last executing test programs: 8.070444095s ago: executing program 1 (id=4324): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x58, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x4}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0xffffffff}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x58}}, 0x8000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r2, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) r4 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3e, 0x2) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x5}, 0x50) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00', 0x0, 0x8}, 0x18) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000580)={0xffffffffffffffff, 0xcbea, 0x10}, 0xc) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_tracing={0x1a, 0x11, &(0x7f0000000240)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x0, 0x5, 0x9, 0x0, 0x6, 0xffffffffffffffff}, @exit, @ldst={0x3, 0x0, 0x6, 0x4, 0x8, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x2, 0x3, 0x3, 0x2, 0x0, 0x10}], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x9, 0x7, 0x8}, 0x10, 0x1d415, 0xffffffffffffffff, 0xa, &(0x7f0000000640)=[r5, r6, 0xffffffffffffffff, r7, r8, r9], &(0x7f0000000700)=[{0x0, 0x4, 0x4, 0x3}, {0x1, 0x1, 0x8, 0x1}, {0x2, 0x5, 0x1, 0xa}, {0x2, 0x5, 0xb, 0x2}, {0x4, 0x4, 0xa, 0x1}, {0x1, 0x1, 0xd, 0xa}, {0x2, 0x5, 0xc, 0x1}, {0x4, 0x5, 0x8, 0xa}, {0x5, 0x3, 0x6, 0x4}, {0x1, 0x2, 0xe, 0xc}], 0x10, 0x7}, 0x94) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 7.281769564s ago: executing program 4 (id=4327): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000000c0)='s', 0x1}], 0x1, 0x2) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)={0x2e4, 0x32, 0x1, 0x0, 0x0, "", [@nested={0x2d1, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @nested={0x1e3, 0xe1, 0x0, 0x1, [@generic="847b731cfa20682ddf27fc30b0ded264b5b155853fd8702a19e1447e6929e0fdde95b8bc2204f9c8976850e5", @nested={0xcc, 0x135, 0x0, 0x1, [@nested={0x4, 0x121}, @nested={0x4, 0x4f}, @generic="e5a0963ec6", @nested={0x4, 0xd8}, @generic="4f3b913c8b8375898c7c4cfa15a6c05110310fc80b63f0baf4e6efe8796374ead53e3e48d2b7882f0c62a46bb762d7d89ecd228f7480bc197cc308364f9050d239d73a7ffe9ab57635a91bb18181a5c741ddb5a520005a49c5bd30d4c39a9a076782230fbdbc070044009a41f3c329e1e767e2a944e9a26a8edf13698ff642639dc981e32e00d79d1c478c8cd19313b0b96ab15413852bb02d19ffbf8f1b9fc151179a8d87bc49", @typed={0x8, 0x1f, 0x0, 0x0, @uid=r1}, @typed={0x8, 0x15e, 0x0, 0x0, @uid=r2}]}, @generic="ddb49122204d186f0a257d11afb004f704d00f502aac8fb2aba317c61aa5e3de498b24887ec5bbf3dac78bdc4609ce33480c405036e743fcb1f6722bf73f0115c8e916a9a7f40e163efcd1107d6293671c8c969eae61004e5408a8588a7dcde22b40cb99bf6fb993a68a7d75d1e4eb26594bfe458625e2516848b7a642f103eedb82e613c762db7627f2161bee0b6c473a3cbd25ee5a0fddc07290d7bcee18c587429c5d582d7d01e22da151c5290554310920f174f0f6c4605429aec15d5f5d462557b08905166041f14aefb3eba08d9be7bd7f3a4fbdd6912506a27bb9b17e7d2bb88622606d"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x2e4}], 0x1}, 0x40040) 7.117055386s ago: executing program 1 (id=4329): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="db84feca8d5a50353cb7c7275c787114", 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40010}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 6.644893013s ago: executing program 4 (id=4332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x30000, 0x20048091}, 0x0) writev(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = accept(r0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x200002, 0x0) r3 = accept4$x25(r2, &(0x7f0000001500)={0x9, @remote}, &(0x7f0000001540)=0x12, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000001580)={0x0, 'ip_vti0\x00', {0x3}, 0xb}) 6.644114713s ago: executing program 1 (id=4334): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xb}, 0x94) (async) r0 = socket(0x2, 0x80805, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x2, 0x8, 0x4, 0x401, 0x76965ecb, 0x7, r2}, 0x20) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18080000000000000000000000000000181a0000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 6.346135575s ago: executing program 1 (id=4336): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="05178100", 0x5e0, 0x50, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0xea, 0x6, @link_local}, 0x14) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x4, 0x10}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x5a}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0x18}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) 6.344852405s ago: executing program 4 (id=4337): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x40, 0x4, 0x4, 0x20, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x80, 0xea7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000c00)={'ip6_vti0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={0xffffffffffffffff, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000c40)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x8, &(0x7f0000000c80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd9, &(0x7f0000000d40)=[{}, {}], 0x10, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0xf2, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000f80)={'batadv_slave_0\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000000fc0)={'tunl0\x00', 0x0, 0x8, 0x7, 0x81, 0x4, {{0x16, 0x4, 0x1, 0x8, 0x58, 0x66, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@rr={0x7, 0x1b, 0x4c, [@empty, @multicast2, @empty, @dev={0xac, 0x14, 0x14, 0x28}, @loopback, @empty]}, @noop, @timestamp_prespec={0x44, 0x14, 0x23, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x3}]}, @generic={0x7, 0x9, "38fb14a0783ca7"}, @timestamp={0x44, 0x8, 0xf0, 0x0, 0x6, [0x4]}]}}}}}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r3, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x4d}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x8}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x2}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4c415}, 0x4008010) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000006a00010500000000fbdbdf25000000000000000008000a00010000"], 0x20}}, 0x80) 6.089388651s ago: executing program 2 (id=4339): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x800, 0x55007}}, 0x20}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) 6.009675458s ago: executing program 4 (id=4341): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtaction={0xcc, 0x30, 0x51b, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0xa, 0x4, @multicast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_skbmod={0x54, 0x2, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x4, 0x10000000, 0x0, 0x6}, 0x6}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0xcc}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="a73e6c6c89f35e3be3f22f8afce958bd1e88afbf8ecb9d5f4d7e9e29c5fc1e6938cf1cb41dd9f5ee74874f913e5a033dbc4abee45b365e5fa886c5fe92539c63cf6d80f76edc875eb0b2077307040743f8b39464701d42fd0738b8db8117bbeffd7902aaa206a0da02", @ANYRES16=r3, @ANYBLOB="00082bbd7000ffdbdf25110000000a000900ffffffffffff000008003b0000040000"], 0x28}, 0x1, 0x0, 0x0, 0x4084041}, 0x840) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c4000000190001002dbd700000000000fe880000000000000000000000000001fe8000000000000000000000000000aa00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00000b000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000000a00100001"], 0xc4}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5.759304357s ago: executing program 3 (id=4342): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) 5.758489272s ago: executing program 2 (id=4343): socket(0x1, 0x2, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2000000012005f0214f9f4012100fbe40a000000edff84b5ca8d7c10277582b9", 0x20) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x2, 0x0) (fail_nth: 80) 5.73432958s ago: executing program 1 (id=4344): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x1a, 0x4, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1100000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006c3123095f827c84b0a1823d8fd05924abaf639314d6dca38896a0ee88f6103f3ba7296e82fb9d398fb012a9ffd2e6fc0c8317b11a5c6db6f872579337f88c52bfbbc71af752311118f85632b9576cef4d5ea162d5eff7f8dc0cc4b893102b3cacdf558f13c19cf33dff0ba3806fc48f018945a9f6efb6433cc86c30bd176bc30d90d0bb948745cc6e73db7a9a61a5efae228ae8dc5b7180f12ddf14556ace265191e35986c1fd755934893f7335e490380044fc4747977a5ee3020da1f22b09b9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000000300)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r5, &(0x7f0000000300), 0x0}, 0x20) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xbc3d}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000020a0b0400000000000000000200000028000480240001800b000100657874686472000014000280080001400000000008000640000000030900010073797a30000000000900020073797aaa00000000140000001100010000000000000000000000000a"], 0x7c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) getsockopt$inet6_int(r7, 0x29, 0xcb, &(0x7f00000001c0), &(0x7f0000000240)=0x4) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@gettaction={0x20, 0x32, 0x605, 0x70bd25, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}]}, 0x20}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x4, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0xf, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 5.682966198s ago: executing program 4 (id=4345): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002829fffe800000000000000007ffffff0000aaff020000000000000000000000000001"], 0xfdef) 5.567882804s ago: executing program 0 (id=4346): socket$alg(0x26, 0x5, 0x0) (async) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="1e713a3b96fd1edba79079b26abfacd8aa804672b928d79f902d27164a99a9c828621eb22c738d42e72788", 0x2b}], 0x1, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x800) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000480), &(0x7f0000000540)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x11, &(0x7f0000000780)=ANY=[@ANYBLOB="18110000", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) shutdown(r2, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x3, 0x25dfdbfd, {}, [@NHA_ENCAP_TYPE={0x6}, @NHA_OIF={0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_ID={0xc, 0x1, 0x80000002}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008081}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r5, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0xba, 0xce02cd}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x9, 0x81, 0xffffffff, 0x6940000, 0x80, 0x9, 0x77}, &(0x7f0000000940)=0x9c) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2}, 0x2000) 5.506545532s ago: executing program 2 (id=4347): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2d, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x100000, 0x20048091}, 0x0) writev(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = accept(r0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000001440)='syz1\x00', 0x200002, 0x0) r3 = accept4$x25(r2, &(0x7f0000001500)={0x9, @remote}, &(0x7f0000001540)=0x12, 0x800) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000001580)={0x0, 'ip_vti0\x00', {0x3}, 0xb}) 5.177046393s