimator thread 0... [ 206.893847][ T9873] IPVS: using max 32 ests per chain, 76800 per kthread [ 207.105434][ T9882] netlink: 'syz.5.1470': attribute type 12 has an invalid length. [ 207.543100][ T9905] syzkaller0: entered promiscuous mode [ 207.603991][ T9905] syzkaller0: entered allmulticast mode [ 207.661297][ T9895] Bluetooth: hci0: unsupported parameter 512 [ 207.669310][ T9895] Bluetooth: hci0: unsupported parameter 6278 [ 207.686663][ T9895] Bluetooth: hci0: unsupported parameter 512 [ 207.704061][ T9895] Bluetooth: hci0: unsupported parameter 6278 [ 208.022279][ T9914] IPVS: nq: FWM 3 0x00000003 - no destination available [ 209.503489][ T9919] netlink: 'syz.5.1485': attribute type 12 has an invalid length. [ 209.559691][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1495'. [ 209.568964][ T9947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1495'. [ 209.591478][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1495'. [ 209.606123][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1496'. [ 209.615639][ T9949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 209.664191][ T9947] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1495'. [ 210.327518][ T9966] netlink: 'syz.0.1504': attribute type 4 has an invalid length. [ 210.425833][ T5880] IPVS: starting estimator thread 0... [ 210.529370][ T9969] IPVS: using max 26 ests per chain, 62400 per kthread [ 210.676602][ T9975] netlink: 'syz.2.1507': attribute type 12 has an invalid length. [ 211.237634][T10003] netlink: 'syz.5.1519': attribute type 12 has an invalid length. [ 211.373597][T10007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1521'. [ 211.936951][T10028] netlink: 'syz.2.1529': attribute type 5 has an invalid length. [ 211.947943][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1530'. [ 212.118743][T10038] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 212.693091][T10061] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1544'. [ 212.731373][T10061] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1544'. [ 212.894426][ T5880] IPVS: starting estimator thread 0... [ 212.987013][T10078] IPVS: using max 27 ests per chain, 64800 per kthread [ 215.619318][T10193] netlink: 'syz.0.1591': attribute type 12 has an invalid length. [ 215.693030][T10196] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 215.819969][T10198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1592'. [ 215.820463][T10200] netlink: 'syz.0.1594': attribute type 12 has an invalid length. [ 215.854671][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1592'. [ 215.874006][T10198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1592'. [ 215.898199][T10198] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1592'. [ 215.972166][T10211] FAULT_INJECTION: forcing a failure. [ 215.972166][T10211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.987381][T10211] CPU: 1 UID: 0 PID: 10211 Comm: syz.2.1598 Not tainted syzkaller #0 PREEMPT(full) [ 215.987411][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 215.987423][T10211] Call Trace: [ 215.987432][T10211] [ 215.987441][T10211] dump_stack_lvl+0x189/0x250 [ 215.987468][T10211] ? __pfx____ratelimit+0x10/0x10 [ 215.987499][T10211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.987520][T10211] ? __pfx__printk+0x10/0x10 [ 215.987542][T10211] ? __might_fault+0xb0/0x130 [ 215.987577][T10211] should_fail_ex+0x414/0x560 [ 215.987614][T10211] _copy_from_user+0x2d/0xb0 [ 215.987642][T10211] kstrtouint_from_user+0xc4/0x170 [ 215.987668][T10211] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 215.987711][T10211] proc_fail_nth_write+0x88/0x200 [ 215.987742][T10211] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.987779][T10211] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 215.987812][T10211] vfs_write+0x27e/0xb30 [ 215.987845][T10211] ? __pfx_vfs_write+0x10/0x10 [ 215.987893][T10211] ? __fget_files+0x2a/0x420 [ 215.987922][T10211] ? __fget_files+0x3a0/0x420 [ 215.987944][T10211] ? __fget_files+0x2a/0x420 [ 215.987976][T10211] ksys_write+0x145/0x250 [ 215.988000][T10211] ? __pfx_ksys_write+0x10/0x10 [ 215.988027][T10211] ? do_syscall_64+0xbe/0xfa0 [ 215.988051][T10211] do_syscall_64+0xfa/0xfa0 [ 215.988073][T10211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.988092][T10211] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 215.988112][T10211] ? clear_bhb_loop+0x60/0xb0 [ 215.988137][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.988156][T10211] RIP: 0033:0x7f76acd8da7f [ 215.988180][T10211] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 215.988205][T10211] RSP: 002b:00007f76adc39030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 215.988227][T10211] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f76acd8da7f [ 215.988241][T10211] RDX: 0000000000000001 RSI: 00007f76adc390a0 RDI: 0000000000000005 [ 215.988253][T10211] RBP: 00007f76adc39090 R08: 0000000000000000 R09: 0000000000000000 [ 215.988265][T10211] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 215.988276][T10211] R13: 00007f76acfe6038 R14: 00007f76acfe5fa0 R15: 00007ffe9d2c0c48 [ 215.988310][T10211] [ 216.054572][T10215] openvswitch: netlink: IP tunnel dst address not specified [ 216.193156][T10218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1601'. [ 216.554777][T10227] netlink: 'syz.1.1604': attribute type 4 has an invalid length. [ 216.566314][T10227] netlink: 'syz.1.1604': attribute type 4 has an invalid length. [ 217.029843][T10254] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 217.068437][T10254] netlink: 'syz.2.1615': attribute type 4 has an invalid length. [ 217.183878][T10261] macvlan0: left allmulticast mode [ 217.189204][T10261] veth1_vlan: left allmulticast mode [ 217.222507][T10261] netlink: 'syz.5.1618': attribute type 12 has an invalid length. [ 217.249093][T10267] Cannot find set identified by id 3 to match [ 217.256215][T10270] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1619'. [ 217.571703][T10289] netlink: 'syz.2.1630': attribute type 4 has an invalid length. [ 217.588750][T10289] netlink: 'syz.2.1630': attribute type 4 has an invalid length. [ 218.067431][T10308] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.139318][T10308] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.245500][T10308] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.316135][T10308] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.353602][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 218.366781][T10326] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1643'. [ 218.380847][T10328] Cannot find set identified by id 3 to match [ 218.391048][T10326] netlink: 'syz.1.1643': attribute type 12 has an invalid length. [ 218.459575][ T34] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.482979][ T34] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.529925][ T13] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.580209][ T6028] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.822463][T10344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1651'. [ 218.832645][T10344] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1651'. [ 218.844307][T10344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1651'. [ 218.856769][T10344] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1651'. [ 219.178062][T10355] netlink: 'syz.0.1655': attribute type 9 has an invalid length. [ 219.421036][T10369] netlink: 'syz.0.1661': attribute type 12 has an invalid length. [ 220.215358][T10391] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1669'. [ 220.233249][T10392] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1671'. [ 220.299121][T10392] macvlan2: entered promiscuous mode [ 220.305111][T10392] macvlan2: entered allmulticast mode [ 220.312825][T10392] bond0: (slave macvlan2): Opening slave failed [ 220.471174][T10403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1674'. [ 222.430999][T10471] __nla_validate_parse: 10 callbacks suppressed [ 222.431022][T10471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1699'. [ 222.437153][T10473] netlink: 'syz.2.1700': attribute type 4 has an invalid length. [ 222.438170][T10471] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1699'. [ 222.470981][T10473] netlink: 'syz.2.1700': attribute type 4 has an invalid length. [ 222.500501][T10471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1699'. [ 222.516715][T10471] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1699'. [ 223.772446][T10543] tipc: Enabled bearer , priority 0 [ 223.839885][T10543] tipc: Disabling bearer [ 223.856138][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1726'. [ 223.878775][T10547] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1726'. [ 223.897231][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1726'. [ 223.930958][T10547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1726'. [ 224.068079][T10554] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1731'. [ 224.081943][T10554] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1731'. [ 224.526849][T10577] netlink: 'syz.5.1738': attribute type 12 has an invalid length. [ 225.509543][T10616] netlink: 'syz.3.1752': attribute type 10 has an invalid length. [ 225.660487][T10625] macvlan2: entered promiscuous mode [ 225.666202][T10625] macvlan2: entered allmulticast mode [ 225.672275][T10625] bond4: (slave macvlan2): Opening slave failed [ 225.739941][T10631] netlink: 'syz.5.1757': attribute type 4 has an invalid length. [ 225.761206][T10631] netlink: 'syz.5.1757': attribute type 4 has an invalid length. [ 226.226509][T10654] Bluetooth: hci0: unsupported parameter 512 [ 226.235958][T10654] Bluetooth: hci0: unsupported parameter 57307 [ 226.242182][T10654] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 226.420570][T10661] netlink: 'syz.1.1768': attribute type 15 has an invalid length. [ 228.400088][T10746] __nla_validate_parse: 20 callbacks suppressed [ 228.400111][T10746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1797'. [ 228.444628][T10756] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1801'. [ 228.465180][T10759] bond5: (slave macvlan2): Opening slave failed [ 228.498775][T10761] netlink: 'syz.5.1798': attribute type 4 has an invalid length. [ 228.539594][T10761] netlink: 'syz.5.1798': attribute type 4 has an invalid length. [ 228.721863][T10776] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1807'. [ 229.503119][T10797] netlink: 'syz.5.1816': attribute type 30 has an invalid length. [ 229.587328][T10797] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 229.594308][T10797] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 229.936972][T10821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1822'. [ 229.978871][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1822'. [ 229.991994][T10821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1822'. [ 230.005930][T10821] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1822'. [ 230.192468][T10832] netlink: 'syz.2.1828': attribute type 12 has an invalid length. [ 230.233530][T10832] bond3: option primary_reselect: invalid value (255) [ 230.359315][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1830'. [ 230.369090][T10837] openvswitch: netlink: Flow key attr not present in new flow. [ 230.371043][T10832] bond3 (unregistering): Released all slaves [ 230.458651][T10839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1831'. [ 230.630604][T10852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1834'. [ 230.900972][T10859] x_tables: duplicate underflow at hook 1 [ 230.995789][T10868] Cannot find set identified by id 3 to match [ 231.101567][T10871] syzkaller1: entered promiscuous mode [ 231.107909][T10871] syzkaller1: entered allmulticast mode [ 231.133175][ T6028] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.148222][ T6028] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.159423][ T6028] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.167979][ T6028] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.856130][T10896] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 231.878755][T10896] bond6 (unregistering): Released all slaves [ 232.593095][T10931] openvswitch: netlink: Flow key attr not present in new flow. [ 232.790461][T10940] Cannot find add_set index 1 as target [ 232.810362][T10942] FAULT_INJECTION: forcing a failure. [ 232.810362][T10942] name failslab, interval 1, probability 0, space 0, times 0 [ 232.838035][T10942] CPU: 0 UID: 0 PID: 10942 Comm: syz.2.1868 Not tainted syzkaller #0 PREEMPT(full) [ 232.838066][T10942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.838077][T10942] Call Trace: [ 232.838085][T10942] [ 232.838094][T10942] dump_stack_lvl+0x189/0x250 [ 232.838122][T10942] ? __pfx____ratelimit+0x10/0x10 [ 232.838155][T10942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 232.838176][T10942] ? __pfx__printk+0x10/0x10 [ 232.838204][T10942] ? __pfx___might_resched+0x10/0x10 [ 232.838230][T10942] ? fs_reclaim_acquire+0x7d/0x100 [ 232.838258][T10942] should_fail_ex+0x414/0x560 [ 232.838293][T10942] should_failslab+0xa8/0x100 [ 232.838321][T10942] __kmalloc_cache_noprof+0x6f/0x6f0 [ 232.838345][T10942] ? sctp_association_new+0x89/0x25f0 [ 232.838377][T10942] sctp_association_new+0x89/0x25f0 [ 232.838406][T10942] ? sctp_has_association+0x1cd/0x1f0 [ 232.838432][T10942] ? sctp_has_association+0x2f/0x1f0 [ 232.838460][T10942] ? __ipv6_addr_type+0x247/0x2f0 [ 232.838493][T10942] sctp_connect_new_asoc+0x2c5/0x690 [ 232.838523][T10942] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 232.838550][T10942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.838576][T10942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.838599][T10942] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 232.838625][T10942] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 232.838652][T10942] ? security_sctp_bind_connect+0x7e/0x2e0 [ 232.838685][T10942] sctp_sendmsg+0x155c/0x2810 [ 232.838718][T10942] ? __pfx_sctp_sendmsg+0x10/0x10 [ 232.838741][T10942] ? aa_sk_perm+0x81e/0x950 [ 232.838766][T10942] ? __pfx_aa_sk_perm+0x10/0x10 [ 232.838790][T10942] ? sock_rps_record_flow+0x19/0x410 [ 232.838820][T10942] ? inet_sendmsg+0x2f4/0x370 [ 232.838844][T10942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 232.838872][T10942] __sock_sendmsg+0x19c/0x270 [ 232.838900][T10942] __sys_sendto+0x3bd/0x520 [ 232.838931][T10942] ? __pfx___sys_sendto+0x10/0x10 [ 232.839038][T10942] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 232.839071][T10942] ? __fget_files+0x3a0/0x420 [ 232.839098][T10942] ? ksys_write+0x22a/0x250 [ 232.839117][T10942] ? __pfx_ksys_write+0x10/0x10 [ 232.839136][T10942] __x64_sys_sendto+0xde/0x100 [ 232.839162][T10942] do_syscall_64+0xfa/0xfa0 [ 232.839185][T10942] ? lockdep_hardirqs_on+0x9c/0x150 [ 232.839199][T10942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.839214][T10942] ? clear_bhb_loop+0x60/0xb0 [ 232.839234][T10942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.839249][T10942] RIP: 0033:0x7f76acd8efc9 [ 232.839263][T10942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.839277][T10942] RSP: 002b:00007f76adc39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 232.839296][T10942] RAX: ffffffffffffffda RBX: 00007f76acfe5fa0 RCX: 00007f76acd8efc9 [ 232.839307][T10942] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 232.839317][T10942] RBP: 00007f76adc39090 R08: 000020000005ffe4 R09: 000000000000001c [ 232.839328][T10942] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000001 [ 232.839337][T10942] R13: 00007f76acfe6038 R14: 00007f76acfe5fa0 R15: 00007ffe9d2c0c48 [ 232.839365][T10942] [ 233.443356][T10957] __nla_validate_parse: 17 callbacks suppressed [ 233.443420][T10957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1872'. [ 233.516819][T10957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1872'. [ 233.585843][T10957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1872'. [ 233.617686][T10957] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1872'. [ 233.653933][T10962] Cannot find set identified by id 3 to match [ 233.658334][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1878'. [ 233.992855][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1883'. [ 234.002838][T10980] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1883'. [ 234.022556][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1883'. [ 234.052097][T10980] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1883'. [ 234.246879][T10992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1886'. [ 234.376149][T10998] netlink: 'syz.2.1889': attribute type 9 has an invalid length. [ 235.130912][T11025] netlink: 'syz.2.1902': attribute type 12 has an invalid length. [ 235.234873][T11030] netlink: 'syz.2.1903': attribute type 10 has an invalid length. [ 236.005787][T11049] raw_sendmsg: syz.5.1911 forgot to set AF_INET. Fix it! [ 237.156935][T11099] netlink: 'syz.1.1930': attribute type 21 has an invalid length. [ 237.232382][T11099] bond7: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 237.252365][T11099] bond7 (unregistering): Released all slaves [ 237.557041][T11124] openvswitch: netlink: Flow key attr not present in new flow. [ 238.139078][T11152] netlink: 'syz.0.1951': attribute type 10 has an invalid length. [ 238.974453][T11188] tipc: Enabling of bearer rejected, failed to enable media [ 239.052615][T11190] netlink: 'syz.3.1967': attribute type 12 has an invalid length. [ 239.060171][T11194] netlink: 'syz.0.1968': attribute type 10 has an invalid length. [ 239.073051][T11193] __nla_validate_parse: 29 callbacks suppressed [ 239.073073][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1969'. [ 239.155675][T11193] gtp0: entered promiscuous mode [ 239.164186][T11193] gtp0: entered allmulticast mode [ 239.401905][T11209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1972'. [ 239.423227][T11209] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1972'. [ 239.433429][T11209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1972'. [ 239.444686][T11209] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1972'. [ 239.644467][T11220] netlink: 'syz.0.1979': attribute type 12 has an invalid length. [ 239.864447][T11224] netlink: 'syz.1.1983': attribute type 10 has an invalid length. [ 240.066103][T11227] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1984'. [ 240.614925][T11257] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1994'. [ 240.782290][T11264] netlink: 'syz.2.1997': attribute type 10 has an invalid length. [ 241.177693][T11282] FAULT_INJECTION: forcing a failure. [ 241.177693][T11282] name failslab, interval 1, probability 0, space 0, times 0 [ 241.218784][T11282] CPU: 1 UID: 0 PID: 11282 Comm: syz.3.2006 Not tainted syzkaller #0 PREEMPT(full) [ 241.218812][T11282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 241.218823][T11282] Call Trace: [ 241.218832][T11282] [ 241.218841][T11282] dump_stack_lvl+0x189/0x250 [ 241.218869][T11282] ? __pfx____ratelimit+0x10/0x10 [ 241.218898][T11282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.218918][T11282] ? __pfx__printk+0x10/0x10 [ 241.218944][T11282] ? __pfx___might_resched+0x10/0x10 [ 241.218968][T11282] ? fs_reclaim_acquire+0x7d/0x100 [ 241.218997][T11282] should_fail_ex+0x414/0x560 [ 241.219031][T11282] should_failslab+0xa8/0x100 [ 241.219059][T11282] __kmalloc_noprof+0xcb/0x7f0 [ 241.219080][T11282] ? fib6_info_alloc+0x30/0xf0 [ 241.219117][T11282] fib6_info_alloc+0x30/0xf0 [ 241.219146][T11282] ip6_route_info_create+0x142/0x860 [ 241.219197][T11282] ? l3mdev_fib_table_by_index+0x34/0x2d0 [ 241.219225][T11282] ip6_route_add+0x49/0x1b0 [ 241.219248][T11282] ipv6_route_ioctl+0x35c/0x480 [ 241.219277][T11282] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 241.219335][T11282] inet6_ioctl+0x219/0x280 [ 241.219363][T11282] ? __pfx_inet6_ioctl+0x10/0x10 [ 241.219399][T11282] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 241.219427][T11282] sock_do_ioctl+0xdc/0x300 [ 241.219454][T11282] ? __pfx_sock_do_ioctl+0x10/0x10 [ 241.219495][T11282] sock_ioctl+0x576/0x790 [ 241.219520][T11282] ? __pfx_sock_ioctl+0x10/0x10 [ 241.219546][T11282] ? __fget_files+0x3a0/0x420 [ 241.219569][T11282] ? __fget_files+0x2a/0x420 [ 241.219597][T11282] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.219624][T11282] ? __pfx_sock_ioctl+0x10/0x10 [ 241.219646][T11282] __se_sys_ioctl+0xfc/0x170 [ 241.219680][T11282] do_syscall_64+0xfa/0xfa0 [ 241.219698][T11282] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.219719][T11282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.219739][T11282] ? clear_bhb_loop+0x60/0xb0 [ 241.219763][T11282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.219789][T11282] RIP: 0033:0x7f2b5858efc9 [ 241.219807][T11282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.219823][T11282] RSP: 002b:00007f2b59366038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.219846][T11282] RAX: ffffffffffffffda RBX: 00007f2b587e5fa0 RCX: 00007f2b5858efc9 [ 241.219860][T11282] RDX: 0000200000000800 RSI: 000000000000890b RDI: 0000000000000003 [ 241.219873][T11282] RBP: 00007f2b59366090 R08: 0000000000000000 R09: 0000000000000000 [ 241.219885][T11282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.219897][T11282] R13: 00007f2b587e6038 R14: 00007f2b587e5fa0 R15: 00007ffdf30c4398 [ 241.219931][T11282] [ 241.578943][T11291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2010'. [ 241.678017][T11295] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2011'. [ 241.732991][T11300] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 242.007561][T11308] macvlan2: entered promiscuous mode [ 242.020642][T11308] macvlan2: entered allmulticast mode [ 242.029047][T11308] bond2: (slave macvlan2): Opening slave failed [ 242.106541][T11307] sctp: [Deprecated]: syz.0.2015 (pid 11307) Use of int in maxseg socket option. [ 242.106541][T11307] Use struct sctp_assoc_value instead [ 242.431174][T11321] openvswitch: netlink: Flow key attr not present in new flow. [ 242.574568][T11331] Cannot find set identified by id 3 to match [ 242.738833][T11341] netlink: 'syz.2.2030': attribute type 2 has an invalid length. [ 242.830439][T11345] bond7: (slave macvlan2): Opening slave failed [ 242.875175][T11349] FAULT_INJECTION: forcing a failure. [ 242.875175][T11349] name failslab, interval 1, probability 0, space 0, times 0 [ 242.920315][T11349] CPU: 0 UID: 0 PID: 11349 Comm: syz.0.2031 Not tainted syzkaller #0 PREEMPT(full) [ 242.920344][T11349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 242.920355][T11349] Call Trace: [ 242.920363][T11349] [ 242.920371][T11349] dump_stack_lvl+0x189/0x250 [ 242.920399][T11349] ? __pfx____ratelimit+0x10/0x10 [ 242.920424][T11349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.920441][T11349] ? __pfx__printk+0x10/0x10 [ 242.920472][T11349] should_fail_ex+0x414/0x560 [ 242.920502][T11349] should_failslab+0xa8/0x100 [ 242.920525][T11349] __kmalloc_cache_noprof+0x6f/0x6f0 [ 242.920542][T11349] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 242.920556][T11349] ? sctp_add_bind_addr+0x8c/0x370 [ 242.920569][T11349] ? sctp_add_bind_addr+0xb0/0x370 [ 242.920588][T11349] sctp_add_bind_addr+0x8c/0x370 [ 242.920608][T11349] sctp_copy_local_addr_list+0x30b/0x4e0 [ 242.920627][T11349] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 242.920643][T11349] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 242.920660][T11349] ? sctp_v6_is_any+0x64/0x80 [ 242.920678][T11349] ? sctp_copy_one_addr+0x93/0x360 [ 242.920697][T11349] sctp_bind_addr_copy+0xb3/0x3c0 [ 242.920714][T11349] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 242.920740][T11349] sctp_connect_new_asoc+0x2e0/0x690 [ 242.920763][T11349] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 242.920781][T11349] ? __local_bh_enable_ip+0x12d/0x1c0 [ 242.920810][T11349] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 242.920831][T11349] ? security_sctp_bind_connect+0x7e/0x2e0 [ 242.920857][T11349] sctp_sendmsg+0x155c/0x2810 [ 242.920897][T11349] ? __pfx_sctp_sendmsg+0x10/0x10 [ 242.920920][T11349] ? aa_sk_perm+0x81e/0x950 [ 242.920941][T11349] ? __pfx_aa_sk_perm+0x10/0x10 [ 242.920961][T11349] ? sock_rps_record_flow+0x19/0x410 [ 242.920991][T11349] ? inet_sendmsg+0x2f4/0x370 [ 242.921016][T11349] __sock_sendmsg+0x19c/0x270 [ 242.921039][T11349] __sys_sendto+0x3bd/0x520 [ 242.921064][T11349] ? __pfx___sys_sendto+0x10/0x10 [ 242.921084][T11349] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 242.921113][T11349] ? __fget_files+0x3a0/0x420 [ 242.921144][T11349] ? ksys_write+0x22a/0x250 [ 242.921163][T11349] ? __pfx_ksys_write+0x10/0x10 [ 242.921184][T11349] __x64_sys_sendto+0xde/0x100 [ 242.921210][T11349] do_syscall_64+0xfa/0xfa0 [ 242.921225][T11349] ? lockdep_hardirqs_on+0x9c/0x150 [ 242.921241][T11349] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.921257][T11349] ? clear_bhb_loop+0x60/0xb0 [ 242.921277][T11349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.921292][T11349] RIP: 0033:0x7f442b58efc9 [ 242.921307][T11349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.921321][T11349] RSP: 002b:00007f442c4ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.921339][T11349] RAX: ffffffffffffffda RBX: 00007f442b7e5fa0 RCX: 00007f442b58efc9 [ 242.921352][T11349] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 242.921362][T11349] RBP: 00007f442c4ad090 R08: 000020000005ffe4 R09: 000000000000001c [ 242.921373][T11349] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 242.921383][T11349] R13: 00007f442b7e6038 R14: 00007f442b7e5fa0 R15: 00007ffff1dd0428 [ 242.921412][T11349] [ 244.176793][T11401] FAULT_INJECTION: forcing a failure. [ 244.176793][T11401] name failslab, interval 1, probability 0, space 0, times 0 [ 244.190757][T11401] CPU: 0 UID: 0 PID: 11401 Comm: syz.3.2051 Not tainted syzkaller #0 PREEMPT(full) [ 244.190786][T11401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 244.190798][T11401] Call Trace: [ 244.190807][T11401] [ 244.190815][T11401] dump_stack_lvl+0x189/0x250 [ 244.190843][T11401] ? __pfx____ratelimit+0x10/0x10 [ 244.190874][T11401] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.190896][T11401] ? __pfx__printk+0x10/0x10 [ 244.190935][T11401] should_fail_ex+0x414/0x560 [ 244.190972][T11401] should_failslab+0xa8/0x100 [ 244.191000][T11401] __kmalloc_cache_noprof+0x6f/0x6f0 [ 244.191021][T11401] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 244.191040][T11401] ? sctp_add_bind_addr+0x8c/0x370 [ 244.191056][T11401] ? sctp_add_bind_addr+0xb0/0x370 [ 244.191082][T11401] sctp_add_bind_addr+0x8c/0x370 [ 244.191107][T11401] sctp_copy_local_addr_list+0x30b/0x4e0 [ 244.191131][T11401] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 244.191152][T11401] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 244.191175][T11401] ? sctp_v6_is_any+0x64/0x80 [ 244.191198][T11401] ? sctp_copy_one_addr+0x93/0x360 [ 244.191222][T11401] sctp_bind_addr_copy+0xb3/0x3c0 [ 244.191251][T11401] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 244.191284][T11401] sctp_connect_new_asoc+0x2e0/0x690 [ 244.191314][T11401] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 244.191336][T11401] ? __local_bh_enable_ip+0x12d/0x1c0 [ 244.191372][T11401] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 244.191399][T11401] ? security_sctp_bind_connect+0x7e/0x2e0 [ 244.191431][T11401] sctp_sendmsg+0x155c/0x2810 [ 244.191471][T11401] ? __pfx_sctp_sendmsg+0x10/0x10 [ 244.191500][T11401] ? aa_sk_perm+0x81e/0x950 [ 244.191527][T11401] ? __pfx_aa_sk_perm+0x10/0x10 [ 244.191553][T11401] ? sock_rps_record_flow+0x19/0x410 [ 244.191584][T11401] ? inet_sendmsg+0x2f4/0x370 [ 244.191626][T11401] __sock_sendmsg+0x19c/0x270 [ 244.191655][T11401] __sys_sendto+0x3bd/0x520 [ 244.191687][T11401] ? __pfx___sys_sendto+0x10/0x10 [ 244.191712][T11401] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 244.191750][T11401] ? __fget_files+0x3a0/0x420 [ 244.191787][T11401] ? ksys_write+0x22a/0x250 [ 244.191812][T11401] ? __pfx_ksys_write+0x10/0x10 [ 244.191839][T11401] __x64_sys_sendto+0xde/0x100 [ 244.191871][T11401] do_syscall_64+0xfa/0xfa0 [ 244.191890][T11401] ? lockdep_hardirqs_on+0x9c/0x150 [ 244.191909][T11401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.191929][T11401] ? clear_bhb_loop+0x60/0xb0 [ 244.191953][T11401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.191970][T11401] RIP: 0033:0x7f2b5858efc9 [ 244.191988][T11401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.192016][T11401] RSP: 002b:00007f2b59366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.192039][T11401] RAX: ffffffffffffffda RBX: 00007f2b587e5fa0 RCX: 00007f2b5858efc9 [ 244.192052][T11401] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 244.192066][T11401] RBP: 00007f2b59366090 R08: 000020000005ffe4 R09: 000000000000001c [ 244.192079][T11401] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 244.192090][T11401] R13: 00007f2b587e6038 R14: 00007f2b587e5fa0 R15: 00007ffdf30c4398 [ 244.192125][T11401] [ 244.796928][T11416] netlink: 'syz.3.2058': attribute type 32 has an invalid length. [ 244.810816][T11415] Cannot find del_set index 4 as target [ 245.067008][T11437] __nla_validate_parse: 4 callbacks suppressed [ 245.067033][T11437] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2064'. [ 245.223146][T11442] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 245.345432][T11452] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2070'. [ 245.371302][T11452] openvswitch: netlink: Flow key attr not present in new flow. [ 245.489828][T11451] syz.5.2069 (11451) used greatest stack depth: 15832 bytes left [ 245.593922][T11464] Cannot find set identified by id 3 to match [ 245.651983][T11466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2075'. [ 245.859130][T11486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2084'. [ 245.869635][T11486] openvswitch: netlink: Flow key attr not present in new flow. [ 245.878701][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2082'. [ 245.939554][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 245.972315][T11488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 245.990687][T11488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 246.202510][T11505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2092'. [ 246.372008][T11514] netlink: 'syz.5.2094': attribute type 12 has an invalid length. [ 246.502108][T11522] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2098'. [ 246.548333][T11522] openvswitch: netlink: Flow key attr not present in new flow. [ 246.604089][T11525] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2096'. [ 246.728596][T11534] netlink: 'syz.3.2102': attribute type 10 has an invalid length. [ 247.160810][T11563] netlink: 'syz.5.2111': attribute type 4 has an invalid length. [ 247.197659][T11563] netlink: 'syz.5.2111': attribute type 4 has an invalid length. [ 247.262423][T11566] openvswitch: netlink: Flow key attr not present in new flow. [ 247.407218][T11577] FAULT_INJECTION: forcing a failure. [ 247.407218][T11577] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.484515][T11577] CPU: 0 UID: 0 PID: 11577 Comm: syz.0.2118 Not tainted syzkaller #0 PREEMPT(full) [ 247.484546][T11577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.484558][T11577] Call Trace: [ 247.484567][T11577] [ 247.484576][T11577] dump_stack_lvl+0x189/0x250 [ 247.484605][T11577] ? __pfx____ratelimit+0x10/0x10 [ 247.484636][T11577] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.484656][T11577] ? __pfx__printk+0x10/0x10 [ 247.484676][T11577] ? __might_fault+0xb0/0x130 [ 247.484710][T11577] should_fail_ex+0x414/0x560 [ 247.484747][T11577] _copy_from_user+0x2d/0xb0 [ 247.484774][T11577] kstrtouint_from_user+0xc4/0x170 [ 247.484801][T11577] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 247.484844][T11577] proc_fail_nth_write+0x88/0x200 [ 247.484876][T11577] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 247.484922][T11577] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 247.484955][T11577] vfs_write+0x27e/0xb30 [ 247.484988][T11577] ? __pfx_vfs_write+0x10/0x10 [ 247.485013][T11577] ? __fget_files+0x2a/0x420 [ 247.485042][T11577] ? __fget_files+0x3a0/0x420 [ 247.485065][T11577] ? __fget_files+0x2a/0x420 [ 247.485100][T11577] ksys_write+0x145/0x250 [ 247.485125][T11577] ? __pfx_ksys_write+0x10/0x10 [ 247.485152][T11577] ? do_syscall_64+0xbe/0xfa0 [ 247.485177][T11577] do_syscall_64+0xfa/0xfa0 [ 247.485196][T11577] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.485215][T11577] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.485234][T11577] ? clear_bhb_loop+0x60/0xb0 [ 247.485258][T11577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.485276][T11577] RIP: 0033:0x7f442b58da7f [ 247.485295][T11577] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 247.485311][T11577] RSP: 002b:00007f442c4ad030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 247.485332][T11577] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f442b58da7f [ 247.485346][T11577] RDX: 0000000000000001 RSI: 00007f442c4ad0a0 RDI: 0000000000000004 [ 247.485357][T11577] RBP: 00007f442c4ad090 R08: 0000000000000000 R09: 0000000000000000 [ 247.485369][T11577] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 247.485381][T11577] R13: 00007f442b7e6038 R14: 00007f442b7e5fa0 R15: 00007ffff1dd0428 [ 247.485416][T11577] [ 247.727793][T11583] netlink: 'syz.1.2122': attribute type 12 has an invalid length. [ 247.764928][T11586] FAULT_INJECTION: forcing a failure. [ 247.764928][T11586] name failslab, interval 1, probability 0, space 0, times 0 [ 247.807853][T11583] bond8: option primary_reselect: invalid value (255) [ 247.818782][T11586] CPU: 1 UID: 0 PID: 11586 Comm: syz.3.2123 Not tainted syzkaller #0 PREEMPT(full) [ 247.818812][T11586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.818825][T11586] Call Trace: [ 247.818833][T11586] [ 247.818842][T11586] dump_stack_lvl+0x189/0x250 [ 247.818878][T11586] ? __pfx____ratelimit+0x10/0x10 [ 247.818910][T11586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 247.818931][T11586] ? __pfx__printk+0x10/0x10 [ 247.818968][T11586] should_fail_ex+0x414/0x560 [ 247.819006][T11586] should_failslab+0xa8/0x100 [ 247.819034][T11586] __kmalloc_cache_noprof+0x6f/0x6f0 [ 247.819055][T11586] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 247.819074][T11586] ? sctp_add_bind_addr+0x8c/0x370 [ 247.819090][T11586] ? sctp_add_bind_addr+0xb0/0x370 [ 247.819116][T11586] sctp_add_bind_addr+0x8c/0x370 [ 247.819147][T11586] sctp_copy_local_addr_list+0x30b/0x4e0 [ 247.819170][T11586] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 247.819190][T11586] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 247.819213][T11586] ? sctp_v6_is_any+0x64/0x80 [ 247.819237][T11586] ? sctp_copy_one_addr+0x93/0x360 [ 247.819278][T11586] sctp_bind_addr_copy+0xb3/0x3c0 [ 247.819300][T11586] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 247.819334][T11586] sctp_connect_new_asoc+0x2e0/0x690 [ 247.819361][T11586] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 247.819383][T11586] ? __local_bh_enable_ip+0x12d/0x1c0 [ 247.819417][T11586] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 247.819442][T11586] ? security_sctp_bind_connect+0x7e/0x2e0 [ 247.819475][T11586] sctp_sendmsg+0x155c/0x2810 [ 247.819514][T11586] ? __pfx_sctp_sendmsg+0x10/0x10 [ 247.819542][T11586] ? aa_sk_perm+0x81e/0x950 [ 247.819569][T11586] ? __pfx_aa_sk_perm+0x10/0x10 [ 247.819593][T11586] ? sock_rps_record_flow+0x19/0x410 [ 247.819623][T11586] ? inet_sendmsg+0x2f4/0x370 [ 247.819653][T11586] __sock_sendmsg+0x19c/0x270 [ 247.819681][T11586] __sys_sendto+0x3bd/0x520 [ 247.819712][T11586] ? __pfx___sys_sendto+0x10/0x10 [ 247.819735][T11586] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 247.819773][T11586] ? __fget_files+0x3a0/0x420 [ 247.819810][T11586] ? ksys_write+0x22a/0x250 [ 247.819834][T11586] ? __pfx_ksys_write+0x10/0x10 [ 247.819869][T11586] __x64_sys_sendto+0xde/0x100 [ 247.819900][T11586] do_syscall_64+0xfa/0xfa0 [ 247.819919][T11586] ? lockdep_hardirqs_on+0x9c/0x150 [ 247.819937][T11586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.819957][T11586] ? clear_bhb_loop+0x60/0xb0 [ 247.819981][T11586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.819999][T11586] RIP: 0033:0x7f2b5858efc9 [ 247.820019][T11586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.820036][T11586] RSP: 002b:00007f2b59366038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 247.820059][T11586] RAX: ffffffffffffffda RBX: 00007f2b587e5fa0 RCX: 00007f2b5858efc9 [ 247.820074][T11586] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 247.820086][T11586] RBP: 00007f2b59366090 R08: 000020000005ffe4 R09: 000000000000001c [ 247.820100][T11586] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 247.820111][T11586] R13: 00007f2b587e6038 R14: 00007f2b587e5fa0 R15: 00007ffdf30c4398 [ 247.820146][T11586] [ 248.164913][T11583] bond8 (unregistering): Released all slaves [ 248.444363][T11607] Cannot find set identified by id 3 to match [ 248.909067][T11632] FAULT_INJECTION: forcing a failure. [ 248.909067][T11632] name failslab, interval 1, probability 0, space 0, times 0 [ 248.931201][T11632] CPU: 1 UID: 0 PID: 11632 Comm: syz.0.2139 Not tainted syzkaller #0 PREEMPT(full) [ 248.931231][T11632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.931244][T11632] Call Trace: [ 248.931252][T11632] [ 248.931261][T11632] dump_stack_lvl+0x189/0x250 [ 248.931291][T11632] ? __pfx____ratelimit+0x10/0x10 [ 248.931322][T11632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.931344][T11632] ? __pfx__printk+0x10/0x10 [ 248.931384][T11632] should_fail_ex+0x414/0x560 [ 248.931421][T11632] should_failslab+0xa8/0x100 [ 248.931449][T11632] __kmalloc_cache_noprof+0x6f/0x6f0 [ 248.931471][T11632] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 248.931489][T11632] ? sctp_add_bind_addr+0x8c/0x370 [ 248.931506][T11632] ? sctp_add_bind_addr+0xb0/0x370 [ 248.931532][T11632] sctp_add_bind_addr+0x8c/0x370 [ 248.931558][T11632] sctp_copy_local_addr_list+0x30b/0x4e0 [ 248.931582][T11632] ? sctp_copy_local_addr_list+0x9b/0x4e0 [ 248.931611][T11632] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 248.931634][T11632] ? sctp_v6_is_any+0x64/0x80 [ 248.931658][T11632] ? sctp_copy_one_addr+0x93/0x360 [ 248.931683][T11632] sctp_bind_addr_copy+0xb3/0x3c0 [ 248.931704][T11632] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 248.931738][T11632] sctp_connect_new_asoc+0x2e0/0x690 [ 248.931768][T11632] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 248.931790][T11632] ? __local_bh_enable_ip+0x12d/0x1c0 [ 248.931826][T11632] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 248.931851][T11632] ? security_sctp_bind_connect+0x7e/0x2e0 [ 248.931884][T11632] sctp_sendmsg+0x155c/0x2810 [ 248.931924][T11632] ? __pfx_sctp_sendmsg+0x10/0x10 [ 248.931953][T11632] ? aa_sk_perm+0x81e/0x950 [ 248.931980][T11632] ? __pfx_aa_sk_perm+0x10/0x10 [ 248.932006][T11632] ? sock_rps_record_flow+0x19/0x410 [ 248.932037][T11632] ? inet_sendmsg+0x2f4/0x370 [ 248.932068][T11632] __sock_sendmsg+0x19c/0x270 [ 248.932097][T11632] __sys_sendto+0x3bd/0x520 [ 248.932128][T11632] ? __pfx___sys_sendto+0x10/0x10 [ 248.932159][T11632] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 248.932196][T11632] ? __fget_files+0x3a0/0x420 [ 248.932235][T11632] ? ksys_write+0x22a/0x250 [ 248.932260][T11632] ? __pfx_ksys_write+0x10/0x10 [ 248.932286][T11632] __x64_sys_sendto+0xde/0x100 [ 248.932319][T11632] do_syscall_64+0xfa/0xfa0 [ 248.932338][T11632] ? lockdep_hardirqs_on+0x9c/0x150 [ 248.932358][T11632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.932377][T11632] ? clear_bhb_loop+0x60/0xb0 [ 248.932403][T11632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.932421][T11632] RIP: 0033:0x7f442b58efc9 [ 248.932440][T11632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.932457][T11632] RSP: 002b:00007f442c4ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 248.932480][T11632] RAX: ffffffffffffffda RBX: 00007f442b7e5fa0 RCX: 00007f442b58efc9 [ 248.932495][T11632] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 248.932508][T11632] RBP: 00007f442c4ad090 R08: 000020000005ffe4 R09: 000000000000001c [ 248.932521][T11632] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 248.932533][T11632] R13: 00007f442b7e6038 R14: 00007f442b7e5fa0 R15: 00007ffff1dd0428 [ 248.932570][T11632] [ 249.278144][T11634] netlink: 'syz.2.2138': attribute type 4 has an invalid length. [ 249.334573][T11638] netlink: 'syz.2.2138': attribute type 4 has an invalid length. [ 249.349369][T11639] netlink: 'syz.1.2140': attribute type 11 has an invalid length. [ 249.600835][T11656] FAULT_INJECTION: forcing a failure. [ 249.600835][T11656] name failslab, interval 1, probability 0, space 0, times 0 [ 249.614431][T11656] CPU: 1 UID: 0 PID: 11656 Comm: syz.5.2149 Not tainted syzkaller #0 PREEMPT(full) [ 249.614460][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.614472][T11656] Call Trace: [ 249.614480][T11656] [ 249.614488][T11656] dump_stack_lvl+0x189/0x250 [ 249.614517][T11656] ? __pfx____ratelimit+0x10/0x10 [ 249.614547][T11656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.614568][T11656] ? __pfx__printk+0x10/0x10 [ 249.614596][T11656] ? __pfx___might_resched+0x10/0x10 [ 249.614622][T11656] ? fs_reclaim_acquire+0x7d/0x100 [ 249.614652][T11656] should_fail_ex+0x414/0x560 [ 249.614688][T11656] should_failslab+0xa8/0x100 [ 249.614714][T11656] kmem_cache_alloc_node_noprof+0x77/0x710 [ 249.614736][T11656] ? __alloc_skb+0x112/0x2d0 [ 249.614762][T11656] ? netlink_autobind+0xdb/0x300 [ 249.614797][T11656] __alloc_skb+0x112/0x2d0 [ 249.614829][T11656] netlink_sendmsg+0x5c6/0xb30 [ 249.614876][T11656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.614907][T11656] ? __lock_acquire+0xab9/0xd20 [ 249.614930][T11656] ? aa_sock_msg_perm+0xf1/0x1d0 [ 249.614955][T11656] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 249.614985][T11656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.615015][T11656] __sock_sendmsg+0x21c/0x270 [ 249.615043][T11656] sock_write_iter+0x279/0x360 [ 249.615069][T11656] ? __pfx_sock_write_iter+0x10/0x10 [ 249.615104][T11656] ? bpf_lsm_file_permission+0x9/0x20 [ 249.615130][T11656] ? security_file_permission+0x75/0x290 [ 249.615169][T11656] vfs_write+0x5c9/0xb30 [ 249.615197][T11656] ? __pfx_sock_write_iter+0x10/0x10 [ 249.615220][T11656] ? __pfx_vfs_write+0x10/0x10 [ 249.615254][T11656] ? __fget_files+0x2a/0x420 [ 249.615290][T11656] ksys_write+0x145/0x250 [ 249.615314][T11656] ? __pfx_ksys_write+0x10/0x10 [ 249.615340][T11656] ? do_syscall_64+0xbe/0xfa0 [ 249.615364][T11656] do_syscall_64+0xfa/0xfa0 [ 249.615382][T11656] ? lockdep_hardirqs_on+0x9c/0x150 [ 249.615402][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.615422][T11656] ? clear_bhb_loop+0x60/0xb0 [ 249.615446][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.615465][T11656] RIP: 0033:0x7f2d54d8efc9 [ 249.615483][T11656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.615500][T11656] RSP: 002b:00007f2d55c53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 249.615522][T11656] RAX: ffffffffffffffda RBX: 00007f2d54fe5fa0 RCX: 00007f2d54d8efc9 [ 249.615537][T11656] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 249.615550][T11656] RBP: 00007f2d55c53090 R08: 0000000000000000 R09: 0000000000000000 [ 249.615563][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.615575][T11656] R13: 00007f2d54fe6038 R14: 00007f2d54fe5fa0 R15: 00007fff32b4e2f8 [ 249.615610][T11656] [ 250.023102][T11659] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.031102][T11659] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.227493][T11659] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.259678][T11659] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.376708][T11675] __nla_validate_parse: 23 callbacks suppressed [ 250.376732][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2154'. [ 250.400639][T11675] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2154'. [ 250.410523][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2154'. [ 250.423072][T11675] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2154'. [ 250.546579][T11659] gtp0: left promiscuous mode [ 250.551456][T11659] gtp0: left allmulticast mode [ 250.616932][ T50] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.626890][ T50] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.656385][ T50] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.677234][ T50] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.694315][ T50] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.702997][ T50] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.736843][T11690] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2161'. [ 250.746771][ T50] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.757744][ T50] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.769855][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2161'. [ 250.780935][T11690] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2161'. [ 251.070669][T11707] netlink: 'syz.2.2166': attribute type 11 has an invalid length. [ 251.094983][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2166'. [ 251.112799][T11708] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2166'. [ 251.173146][T11716] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2167'. [ 251.241361][T11719] openvswitch: netlink: Flow key attr not present in new flow. [ 251.331935][T11728] FAULT_INJECTION: forcing a failure. [ 251.331935][T11728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.366358][T11728] CPU: 1 UID: 0 PID: 11728 Comm: syz.2.2173 Not tainted syzkaller #0 PREEMPT(full) [ 251.366389][T11728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 251.366400][T11728] Call Trace: [ 251.366408][T11728] [ 251.366417][T11728] dump_stack_lvl+0x189/0x250 [ 251.366444][T11728] ? __pfx____ratelimit+0x10/0x10 [ 251.366475][T11728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.366496][T11728] ? __pfx__printk+0x10/0x10 [ 251.366517][T11728] ? __might_fault+0xb0/0x130 [ 251.366552][T11728] should_fail_ex+0x414/0x560 [ 251.366598][T11728] _copy_from_iter+0x1de/0x1790 [ 251.366629][T11728] ? rcu_is_watching+0x15/0xb0 [ 251.366662][T11728] ? kmalloc_reserve+0xbd/0x290 [ 251.366690][T11728] ? __pfx__copy_from_iter+0x10/0x10 [ 251.366713][T11728] ? __build_skb_around+0x262/0x3f0 [ 251.366743][T11728] ? netlink_sendmsg+0x642/0xb30 [ 251.366767][T11728] ? skb_put+0x11b/0x210 [ 251.366798][T11728] netlink_sendmsg+0x6b2/0xb30 [ 251.366835][T11728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.366864][T11728] ? __lock_acquire+0xab9/0xd20 [ 251.366886][T11728] ? aa_sock_msg_perm+0xf1/0x1d0 [ 251.366910][T11728] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 251.366933][T11728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.366963][T11728] __sock_sendmsg+0x21c/0x270 [ 251.366989][T11728] sock_write_iter+0x279/0x360 [ 251.367014][T11728] ? __pfx_sock_write_iter+0x10/0x10 [ 251.367049][T11728] ? bpf_lsm_file_permission+0x9/0x20 [ 251.367074][T11728] ? security_file_permission+0x75/0x290 [ 251.367109][T11728] vfs_write+0x5c9/0xb30 [ 251.367136][T11728] ? __pfx_sock_write_iter+0x10/0x10 [ 251.367157][T11728] ? __pfx_vfs_write+0x10/0x10 [ 251.367190][T11728] ? __fget_files+0x2a/0x420 [ 251.367224][T11728] ksys_write+0x145/0x250 [ 251.367249][T11728] ? __pfx_ksys_write+0x10/0x10 [ 251.367275][T11728] ? do_syscall_64+0xbe/0xfa0 [ 251.367308][T11728] do_syscall_64+0xfa/0xfa0 [ 251.367325][T11728] ? lockdep_hardirqs_on+0x9c/0x150 [ 251.367344][T11728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.367363][T11728] ? clear_bhb_loop+0x60/0xb0 [ 251.367388][T11728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.367407][T11728] RIP: 0033:0x7f76acd8efc9 [ 251.367426][T11728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.367442][T11728] RSP: 002b:00007f76adc39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.367465][T11728] RAX: ffffffffffffffda RBX: 00007f76acfe5fa0 RCX: 00007f76acd8efc9 [ 251.367479][T11728] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 251.367492][T11728] RBP: 00007f76adc39090 R08: 0000000000000000 R09: 0000000000000000 [ 251.367504][T11728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 251.367542][T11728] R13: 00007f76acfe6038 R14: 00007f76acfe5fa0 R15: 00007ffe9d2c0c48 [ 251.367585][T11728] [ 251.823320][T11742] netlink: 'syz.2.2179': attribute type 10 has an invalid length. [ 251.831870][T11742] bridge_slave_1: left allmulticast mode [ 251.837984][T11742] bridge_slave_1: left promiscuous mode [ 251.846550][T11742] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.868992][T11742] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 252.135970][T11760] FAULT_INJECTION: forcing a failure. [ 252.135970][T11760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.164131][T11760] CPU: 1 UID: 0 PID: 11760 Comm: syz.1.2187 Not tainted syzkaller #0 PREEMPT(full) [ 252.164162][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.164175][T11760] Call Trace: [ 252.164183][T11760] [ 252.164192][T11760] dump_stack_lvl+0x189/0x250 [ 252.164220][T11760] ? __pfx____ratelimit+0x10/0x10 [ 252.164252][T11760] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.164274][T11760] ? __pfx__printk+0x10/0x10 [ 252.164321][T11760] should_fail_ex+0x414/0x560 [ 252.164359][T11760] _copy_to_user+0x31/0xb0 [ 252.164389][T11760] simple_read_from_buffer+0xe1/0x170 [ 252.164420][T11760] proc_fail_nth_read+0x1b3/0x220 [ 252.164454][T11760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.164487][T11760] ? rw_verify_area+0x2a6/0x4d0 [ 252.164507][T11760] ? __lock_acquire+0xab9/0xd20 [ 252.164530][T11760] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 252.164572][T11760] vfs_read+0x200/0xa30 [ 252.164592][T11760] ? fdget_pos+0x247/0x320 [ 252.164622][T11760] ? __pfx___mutex_lock+0x10/0x10 [ 252.164644][T11760] ? __pfx_vfs_read+0x10/0x10 [ 252.164668][T11760] ? __fget_files+0x2a/0x420 [ 252.164697][T11760] ? __fget_files+0x3a0/0x420 [ 252.164720][T11760] ? __fget_files+0x2a/0x420 [ 252.164754][T11760] ksys_read+0x145/0x250 [ 252.164778][T11760] ? __pfx_ksys_read+0x10/0x10 [ 252.164804][T11760] ? do_syscall_64+0xbe/0xfa0 [ 252.164828][T11760] do_syscall_64+0xfa/0xfa0 [ 252.164846][T11760] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.164866][T11760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.164886][T11760] ? clear_bhb_loop+0x60/0xb0 [ 252.164912][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.164932][T11760] RIP: 0033:0x7ffb00b8d9dc [ 252.164952][T11760] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 252.164969][T11760] RSP: 002b:00007ffb01980030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 252.164992][T11760] RAX: ffffffffffffffda RBX: 00007ffb00de5fa0 RCX: 00007ffb00b8d9dc [ 252.165007][T11760] RDX: 000000000000000f RSI: 00007ffb019800a0 RDI: 0000000000000005 [ 252.165020][T11760] RBP: 00007ffb01980090 R08: 0000000000000000 R09: 0000000000000000 [ 252.165033][T11760] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 252.165046][T11760] R13: 00007ffb00de6038 R14: 00007ffb00de5fa0 R15: 00007ffc57453998 [ 252.165082][T11760] [ 252.203597][T11767] netlink: 'syz.5.2190': attribute type 12 has an invalid length. [ 252.500261][T11767] bond3: option primary_reselect: invalid value (255) [ 252.512371][T11767] bond3 (unregistering): Released all slaves [ 252.537506][T11776] FAULT_INJECTION: forcing a failure. [ 252.537506][T11776] name failslab, interval 1, probability 0, space 0, times 0 [ 252.577120][T11776] CPU: 1 UID: 0 PID: 11776 Comm: syz.1.2192 Not tainted syzkaller #0 PREEMPT(full) [ 252.577153][T11776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 252.577164][T11776] Call Trace: [ 252.577172][T11776] [ 252.577180][T11776] dump_stack_lvl+0x189/0x250 [ 252.577207][T11776] ? __pfx____ratelimit+0x10/0x10 [ 252.577237][T11776] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.577258][T11776] ? __pfx__printk+0x10/0x10 [ 252.577286][T11776] ? __pfx___might_resched+0x10/0x10 [ 252.577310][T11776] ? fs_reclaim_acquire+0x7d/0x100 [ 252.577340][T11776] should_fail_ex+0x414/0x560 [ 252.577373][T11776] should_failslab+0xa8/0x100 [ 252.577400][T11776] kmem_cache_alloc_node_noprof+0x77/0x710 [ 252.577421][T11776] ? __alloc_skb+0x112/0x2d0 [ 252.577448][T11776] ? __pfx___mutex_trylock_common+0x10/0x10 [ 252.577481][T11776] __alloc_skb+0x112/0x2d0 [ 252.577511][T11776] netlink_dump+0x1b7/0xe90 [ 252.577545][T11776] ? __netlink_lookup+0xbd/0x8a0 [ 252.577577][T11776] ? __pfx_netlink_dump+0x10/0x10 [ 252.577600][T11776] ? __netlink_lookup+0x7db/0x8a0 [ 252.577642][T11776] ? netlink_lookup+0x30/0x200 [ 252.577665][T11776] ? netlink_lookup+0x30/0x200 [ 252.577685][T11776] ? netlink_lookup+0x30/0x200 [ 252.577714][T11776] __netlink_dump_start+0x5cb/0x7e0 [ 252.577748][T11776] rtnetlink_rcv_msg+0x9eb/0xb70 [ 252.577775][T11776] ? __pfx_rtnl_dump_all+0x10/0x10 [ 252.577807][T11776] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 252.577831][T11776] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.577854][T11776] ? __pfx_rtnl_dumpit+0x10/0x10 [ 252.577876][T11776] ? __pfx_rtnl_dump_all+0x10/0x10 [ 252.577916][T11776] netlink_rcv_skb+0x208/0x470 [ 252.577939][T11776] ? __lock_acquire+0xab9/0xd20 [ 252.577963][T11776] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.577991][T11776] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.578030][T11776] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.578066][T11776] netlink_unicast+0x82f/0x9e0 [ 252.578100][T11776] ? __pfx_netlink_unicast+0x10/0x10 [ 252.578132][T11776] ? netlink_sendmsg+0x642/0xb30 [ 252.578156][T11776] ? skb_put+0x11b/0x210 [ 252.578188][T11776] netlink_sendmsg+0x805/0xb30 [ 252.578224][T11776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.578251][T11776] ? __lock_acquire+0xab9/0xd20 [ 252.578270][T11776] ? aa_sock_msg_perm+0xf1/0x1d0 [ 252.578291][T11776] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.578314][T11776] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.578339][T11776] __sock_sendmsg+0x21c/0x270 [ 252.578363][T11776] sock_write_iter+0x279/0x360 [ 252.578386][T11776] ? __pfx_sock_write_iter+0x10/0x10 [ 252.578417][T11776] ? bpf_lsm_file_permission+0x9/0x20 [ 252.578439][T11776] ? security_file_permission+0x75/0x290 [ 252.578473][T11776] vfs_write+0x5c9/0xb30 [ 252.578498][T11776] ? __pfx_sock_write_iter+0x10/0x10 [ 252.578518][T11776] ? __pfx_vfs_write+0x10/0x10 [ 252.578548][T11776] ? __fget_files+0x2a/0x420 [ 252.578580][T11776] ksys_write+0x145/0x250 [ 252.578602][T11776] ? __pfx_ksys_write+0x10/0x10 [ 252.578625][T11776] ? do_syscall_64+0xbe/0xfa0 [ 252.578647][T11776] do_syscall_64+0xfa/0xfa0 [ 252.578663][T11776] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.578679][T11776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.578697][T11776] ? clear_bhb_loop+0x60/0xb0 [ 252.578720][T11776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.578736][T11776] RIP: 0033:0x7ffb00b8efc9 [ 252.578754][T11776] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.578771][T11776] RSP: 002b:00007ffb01980038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.578800][T11776] RAX: ffffffffffffffda RBX: 00007ffb00de5fa0 RCX: 00007ffb00b8efc9 [ 252.578814][T11776] RDX: 0000000000000024 RSI: 0000200000000000 RDI: 0000000000000003 [ 252.578825][T11776] RBP: 00007ffb01980090 R08: 0000000000000000 R09: 0000000000000000 [ 252.578836][T11776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.578847][T11776] R13: 00007ffb00de6038 R14: 00007ffb00de5fa0 R15: 00007ffc57453998 [ 252.578881][T11776] [ 253.220489][T11794] tipc: Started in network mode [ 253.226133][T11794] tipc: Node identity a2a33d4bcde1, cluster identity 4711 [ 253.233834][T11794] tipc: Enabled bearer , priority 0 [ 253.241166][T11795] syzkaller0: entered promiscuous mode [ 253.247580][T11795] syzkaller0: entered allmulticast mode [ 253.314567][T11796] netlink: 'syz.1.2200': attribute type 11 has an invalid length. [ 253.329196][T11805] openvswitch: netlink: Flow key attr not present in new flow. [ 253.384170][T11795] tipc: Resetting bearer [ 253.498009][T11795] tipc: Disabling bearer [ 253.851649][T11837] netlink: 'syz.0.2213': attribute type 1 has an invalid length. [ 253.951200][T11839] 8021q: adding VLAN 0 to HW filter on device bond7 [ 253.961085][T11839] bond6: (slave bond7): making interface the new active one [ 253.969602][T11839] bond6: (slave