ago: executing program 3 (id=4348): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@updpolicy={0xc0, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1=0xe0000002, @in=@rand_addr=0x64010102, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80, 0x6}, {0x0, 0x0, 0x1abe1019, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x1}, [@XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4008011}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="08000000000000000100010000000000f4ffffffffffffff04000000000000000200000000000000ba410000000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e000000030100000000040000000000000008001f0001"], 0xd4}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001e00000000006fd406122df1f8414f69ac487c0bd5000c0000000c", @ANYRES64], 0x0, 0x2a}, 0x28) 5.006552776s ago: executing program 0 (id=4349): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a8000600200006400600027c035c9cc652bdcea3ea5a7134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecb84ec95ee5de6ccd40dd6e4f1ef3d93452a92782f9ffcdb020e6f3baf432b25a55e08", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4c000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000010c0)=@newtfilter={0x3c, 0x26, 0xd27, 0x0, 0x0, {}, [@filter_kind_options=@f_basic={{0x4}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8}]}}]}, 0x3c}}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 5.005777189s ago: executing program 3 (id=4350): setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000240)={0x0, 0x2}, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) getsockopt(r2, 0xff, 0x1, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2040) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000540)={@loopback, @mcast1, @empty, 0x7fff, 0x6, 0x8000, 0x400, 0x9, 0x200002}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.433131153s ago: executing program 2 (id=4351): r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x70bd2c, 0xffeffffe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x52}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async, rerun: 32) socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000640)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f0000000280)={0x350, r3, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x101, 0x2a, [@fast_bss_trans={0x37, 0x7e, {0x8e, 0x2, "68301e33ab5f56599a7089dabac25632", "6eac201ad68c119819526d5081935bd4d38564e8da3c8fb451b57631c8ceeaed", "5526576b7add34351352c924aada7bda85b4973a3c02f4fea7e1d8dcba0e26af", [{0x4, 0x1c, "d3b534c1cf31b612f33476bc1507527de03fabcc7c35f2c08a5da636"}, {0x3, 0xc, "7c637f60a6eef05940552a9c"}]}}, @preq={0x82, 0x3b, {{0x1, 0x1}, 0x4, 0xaa, 0x3, @device_a, 0x0, @void, 0x9, 0xd66, 0x3, [{{}, @broadcast, 0xffffff7c}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x1}, @broadcast, 0x2}]}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x18, {0x9ba, "6b288812b0e6", @long="4ca81376a9c021b3b20d911286af6b25"}}, @challenge={0x10, 0x1, 0x8}, @peer_mgmt={0x75, 0x16, {0x0, 0x8, @val=0x3, @void, @val="cae9bfa0407f7bf0e035b1c93d2aa3ff"}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xe, 0x2a, [@chsw_timing={0x68, 0x4, {0x8, 0x8b}}, @ibss={0x6, 0x2, 0x100}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_IE={0x1eb, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb7, 0x4}}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}, @erp={0x2a, 0x1, {0x1}}, @random_vendor={0xdd, 0xa6, "7e8ad33911fd076173ee7a69170dcf740652b33fb3249a0c5b867bd092e59408c9086d5b648902417ef962f9088736cfca1617f29373a4e1183029d2aaca247bde2cf5c9ffe2c7a377c8d2d34859366da3749472653971b7b3063c1367abc9f7ba68bd5fe745b1bcce3bf5365be3e422d98e4a327dc7593121a2d4b29cb306258432c59f4cd6704782f0a723ce113357489c45ffc2a572639aaf46733226d07a86d5e4266cdd"}, @fast_bss_trans={0x37, 0x8e, {0x80, 0x2, "2bdb4639cf215218e56555ae74c7f785", "cf543a77fcdb7a27066e09c95f2c01515dfdd604026671ca39ed8f004323bb75", "950b99f8b94e04f0ba1f6f472e340408b3d403c4f3c7b4b8edcbf807435a1866", [{0x3, 0x27, "5a05f024f13cd7300382bc95ed0e1fd2cfe93174aef7b29185473e40611f705d4cd791e1ec81a1"}, {0x4, 0x11, "b8479d357527314325845a8389b8a8efdf"}]}}, @dsss={0x3, 0x1, 0xa9}, @rann={0x7e, 0x15, {{0x1, 0x5e}, 0x0, 0x6, @device_b, 0x401, 0x3, 0xad}}, @tim={0x5, 0x6e, {0x4a, 0xb5, 0x5, "d7290a34427792dbd54d056567b9f0ddf0bf47290838633f19f9354ec8603a17cdba485062ea5d0c5184dfd19a88df536359eab6f3daa8d8b1fdc2eb70b7a6c5d4076067c0266801fdda261393b9f13c3afea3fe63524fe8bed7a89cc26ffde78225d5aa9fd97364e178ef"}}, @gcr_ga={0xbd, 0x6}]}]}, 0x350}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) (async, rerun: 32) r7 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (rerun: 32) r8 = accept4(r7, 0x0, 0x0, 0x0) recvmmsg(r8, &(0x7f00000080c0)=[{{0x0, 0x0, &(0x7f00000042c0)=[{&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000003040)=""/110, 0x6e}, {&(0x7f0000000540)=""/78, 0x4e}, {&(0x7f0000003140)=""/4096, 0x1000}], 0x5}, 0x1}], 0x1, 0x40000001, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRESOCT=r0, @ANYBLOB="0500ffffffff000000002e00000008000300", @ANYRES32=r9, @ANYRESDEC=r1], 0x34}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000031401002cbd7000fcdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 4.409626438s ago: executing program 3 (id=4352): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0xd, 0x6}, {0x4, 0x4, 0x1, 0x2}], 0x10, 0x26}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010028bd7000ffdbdf250100000006000a"], 0x2c}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200", 0x14}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffdbc, &(0x7f0000000080)=[{&(0x7f0000000040)="180000006a00f96b1324", 0x18}], 0x1}, 0x4080) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "4c8c7347e32aa9e1919c70c199bc62daad66ce3db4830992be0a07d0e2edda49", "43ef0626e0c081542132d0ce4926e3c71697d7b2861b69fd144fbdd555d2b463", "48fc56f4f7189546b945e630bca6536abb8675503d0db872c33a48925fe26d22", "caf0c036527a0de8195ff3b19db6bee4baa2f54d3422c3f42344f6ba6e042706", "b5e2c9e1b009a67f0335ead0bda0c05ce1595fe59060e5efc038ddc648d30394", "356b668d9c9fd670b74d5817", 0xa51d, 0x612780, 0x4, 0x2, 0x7}}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}], {0x14, 0x10}}, 0x98}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xfffffffc, 0x2}]}]}}, 0x0, 0x3a}, 0x20) r6 = socket$vsock_stream(0x28, 0x1, 0x0) recvmsg(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)=""/251, 0xfb}, {&(0x7f0000000880)=""/168, 0xa8}, {&(0x7f0000000940)=""/88, 0x58}], 0x3, &(0x7f0000000a00)=""/243, 0xf3}, 0x140) 4.199237847s ago: executing program 2 (id=4353): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000480)=0x2, 0x4) (async) getsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="700200001300290a00000000000000000700000052ca78edd271353a4720e05bb331bbb05d9eea452377489c04c0c60232ee4b1c416fa4275e2d8c9ada022662346e083c6c9dccbe4a1de4f82f5456a076125f4128fcd044b3ba41d985cfd3d1e023aef210cd0e63caa51c026ee59516b995564870ddabec15443c55c32394ed77096daebb2e2bebd8160aea37aa7b1c06d25c78f9cee5b204acdfff09dc4050435c2c075bf6ddb6cdb35ba250f987570b0bfe413f3382c8d72d6d3c4343a7e0f3d3ccbebd903ba6ea9cf77498e823ca0320539ed9c0dad85e", @ANYRES32=r3, @ANYBLOB="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"], 0x270}}, 0x4008000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x8}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x24, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_DELAY_DIST={0x6, 0x2, "5ba3"}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f00000002c0)={0x0, 0xffffffffffffff14, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in=@remote, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@empty}}, &(0x7f0000000100)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@remote, 0x0, 0xfff7, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, r9}, {@in=@rand_addr=0x64010100, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {0x0, 0x4, 0x40000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x1}, [@etimer_thresh={0x8, 0xc, 0x2}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x140}}, 0x4810) 3.809880618s ago: executing program 0 (id=4354): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'ip6gre0\x00', @broadcast}) r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001080)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0xc, [@decl_tag={0x8, 0x0, 0x0, 0x11, 0x2, 0x5}]}, {0x0, [0x0, 0x2e, 0x211a42991792b736, 0x61, 0x61, 0x0, 0x0, 0x5f, 0x30, 0x30]}}, &(0x7f0000000080)=""/4096, 0x34, 0x1000, 0x0, 0x8}, 0x28) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x68, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, r1, 0x1, 0x5, 0x2}, 0x50) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000001280)={&(0x7f0000001140), 0xc, &(0x7f0000001240)={&(0x7f00000011c0)={0x50, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x5, 0x14, '\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '&\\'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ip6gre0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ip6gre0\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x6, 0x14, '}P'}, @NFC_ATTR_FIRMWARE_NAME={0xc, 0x14, 'ip6gre0\x00'}]}, 0x50}}, 0x11) (async) r5 = socket$kcm(0x29, 0x4, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f00000012c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x1, 0x4, {0xa, 0x4e22, 0x8, @mcast1, 0x3}}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000001340)="9a18ff89b1a808ad5b1ae98ed789af736c7f19f68f751560eb28f03f073b239fa2dc96e41146ecf905dd006d937712d5917108ccb507ce5249d435400ab8d7903b3daa079a118787bcb9a03a2867debf0eee5d7cab1cae987688eb92174dbbad9622b2a19e0992419174b4051601f763293c7b97749ee5aa52", 0x79}, {&(0x7f00000013c0)="d36a474f639aa62c361d2f5d9b57a5654ef54415672cf27e4e5d234e2581301dd7c1c19d8826fc2f981f22a5bc316c639a5fea9456ca2d3be8760491d558eb11ec21a3063ae06d", 0x47}, {&(0x7f0000001440)="5f4586ce591000bd03454ea2eff4e4d8c014df445875d273a0fe5e6518c1054c4a233e47d00c844153b3c06ee55a0840c652d12257548af7c1ac3c1af4ad", 0x3e}, {&(0x7f0000001480)="86cd236a3383f4f76c7a82f2bd6dfe8f11bb7b6eb83804d0176de3bb1747786e685963c1a2c8d99d659c49981ba77dbe7f3b17e6f9a4be7cf70fed97468e4c0d2ce630fe35814a4ff81927458d1f6e39aed6575e9baa1352826f9d2e02cba3bedbb62ea34aeb9f9278cd10e6ca48f094c62756647bc590d72cbc67d2d92e7efdb302d8d5d699abd3ca1fda1a2dbcaf78ad9244245293234fe04fca99ba60fa056aff92abdc790cf3ac8def26b3a35cf4", 0xb0}, {&(0x7f0000001540)="6f9b1127885bb59af1ccc06f4657ce52b14a3194d27136bf380cf2b44819dc5868aacb4645f89939509a4fe52e4959c28d2f0a4c34e4ce99a5b6853f0c4bbe860014a83f23cce2665ef3df15026f079e40b0d2b83d", 0x55}], 0x5, &(0x7f0000001640)=[{0x78, 0x10f, 0x1000, "6575a745cda8d6093a4868a619a6a00d4b9a22a1b7e103ebd601d540a48ffc5d5b9d1706af7ba8b3a20e6c15e16c92e912ace6e8f3e1ac3ba1386e53af6d0270c3ea1019b1f635281b95c8c0e636255a87be028894be77e104a903a66dab860f3e345463"}, {0xd8, 0x595a63f81dcd6106, 0x9, "f8f2d865699ec43487e0fdd147873819df8f713b0e07c9e1b53f44373566327f4db972e25dcead4745d70f937cf2ea24c32934ba8acf3f90c4bd369e857d665a869d098ab2983131666ba51a98ed9d9985b478e3360cddec6e2a2112e37081bdb69f105bac248bb89ef8723353cb8ae065f0cceabd0bcbc83dd6a7e5c87c2aea9a7392d37a960fa1476ae3a6d8c8f2af2cd176bf77afa8f01ada5970f46dc492972a53a9b417973ab181971d1a8dc01ceb1a400ca9003b63bd2d4e0f1549a64d29d14f10"}], 0x150}, 0x41) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001a40)={0x1a, 0x10, &(0x7f0000001800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x8, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001880)='syzkaller\x00', 0x5, 0xf2, &(0x7f00000018c0)=""/242, 0x41100, 0x31, '\x00', 0x0, @fallback=0x5, r1, 0x8, &(0x7f00000019c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001a00)=[r2, r2, r2, r2, r2, r2], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d40)={r6, 0x0, 0xd5, 0xbf, &(0x7f0000001b00)="6e5edd6f4c43ee68328996afe077dd1bef26384f25db43a5f1e8fc3999cd9b49baf568f51cf28169f040cebede0d1170743c24a022d16e907790c9bafb2df0f245d697c77084833aabae272f0da17d29dd192d85909496599ea4c60de71f9eb2544592dfc08ce12d69274f17de1f3a93f6b352c91cb65d4b16b7fe7527970a27f3710becc97a6ee6448b293f0ebbce73faf284e7caf6db8fba27f4ed3feef01841bb20a1ef01eb8ead1c0d9eec9feca0dad4f87cded40b4ef2eb5eb6b0e0558ba104a36b964accf2db4aed55d835d6a8e28dc3bb4b", &(0x7f0000001c00)=""/191, 0x6, 0x0, 0x1d, 0x13, &(0x7f0000001cc0)="0a3a908d2d6d47b73df63ca238502efd787263054bae87bb46ef4707d1", &(0x7f0000001d00)="c3fff258a5daf3d22355df04e106e3ce0a8b0e", 0x3, 0x0, 0x7}, 0x50) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FIONCLEX(r1, 0x5450) ioctl$F2FS_IOC_DECOMPRESS_FILE(r1, 0xf517, 0x0) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001e40)={r2, &(0x7f0000001dc0)="d1795faa52e93aae69f283896f2a407b881cbdeb2c45454a", &(0x7f0000001e00)=@buf="f85a392f90cffa16ccf2d62330c5ecdb2695a3fbcc", 0x1}, 0x20) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001e80)=0x9, 0x4) (async) poll(&(0x7f0000001ec0), 0x0, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000001f00)={'batadv_slave_1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r6, r7, 0x25, 0x2, @val=@tcx={@void, @value=r6}}, 0x1c) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001fc0), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002000)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000002040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x44, r8, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000002340)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f00000021c0)={0x12c, 0x0, 0x6db4b4f496db0f83, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0xf4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb1c}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x40, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x5d1f08a43f25b03}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}, @NL802154_ATTR_SEC_DEVKEY={0x18, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x11}, 0x10) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r3, &(0x7f0000002480)={&(0x7f0000002380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002440)={&(0x7f00000023c0)={0x4c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x702}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0xd5}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x42f}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x4d}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xc}, @NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44090}, 0x40) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x1c, r8, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x24008000) (async) r11 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r11, 0x800442d3, &(0x7f00000025c0)={0x8, 0x8, 0x100, @link_local, 'veth0_vlan\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r12, &(0x7f0000002700)={&(0x7f0000002600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x20) 3.80837929s ago: executing program 3 (id=4355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xfff2}, {0xa, 0x8}, {0xe, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a010100ddff0000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000808000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000208000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000640000000040900010073797a30"], 0x108}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r1}, 0x18) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000640)={0x7574, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xd, &(0x7f00000003c0)=@raw=[@map_val={0x18, 0x7, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xb}, @generic={0x7, 0xa, 0x9, 0x3, 0x1}, @jmp={0x5, 0x1, 0xc, 0x1, 0x1, 0xfffffffffffffff8, 0x1}, @map_val={0x18, 0x6, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @alu={0x7, 0x0, 0x8, 0x9, 0x2, 0xfffffffffffffff8, 0xfffffffffffffffc}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xe}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000440)='GPL\x00', 0x2, 0xd3, &(0x7f0000000480)=""/211, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x14, r3, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0x1, 0x1, 0x1}, 0x10, r4, 0xffffffffffffffff, 0x2, &(0x7f0000000680), &(0x7f00000006c0)=[{0x0, 0x5, 0xa, 0x1}, {0x5, 0x3, 0x4}], 0x10, 0x1}, 0x94) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000680)) 3.806664564s ago: executing program 4 (id=4356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)='\b\x00', 0x2}, {&(0x7f0000000200)="000000081824", 0x6}], 0x2}, 0x240088d4) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r1) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30000000000c0002400000000000000001080005"], 0x1a4}, 0x1, 0x0, 0x0, 0xc021}, 0x0) 3.738598486s ago: executing program 1 (id=4357): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x9c}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c4000000000000000010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000001000000bfa3"], 0x0}, 0x94) syz_emit_ethernet(0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004e00004c00000000000690780a010102ac1414aa070f0476bc4b4c9e3e260cbfad990444140b01e000000100000000e0000001000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090ddb82a"], 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="4004"], 0x7) 3.550413236s ago: executing program 0 (id=4358): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x101, 0x7fdf, 0xff, 0x0, 0xffffffffffffffff, 0xa000000}, 0x50) 3.159623156s ago: executing program 3 (id=4359): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r1, @ANYBLOB="20000280", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0xfffffff8, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x25}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) 3.129554313s ago: executing program 0 (id=4360): syz_emit_ethernet(0x3b, &(0x7f0000000000)={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x1, 0x0, 0x1, @empty, @local, {[], "bd"}}}}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800ff775c8600f3186c36000000000000000000feffffff0000002c0200000000000000146ff70000000d0000000000"], 0x0, 0x34}, 0x28) socket$tipc(0x1e, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0xfffffffd, 0x1}, 0x8}, 0x94) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041) accept$alg(r1, 0x0, 0x0) syz_emit_ethernet(0x3b, &(0x7f0000000000)={@broadcast, @local, @val={@void, {0x8100, 0x6, 0x1, 0x3}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x1, 0x0, 0x1, @empty, @local, {[], "bd"}}}}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0x66, 0x8}, @initr0, @exit, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) accept4(r0, 0x0, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800ff775c8600f3186c36000000000000000000feffffff0000002c0200000000000000146ff70000000d0000000000"], 0x0, 0x34}, 0x28) (async) socket$tipc(0x1e, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180058000000000000000000000000009500040000000000"], &(0x7f0000000000)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0xfffffffd, 0x1}, 0x8}, 0x94) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRES8=r0], 0xb0}, 0x1, 0x0, 0x0, 0x24000884}, 0x48041) (async) accept$alg(r1, 0x0, 0x0) (async) 2.932166667s ago: executing program 0 (id=4361): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x30, r1, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x20000011) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b00)={0x4c, r2, 0x20, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0xfd}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x7f}]}, 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r0) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x24, r5, 0xcbb26f81c131d001, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) 0s ago: executing program 2 (id=4362): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x3cc, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r1, {0x4, 0x10}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x39c, 0x2, [@TCA_CGROUP_ACT={0x398, 0x1, [@m_xt={0x130, 0x1f, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x8}]}, {0xff, 0x6, "f6b148c1c287e2fcac0e5a62e4fff328988a5bec214e0aa7b809e4c7798aef3199e1b943b044e2eaba55e6b032bfd2f4e08d0761381813c457f2c2398091837654fc32b20d3ed40c39898c4b67b36e16d2be07d86bc7429f52092ce7dde06452ddfe7d0dd0048342d397205d4a64c05328a1ec39c3bc3c0c3b44e5444d299fa295357eb43b00a220b1990884ba5b1bc260dedb62a67863ab3a3dedc71fb348edc552d41de48bae92ff3c85272d8bb32a333527da934fcc1e3a82f8d0c1b6214aaf7f56acba1314da90b247db2f4910e3ccbc7a64cbcf8edd090cb5ebedd1dbe0e13ab0f49e19fee2c770e9e2a49e4a5069e658a7ddfe3e972ec18a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0x140, 0x5, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x88b5}, @TCA_MPLS_TTL={0x5, 0x7, 0x10}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x8, 0x7, 0x7, 0x3}, 0x2}}, @TCA_MPLS_TC={0x5, 0x6, 0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdaebe}, @TCA_MPLS_PROTO={0x6, 0x4, 0x15}]}, {0xc6, 0x6, "9eb4debec9470ede7a2378f40de276741895b25b3b870a4b0f6763f98b902a6a2223f81053d1506756ad6f0710369c6086e640dfb064e1a25d30afc80e5868a9b56d5096212287eb9a19a36edeaa2370945933d166e6c18edca37ae0012575947731ae5520cd13638140e5c94015b594025d990044f814d2a4c20b6c735e65cda3c4796f5da3f4bebd1ed035794ae2756a82d2cb5b3cfb1f59ac35d766ec7e41c9121384a999c09799045597d0fcf51d176490158468d562aaadec4a49abb38bb33b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x124, 0xc, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x2}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x0, 0x3, 0x0, 0xe}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7fff}]}, {0xcf, 0x6, "03c82ef98fe2b6d7aa034c95bc114802884bed514f5e375a31b2dba757faabeaa6930751511a66196cbb03533eacf6de0cf32b57a03b269bbcc41f78b2a82af074f53244c224355407261a3f123cb32b799c1a73a231470def78c97d9adcc28d10c3337a20ee66f38f2aa7f657358e5ae6c41eddfaa179d033abc62c91bea5b492b69718b75fea293b13e173a1692f9bedf365e349b436b303375e41e5d8c2b5afe17e6ac17c3fa8ec83790a36ea6ab509f80b41203daf617dc9efcdc9e6ff7a839041d0b1aed6821bbcca"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x3cc}, 0x1, 0x0, 0x0, 0x884}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x34, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x1}]}, 0x34}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fedbdf2505000000080005000500000008000500ff070000080009000a00000005000600040000000800090000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000048}, 0x40010) kernel console output (not intermixed with test programs): R15: 00007ffd1dd4caf8 [ 344.853881][T16426] [ 344.912200][T16429] Cannot find del_set index 3 as target [ 345.542275][T16448] bond8 (unregistering): Released all slaves [ 345.769516][T16467] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3001'. [ 346.227055][T16483] openvswitch: netlink: Actions may not be safe on all matching packets [ 346.229404][T16485] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3004'. [ 346.330442][T16493] Cannot find del_set index 3 as target [ 346.544410][T16502] syzkaller0: entered promiscuous mode [ 346.551761][T16502] syzkaller0: entered allmulticast mode [ 346.864419][T16518] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3013'. [ 346.978669][T16509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3009'. [ 347.244409][T16532] sctp: [Deprecated]: syz.1.3016 (pid 16532) Use of int in maxseg socket option. [ 347.244409][T16532] Use struct sctp_assoc_value instead [ 347.295770][T16535] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3017'. [ 347.648266][T16552] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3022'. [ 348.086833][T16570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3025'. [ 348.339821][T16583] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 348.412875][T16589] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3030'. [ 348.555411][T16598] FAULT_INJECTION: forcing a failure. [ 348.555411][T16598] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.568576][T16598] CPU: 0 UID: 0 PID: 16598 Comm: syz.3.3033 Not tainted syzkaller #0 PREEMPT(full) [ 348.568600][T16598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.568611][T16598] Call Trace: [ 348.568618][T16598] [ 348.568625][T16598] dump_stack_lvl+0xe8/0x150 [ 348.568654][T16598] should_fail_ex+0x40c/0x560 [ 348.568679][T16598] _copy_to_user+0x31/0xb0 [ 348.568704][T16598] simple_read_from_buffer+0xe1/0x170 [ 348.568731][T16598] proc_fail_nth_read+0x1bb/0x230 [ 348.568758][T16598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.568783][T16598] ? rw_verify_area+0x24a/0x4c0 [ 348.568809][T16598] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 348.568833][T16598] vfs_read+0x213/0xa80 [ 348.568863][T16598] ? __pfx___mutex_lock+0x10/0x10 [ 348.568884][T16598] ? __pfx_vfs_read+0x10/0x10 [ 348.568908][T16598] ? __fget_files+0x2a/0x420 [ 348.568934][T16598] ? __fget_files+0x3a2/0x420 [ 348.568954][T16598] ? __fget_files+0x2a/0x420 [ 348.568984][T16598] ksys_read+0x150/0x270 [ 348.569010][T16598] ? __pfx_ksys_read+0x10/0x10 [ 348.569043][T16598] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.569063][T16598] do_syscall_64+0x174/0x580 [ 348.569080][T16598] ? trace_irq_disable+0x3b/0x140 [ 348.569104][T16598] ? clear_bhb_loop+0x40/0x90 [ 348.569127][T16598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.569144][T16598] RIP: 0033:0x7f5323b5d68e [ 348.569162][T16598] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 348.569177][T16598] RSP: 002b:00007f5324a47fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 348.569197][T16598] RAX: ffffffffffffffda RBX: 00007f5324a486c0 RCX: 00007f5323b5d68e [ 348.569210][T16598] RDX: 000000000000000f RSI: 00007f5324a480a0 RDI: 0000000000000003 [ 348.569221][T16598] RBP: 00007f5324a48090 R08: 0000000000000000 R09: 0000000000000000 [ 348.569232][T16598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.569242][T16598] R13: 00007f5323e16038 R14: 00007f5323e15fa0 R15: 00007ffd59a89148 [ 348.569273][T16598] [ 348.612279][T16599] netlink: 'syz.0.3032': attribute type 1 has an invalid length. [ 348.954303][T16608] tipc: Enabling of bearer rejected, failed to enable media [ 349.213972][T16627] openvswitch: netlink: Key 6 has unexpected len 31 expected 2 [ 349.601635][T16645] netlink: 'syz.4.3046': attribute type 62 has an invalid length. [ 349.618884][T16645] netlink: 'syz.4.3046': attribute type 62 has an invalid length. [ 350.119443][T16668] Cannot find del_set index 3 as target [ 350.335587][T16682] __nla_validate_parse: 3 callbacks suppressed [ 350.335608][T16682] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3057'. [ 350.391550][T16682] nbd: couldn't find a device at index 1048580 [ 350.556535][T16689] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 350.622148][T16693] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3062'. [ 350.633932][T16693] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3062'. [ 351.083217][T16720] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3071'. [ 351.255426][T16727] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3073'. [ 351.289515][T16727] tipc: Enabling of bearer rejected, failed to enable media [ 351.296594][T16730] FAULT_INJECTION: forcing a failure. [ 351.296594][T16730] name failslab, interval 1, probability 0, space 0, times 0 [ 351.299046][T16727] netlink: 'syz.4.3073': attribute type 21 has an invalid length. [ 351.313649][T16730] CPU: 1 UID: 0 PID: 16730 Comm: syz.0.3075 Not tainted syzkaller #0 PREEMPT(full) [ 351.313675][T16730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 351.313685][T16730] Call Trace: [ 351.313692][T16730] [ 351.313700][T16730] dump_stack_lvl+0xe8/0x150 [ 351.313726][T16730] should_fail_ex+0x40c/0x560 [ 351.313751][T16730] should_failslab+0xa8/0x100 [ 351.313780][T16730] ? skb_clone+0x212/0x3a0 [ 351.313798][T16730] kmem_cache_alloc_noprof+0x87/0x650 [ 351.313829][T16730] skb_clone+0x212/0x3a0 [ 351.313848][T16730] __netlink_deliver_tap+0x413/0x860 [ 351.313884][T16730] ? netlink_deliver_tap+0x2e/0x1b0 [ 351.313909][T16730] netlink_deliver_tap+0x19c/0x1b0 [ 351.313934][T16730] netlink_dump+0x95b/0xee0 [ 351.313968][T16730] ? __pfx_netlink_dump+0x10/0x10 [ 351.314013][T16730] netlink_recvmsg+0x683/0xa50 [ 351.314045][T16730] ? __pfx_netlink_recvmsg+0x10/0x10 [ 351.314074][T16730] ? __lock_acquire+0x683/0x2cd0 [ 351.314099][T16730] ? __pfx_netlink_recvmsg+0x10/0x10 [ 351.314131][T16730] sock_recvmsg_nosec+0x10c/0x140 [ 351.314155][T16730] ____sys_recvmsg+0x3e3/0x4a0 [ 351.314188][T16730] ? __pfx_____sys_recvmsg+0x10/0x10 [ 351.314229][T16730] ? import_iovec+0x73/0xa0 [ 351.314252][T16730] ___sys_recvmsg+0x213/0x590 [ 351.314275][T16730] ? __pfx____sys_recvmsg+0x10/0x10 [ 351.314296][T16730] ? __fget_files+0x2a/0x420 [ 351.314346][T16730] do_recvmmsg+0x329/0x810 [ 351.314371][T16730] ? __pfx_do_recvmmsg+0x10/0x10 [ 351.314400][T16730] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 351.314436][T16730] __x64_sys_recvmmsg+0x198/0x250 [ 351.314455][T16730] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 351.314481][T16730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.314501][T16730] do_syscall_64+0x174/0x580 [ 351.314516][T16730] ? trace_irq_disable+0x3b/0x140 [ 351.314541][T16730] ? clear_bhb_loop+0x40/0x90 [ 351.314566][T16730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.314582][T16730] RIP: 0033:0x7f19a639ce59 [ 351.314600][T16730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.314613][T16730] RSP: 002b:00007f19a7320028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 351.314632][T16730] RAX: ffffffffffffffda RBX: 00007f19a6615fa0 RCX: 00007f19a639ce59 [ 351.314644][T16730] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000004 [ 351.314656][T16730] RBP: 00007f19a7320090 R08: 0000000000000000 R09: 0000000000000000 [ 351.314666][T16730] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 351.314676][T16730] R13: 00007f19a6616038 R14: 00007f19a6615fa0 R15: 00007ffe200bb1f8 [ 351.314713][T16730] [ 351.377393][T16732] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3076'. [ 351.652461][T16727] netlink: 'syz.4.3073': attribute type 6 has an invalid length. [ 351.660233][T16727] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3073'. [ 351.977029][T16747] netlink: 'syz.1.3081': attribute type 2 has an invalid length. [ 351.988621][T16747] netlink: 'syz.1.3081': attribute type 2 has an invalid length. [ 352.075781][T16754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3084'. [ 352.091045][T16754] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3084'. [ 352.102792][T16756] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3083'. [ 352.203203][T16760] FAULT_INJECTION: forcing a failure. [ 352.203203][T16760] name failslab, interval 1, probability 0, space 0, times 0 [ 352.215850][T16760] CPU: 0 UID: 0 PID: 16760 Comm: syz.2.3086 Not tainted syzkaller #0 PREEMPT(full) [ 352.215873][T16760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 352.215883][T16760] Call Trace: [ 352.215890][T16760] [ 352.215898][T16760] dump_stack_lvl+0xe8/0x150 [ 352.215923][T16760] should_fail_ex+0x40c/0x560 [ 352.215947][T16760] should_failslab+0xa8/0x100 [ 352.215973][T16760] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 352.215998][T16760] ? __alloc_skb+0x1d7/0x7a0 [ 352.216019][T16760] ? __local_bh_enable_ip+0xd0/0x130 [ 352.216042][T16760] __alloc_skb+0x1d7/0x7a0 [ 352.216069][T16760] netlink_dump+0x1e7/0xee0 [ 352.216097][T16760] ? lockdep_hardirqs_on+0x7a/0x110 [ 352.216124][T16760] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 352.216149][T16760] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 352.216250][T16760] ? __pfx_netlink_dump+0x10/0x10 [ 352.216291][T16760] netlink_recvmsg+0x683/0xa50 [ 352.216322][T16760] ? __pfx_netlink_recvmsg+0x10/0x10 [ 352.216350][T16760] ? __lock_acquire+0x683/0x2cd0 [ 352.216375][T16760] ? __pfx_netlink_recvmsg+0x10/0x10 [ 352.216401][T16760] sock_recvmsg_nosec+0x10c/0x140 [ 352.216425][T16760] ____sys_recvmsg+0x3e3/0x4a0 [ 352.216461][T16760] ? __pfx_____sys_recvmsg+0x10/0x10 [ 352.216502][T16760] ? import_iovec+0x73/0xa0 [ 352.216528][T16760] ___sys_recvmsg+0x213/0x590 [ 352.216551][T16760] ? __pfx____sys_recvmsg+0x10/0x10 [ 352.216572][T16760] ? __fget_files+0x2a/0x420 [ 352.216624][T16760] do_recvmmsg+0x329/0x810 [ 352.216650][T16760] ? __pfx_do_recvmmsg+0x10/0x10 [ 352.216679][T16760] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.216715][T16760] __x64_sys_recvmmsg+0x198/0x250 [ 352.216736][T16760] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 352.216763][T16760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.216783][T16760] do_syscall_64+0x174/0x580 [ 352.216799][T16760] ? trace_irq_disable+0x3b/0x140 [ 352.216824][T16760] ? clear_bhb_loop+0x40/0x90 [ 352.216846][T16760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.216863][T16760] RIP: 0033:0x7f59d2f9ce59 [ 352.216880][T16760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.216896][T16760] RSP: 002b:00007f59d11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 352.216916][T16760] RAX: ffffffffffffffda RBX: 00007f59d3215fa0 RCX: 00007f59d2f9ce59 [ 352.216929][T16760] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000004 [ 352.216940][T16760] RBP: 00007f59d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 352.216951][T16760] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 352.216961][T16760] R13: 00007f59d3216038 R14: 00007f59d3215fa0 R15: 00007ffcf92ef4e8 [ 352.216992][T16760] [ 352.258318][T16763] netlink: 'syz.4.3088': attribute type 2 has an invalid length. [ 352.610423][T16783] netlink: 'syz.2.3093': attribute type 1 has an invalid length. [ 352.876715][T16797] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 353.160703][T16820] Cannot find del_set index 3 as target [ 353.280158][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 353.989872][T16856] syzkaller1: entered promiscuous mode [ 