bond7): Enslaving as an active interface with an up link [ 253.991568][T11837] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 254.004438][T11837] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 254.494946][T11862] netlink: 'syz.5.2222': attribute type 4 has an invalid length. [ 254.511709][T11862] netlink: 'syz.5.2222': attribute type 4 has an invalid length. [ 254.613994][T11866] netlink: 'syz.2.2227': attribute type 12 has an invalid length. [ 254.708758][T11866] bond3: option primary_reselect: invalid value (255) [ 254.729104][T11866] bond3 (unregistering): Released all slaves [ 254.906478][T11878] FAULT_INJECTION: forcing a failure. [ 254.906478][T11878] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.906561][T11864] FAULT_INJECTION: forcing a failure. [ 254.906561][T11864] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.920256][T11878] CPU: 0 UID: 0 PID: 11878 Comm: syz.2.2230 Not tainted syzkaller #0 PREEMPT(full) [ 254.920279][T11878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 254.920290][T11878] Call Trace: [ 254.920297][T11878] [ 254.920305][T11878] dump_stack_lvl+0x189/0x250 [ 254.920330][T11878] ? __pfx____ratelimit+0x10/0x10 [ 254.920358][T11878] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.920377][T11878] ? __pfx__printk+0x10/0x10 [ 254.920397][T11878] ? __might_fault+0xb0/0x130 [ 254.920428][T11878] should_fail_ex+0x414/0x560 [ 254.920461][T11878] _copy_from_iter+0x1de/0x1790 [ 254.920483][T11878] ? rcu_is_watching+0x15/0xb0 [ 254.920517][T11878] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 254.920533][T11878] ? kmem_cache_alloc_noprof+0x3b8/0x6e0 [ 254.920550][T11878] ? sctp_addto_chunk+0xf2/0x230 [ 254.920576][T11878] ? __pfx__copy_from_iter+0x10/0x10 [ 254.920596][T11878] ? __asan_memcpy+0x40/0x70 [ 254.920615][T11878] ? sctp_make_datafrag_empty+0x17c/0x230 [ 254.920636][T11878] ? skb_put+0x11b/0x210 [ 254.920675][T11878] sctp_user_addto_chunk+0x87/0x240 [ 254.920700][T11878] sctp_datamsg_from_user+0x748/0xef0 [ 254.920749][T11878] sctp_sendmsg_to_asoc+0xffe/0x1810 [ 254.920769][T11878] ? __asan_memcpy+0x40/0x70 [ 254.920795][T11878] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 254.920833][T11878] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 254.920855][T11878] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 254.920879][T11878] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 254.920900][T11878] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 254.920920][T11878] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 254.920942][T11878] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 254.920966][T11878] ? security_sctp_bind_connect+0x7e/0x2e0 [ 254.920996][T11878] sctp_sendmsg+0x1941/0x2810 [ 254.921031][T11878] ? __pfx_sctp_sendmsg+0x10/0x10 [ 254.921056][T11878] ? aa_sk_perm+0x81e/0x950 [ 254.921081][T11878] ? __pfx_aa_sk_perm+0x10/0x10 [ 254.921111][T11878] ? sock_rps_record_flow+0x19/0x410 [ 254.921139][T11878] ? inet_sendmsg+0x2f4/0x370 [ 254.921161][T11878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 254.921187][T11878] __sock_sendmsg+0x19c/0x270 [ 254.921212][T11878] __sys_sendto+0x3bd/0x520 [ 254.921240][T11878] ? __pfx___sys_sendto+0x10/0x10 [ 254.921268][T11878] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 254.921301][T11878] ? __fget_files+0x3a0/0x420 [ 254.921343][T11878] ? ksys_write+0x22a/0x250 [ 254.921365][T11878] ? __pfx_ksys_write+0x10/0x10 [ 254.921389][T11878] __x64_sys_sendto+0xde/0x100 [ 254.921418][T11878] do_syscall_64+0xfa/0xfa0 [ 254.921435][T11878] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.921453][T11878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.921471][T11878] ? clear_bhb_loop+0x60/0xb0 [ 254.921493][T11878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.921517][T11878] RIP: 0033:0x7f76acd8efc9 [ 254.921534][T11878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.921549][T11878] RSP: 002b:00007f76adc39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 254.921570][T11878] RAX: ffffffffffffffda RBX: 00007f76acfe5fa0 RCX: 00007f76acd8efc9 [ 254.921585][T11878] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 254.921597][T11878] RBP: 00007f76adc39090 R08: 000020000005ffe4 R09: 000000000000001c [ 254.921608][T11878] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 254.921620][T11878] R13: 00007f76acfe6038 R14: 00007f76acfe5fa0 R15: 00007ffe9d2c0c48 [ 254.921653][T11878] [ 255.311568][T11864] CPU: 1 UID: 0 PID: 11864 Comm: syz.1.2225 Not tainted syzkaller #0 PREEMPT(full) [ 255.311608][T11864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.311620][T11864] Call Trace: [ 255.311628][T11864] [ 255.311637][T11864] dump_stack_lvl+0x189/0x250 [ 255.311665][T11864] ? __pfx____ratelimit+0x10/0x10 [ 255.311694][T11864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.311715][T11864] ? __pfx__printk+0x10/0x10 [ 255.311752][T11864] should_fail_ex+0x414/0x560 [ 255.311790][T11864] _copy_from_user+0x2d/0xb0 [ 255.311818][T11864] __copy_msghdr+0x3c5/0x5b0 [ 255.311850][T11864] ___sys_sendmsg+0x1a5/0x2a0 [ 255.311868][T11864] ? __pfx____sys_sendmsg+0x10/0x10 [ 255.311925][T11864] ? __fget_files+0x2a/0x420 [ 255.311949][T11864] ? __fget_files+0x3a0/0x420 [ 255.311985][T11864] __x64_sys_sendmsg+0x19b/0x260 [ 255.312008][T11864] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 255.312040][T11864] ? __pfx_ksys_write+0x10/0x10 [ 255.312066][T11864] ? do_syscall_64+0xbe/0xfa0 [ 255.312090][T11864] do_syscall_64+0xfa/0xfa0 [ 255.312108][T11864] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.312128][T11864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.312147][T11864] ? clear_bhb_loop+0x60/0xb0 [ 255.312173][T11864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.312191][T11864] RIP: 0033:0x7ffb00b8efc9 [ 255.312209][T11864] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.312227][T11864] RSP: 002b:00007ffb01980038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.312250][T11864] RAX: ffffffffffffffda RBX: 00007ffb00de5fa0 RCX: 00007ffb00b8efc9 [ 255.312265][T11864] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 255.312279][T11864] RBP: 00007ffb01980090 R08: 0000000000000000 R09: 0000000000000000 [ 255.312292][T11864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.312303][T11864] R13: 00007ffb00de6038 R14: 00007ffb00de5fa0 R15: 00007ffc57453998 [ 255.312339][T11864] [ 255.629738][T11893] __nla_validate_parse: 15 callbacks suppressed [ 255.629770][T11893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2234'. [ 255.678802][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2234'. [ 255.688055][T11893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2234'. [ 255.698837][T11893] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2234'. [ 255.762075][T11896] 8021q: VLANs not supported on ip6gre0 [ 255.791215][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2238'. [ 255.842916][T11900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2238'. [ 255.866486][ T34] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.904252][ T34] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.939074][T11905] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2241'. [ 255.953922][ T34] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.962449][ T34] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 256.546381][T11929] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2251'. [ 256.623830][T11929] openvswitch: netlink: Flow key attr not present in new flow. [ 256.792198][T11940] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2255'. [ 256.828251][T11941] FAULT_INJECTION: forcing a failure. [ 256.828251][T11941] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.864164][T11941] CPU: 1 UID: 0 PID: 11941 Comm: syz.3.2256 Not tainted syzkaller #0 PREEMPT(full) [ 256.864195][T11941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 256.864208][T11941] Call Trace: [ 256.864217][T11941] [ 256.864226][T11941] dump_stack_lvl+0x189/0x250 [ 256.864256][T11941] ? __pfx____ratelimit+0x10/0x10 [ 256.864287][T11941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.864310][T11941] ? __pfx__printk+0x10/0x10 [ 256.864331][T11941] ? __might_fault+0xb0/0x130 [ 256.864367][T11941] should_fail_ex+0x414/0x560 [ 256.864406][T11941] _copy_from_user+0x2d/0xb0 [ 256.864434][T11941] kstrtouint_from_user+0xc4/0x170 [ 256.864461][T11941] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 256.864514][T11941] proc_fail_nth_write+0x88/0x200 [ 256.864547][T11941] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.864585][T11941] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 256.864618][T11941] vfs_write+0x27e/0xb30 [ 256.864652][T11941] ? __pfx_vfs_write+0x10/0x10 [ 256.864676][T11941] ? __fget_files+0x2a/0x420 [ 256.864705][T11941] ? __fget_files+0x3a0/0x420 [ 256.864728][T11941] ? __fget_files+0x2a/0x420 [ 256.864760][T11941] ksys_write+0x145/0x250 [ 256.864786][T11941] ? __pfx_ksys_write+0x10/0x10 [ 256.864813][T11941] ? do_syscall_64+0xbe/0xfa0 [ 256.864839][T11941] do_syscall_64+0xfa/0xfa0 [ 256.864857][T11941] ? lockdep_hardirqs_on+0x9c/0x150 [ 256.864878][T11941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.864898][T11941] ? clear_bhb_loop+0x60/0xb0 [ 256.864924][T11941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.864944][T11941] RIP: 0033:0x7f2b5858da7f [ 256.864963][T11941] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 256.864982][T11941] RSP: 002b:00007f2b59366030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 256.865005][T11941] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2b5858da7f [ 256.865020][T11941] RDX: 0000000000000001 RSI: 00007f2b593660a0 RDI: 0000000000000004 [ 256.865033][T11941] RBP: 00007f2b59366090 R08: 0000000000000000 R09: 0000000000000000 [ 256.865045][T11941] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 256.865058][T11941] R13: 00007f2b587e6038 R14: 00007f2b587e5fa0 R15: 00007ffdf30c4398 [ 256.865104][T11941] [ 257.241104][T11950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2257'. [ 258.426387][T12007] syzkaller1: entered promiscuous mode [ 258.431944][T12007] syzkaller1: entered allmulticast mode [ 258.571442][T12016] netlink: 'syz.1.2285': attribute type 9 has an invalid length. [ 258.652907][T12017] netlink: 'syz.0.2286': attribute type 3 has an invalid length. [ 258.814056][T12025] Cannot find set identified by id 3 to match [ 258.918890][T12032] tipc: Enabled bearer , priority 0 [ 258.942751][T12030] syzkaller0: entered promiscuous mode [ 258.959391][T12030] syzkaller0: entered allmulticast mode [ 258.994831][T12032] tipc: Resetting bearer [ 259.032354][T12029] tipc: Resetting bearer [ 259.052851][T12029] tipc: Disabling bearer [ 259.206101][T12045] netlink: 'syz.1.2298': attribute type 21 has an invalid length. [ 259.222480][T12045] netlink: 'syz.1.2298': attribute type 4 has an invalid length. [ 259.249478][T12045] netlink: 'syz.1.2298': attribute type 5 has an invalid length. [ 259.263061][T12045] netlink: 'syz.1.2298': attribute type 21 has an invalid length. [ 259.283263][T12045] netlink: 'syz.1.2298': attribute type 4 has an invalid length. [ 259.302080][T12045] netlink: 'syz.1.2298': attribute type 5 has an invalid length. [ 259.400475][T12055] netlink: 'syz.5.2302': attribute type 9 has an invalid length. [ 259.562531][T12057] netlink: 'syz.1.2303': attribute type 7 has an invalid length. [ 259.692392][T12047] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 259.894170][T12069] openvswitch: netlink: Flow key attr not present in new flow. [ 260.598450][T12105] macvlan2: entered allmulticast mode [ 260.615091][T12105] bond3: (slave macvlan2): Opening slave failed [ 261.001290][T12127] FAULT_INJECTION: forcing a failure. [ 261.001290][T12127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.042792][T12127] CPU: 1 UID: 0 PID: 12127 Comm: syz.5.2326 Not tainted syzkaller #0 PREEMPT(full) [ 261.042822][T12127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 261.042833][T12127] Call Trace: [ 261.042841][T12127] [ 261.042850][T12127] dump_stack_lvl+0x189/0x250 [ 261.042875][T12127] ? __pfx____ratelimit+0x10/0x10 [ 261.042904][T12127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.042923][T12127] ? __pfx__printk+0x10/0x10 [ 261.042942][T12127] ? __might_fault+0xb0/0x130 [ 261.042976][T12127] should_fail_ex+0x414/0x560 [ 261.043010][T12127] _copy_from_iter+0x1de/0x1790 [ 261.043033][T12127] ? rcu_is_watching+0x15/0xb0 [ 261.043059][T12127] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 261.043075][T12127] ? kmem_cache_alloc_noprof+0x3b8/0x6e0 [ 261.043092][T12127] ? sctp_addto_chunk+0xf2/0x230 [ 261.043118][T12127] ? __pfx__copy_from_iter+0x10/0x10 [ 261.043140][T12127] ? __asan_memcpy+0x40/0x70 [ 261.043172][T12127] ? sctp_make_datafrag_empty+0x17c/0x230 [ 261.043193][T12127] ? skb_put+0x11b/0x210 [ 261.043224][T12127] sctp_user_addto_chunk+0x87/0x240 [ 261.043250][T12127] sctp_datamsg_from_user+0x748/0xef0 [ 261.043303][T12127] sctp_sendmsg_to_asoc+0xffe/0x1810 [ 261.043324][T12127] ? __asan_memcpy+0x40/0x70 [ 261.043350][T12127] ? sctp_assoc_add_peer+0xcfa/0x13b0 [ 261.043390][T12127] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 261.043412][T12127] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 261.043436][T12127] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 261.043459][T12127] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 261.043479][T12127] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 261.043502][T12127] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 261.043526][T12127] ? security_sctp_bind_connect+0x7e/0x2e0 [ 261.043557][T12127] sctp_sendmsg+0x1941/0x2810 [ 261.043593][T12127] ? __pfx_sctp_sendmsg+0x10/0x10 [ 261.043620][T12127] ? aa_sk_perm+0x81e/0x950 [ 261.043645][T12127] ? __pfx_aa_sk_perm+0x10/0x10 [ 261.043668][T12127] ? sock_rps_record_flow+0x19/0x410 [ 261.043711][T12127] ? inet_sendmsg+0x2f4/0x370 [ 261.043733][T12127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 261.043760][T12127] __sock_sendmsg+0x19c/0x270 [ 261.043787][T12127] __sys_sendto+0x3bd/0x520 [ 261.043816][T12127] ? __pfx___sys_sendto+0x10/0x10 [ 261.043838][T12127] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 261.043873][T12127] ? __fget_files+0x3a0/0x420 [ 261.043910][T12127] ? ksys_write+0x22a/0x250 [ 261.043933][T12127] ? __pfx_ksys_write+0x10/0x10 [ 261.043957][T12127] __x64_sys_sendto+0xde/0x100 [ 261.043988][T12127] do_syscall_64+0xfa/0xfa0 [ 261.044005][T12127] ? lockdep_hardirqs_on+0x9c/0x150 [ 261.044023][T12127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.044041][T12127] ? clear_bhb_loop+0x60/0xb0 [ 261.044065][T12127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.044082][T12127] RIP: 0033:0x7f2d54d8efc9 [ 261.044101][T12127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.044117][T12127] RSP: 002b:00007f2d55c53038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 261.044140][T12127] RAX: ffffffffffffffda RBX: 00007f2d54fe5fa0 RCX: 00007f2d54d8efc9 [ 261.044154][T12127] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 261.044166][T12127] RBP: 00007f2d55c53090 R08: 000020000005ffe4 R09: 000000000000001c [ 261.044178][T12127] R10: 00000000000000e0 R11: 0000000000000246 R12: 0000000000000002 [ 261.044189][T12127] R13: 00007f2d54fe6038 R14: 00007f2d54fe5fa0 R15: 00007fff32b4e2f8 [ 261.044225][T12127] [ 261.653341][T12140] __nla_validate_parse: 28 callbacks suppressed [ 261.653365][T12140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2331'. [ 261.669991][T12140] openvswitch: netlink: Flow key attr not present in new flow. [ 261.949588][T12155] vlan0: entered allmulticast mode [ 261.969101][T12155] bond0: entered allmulticast mode [ 261.989540][T12155] bond_slave_0: entered allmulticast mode [ 262.018060][T12155] bond_slave_1: entered allmulticast mode [ 262.046847][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2338'. [ 262.083822][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2338'. [ 262.105556][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2338'. [ 262.125414][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2338'. [ 262.281193][T12164] netlink: 'syz.0.2341': attribute type 11 has an invalid length. [ 262.299947][T12164] netlink: 'syz.0.2341': attribute type 11 has an invalid length. [ 262.331291][T12164] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2341'. [ 262.363861][T12164] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2341'. [ 262.374889][T12165] wg2: entered promiscuous mode [ 262.381189][T12165] wg2: entered allmulticast mode [ 262.534074][T12173] 8021q: VLANs not supported on ip6gre0 [ 262.592560][T12176] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2345'. [ 262.766909][T12183] macvlan2: entered promiscuous mode [ 262.790982][T12183] macvlan2: entered allmulticast mode [ 262.797941][T12183] bond3: (slave macvlan2): Opening slave failed [ 263.238603][T12218] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2354'. [ 263.906985][T12224] FAULT_INJECTION: forcing a failure. [ 263.906985][T12224] name failslab, interval 1, probability 0, space 0, times 0 [ 263.920199][T12224] CPU: 0 UID: 0 PID: 12224 Comm: syz.1.2357 Not tainted syzkaller #0 PREEMPT(full) [ 263.920227][T12224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 263.920239][T12224] Call Trace: [ 263.920247][T12224] [ 263.920256][T12224] dump_stack_lvl+0x189/0x250 [ 263.920284][T12224] ? __pfx____ratelimit+0x10/0x10 [ 263.920315][T12224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 263.920337][T12224] ? __pfx__printk+0x10/0x10 [ 263.920364][T12224] ? __pfx___might_resched+0x10/0x10 [ 263.920392][T12224] ? fs_reclaim_acquire+0x7d/0x100 [ 263.920434][T12224] should_fail_ex+0x414/0x560 [ 263.920471][T12224] should_failslab+0xa8/0x100 [ 263.920498][T12224] kmem_cache_alloc_node_noprof+0x77/0x710 [ 263.920519][T12224] ? __alloc_skb+0x112/0x2d0 [ 263.920553][T12224] __alloc_skb+0x112/0x2d0 [ 263.920586][T12224] netlink_dump+0x1b7/0xe90 [ 263.920613][T12224] ? __pfx__copy_to_iter+0x10/0x10 [ 263.920634][T12224] ? __skb_try_recv_from_queue+0x58f/0x730 [ 263.920665][T12224] ? __pfx_netlink_dump+0x10/0x10 [ 263.920719][T12224] netlink_recvmsg+0x676/0xa30 [ 263.920759][T12224] ? __pfx_netlink_recvmsg+0x10/0x10 [ 263.920785][T12224] ? __lock_acquire+0xab9/0xd20 [ 263.920815][T12224] ? aa_sock_msg_perm+0xf1/0x1d0 [ 263.920840][T12224] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 263.920866][T12224] ? __pfx_netlink_recvmsg+0x10/0x10 [ 263.920894][T12224] sock_recvmsg_nosec+0x186/0x1c0 [ 263.920923][T12224] ____sys_recvmsg+0x3aa/0x460 [ 263.920955][T12224] ? __pfx_____sys_recvmsg+0x10/0x10 [ 263.920993][T12224] ? import_iovec+0x74/0xa0 [ 263.921023][T12224] ___sys_recvmsg+0x1b5/0x510 [ 263.921050][T12224] ? __pfx____sys_recvmsg+0x10/0x10 [ 263.921105][T12224] ? __might_fault+0xb0/0x130 [ 263.921130][T12224] do_recvmmsg+0x307/0x770 [ 263.921160][T12224] ? __pfx_do_recvmmsg+0x10/0x10 [ 263.921195][T12224] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.921235][T12224] __x64_sys_recvmmsg+0x190/0x240 [ 263.921260][T12224] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 263.921285][T12224] ? do_syscall_64+0xbe/0xfa0 [ 263.921307][T12224] do_syscall_64+0xfa/0xfa0 [ 263.921324][T12224] ? lockdep_hardirqs_on+0x9c/0x150 [ 263.921343][T12224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.921362][T12224] ? clear_bhb_loop+0x60/0xb0 [ 263.921385][T12224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.921403][T12224] RIP: 0033:0x7ffb00b8efc9 [ 263.921434][T12224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.921452][T12224] RSP: 002b:00007ffb01980038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 263.921476][T12224] RAX: ffffffffffffffda RBX: 00007ffb00de5fa0 RCX: 00007ffb00b8efc9 [ 263.921491][T12224] RDX: 0000000000000004 RSI: 00002000000018c0 RDI: 0000000000000003 [ 263.921504][T12224] RBP: 00007ffb01980090 R08: 0000000000000000 R09: 0000000000000000 [ 263.921516][T12224] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000001 [ 263.921528][T12224] R13: 00007ffb00de6038 R14: 00007ffb00de5fa0 R15: 00007ffc57453998 [ 263.921564][T12224] [ 264.277547][T12226] openvswitch: netlink: Tunnel attr 20 out of range max 16 [ 264.309915][T12231] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2359'. [ 264.532810][T12238] Cannot find set identified by id 3 to match [ 264.805615][T12249] validate_nla: 2 callbacks suppressed [ 264.805640][T12249] netlink: 'syz.1.2366': attribute type 10 has an invalid length. [ 265.016964][T12268] netlink: 'syz.3.2372': attribute type 9 has an invalid length. [ 265.179584][T12279] netlink: 'syz.5.2375': attribute type 12 has an invalid length. [ 265.187749][T12276] netlink: 'syz.5.2375': attribute type 12 has an invalid length. [ 265.815698][T12304] netlink: 'syz.1.2385': attribute type 12 has an invalid length. [ 265.888593][T12307] team0: Device ip6gre1 is of different type [ 265.987113][T12312] netlink: 'syz.0.2389': attribute type 9 has an invalid length. [ 266.580232][T12347] Cannot find set identified by id 3 to match [ 266.999593][T12354] __nla_validate_parse: 6 callbacks suppressed [ 266.999607][T12354] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2404'. [ 267.015589][T12354] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2404'. [ 267.024814][T12354] netlink: 'syz.5.2404': attribute type 5 has an invalid length. [ 267.034692][T12354] netlink: 'syz.5.2404': attribute type 6 has an invalid length. [ 267.042655][T12354] netlink: 35 bytes leftover after parsing attributes in process `syz.5.2404'. [ 267.403313][T12376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2410'. [ 267.567034][T12386] netlink: 'syz.1.2413': attribute type 11 has an invalid length. [ 267.575620][T12386] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2413'. [ 267.754222][T12401] netlink: 'syz.1.2417': attribute type 9 has an invalid length. [ 267.774875][T12398] bond3: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 267.790094][T12398] bond3 (unregistering): Released all slaves [ 267.922044][T12411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2421'. [ 268.052317][T12420] netlink: 'syz.1.2424': attribute type 12 has an invalid length. [ 268.090895][T12420] bond8: option primary_reselect: invalid value (255) [ 268.101267][T12420] bond8 (unregistering): Released all slaves [ 268.618721][T12445] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 268.657034][T12449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2433'. [ 268.680245][T12449] openvswitch: netlink: Flow key attr not present in new flow. [ 268.791752][T12457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2437'. [ 268.867499][T12462] tipc: Enabling of bearer rejected, failed to enable media [ 269.388267][T12491] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 269.948427][T12523] syzkaller0: entered promiscuous mode [ 269.954091][T12523] syzkaller0: entered allmulticast mode [ 270.304812][T12532] FAULT_INJECTION: forcing a failure. [ 270.304812][T12532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 270.323928][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.0.2461 Not tainted syzkaller #0 PREEMPT(full) [ 270.323961][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 270.323973][T12532] Call Trace: [ 270.323982][T12532] [ 270.323991][T12532] dump_stack_lvl+0x189/0x250 [ 270.324020][T12532] ? __pfx____ratelimit+0x10/0x10 [ 270.324051][T12532] ? __pfx_dump_stack_lvl+0x10/0x10 [ 270.324073][T12532] ? __pfx__printk+0x10/0x10 [ 270.324094][T12532] ? __might_fault+0xb0/0x130 [ 270.324128][T12532] should_fail_ex+0x414/0x560 [ 270.324165][T12532] _copy_from_user+0x2d/0xb0 [ 270.324193][T12532] ___sys_recvmsg+0x12e/0x510 [ 270.324226][T12532] ? __pfx____sys_recvmsg+0x10/0x10 [ 270.324282][T12532] ? __might_fault+0xb0/0x130 [ 270.324307][T12532] do_recvmmsg+0x307/0x770 [ 270.324337][T12532] ? __pfx_do_recvmmsg+0x10/0x10 [ 270.324372][T12532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 270.324423][T12532] __x64_sys_recvmmsg+0x190/0x240 [ 270.324446][T12532] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 270.324471][T12532] ? do_syscall_64+0xbe/0xfa0 [ 270.324496][T12532] do_syscall_64+0xfa/0xfa0 [ 270.324514][T12532] ? lockdep_hardirqs_on+0x9c/0x150 [ 270.324534][T12532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.324554][T12532] ? clear_bhb_loop+0x60/0xb0 [ 270.324578][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 270.324597][T12532] RIP: 0033:0x7f442b58efc9 [ 270.324616][T12532] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 270.324633][T12532] RSP: 002b:00007f442c48c038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 270.324657][T12532] RAX: ffffffffffffffda RBX: 00007f442b7e6090 RCX: 00007f442b58efc9 [ 270.324672][T12532] RDX: 0000000000000004 RSI: 00002000000018c0 RDI: 0000000000000003 [ 270.324685][T12532] RBP: 00007f442c48c090 R08: 0000000000000000 R09: 0000000000000000 [ 270.324696][T12532] R10: 0000000000004022 R11: 0000000000000246 R12: 0000000000000002 [ 270.324709][T12532] R13: 00007f442b7e6128 R14: 00007f442b7e6090 R15: 00007ffff1dd0428 [ 270.324744][T12532] [ 270.805016][T12539] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2464'. [ 271.002900][T12549] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 271.096790][T12549] xt_connbytes: Forcing CT accounting to be enabled [ 271.104590][T12549] set match dimension is over the limit! [ 271.235695][T12557] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2469'. [ 272.132057][T12583] tap0: tun_chr_ioctl cmd 1074025677 [ 272.139181][T12583] tap0: linktype set to 65534 [ 272.351558][T12591] __nla_validate_parse: 6 callbacks suppressed [ 272.351589][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2483'. [ 272.500677][T12602] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2488'. [ 272.697454][T12615] validate_nla: 1 callbacks suppressed [ 272.697475][T12615] netlink: 'syz.5.2492': attribute type 12 has an invalid length. [ 272.714279][T12612] tipc: Enabled bearer , priority 0 [ 272.731740][T12608] tipc: Disabling bearer [ 272.776841][T12615] bond4: option primary_reselect: invalid value (255) [ 272.795686][T12615] bond4 (unregistering): Released all slaves [ 272.996593][T12622] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2494'. [ 273.008328][T12622] openvswitch: netlink: Flow key attr not present in new flow. [ 273.175810][T12626] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2496'. [ 273.191070][T12628] netlink: 'syz.1.2497': attribute type 1 has an invalid length. [ 273.245630][T12630] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2497'. [ 273.257160][T12628] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.324966][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2499'. [ 273.431072][T12636] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2501'. [ 273.446815][T12636] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2501'. [ 273.577384][T12650] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2504'. [ 273.656286][T12654] netlink: 'syz.1.2506': attribute type 2 has an invalid length. [ 273.672059][T12654] netlink: 'syz.1.2506': attribute type 2 has an invalid length. [ 273.857513][T12668] Cannot find set identified by id 3 to match [ 273.869262][T12669] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2508'. [ 274.442996][T12700] netlink: 'syz.2.2524': attribute type 12 has an invalid length. [ 274.488706][T12700] bond4: option primary_reselect: invalid value (255) [ 274.497663][T12700] bond4 (unregistering): Released all slaves [ 274.773062][T12720] netlink: 'syz.0.2532': attribute type 10 has an invalid length. [ 276.122519][T12804] openvswitch: netlink: Flow key attr not present in new flow. [ 276.423588][T12824] netlink: 'syz.1.2575': attribute type 9 has an invalid length. [ 276.666008][T12838] openvswitch: netlink: Flow key attr not present in new flow. [ 276.714375][T12841] netlink: 'syz.2.2582': attribute type 1 has an invalid length. [ 276.989959][T12852] Bluetooth: MGMT ver 1.23 [ 277.014957][T12852] Bluetooth: hci1: expected 19 bytes, got 2 bytes [ 277.178455][T12860] netlink: 'syz.0.2591': attribute type 12 has an invalid length. [ 277.221626][T12860] bond8: option primary_reselect: invalid value (255) [ 277.234282][T12860] bond8 (unregistering): Released all slaves [ 277.417276][T12871] netlink: 'syz.1.2595': attribute type 10 has an invalid length. [ 277.536077][T12878] __nla_validate_parse: 12 callbacks suppressed [ 277.536101][T12878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2599'. [ 277.592377][T12878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2599'. [ 277.704626][T12887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2602'. [ 277.929772][T12902] validate_nla: 1 callbacks suppressed [ 277.929795][T12902] netlink: 'syz.5.2609': attribute type 10 has an invalid length. [ 278.095734][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2612'. [ 278.172559][T12914] 8021q: VLANs not supported on ip6gre0 [ 278.252847][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2617'. [ 278.261974][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2617'. [ 278.312890][T12925] Cannot find set identified by id 3 to match [ 278.459673][T12934] netlink: 'syz.2.2622': attribute type 10 has an invalid length. [ 278.513220][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2621'. [ 278.527684][T12936] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2621'. [ 278.542419][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2621'. [ 278.559485][T12936] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2621'. [ 278.765412][T12948] netlink: 'syz.2.2627': attribute type 1 has an invalid length. [ 278.896682][T12953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 278.916131][T12953] bond4: (slave bond5): making interface the new active one [ 278.926023][T12953] bond4: (slave bond5): Enslaving as an active interface with an up link [ 278.964751][T12948] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 278.977589][T12948] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 279.322420][T12976] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 279.539062][T12988] openvswitch: netlink: Flow key attr not present in new flow. [ 279.795264][T13000] Cannot find set identified by id 3 to match [ 280.084620][T13006] xt_cluster: node mask cannot exceed total number of nodes [ 280.126129][T13011] netlink: 'syz.3.2654': attribute type 2 has an invalid length. [ 280.140757][T13011] netlink: 'syz.3.2654': attribute type 8 has an invalid length. [ 280.434460][T13027] netlink: 'syz.2.2660': attribute type 9 has an invalid length. [ 281.288176][T13059] netlink: 'syz.3.2671': attribute type 21 has an invalid length. [ 281.296456][T13059] netlink: 'syz.3.2671': attribute type 1 has an invalid length. [ 281.595773][T13066] netlink: 'syz.1.2674': attribute type 12 has an invalid length. [ 281.628996][T13066] bond9: option primary_reselect: invalid value (255) [ 281.650780][T13066] bond9 (unregistering): Released all slaves [ 281.664467][T13074] netlink: 'syz.5.2677': attribute type 10 has an invalid length. [ 282.040061][T13097] bond9: (slave macvlan2): Opening slave failed [ 282.570537][T13127] __nla_validate_parse: 22 callbacks suppressed [ 282.570585][T13127] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2694'. [ 283.059585][T13153] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 283.095921][T13158] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2706'. [ 283.133572][T13158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2706'. [ 283.478081][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2712'. [ 283.498698][T13178] Cannot find set identified by id 3 to match [ 283.513827][T13176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2712'. [ 283.536281][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2712'. [ 283.557288][T13176] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2712'. [ 283.696970][T13187] validate_nla: 2 callbacks suppressed [ 283.696991][T13187] netlink: 'syz.1.2717': attribute type 9 has an invalid length. [ 283.811726][T13193] FAULT_INJECTION: forcing a failure. [ 283.811726][T13193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.834978][T13193] CPU: 0 UID: 0 PID: 13193 Comm: syz.3.2720 Not tainted syzkaller #0 PREEMPT(full) [ 283.835009][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 283.835021][T13193] Call Trace: [ 283.835029][T13193] [ 283.835038][T13193] dump_stack_lvl+0x189/0x250 [ 283.835066][T13193] ? __pfx____ratelimit+0x10/0x10 [ 283.835097][T13193] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.835118][T13193] ? __pfx__printk+0x10/0x10 [ 283.835138][T13193] ? __might_fault+0xb0/0x130 [ 283.835173][T13193] should_fail_ex+0x414/0x560 [ 283.835209][T13193] _copy_from_user+0x2d/0xb0 [ 283.835237][T13193] __sys_sendto+0x25c/0x520 [ 283.835269][T13193] ? __pfx___sys_sendto+0x10/0x10 [ 283.835301][T13193] ? count_memcg_event_mm+0x21/0x260 [ 283.835348][T13193] ? exc_page_fault+0x82/0x100 [ 283.835372][T13193] ? do_user_addr_fault+0xc85/0x1380 [ 283.835404][T13193] __x64_sys_sendto+0xde/0x100 [ 283.835436][T13193] do_syscall_64+0xfa/0xfa0 [ 283.835455][T13193] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.835474][T13193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.835494][T13193] ? clear_bhb_loop+0x60/0xb0 [ 283.835518][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.835547][T13193] RIP: 0033:0x7f2b58590e5c [ 283.835566][T13193] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 283.835584][T13193] RSP: 002b:00007f2b59364ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 283.835607][T13193] RAX: ffffffffffffffda RBX: 00007f2b59364fc0 RCX: 00007f2b58590e5c [ 283.835622][T13193] RDX: 0000000000000020 RSI: 00007f2b59365010 RDI: 0000000000000005 [ 283.835635][T13193] RBP: 0000000000000000 R08: 00007f2b59364f14 R09: 000000000000000c [ 283.835647][T13193] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 283.835665][T13193] R13: 00007f2b59364f68 R14: 00007f2b59365010 R15: 0000000000000000 [ 283.835699][T13193] [ 284.100175][T13196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 284.149292][T13196] bond3: (slave macvlan2): Opening slave failed [ 284.177214][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2723'. [ 284.367383][T13210] Cannot find set identified by id 3 to match [ 284.545733][T13222] FAULT_INJECTION: forcing a failure. [ 284.545733][T13222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 284.582862][T13222] CPU: 1 UID: 0 PID: 13222 Comm: syz.2.2732 Not tainted syzkaller #0 PREEMPT(full) [ 284.582895][T13222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 284.582909][T13222] Call Trace: [ 284.582918][T13222] [ 284.582927][T13222] dump_stack_lvl+0x189/0x250 [ 284.582956][T13222] ? __pfx____ratelimit+0x10/0x10 [ 284.582986][T13222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.583007][T13222] ? __pfx__printk+0x10/0x10 [ 284.583031][T13222] ? fs_reclaim_acquire+0x7d/0x100 [ 284.583064][T13222] should_fail_ex+0x414/0x560 [ 284.583101][T13222] prepare_alloc_pages+0x213/0x610 [ 284.583136][T13222] __alloc_frozen_pages_noprof+0x123/0x370 [ 284.583167][T13222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 284.583210][T13222] ? page_table_check_set+0x18d/0x730 [ 284.583235][T13222] ? policy_nodemask+0x27c/0x720 [ 284.583267][T13222] alloc_pages_mpol+0x232/0x4a0 [ 284.583299][T13222] vma_alloc_folio_noprof+0xe4/0x200 [ 284.583328][T13222] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 284.583361][T13222] folio_prealloc+0x30/0x180 [ 284.583381][T13222] do_wp_page+0x1231/0x5800 [ 284.583417][T13222] ? __pfx_do_wp_page+0x10/0x10 [ 284.583429][T13222] ? do_raw_spin_lock+0x121/0x290 [ 284.583450][T13222] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.583476][T13222] __handle_mm_fault+0x1033/0x5400 [ 284.583505][T13222] ? lock_vma_under_rcu+0x1a3/0x450 [ 284.583523][T13222] ? __pfx___handle_mm_fault+0x10/0x10 [ 284.583552][T13222] ? lock_vma_under_rcu+0x3d2/0x450 [ 284.583573][T13222] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 284.583596][T13222] handle_mm_fault+0x40a/0x8e0 [ 284.583622][T13222] do_user_addr_fault+0xa7c/0x1380 [ 284.583650][T13222] ? rcu_is_watching+0x15/0xb0 [ 284.583681][T13222] ? trace_page_fault_user+0x84/0x1e0 [ 284.583708][T13222] exc_page_fault+0x82/0x100 [ 284.583727][T13222] asm_exc_page_fault+0x26/0x30 [ 284.583742][T13222] RIP: 0033:0x7f76acd489f5 [ 284.583757][T13222] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 284.583772][T13222] RSP: 002b:00007f76adc37de0 EFLAGS: 00010293 [ 284.583788][T13222] RAX: 0000000000000008 RBX: 00007f76adb17d60 RCX: 0000000000000000 [ 284.583799][T13222] RDX: 0000000000000000 RSI: 00007f76ace4fa5d RDI: 00007f76adb17d60 [ 284.583809][T13222] RBP: 00007f76adc37f00 R08: 0000000000000000 R09: 0000000000000005 [ 284.583819][T13222] R10: 0000000000000000 R11: 0000000000000293 R12: 00007f76ace4f720 [ 284.583830][T13222] R13: 0000000000000006 R14: 00007f76acfb7460 R15: 0000000000000000 [ 284.583857][T13222] [ 284.872025][T13222] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 285.045038][T13244] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2736'. [ 285.161961][T13248] netlink: 'syz.2.2740': attribute type 6 has an invalid length. [ 285.629098][T13267] netlink: 'syz.5.2749': attribute type 24 has an invalid length. [ 286.094941][T13298] Cannot find set identified by id 3 to match [ 286.210055][T13310] netlink: 'syz.3.2763': attribute type 12 has an invalid length. [ 286.423970][ C1] ================================================================== [ 286.432307][ C1] BUG: KASAN: slab-use-after-free in rose_send_frame+0x131/0x220 [ 286.440114][ C1] Write of size 8 at addr ffff88807ed7c818 by task syz-executor/5827 [ 286.448213][ C1] [ 286.450568][ C1] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 286.450595][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 286.450608][ C1] Call Trace: [ 286.450616][ C1] [ 286.450625][ C1] dump_stack_lvl+0x189/0x250 [ 286.450651][ C1] ? __kasan_check_byte+0x12/0x40 [ 286.450680][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.450700][ C1] ? lock_release+0x4b/0x3e0 [ 286.450729][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 286.450753][ C1] print_report+0xca/0x240 [ 286.450776][ C1] ? rose_send_frame+0x131/0x220 [ 286.450801][ C1] kasan_report+0x118/0x150 [ 286.450823][ C1] ? rose_send_frame+0x131/0x220 [ 286.450848][ C1] rose_send_frame+0x131/0x220 [ 286.450872][ C1] rose_t0timer_expiry+0x143/0x350 [ 286.450895][ C1] call_timer_fn+0x17e/0x5f0 [ 286.450918][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 286.450942][ C1] ? call_timer_fn+0xbe/0x5f0 [ 286.450964][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 286.450992][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.451020][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.451038][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 286.451064][ C1] __run_timer_base+0x61a/0x860 [ 286.451093][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 286.451114][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 286.451143][ C1] run_timer_softirq+0xb7/0x180 [ 286.451166][ C1] handle_softirqs+0x286/0x870 [ 286.451203][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 286.451231][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.451261][ C1] __irq_exit_rcu+0xca/0x1f0 [ 286.451287][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 286.451316][ C1] irq_exit_rcu+0x9/0x30 [ 286.451340][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 286.451369][ C1] [ 286.451377][ C1] [ 286.451384][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.451406][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 286.451430][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 8b 9a f3 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 286.451449][ C1] RSP: 0018:ffffc90003fef090 EFLAGS: 00000206 [ 286.451469][ C1] RAX: 9519d9e87b07a300 RBX: 0000000000000206 RCX: 9519d9e87b07a300 [ 286.451484][ C1] RDX: 0000000000000001 RSI: ffffffff8d9d1674 RDI: ffffffff8bc077e0 [ 286.451498][ C1] RBP: ffff8880768b0b58 R08: ffffc90003feff38 R09: 0000000000000000 [ 286.451513][ C1] R10: ffffc90003fef218 R11: fffff520007fde45 R12: 0000000000000001 [ 286.451527][ C1] R13: 0000000000000001 R14: ffffffff8e13d2e0 R15: ffff8880768b0000 [ 286.451551][ C1] ? unwind_next_frame+0xa5/0x2390 [ 286.451581][ C1] ? unwind_next_frame+0xa5/0x2390 [ 286.451608][ C1] unwind_next_frame+0x19a9/0x2390 [ 286.451638][ C1] ? unwind_next_frame+0xa5/0x2390 [ 286.451666][ C1] ? do_syscall_64+0xfa/0xfa0 [ 286.451687][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 286.451708][ C1] arch_stack_walk+0x11c/0x150 [ 286.451739][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.451761][ C1] stack_trace_save+0x9c/0xe0 [ 286.451780][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 286.451805][ C1] kasan_save_track+0x3e/0x80 [ 286.451825][ C1] ? kasan_save_track+0x3e/0x80 [ 286.451844][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 286.451864][ C1] ? __kmalloc_node_noprof+0x56d/0x800 [ 286.451884][ C1] ? __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 286.451904][ C1] ? vzalloc_noprof+0xb2/0xf0 [ 286.451923][ C1] ? alloc_counters+0xd3/0x6d0 [ 286.451946][ C1] ? do_arpt_get_ctl+0xa42/0x1010 [ 286.451967][ C1] ? nf_getsockopt+0x26e/0x290 [ 286.451987][ C1] ? ip_getsockopt+0x1c4/0x220 [ 286.452012][ C1] ? do_sock_getsockopt+0x372/0x450 [ 286.452040][ C1] ? __x64_sys_getsockopt+0x1a5/0x250 [ 286.452066][ C1] ? do_syscall_64+0xfa/0xfa0 [ 286.452105][ C1] __kasan_kmalloc+0x93/0xb0 [ 286.452127][ C1] __kmalloc_node_noprof+0x56d/0x800 [ 286.452148][ C1] ? __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 286.452180][ C1] __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 286.452208][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.452241][ C1] ? trace_contention_end+0x39/0x120 [ 286.452270][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 286.452295][ C1] ? alloc_counters+0xd3/0x6d0 [ 286.452318][ C1] vzalloc_noprof+0xb2/0xf0 [ 286.452338][ C1] ? alloc_counters+0xd3/0x6d0 [ 286.452362][ C1] alloc_counters+0xd3/0x6d0 [ 286.452384][ C1] ? net_generic+0x1e/0x240 [ 286.452409][ C1] ? net_generic+0x1e/0x240 [ 286.452428][ C1] ? __pfx_alloc_counters+0x10/0x10 [ 286.452454][ C1] ? xt_find_table_lock+0x35e/0x3e0 [ 286.452477][ C1] do_arpt_get_ctl+0xa42/0x1010 [ 286.452501][ C1] ? __lock_acquire+0xab9/0xd20 [ 286.452525][ C1] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 286.452551][ C1] ? __mutex_trylock_common+0x153/0x260 [ 286.452579][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 286.452610][ C1] ? rcu_is_watching+0x15/0xb0 [ 286.452638][ C1] ? trace_contention_end+0x39/0x120 [ 286.452669][ C1] ? nf_getsockopt+0x224/0x290 [ 286.452690][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 286.452713][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 286.452736][ C1] ? __might_fault+0xb0/0x130 [ 286.452760][ C1] nf_getsockopt+0x26e/0x290 [ 286.452783][ C1] ip_getsockopt+0x1c4/0x220 [ 286.452812][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 286.452840][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 286.452862][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 286.452887][ C1] do_sock_getsockopt+0x372/0x450 [ 286.452915][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 286.452943][ C1] ? do_syscall_64+0xa0/0xfa0 [ 286.452968][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 286.452995][ C1] ? do_syscall_64+0xa0/0xfa0 [ 286.453015][ C1] ? do_syscall_64+0xa0/0xfa0 [ 286.453035][ C1] do_syscall_64+0xfa/0xfa0 [ 286.453053][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.453071][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.453090][ C1] ? clear_bhb_loop+0x60/0xb0 [ 286.453111][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.453130][ C1] RIP: 0033:0x7f442b590d0a [ 286.453148][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 286.453165][ C1] RSP: 002b:00007ffff1dd00f8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 286.453193][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f442b590d0a [ 286.453207][ C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 286.453220][ C1] RBP: 00007ffff1dd0160 R08: 00007ffff1dd010c R09: 00007ffff1dd04f7 [ 286.453234][ C1] R10: 00007ffff1dd0160 R11: 0000000000000212 R12: 00007ffff1dd010c [ 286.453248][ C1] R13: 00000000000927c0 R14: 0000000000045e85 R15: 00007ffff1dd0840 [ 286.453270][ C1] [ 286.453278][ C1] [ 287.126972][ C1] Allocated by task 6292: [ 287.131312][ C1] kasan_save_track+0x3e/0x80 [ 287.136005][ C1] __kasan_kmalloc+0x93/0xb0 [ 287.140601][ C1] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 287.145974][ C1] rose_add_node+0x23a/0xeb0 [ 287.150664][ C1] rose_rt_ioctl+0xce2/0x1240 [ 287.155450][ C1] rose_ioctl+0x3ce/0x8b0 [ 287.159784][ C1] sock_do_ioctl+0xdc/0x300 [ 287.164296][ C1] sock_ioctl+0x576/0x790 [ 287.168626][ C1] __se_sys_ioctl+0xfc/0x170 [ 287.173214][ C1] do_syscall_64+0xfa/0xfa0 [ 287.177724][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.183634][ C1] [ 287.186041][ C1] Freed by task 13316: [ 287.190195][ C1] kasan_save_track+0x3e/0x80 [ 287.194964][ C1] __kasan_save_free_info+0x46/0x50 [ 287.200169][ C1] __kasan_slab_free+0x5c/0x80 [ 287.204928][ C1] kfree+0x19a/0x6d0 [ 287.210817][ C1] rose_timer_expiry+0x4cb/0x600 [ 287.215747][ C1] call_timer_fn+0x17e/0x5f0 [ 287.220343][ C1] __run_timer_base+0x61a/0x860 [ 287.225297][ C1] run_timer_softirq+0xb7/0x180 [ 287.230323][ C1] handle_softirqs+0x286/0x870 [ 287.235092][ C1] __irq_exit_rcu+0xca/0x1f0 [ 287.239687][ C1] irq_exit_rcu+0x9/0x30 [ 287.244021][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 287.249750][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.255732][ C1] [ 287.258051][ C1] The buggy address belongs to the object at ffff88807ed7c800 [ 287.258051][ C1] which belongs to the cache kmalloc-512 of size 512 [ 287.272310][ C1] The buggy address is located 24 bytes inside of [ 287.272310][ C1] freed 512-byte region [ffff88807ed7c800, ffff88807ed7ca00) [ 287.286023][ C1] [ 287.288447][ C1] The buggy address belongs to the physical page: [ 287.295032][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7ed7c [ 287.303881][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 287.312461][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 287.320005][ C1] page_type: f5(slab) [ 287.323991][ C1] raw: 00fff00000000040 ffff88813ffa6c80 dead000000000100 dead000000000122 [ 287.332660][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.341593][ C1] head: 00fff00000000040 ffff88813ffa6c80 dead000000000100 dead000000000122 [ 287.350265][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 287.358937][ C1] head: 00fff00000000002 ffffea0001fb5f01 00000000ffffffff 00000000ffffffff [ 287.367607][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 287.376286][ C1] page dumped because: kasan: bad access detected [ 287.382877][ C1] page_owner tracks the page as allocated [ 287.388586][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevd), ts 34402314677, free_ts 34391935940 [ 287.409335][ C1] post_alloc_hook+0x240/0x2a0 [ 287.414109][ C1] get_page_from_freelist+0x2365/0x2440 [ 287.419838][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 287.425644][ C1] alloc_pages_mpol+0x232/0x4a0 [ 287.430517][ C1] allocate_slab+0x96/0x3a0 [ 287.435220][ C1] ___slab_alloc+0xe94/0x18a0 [ 287.440000][ C1] __slab_alloc+0x65/0x100 [ 287.444512][ C1] __kmalloc_cache_noprof+0x411/0x6f0 [ 287.450494][ C1] kernfs_fop_open+0x397/0xca0 [ 287.455350][ C1] do_dentry_open+0x953/0x13f0 [ 287.460124][ C1] vfs_open+0x3b/0x340 [ 287.464371][ C1] path_openat+0x2ee5/0x3830 [ 287.469132][ C1] do_filp_open+0x1fa/0x410 [ 287.473811][ C1] do_sys_openat2+0x121/0x1c0 [ 287.478505][ C1] __x64_sys_openat+0x138/0x170 [ 287.483356][ C1] do_syscall_64+0xfa/0xfa0 [ 287.487952][ C1] page last free pid 5195 tgid 5195 stack trace: [ 287.494361][ C1] __free_frozen_pages+0xbc4/0xd30 [ 287.499496][ C1] __put_partials+0x146/0x170 [ 287.504235][ C1] put_cpu_partial+0x1f2/0x2e0 [ 287.509111][ C1] __slab_free+0x2b9/0x390 [ 287.513559][ C1] qlist_free_all+0x97/0x140 [ 287.518152][ C1] kasan_quarantine_reduce+0x148/0x160 [ 287.523615][ C1] __kasan_slab_alloc+0x22/0x80 [ 287.528512][ C1] kmem_cache_alloc_noprof+0x367/0x6e0 [ 287.533972][ C1] getname_flags+0xb8/0x540 [ 287.538835][ C1] do_sys_openat2+0xbc/0x1c0 [ 287.543516][ C1] __x64_sys_openat+0x138/0x170 [ 287.548459][ C1] do_syscall_64+0xfa/0xfa0 [ 287.552958][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.559113][ C1] [ 287.561523][ C1] Memory state around the buggy address: [ 287.567149][ C1] ffff88807ed7c700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.575315][ C1] ffff88807ed7c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.583462][ C1] >ffff88807ed7c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.591523][ C1] ^ [ 287.596370][ C1] ffff88807ed7c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.604429][ C1] ffff88807ed7c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.612490][ C1] ================================================================== [ 287.620728][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.628122][ C1] CPU: 1 UID: 0 PID: 5827 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 287.637690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 287.647785][ C1] Call Trace: [ 287.651094][ C1] [ 287.654034][ C1] dump_stack_lvl+0x99/0x250 [ 287.658635][ C1] ? __asan_memcpy+0x40/0x70 [ 287.663262][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.668461][ C1] ? __pfx__printk+0x10/0x10 [ 287.673060][ C1] vpanic+0x237/0x6d0 [ 287.677050][ C1] ? __pfx_vpanic+0x10/0x10 [ 287.681736][ C1] panic+0xb9/0xc0 [ 287.685465][ C1] ? __pfx_panic+0x10/0x10 [ 287.689972][ C1] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 287.696049][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 287.701989][ C1] ? rose_send_frame+0x131/0x220 [ 287.706929][ C1] check_panic_on_warn+0x89/0xb0 [ 287.711957][ C1] ? rose_send_frame+0x131/0x220 [ 287.716898][ C1] end_report+0x78/0x160 [ 287.721153][ C1] kasan_report+0x129/0x150 [ 287.725669][ C1] ? rose_send_frame+0x131/0x220 [ 287.730616][ C1] rose_send_frame+0x131/0x220 [ 287.735405][ C1] rose_t0timer_expiry+0x143/0x350 [ 287.740725][ C1] call_timer_fn+0x17e/0x5f0 [ 287.745340][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 287.750981][ C1] ? call_timer_fn+0xbe/0x5f0 [ 287.755663][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 287.760783][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 287.766077][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.771458][ C1] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 287.777187][ C1] __run_timer_base+0x61a/0x860 [ 287.782064][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 287.787611][ C1] ? seqcount_lockdep_reader_access+0x15e/0x1c0 [ 287.793871][ C1] run_timer_softirq+0xb7/0x180 [ 287.798739][ C1] handle_softirqs+0x286/0x870 [ 287.803519][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 287.808287][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 287.813755][ C1] __irq_exit_rcu+0xca/0x1f0 [ 287.818529][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 287.823824][ C1] irq_exit_rcu+0x9/0x30 [ 287.828163][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 287.834081][ C1] [ 287.837257][ C1] [ 287.840271][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.846247][ C1] RIP: 0010:lock_release+0x2b5/0x3e0 [ 287.851537][ C1] Code: 51 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 01 fb 65 48 8b 05 8b 9a f3 10 <48> 3b 44 24 28 0f 85 8b 00 00 00 48 83 c4 30 5b 41 5c 41 5d 41 5e [ 287.871492][ C1] RSP: 0018:ffffc90003fef090 EFLAGS: 00000206 [ 287.877564][ C1] RAX: 9519d9e87b07a300 RBX: 0000000000000206 RCX: 9519d9e87b07a300 [ 287.885627][ C1] RDX: 0000000000000001 RSI: ffffffff8d9d1674 RDI: ffffffff8bc077e0 [ 287.893689][ C1] RBP: ffff8880768b0b58 R08: ffffc90003feff38 R09: 0000000000000000 [ 287.901660][ C1] R10: ffffc90003fef218 R11: fffff520007fde45 R12: 0000000000000001 [ 287.909894][ C1] R13: 0000000000000001 R14: ffffffff8e13d2e0 R15: ffff8880768b0000 [ 287.917883][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.923092][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.928298][ C1] unwind_next_frame+0x19a9/0x2390 [ 287.933515][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.938732][ C1] ? do_syscall_64+0xfa/0xfa0 [ 287.943673][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.949921][ C1] arch_stack_walk+0x11c/0x150 [ 287.954877][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.960943][ C1] stack_trace_save+0x9c/0xe0 [ 287.965626][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 287.970999][ C1] kasan_save_track+0x3e/0x80 [ 287.975674][ C1] ? kasan_save_track+0x3e/0x80 [ 287.980624][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 287.985509][ C1] ? __kmalloc_node_noprof+0x56d/0x800 [ 287.991072][ C1] ? __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 287.997143][ C1] ? vzalloc_noprof+0xb2/0xf0 [ 288.001914][ C1] ? alloc_counters+0xd3/0x6d0 [ 288.006678][ C1] ? do_arpt_get_ctl+0xa42/0x1010 [ 288.011705][ C1] ? nf_getsockopt+0x26e/0x290 [ 288.016486][ C1] ? ip_getsockopt+0x1c4/0x220 [ 288.021252][ C1] ? do_sock_getsockopt+0x372/0x450 [ 288.026542][ C1] ? __x64_sys_getsockopt+0x1a5/0x250 [ 288.032006][ C1] ? do_syscall_64+0xfa/0xfa0 [ 288.036700][ C1] __kasan_kmalloc+0x93/0xb0 [ 288.041293][ C1] __kmalloc_node_noprof+0x56d/0x800 [ 288.046580][ C1] ? __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 288.052827][ C1] __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 288.058813][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 288.064718][ C1] ? trace_contention_end+0x39/0x120 [ 288.070009][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 288.076342][ C1] ? alloc_counters+0xd3/0x6d0 [ 288.081110][ C1] vzalloc_noprof+0xb2/0xf0 [ 288.085632][ C1] ? alloc_counters+0xd3/0x6d0 [ 288.090684][ C1] alloc_counters+0xd3/0x6d0 [ 288.095381][ C1] ? net_generic+0x1e/0x240 [ 288.099985][ C1] ? net_generic+0x1e/0x240 [ 288.104578][ C1] ? __pfx_alloc_counters+0x10/0x10 [ 288.109868][ C1] ? xt_find_table_lock+0x35e/0x3e0 [ 288.115075][ C1] do_arpt_get_ctl+0xa42/0x1010 [ 288.119936][ C1] ? __lock_acquire+0xab9/0xd20 [ 288.124852][ C1] ? __pfx_do_arpt_get_ctl+0x10/0x10 [ 288.130145][ C1] ? __mutex_trylock_common+0x153/0x260 [ 288.135786][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 288.141775][ C1] ? rcu_is_watching+0x15/0xb0 [ 288.146554][ C1] ? trace_contention_end+0x39/0x120 [ 288.152050][ C1] ? nf_getsockopt+0x224/0x290 [ 288.157400][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 288.163049][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.169124][ C1] ? __might_fault+0xb0/0x130 [ 288.173984][ C1] nf_getsockopt+0x26e/0x290 [ 288.178785][ C1] ip_getsockopt+0x1c4/0x220 [ 288.183472][ C1] ? __pfx_ip_getsockopt+0x10/0x10 [ 288.188597][ C1] ? sock_common_getsockopt+0x2d/0xb0 [ 288.194145][ C1] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 288.200144][ C1] do_sock_getsockopt+0x372/0x450 [ 288.205292][ C1] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 288.210859][ C1] ? do_syscall_64+0xa0/0xfa0 [ 288.215546][ C1] __x64_sys_getsockopt+0x1a5/0x250 [ 288.220751][ C1] ? do_syscall_64+0xa0/0xfa0 [ 288.225534][ C1] ? do_syscall_64+0xa0/0xfa0 [ 288.230219][ C1] do_syscall_64+0xfa/0xfa0 [ 288.234811][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.240179][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.246246][ C1] ? clear_bhb_loop+0x60/0xb0 [ 288.250923][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.256904][ C1] RIP: 0033:0x7f442b590d0a [ 288.261325][ C1] Code: ff c3 66 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb b8 0f 1f 44 00 00 49 89 ca b8 37 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 [ 288.281026][ C1] RSP: 002b:00007ffff1dd00f8 EFLAGS: 00000212 ORIG_RAX: 0000000000000037 [ 288.289483][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f442b590d0a [ 288.297723][ C1] RDX: 0000000000000061 RSI: 0000000000000000 RDI: 0000000000000003 [ 288.305789][ C1] RBP: 00007ffff1dd0160 R08: 00007ffff1dd010c R09: 00007ffff1dd04f7 [ 288.313762][ C1] R10: 00007ffff1dd0160 R11: 0000000000000212 R12: 00007ffff1dd010c [ 288.321828][ C1] R13: 00000000000927c0 R14: 0000000000045e85 R15: 00007ffff1dd0840 [ 288.329853][ C1] [ 288.333379][ C1] Kernel Offset: disabled [ 288.337696][ C1] Rebooting in 86400 seconds..