354.000116][T16856] syzkaller1: entered allmulticast mode [ 354.407286][T16878] ipt_ECN: cannot use operation on non-tcp rule [ 354.440669][T16878] ipt_ECN: cannot use operation on non-tcp rule [ 354.561422][T16894] Cannot find del_set index 3 as target [ 355.222127][T16902] netlink: 'syz.1.3135': attribute type 16 has an invalid length. [ 355.242475][T16902] netlink: 'syz.1.3135': attribute type 3 has an invalid length. [ 355.252175][T16908] netlink: 'syz.4.3138': attribute type 29 has an invalid length. [ 355.345530][T16916] tipc: Trying to set illegal importance in message [ 355.457962][T16921] __nla_validate_parse: 8 callbacks suppressed [ 355.457981][T16921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3140'. [ 355.777881][T16945] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 355.819262][T16947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3148'. [ 355.846127][T16949] Cannot find del_set index 3 as target [ 356.036929][T16964] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3155'. [ 356.305023][T16982] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3160'. [ 356.442108][ T30] audit: type=1800 audit(1781611204.473:12): pid=16988 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3166" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=3217 res=0 errno=0 [ 356.656947][T16996] netlink: 'syz.0.3169': attribute type 1 has an invalid length. [ 356.696989][T17000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3168'. [ 356.710103][T17003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3170'. [ 356.723219][T17003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3170'. [ 356.777469][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3172'. [ 356.918266][T17012] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3170'. [ 357.443192][T17030] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 357.487275][T17030] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 357.610253][T17048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3183'. [ 357.774095][T17053] vlan1: entered allmulticast mode [ 357.779278][T17053] veth1_virt_wifi: entered allmulticast mode [ 357.811534][T17060] SET target dimension over the limit! [ 358.430447][T17094] 8021q: adding VLAN 0 to HW filter on device bond4 [ 358.457887][T17099] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 358.466615][T17099] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 358.474845][T17099] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 358.483942][T17099] netlink: 'syz.0.3199': attribute type 1 has an invalid length. [ 358.607183][T17094] macvlan1: entered promiscuous mode [ 358.612534][T17094] macvlan1: entered allmulticast mode [ 358.628072][T17094] bond4: entered promiscuous mode [ 358.648978][T17094] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 358.659390][T17094] bond4: left promiscuous mode [ 358.716499][T17111] FAULT_INJECTION: forcing a failure. [ 358.716499][T17111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.746813][T17111] CPU: 1 UID: 0 PID: 17111 Comm: syz.1.3202 Not tainted syzkaller #0 PREEMPT(full) [ 358.746840][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 358.746850][T17111] Call Trace: [ 358.746857][T17111] [ 358.746873][T17111] dump_stack_lvl+0xe8/0x150 [ 358.746899][T17111] should_fail_ex+0x40c/0x560 [ 358.746924][T17111] _copy_from_user+0x2d/0xb0 [ 358.746946][T17111] __sys_bpf+0x229/0x950 [ 358.746975][T17111] ? __pfx___sys_bpf+0x10/0x10 [ 358.747015][T17111] ? ksys_write+0x242/0x270 [ 358.747042][T17111] ? __pfx_ksys_write+0x10/0x10 [ 358.747069][T17111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.747089][T17111] __x64_sys_bpf+0x7c/0x90 [ 358.747111][T17111] do_syscall_64+0x174/0x580 [ 358.747129][T17111] ? trace_irq_disable+0x3b/0x140 [ 358.747153][T17111] ? clear_bhb_loop+0x40/0x90 [ 358.747174][T17111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.747191][T17111] RIP: 0033:0x7f9c1bb9ce59 [ 358.747208][T17111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 358.747223][T17111] RSP: 002b:00007f9c1ca8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 358.747241][T17111] RAX: ffffffffffffffda RBX: 00007f9c1be15fa0 RCX: 00007f9c1bb9ce59 [ 358.747254][T17111] RDX: 0000000000000050 RSI: 0000200000000100 RDI: 0000000000000000 [ 358.747264][T17111] RBP: 00007f9c1ca8e090 R08: 0000000000000000 R09: 0000000000000000 [ 358.747275][T17111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.747285][T17111] R13: 00007f9c1be16038 R14: 00007f9c1be15fa0 R15: 00007ffe1c76e9e8 [ 358.747312][T17111] [ 358.766183][T17115] Cannot find del_set index 3 as target [ 359.572643][T17156] syzkaller0: entered promiscuous mode [ 359.578163][T17156] syzkaller0: entered allmulticast mode [ 359.894015][T17170] Cannot find del_set index 3 as target [ 360.652989][T17228] __nla_validate_parse: 13 callbacks suppressed [ 360.653009][T17228] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3227'. [ 360.826790][T17240] Cannot find del_set index 3 as target [ 361.399740][T17287] netlink: 'syz.2.3243': attribute type 1 has an invalid length. [ 361.418590][T17282] netlink: 184 bytes leftover after parsing attributes in process `syz.0.3240'. [ 361.491651][T17287] 8021q: adding VLAN 0 to HW filter on device bond5 [ 361.524739][T17288] bond3: (slave veth0_to_bond): Releasing backup interface [ 361.597630][T17288] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 362.634907][T17364] lo: entered allmulticast mode [ 362.687657][T17364] tunl0: entered allmulticast mode [ 362.719018][T17373] netlink: 'syz.0.3263': attribute type 1 has an invalid length. [ 362.762020][T17364] gre0: entered allmulticast mode [ 362.844842][T17364] gretap0: entered allmulticast mode [ 362.920160][T17364] erspan0: entered allmulticast mode [ 362.950370][T17394] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 362.962645][T17364] ip_vti0: entered allmulticast mode [ 362.972922][T17394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3264'. [ 362.975062][T17364] ip6_vti0: entered allmulticast mode [ 363.057926][T17364] sit0: entered allmulticast mode [ 363.059695][T17400] netlink: 'syz.2.3260': attribute type 21 has an invalid length. [ 363.089833][T17400] IPv6: NLM_F_CREATE should be specified when creating new route [ 363.158436][T17364] ip6tnl0: entered allmulticast mode [ 363.173961][T17364] ip6gre0: entered allmulticast mode [ 363.616013][T17416] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 363.687028][T17416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3270'. [ 363.726737][T17416] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 363.807459][T17416] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 363.822067][T17416] gretap3: entered promiscuous mode [ 363.827327][T17416] gretap3: entered allmulticast mode [ 364.130800][T17440] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3279'. [ 364.154614][T17440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3279'. [ 364.189434][T17440] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 364.260728][T17457] Cannot find del_set index 3 as target [ 364.395464][T17470] bond12: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 364.407544][T17470] bond12 (unregistering): Released all slaves [ 364.428808][T17473] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3282'. [ 364.459868][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3282'. [ 365.128160][T17502] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3285'. [ 367.112802][T17441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 367.143868][T17459] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 367.166579][T17459] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3277'. [ 367.185427][T17459] netlink: 'syz.0.3277': attribute type 1 has an invalid length. [ 367.206825][T17459] netlink: 'syz.0.3277': attribute type 8 has an invalid length. [ 367.223582][T17459] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3277'. [ 367.240109][T17459] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3277'. [ 367.891288][T17544] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3298'. [ 367.974412][T17552] netlink: 'syz.4.3302': attribute type 12 has an invalid length. [ 367.986334][T17552] netlink: 'syz.4.3302': attribute type 29 has an invalid length. [ 367.997253][T17552] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3302'. [ 368.007232][T17552] netlink: 'syz.4.3302': attribute type 3 has an invalid length. [ 368.014992][T17552] netlink: 'syz.4.3302': attribute type 2 has an invalid length. [ 368.023241][T17552] netlink: 'syz.4.3302': attribute type 3 has an invalid length. [ 368.032107][T17550] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3301'. [ 368.034318][T17552] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3302'. [ 368.054918][T17548] bridge11: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 368.117178][T17550] bond8 (unregistering): Released all slaves [ 368.361683][T17576] netlink: 340 bytes leftover after parsing attributes in process `syz.2.3307'. [ 368.450647][T17583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3310'. [ 368.534114][T17589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3312'. [ 368.950953][T17568] syz.1.3304 (17568) used greatest stack depth: 19016 bytes left [ 369.222036][T17633] syzkaller1: entered promiscuous mode [ 369.227660][T17633] syzkaller1: entered allmulticast mode [ 369.335790][T17637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.353711][T17637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.658834][T17646] syzkaller1: entered promiscuous mode [ 369.664367][T17646] syzkaller1: entered allmulticast mode [ 369.976412][T17662] batadv0: entered promiscuous mode [ 370.026944][T17666] 8021q: VLANs not supported on ip6_vti0 [ 370.421394][T17684] netlink: 'syz.0.3341': attribute type 10 has an invalid length. [ 370.467750][T17689] netlink: 'syz.4.3343': attribute type 1 has an invalid length. [ 370.489776][T17690] openvswitch: netlink: Missing valid actions attribute. [ 370.511974][T17690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 370.577611][T17689] 8021q: adding VLAN 0 to HW filter on device bond12 [ 370.597105][T17694] team_slave_0: left promiscuous mode [ 370.603982][T17694] team_slave_0: left allmulticast mode [ 370.627514][T17694] team0: Port device team_slave_0 removed [ 370.637759][T17694] bond12: (slave team_slave_0): Enslaving as a backup interface with an up link [ 370.700851][T17700] FAULT_INJECTION: forcing a failure. [ 370.700851][T17700] name failslab, interval 1, probability 0, space 0, times 0 [ 370.728410][T17700] CPU: 0 UID: 0 PID: 17700 Comm: syz.0.3346 Not tainted syzkaller #0 PREEMPT(full) [ 370.728434][T17700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 370.728444][T17700] Call Trace: [ 370.728451][T17700] [ 370.728458][T17700] dump_stack_lvl+0xe8/0x150 [ 370.728486][T17700] should_fail_ex+0x40c/0x560 [ 370.728510][T17700] should_failslab+0xa8/0x100 [ 370.728535][T17700] ? skb_clone+0x212/0x3a0 [ 370.728551][T17700] kmem_cache_alloc_noprof+0x87/0x650 [ 370.728583][T17700] skb_clone+0x212/0x3a0 [ 370.728614][T17700] __netlink_deliver_tap+0x413/0x860 [ 370.728647][T17700] ? netlink_deliver_tap+0x2e/0x1b0 [ 370.728678][T17700] netlink_deliver_tap+0x19c/0x1b0 [ 370.728703][T17700] netlink_dump+0x95b/0xee0 [ 370.728736][T17700] ? __pfx_netlink_dump+0x10/0x10 [ 370.728778][T17700] netlink_recvmsg+0x683/0xa50 [ 370.728815][T17700] ? __pfx_netlink_recvmsg+0x10/0x10 [ 370.728840][T17700] ? __lock_acquire+0x683/0x2cd0 [ 370.728863][T17700] ? __pfx_netlink_recvmsg+0x10/0x10 [ 370.728887][T17700] sock_recvmsg_nosec+0x10c/0x140 [ 370.728911][T17700] ____sys_recvmsg+0x3e3/0x4a0 [ 370.728944][T17700] ? __pfx_____sys_recvmsg+0x10/0x10 [ 370.728985][T17700] ? import_iovec+0x73/0xa0 [ 370.729008][T17700] ___sys_recvmsg+0x213/0x590 [ 370.729031][T17700] ? __pfx____sys_recvmsg+0x10/0x10 [ 370.729053][T17700] ? __fget_files+0x2a/0x420 [ 370.729100][T17700] do_recvmmsg+0x329/0x810 [ 370.729123][T17700] ? __pfx_do_recvmmsg+0x10/0x10 [ 370.729148][T17700] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 370.729184][T17700] __x64_sys_recvmmsg+0x198/0x250 [ 370.729205][T17700] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 370.729230][T17700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.729249][T17700] do_syscall_64+0x174/0x580 [ 370.729265][T17700] ? trace_irq_disable+0x3b/0x140 [ 370.729288][T17700] ? clear_bhb_loop+0x40/0x90 [ 370.729309][T17700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.729324][T17700] RIP: 0033:0x7f19a639ce59 [ 370.729341][T17700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.729354][T17700] RSP: 002b:00007f19a7320028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 370.729372][T17700] RAX: ffffffffffffffda RBX: 00007f19a6615fa0 RCX: 00007f19a639ce59 [ 370.729384][T17700] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000004 [ 370.729394][T17700] RBP: 00007f19a7320090 R08: 0000000000000000 R09: 0000000000000000 [ 370.729404][T17700] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 370.729413][T17700] R13: 00007f19a6616038 R14: 00007f19a6615fa0 R15: 00007ffe200bb1f8 [ 370.729439][T17700] [ 372.096830][T17729] syzkaller0: entered promiscuous mode [ 372.102351][T17729] syzkaller0: entered allmulticast mode [ 372.219543][T17762] openvswitch: netlink: Key 6 has unexpected len 31 expected 2 [ 373.777721][T17774] __nla_validate_parse: 9 callbacks suppressed [ 373.777740][T17774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3364'. [ 375.042606][T17792] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.3370'. [ 375.110668][T17801] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3368'. [ 375.125099][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3367'. [ 375.265321][T17808] netlink: 'syz.4.3369': attribute type 2 has an invalid length. [ 375.318189][T17802] netlink: 'syz.4.3369': attribute type 2 has an invalid length. [ 375.368118][T17802] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3369'. [ 375.738556][T17823] openvswitch: netlink: Key 6 has unexpected len 31 expected 2 [ 375.755810][T17825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3374'. [ 375.782013][T17826] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'. [ 375.898564][T17831] syzkaller0: entered promiscuous mode [ 375.914434][T17831] syzkaller0: entered allmulticast mode [ 376.314131][T17841] netlink: 'syz.3.3378': attribute type 1 has an invalid length. [ 376.344127][T17841] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 376.386342][T17847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3379'. [ 376.425486][T17849] FAULT_INJECTION: forcing a failure. [ 376.425486][T17849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.450871][T17847] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3379'. [ 376.460147][T17849] CPU: 1 UID: 0 PID: 17849 Comm: syz.3.3380 Not tainted syzkaller #0 PREEMPT(full) [ 376.460171][T17849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.460181][T17849] Call Trace: [ 376.460189][T17849] [ 376.460196][T17849] dump_stack_lvl+0xe8/0x150 [ 376.460223][T17849] should_fail_ex+0x40c/0x560 [ 376.460247][T17849] _copy_from_user+0x2d/0xb0 [ 376.460269][T17849] ___sys_sendmsg+0x1c6/0x360 [ 376.460294][T17849] ? __lock_acquire+0x683/0x2cd0 [ 376.460317][T17849] ? __pfx____sys_sendmsg+0x10/0x10 [ 376.460375][T17849] ? __fget_files+0x2a/0x420 [ 376.460395][T17849] ? __fget_files+0x3a2/0x420 [ 376.460425][T17849] __x64_sys_sendmsg+0x1bd/0x2a0 [ 376.460453][T17849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 376.460486][T17849] ? __pfx_ksys_write+0x10/0x10 [ 376.460519][T17849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.460538][T17849] do_syscall_64+0x174/0x580 [ 376.460555][T17849] ? trace_irq_disable+0x3b/0x140 [ 376.460579][T17849] ? clear_bhb_loop+0x40/0x90 [ 376.460600][T17849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.460617][T17849] RIP: 0033:0x7f5323b9ce59 [ 376.460634][T17849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.460648][T17849] RSP: 002b:00007f5324a48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.460666][T17849] RAX: ffffffffffffffda RBX: 00007f5323e15fa0 RCX: 00007f5323b9ce59 [ 376.460679][T17849] RDX: 00000000240088d4 RSI: 00002000000001c0 RDI: 0000000000000005 [ 376.460690][T17849] RBP: 00007f5324a48090 R08: 0000000000000000 R09: 0000000000000000 [ 376.460701][T17849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.460717][T17849] R13: 00007f5323e16038 R14: 00007f5323e15fa0 R15: 00007ffd59a89148 [ 376.460746][T17849] [ 376.464223][T17847] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3379'. [ 376.872847][T17857] hsr0: entered allmulticast mode [ 376.885193][T17857] hsr_slave_0: entered allmulticast mode [ 376.895596][T17857] hsr_slave_1: entered allmulticast mode [ 376.897767][T17862] FAULT_INJECTION: forcing a failure. [ 376.897767][T17862] name failslab, interval 1, probability 0, space 0, times 0 [ 376.933646][T17862] CPU: 0 UID: 0 PID: 17862 Comm: syz.0.3384 Not tainted syzkaller #0 PREEMPT(full) [ 376.933671][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 376.933681][T17862] Call Trace: [ 376.933688][T17862] [ 376.933696][T17862] dump_stack_lvl+0xe8/0x150 [ 376.933722][T17862] should_fail_ex+0x40c/0x560 [ 376.933746][T17862] should_failslab+0xa8/0x100 [ 376.933775][T17862] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 376.933800][T17862] ? __alloc_skb+0x1d7/0x7a0 [ 376.933821][T17862] ? __local_bh_enable_ip+0xd0/0x130 [ 376.933843][T17862] __alloc_skb+0x1d7/0x7a0 [ 376.933868][T17862] netlink_dump+0x1e7/0xee0 [ 376.933897][T17862] ? lockdep_hardirqs_on+0x7a/0x110 [ 376.933923][T17862] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 376.933948][T17862] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 376.933967][T17862] ? __pfx_netlink_dump+0x10/0x10 [ 376.934014][T17862] netlink_recvmsg+0x683/0xa50 [ 376.934048][T17862] ? __pfx_netlink_recvmsg+0x10/0x10 [ 376.934079][T17862] ? __lock_acquire+0x683/0x2cd0 [ 376.934101][T17862] ? __pfx_netlink_recvmsg+0x10/0x10 [ 376.934126][T17862] sock_recvmsg_nosec+0x10c/0x140 [ 376.934148][T17862] ____sys_recvmsg+0x3e3/0x4a0 [ 376.934181][T17862] ? __pfx_____sys_recvmsg+0x10/0x10 [ 376.934218][T17862] ? import_iovec+0x73/0xa0 [ 376.934241][T17862] ___sys_recvmsg+0x213/0x590 [ 376.934263][T17862] ? __pfx____sys_recvmsg+0x10/0x10 [ 376.934284][T17862] ? __fget_files+0x2a/0x420 [ 376.934333][T17862] do_recvmmsg+0x329/0x810 [ 376.934358][T17862] ? __pfx_do_recvmmsg+0x10/0x10 [ 376.934386][T17862] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 376.934419][T17862] __x64_sys_recvmmsg+0x198/0x250 [ 376.934439][T17862] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 376.934465][T17862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.934484][T17862] do_syscall_64+0x174/0x580 [ 376.934498][T17862] ? trace_irq_disable+0x3b/0x140 [ 376.934523][T17862] ? clear_bhb_loop+0x40/0x90 [ 376.934541][T17862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.934559][T17862] RIP: 0033:0x7f19a639ce59 [ 376.934575][T17862] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 376.934589][T17862] RSP: 002b:00007f19a7320028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 376.934617][T17862] RAX: ffffffffffffffda RBX: 00007f19a6615fa0 RCX: 00007f19a639ce59 [ 376.934629][T17862] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000004 [ 376.934639][T17862] RBP: 00007f19a7320090 R08: 0000000000000000 R09: 0000000000000000 [ 376.934649][T17862] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 376.934658][T17862] R13: 00007f19a6616038 R14: 00007f19a6615fa0 R15: 00007ffe200bb1f8 [ 376.934688][T17862] [ 376.997708][T17857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.345421][T17857] batadv_slave_1: entered promiscuous mode [ 377.432389][T17877] xt_l2tp: missing protocol rule (udp|l2tpip) [ 377.451149][T17873] syzkaller0: entered promiscuous mode [ 377.456868][T17873] syzkaller0: entered allmulticast mode [ 377.787175][T17889] FAULT_INJECTION: forcing a failure. [ 377.787175][T17889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.857767][T17889] CPU: 1 UID: 0 PID: 17889 Comm: syz.0.3393 Not tainted syzkaller #0 PREEMPT(full) [ 377.857794][T17889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 377.857804][T17889] Call Trace: [ 377.857812][T17889] [ 377.857821][T17889] dump_stack_lvl+0xe8/0x150 [ 377.857847][T17889] should_fail_ex+0x40c/0x560 [ 377.857872][T17889] _copy_from_user+0x2d/0xb0 [ 377.857895][T17889] __copy_msghdr+0x382/0x580 [ 377.857927][T17889] ___sys_sendmsg+0x213/0x360 [ 377.857951][T17889] ? __lock_acquire+0x683/0x2cd0 [ 377.857982][T17889] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.858043][T17889] ? __fget_files+0x2a/0x420 [ 377.858064][T17889] ? __fget_files+0x3a2/0x420 [ 377.858094][T17889] __x64_sys_sendmsg+0x1bd/0x2a0 [ 377.858123][T17889] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 377.858158][T17889] ? __pfx_ksys_write+0x10/0x10 [ 377.858191][T17889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.858211][T17889] do_syscall_64+0x174/0x580 [ 377.858228][T17889] ? trace_irq_disable+0x3b/0x140 [ 377.858253][T17889] ? clear_bhb_loop+0x40/0x90 [ 377.858276][T17889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.858294][T17889] RIP: 0033:0x7f19a639ce59 [ 377.858312][T17889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 377.858328][T17889] RSP: 002b:00007f19a7320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.858347][T17889] RAX: ffffffffffffffda RBX: 00007f19a6615fa0 RCX: 00007f19a639ce59 [ 377.858361][T17889] RDX: 00000000240088d4 RSI: 00002000000001c0 RDI: 0000000000000005 [ 377.858373][T17889] RBP: 00007f19a7320090 R08: 0000000000000000 R09: 0000000000000000 [ 377.858384][T17889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.858395][T17889] R13: 00007f19a6616038 R14: 00007f19a6615fa0 R15: 00007ffe200bb1f8 [ 377.858426][T17889] [ 378.280753][T17905] gtp0: entered allmulticast mode [ 378.288229][T17905] gtp0: entered promiscuous mode [ 378.298881][T17905] team0: Device gtp0 is of different type [ 378.406066][T17913] veth3: entered promiscuous mode [ 378.423913][T17916] macvlan3: entered promiscuous mode [ 378.433529][T17916] macvlan3: entered allmulticast mode [ 378.823673][T17939] netlink: 'syz.0.3411': attribute type 12 has an invalid length. [ 378.861310][T17946] __nla_validate_parse: 8 callbacks suppressed [ 378.861330][T17946] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3415'. [ 378.892339][T17947] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.3414'. [ 378.913673][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.913758][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.137477][T17962] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3417'. [ 379.302781][T17972] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3421'. [ 379.325187][T17954] bond0: left promiscuous mode [ 379.330001][T17954] bond_slave_0: left promiscuous mode [ 379.358669][T17954] bond_slave_1: left promiscuous mode [ 379.416201][T17977] FAULT_INJECTION: forcing a failure. [ 379.416201][T17977] name failslab, interval 1, probability 0, space 0, times 0 [ 379.430200][T17977] CPU: 1 UID: 0 PID: 17977 Comm: syz.1.3423 Not tainted syzkaller #0 PREEMPT(full) [ 379.430225][T17977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 379.430234][T17977] Call Trace: [ 379.430242][T17977] [ 379.430250][T17977] dump_stack_lvl+0xe8/0x150 [ 379.430275][T17977] should_fail_ex+0x40c/0x560 [ 379.430296][T17977] should_failslab+0xa8/0x100 [ 379.430321][T17977] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 379.430345][T17977] ? __alloc_skb+0x1d7/0x7a0 [ 379.430367][T17977] ? __local_bh_enable_ip+0xd0/0x130 [ 379.430389][T17977] __alloc_skb+0x1d7/0x7a0 [ 379.430414][T17977] netlink_dump+0x1e7/0xee0 [ 379.430445][T17977] ? lockdep_hardirqs_on+0x7a/0x110 [ 379.430469][T17977] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 379.430491][T17977] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 379.430509][T17977] ? __pfx_netlink_dump+0x10/0x10 [ 379.430555][T17977] netlink_recvmsg+0x683/0xa50 [ 379.430587][T17977] ? __pfx_netlink_recvmsg+0x10/0x10 [ 379.430612][T17977] ? __lock_acquire+0x683/0x2cd0 [ 379.430637][T17977] ? __pfx_netlink_recvmsg+0x10/0x10 [ 379.430663][T17977] sock_recvmsg_nosec+0x10c/0x140 [ 379.430688][T17977] ____sys_recvmsg+0x3e3/0x4a0 [ 379.430720][T17977] ? __pfx_____sys_recvmsg+0x10/0x10 [ 379.430758][T17977] ? import_iovec+0x73/0xa0 [ 379.430783][T17977] ___sys_recvmsg+0x213/0x590 [ 379.430804][T17977] ? __pfx____sys_recvmsg+0x10/0x10 [ 379.430830][T17977] ? __fget_files+0x2a/0x420 [ 379.430879][T17977] do_recvmmsg+0x329/0x810 [ 379.430904][T17977] ? __pfx_do_recvmmsg+0x10/0x10 [ 379.430933][T17977] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 379.430967][T17977] __x64_sys_recvmmsg+0x198/0x250 [ 379.430988][T17977] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 379.431015][T17977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.431035][T17977] do_syscall_64+0x174/0x580 [ 379.431051][T17977] ? trace_irq_disable+0x3b/0x140 [ 379.431076][T17977] ? clear_bhb_loop+0x40/0x90 [ 379.431098][T17977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.431116][T17977] RIP: 0033:0x7f9c1bb9ce59 [ 379.431134][T17977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.431150][T17977] RSP: 002b:00007f9c1ca8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 379.431169][T17977] RAX: ffffffffffffffda RBX: 00007f9c1be15fa0 RCX: 00007f9c1bb9ce59 [ 379.431182][T17977] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000004 [ 379.431194][T17977] RBP: 00007f9c1ca8e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.431205][T17977] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 379.431215][T17977] R13: 00007f9c1be16038 R14: 00007f9c1be15fa0 R15: 00007ffe1c76e9e8 [ 379.431246][T17977] [ 379.772573][T17981] netlink: 'syz.3.3425': attribute type 29 has an invalid length. [ 379.862480][T17954] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.880053][T13761] lo speed is unknown, defaulting to 1000 [ 379.885809][T13761] syú2: Port: 1 Link DOWN [ 379.943857][T17989] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3426'. [ 379.996063][T17992] netlink: 64985 bytes leftover after parsing attributes in process `syz.3.3428'. [ 380.162022][T18000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3432'. [ 380.272093][T18010] netlink: 'syz.1.3430': attribute type 1 has an invalid length. [ 380.399745][T18016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3437'. [ 380.424576][T18010] 8021q: adding VLAN 0 to HW filter on device bond9 [ 381.440797][T18046] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3444'. [ 381.491067][T18049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3444'. [ 383.695607][T18077] syzkaller0: entered promiscuous mode [ 383.716908][T18077] syzkaller0: entered allmulticast mode [ 383.828516][T18079] --map-set only usable from mangle table [ 384.449606][T18106] netlink: 'syz.4.3461': attribute type 29 has an invalid length. [ 384.467237][T18106] __nla_validate_parse: 5 callbacks suppressed [ 384.467255][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3461'. [ 384.648525][T18114] netlink: 'syz.3.3467': attribute type 14 has an invalid length. [ 384.698389][T18114] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3467'. [ 384.973383][T18124] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3469'. [ 385.136281][T18107] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3463'. [ 385.187022][T18111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3463'. [ 385.381377][T18139] FAULT_INJECTION: forcing a failure. [ 385.381377][T18139] name failslab, interval 1, probability 0, space 0, times 0 [ 385.427437][T18139] CPU: 0 UID: 0 PID: 18139 Comm: syz.4.3474 Not tainted syzkaller #0 PREEMPT(full) [ 385.427463][T18139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 385.427473][T18139] Call Trace: [ 385.427480][T18139] [ 385.427488][T18139] dump_stack_lvl+0xe8/0x150 [ 385.427514][T18139] should_fail_ex+0x40c/0x560 [ 385.427539][T18139] should_failslab+0xa8/0x100 [ 385.427565][T18139] ? skb_clone+0x212/0x3a0 [ 385.427583][T18139] kmem_cache_alloc_noprof+0x87/0x650 [ 385.427616][T18139] skb_clone+0x212/0x3a0 [ 385.427637][T18139] __netlink_deliver_tap+0x413/0x860 [ 385.427674][T18139] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.427699][T18139] netlink_deliver_tap+0x19c/0x1b0 [ 385.427726][T18139] netlink_dump+0x95b/0xee0 [ 385.427762][T18139] ? __pfx_netlink_dump+0x10/0x10 [ 385.427809][T18139] netlink_recvmsg+0x683/0xa50 [ 385.427843][T18139] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.427873][T18139] ? __lock_acquire+0x683/0x2cd0 [ 385.427894][T18139] ? irqentry_exit+0x218/0x8e0 [ 385.427912][T18139] ? lockdep_hardirqs_on+0x7a/0x110 [ 385.427937][T18139] ? __pfx_netlink_recvmsg+0x10/0x10 [ 385.427963][T18139] sock_recvmsg_nosec+0x10c/0x140 [ 385.427988][T18139] ____sys_recvmsg+0x3e3/0x4a0 [ 385.428024][T18139] ? __pfx_____sys_recvmsg+0x10/0x10 [ 385.428065][T18139] ? import_iovec+0x73/0xa0 [ 385.428091][T18139] ___sys_recvmsg+0x213/0x590 [ 385.428114][T18139] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.428172][T18139] do_recvmmsg+0x329/0x810 [ 385.428199][T18139] ? __pfx_do_recvmmsg+0x10/0x10 [ 385.428236][T18139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 385.428273][T18139] __x64_sys_recvmmsg+0x198/0x250 [ 385.428295][T18139] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 385.428322][T18139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.428342][T18139] do_syscall_64+0x174/0x580 [ 385.428361][T18139] ? clear_bhb_loop+0x40/0x90 [ 385.428383][T18139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.428401][T18139] RIP: 0033:0x7f8a1799ce59 [ 385.428417][T18139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.428432][T18139] RSP: 002b:00007f8a188bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 385.428451][T18139] RAX: ffffffffffffffda RBX: 00007f8a17c15fa0 RCX: 00007f8a1799ce59 [ 385.428465][T18139] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000004 [ 385.428476][T18139] RBP: 00007f8a188bd090 R08: 0000000000000000 R09: 0000000000000000 [ 385.428487][T18139] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 385.428498][T18139] R13: 00007f8a17c16038 R14: 00007f8a17c15fa0 R15: 00007ffd1dd4caf8 [ 385.428530][T18139] [ 385.444062][T18142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3475'. [ 385.826920][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3478'. [ 385.848320][T18146] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3476'. [ 386.212444][T18146] syzkaller0: entered promiscuous mode [ 386.240011][T18146] syzkaller0: entered allmulticast mode [ 387.174763][T18202] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3492'. [ 387.259991][T18185] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3486'. [ 389.914089][T18233] xt_hashlimit: size too large, truncated to 1048576 [ 390.128767][T18243] __nla_validate_parse: 1 callbacks suppressed [ 390.128786][T18243] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3502'. [ 390.187695][T18251] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3506'. [ 390.203654][T18242] netlink: 27 bytes leftover after parsing attributes in process `syz.2.3502'. [ 390.387772][T18258] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.042474][T18265] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3512'. [ 391.047662][T18293] netlink: 188156 bytes leftover after parsing attributes in process `syz.2.3519'. [ 391.076044][T18265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3512'. [ 391.234705][T18302] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3524'. [ 391.495296][T18326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3531'. [ 391.504292][T18326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3531'. [ 392.127113][T18349] netlink: 'syz.4.3536': attribute type 1 has an invalid length. [ 392.156354][T18349] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 392.627160][T18368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3542'. [ 392.650407][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 392.741214][T18378] bond6: option arp_all_targets: invalid value (18446744073709551613) [ 392.764373][ T10] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 392.795943][T18378] bond6 (unregistering): Released all slaves [ 392.906873][T18389] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.968549][T18432] Cannot find del_set index 3 as target [ 394.487566][T18460] syzkaller1: entered promiscuous mode [ 394.493091][T18460] syzkaller1: entered allmulticast mode [ 394.566442][T18460] pim6reg: entered allmulticast mode [ 395.151991][T18470] __nla_validate_parse: 7 callbacks suppressed [ 395.152010][T18470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3583'. [ 395.175318][T18470] netem: invalid attributes len -5 [ 395.180908][T18470] netem: change failed [ 395.207682][T18473] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 395.225818][T18479] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 395.633988][T18496] openvswitch: netlink: Missing valid actions attribute. [ 395.653062][T18499] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3594'. [ 395.667871][T18496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.757359][T18506] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3597'. [ 395.896287][T18510] x_tables: duplicate underflow at hook 2 [ 396.001117][T18526] FAULT_INJECTION: forcing a failure. [ 396.001117][T18526] name failslab, interval 1, probability 0, space 0, times 0 [ 396.025138][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 396.042699][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3605'. [ 396.045257][T18526] CPU: 0 UID: 0 PID: 18526 Comm: syz.4.3606 Not tainted syzkaller #0 PREEMPT(full) [ 396.045282][T18526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.045293][T18526] Call Trace: [ 396.045300][T18526] [ 396.045308][T18526] dump_stack_lvl+0xe8/0x150 [ 396.045335][T18526] should_fail_ex+0x40c/0x560 [ 396.045361][T18526] should_failslab+0xa8/0x100 [ 396.045387][T18526] ? skb_clone+0x212/0x3a0 [ 396.045405][T18526] kmem_cache_alloc_noprof+0x87/0x650 [ 396.045436][T18526] skb_clone+0x212/0x3a0 [ 396.045456][T18526] __netlink_deliver_tap+0x413/0x860 [ 396.045492][T18526] ? netlink_deliver_tap+0x2e/0x1b0 [ 396.045517][T18526] netlink_deliver_tap+0x19c/0x1b0 [ 396.045543][T18526] netlink_unicast+0x77f/0x940 [ 396.045576][T18526] netlink_sendmsg+0x813/0xb40 [ 396.045609][T18526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.045645][T18526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 396.045673][T18526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 396.045696][T18526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.045721][T18526] ____sys_sendmsg+0x9b9/0xa20 [ 396.045746][T18526] ? __might_fault+0xaf/0x130 [ 396.045774][T18526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.045807][T18526] ? import_iovec+0x73/0xa0 [ 396.045831][T18526] ___sys_sendmsg+0x2a5/0x360 [ 396.045855][T18526] ? __lock_acquire+0x683/0x2cd0 [ 396.045878][T18526] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.045937][T18526] ? __fget_files+0x2a/0x420 [ 396.045957][T18526] ? __fget_files+0x3a2/0x420 [ 396.045988][T18526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 396.046015][T18526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 396.046049][T18526] ? __pfx_ksys_write+0x10/0x10 [ 396.046082][T18526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.046100][T18526] do_syscall_64+0x174/0x580 [ 396.046117][T18526] ? trace_irq_disable+0x3b/0x140 [ 396.046141][T18526] ? clear_bhb_loop+0x40/0x90 [ 396.046163][T18526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.046180][T18526] RIP: 0033:0x7f8a1799ce59 [ 396.046196][T18526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.046211][T18526] RSP: 002b:00007f8a188bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.046229][T18526] RAX: ffffffffffffffda RBX: 00007f8a17c15fa0 RCX: 00007f8a1799ce59 [ 396.046242][T18526] RDX: 0000000000008000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 396.046253][T18526] RBP: 00007f8a188bd090 R08: 0000000000000000 R09: 0000000000000000 [ 396.046265][T18526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.046275][T18526] R13: 00007f8a17c16038 R14: 00007f8a17c15fa0 R15: 00007ffd1dd4caf8 [ 396.046305][T18526] [ 396.221831][T18531] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.267976][T18541] SET target dimension over the limit! [ 396.420754][T18525] netlink: 'syz.2.3605': attribute type 1 has an invalid length. [ 396.535375][T18553] netlink: 'syz.0.3613': attribute type 1 has an invalid length. [ 396.543507][T18553] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3613'. [ 396.556491][T18543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3605'. [ 396.601854][T18558] netlink: 'syz.4.3615': attribute type 1 has an invalid length. [ 396.827645][T18570] netlink: zone id is out of range [ 396.834819][T18570] netlink: zone id is out of range [ 396.841193][T18570] netlink: zone id is out of range [ 396.846570][T18570] netlink: zone id is out of range [ 396.852244][T18570] netlink: zone id is out of range [ 396.857623][T18570] netlink: zone id is out of range [ 396.863312][T18570] netlink: zone id is out of range [ 396.868756][T18570] netlink: zone id is out of range [ 397.018372][T18570] syzkaller0: entered promiscuous mode [ 397.024092][T18570] syzkaller0: entered allmulticast mode [ 397.031853][T18575] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3618'. [ 397.193257][T18589] netlink: 256 bytes leftover after parsing attributes in process `syz.2.3622'. [ 397.242514][T18589] bond6: Unable to set peer notification delay as MII monitoring is disabled [ 397.262713][T18589] bond6 (unregistering): Released all slaves [ 400.239080][T18625] bond0: (slave bond_slave_0): Releasing backup interface [ 400.276312][T18625] bond5: (slave veth0_to_bond): Releasing backup interface [ 400.837998][T18647] tipc: Enabled bearer , priority 0 [ 400.878519][T18647] net_ratelimit: 4 callbacks suppressed [ 400.878538][T18647] netlink: zone id is out of range [ 400.921933][T18647] netlink: zone id is out of range [ 400.937313][T18647] netlink: zone id is out of range [ 400.967687][T18647] netlink: zone id is out of range [ 400.999639][T18647] netlink: zone id is out of range [ 401.016283][T18647] netlink: zone id is out of range [ 401.028419][T18647] netlink: zone id is out of range [ 401.040823][T18647] netlink: zone id is out of range [ 401.053019][T18647] netlink: zone id is out of range [ 401.063328][T18647] netlink: zone id is out of range [ 401.083859][T18659] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 401.147401][T18663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3644'. [ 401.161354][T18655] syzkaller0: entered promiscuous mode [ 401.167481][T18655] syzkaller0: entered allmulticast mode [ 401.195636][T18655] tipc: Resetting bearer [ 401.307788][T18646] tipc: Resetting bearer [ 402.484309][T18685] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3650'. [ 404.763571][T18646] tipc: Disabling bearer [ 404.775309][T18670] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 404.788089][T18679] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 404.808496][T18679] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 404.818945][T18679] gretap3: entered promiscuous mode [ 404.831434][T18679] gretap3: entered allmulticast mode [ 405.027558][T18720] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'. [ 405.088542][T18722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3657'. [ 405.444883][T18720] hsr_slave_1 (unregistering): left promiscuous mode [ 405.868865][T18750] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.078080][T18754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3665'. [ 406.151999][T18766] netlink: 'syz.4.3669': attribute type 17 has an invalid length. [ 406.192576][T18766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3669'. [ 406.216225][T18766] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3669'. [ 407.086399][T18820] FAULT_INJECTION: forcing a failure. [ 407.086399][T18820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.118690][T18820] CPU: 1 UID: 0 PID: 18820 Comm: syz.4.3679 Not tainted syzkaller #0 PREEMPT(full) [ 407.118715][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.118726][T18820] Call Trace: [ 407.118732][T18820] [ 407.118741][T18820] dump_stack_lvl+0xe8/0x150 [ 407.118768][T18820] should_fail_ex+0x40c/0x560 [ 407.118792][T18820] _copy_from_user+0x2d/0xb0 [ 407.118814][T18820] ___sys_sendmsg+0x1c6/0x360 [ 407.118840][T18820] ? __lock_acquire+0x683/0x2cd0 [ 407.118864][T18820] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.118923][T18820] ? __fget_files+0x2a/0x420 [ 407.118945][T18820] ? __fget_files+0x3a2/0x420 [ 407.118977][T18820] __x64_sys_sendmsg+0x1bd/0x2a0 [ 407.119005][T18820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.119040][T18820] ? __pfx_ksys_write+0x10/0x10 [ 407.119093][T18820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.119121][T18820] do_syscall_64+0x174/0x580 [ 407.119140][T18820] ? trace_irq_disable+0x3b/0x140 [ 407.119167][T18820] ? clear_bhb_loop+0x40/0x90 [ 407.119189][T18820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.119207][T18820] RIP: 0033:0x7f8a1799ce59 [ 407.119224][T18820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.119239][T18820] RSP: 002b:00007f8a188bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.119261][T18820] RAX: ffffffffffffffda RBX: 00007f8a17c15fa0 RCX: 00007f8a1799ce59 [ 407.119274][T18820] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000000 [ 407.119285][T18820] RBP: 00007f8a188bd090 R08: 0000000000000000 R09: 0000000000000000 [ 407.119296][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.119306][T18820] R13: 00007f8a17c16038 R14: 00007f8a17c15fa0 R15: 00007ffd1dd4caf8 [ 407.119335][T18820] [ 407.373670][T18824] Cannot find del_set index 3 as target [ 407.860020][T18817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3677'. [ 410.937219][T18867] veth0: entered promiscuous mode [ 410.968265][T18873] veth0: left promiscuous mode [ 411.268032][T18904] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3697'. [ 411.298427][T18892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3695'. [ 411.643287][T18919] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 411.728463][T18922] netlink: 'syz.2.3703': attribute type 1 has an invalid length. [ 411.736239][T18922] netlink: 'syz.2.3703': attribute type 3 has an invalid length. [ 411.743973][T18922] netlink: 'syz.2.3703': attribute type 7 has an invalid length. [ 411.751707][T18922] netlink: 'syz.2.3703': attribute type 8 has an invalid length. [ 411.759448][T18922] netlink: 184 bytes leftover after parsing attributes in process `syz.2.3703'. [ 411.768588][T18922] NCSI netlink: No device for ifindex 131092 [ 412.079327][T18939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3710'. [ 412.150881][T18945] : entered promiscuous mode [ 412.289536][T18953] nftables ruleset with unbound chain [ 412.595096][T18974] FAULT_INJECTION: forcing a failure. [ 412.595096][T18974] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.608217][T18974] CPU: 0 UID: 0 PID: 18974 Comm: syz.1.3719 Not tainted syzkaller #0 PREEMPT(full) [ 412.608264][T18974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 412.608288][T18974] Call Trace: [ 412.608303][T18974] [ 412.608320][T18974] dump_stack_lvl+0xe8/0x150 [ 412.608370][T18974] should_fail_ex+0x40c/0x560 [ 412.608426][T18974] _copy_to_user+0x31/0xb0 [ 412.608481][T18974] simple_read_from_buffer+0xe1/0x170 [ 412.608543][T18974] proc_fail_nth_read+0x1bb/0x230 [ 412.608572][T18974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.608599][T18974] ? rw_verify_area+0x24a/0x4c0 [ 412.608625][T18974] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.608647][T18974] vfs_read+0x213/0xa80 [ 412.608677][T18974] ? __pfx___mutex_lock+0x10/0x10 [ 412.608698][T18974] ? __pfx_vfs_read+0x10/0x10 [ 412.608723][T18974] ? __fget_files+0x2a/0x420 [ 412.608749][T18974] ? __fget_files+0x3a2/0x420 [ 412.608768][T18974] ? __fget_files+0x2a/0x420 [ 412.608798][T18974] ksys_read+0x150/0x270 [ 412.608825][T18974] ? __pfx_ksys_read+0x10/0x10 [ 412.608858][T18974] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.608878][T18974] do_syscall_64+0x174/0x580 [ 412.608894][T18974] ? trace_irq_disable+0x3b/0x140 [ 412.608919][T18974] ? clear_bhb_loop+0x40/0x90 [ 412.608942][T18974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.608959][T18974] RIP: 0033:0x7f9c1bb5d68e [ 412.608978][T18974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 412.608993][T18974] RSP: 002b:00007f9c1ca8dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.609012][T18974] RAX: ffffffffffffffda RBX: 00007f9c1ca8e6c0 RCX: 00007f9c1bb5d68e [ 412.609026][T18974] RDX: 000000000000000f RSI: 00007f9c1ca8e0a0 RDI: 0000000000000003 [ 412.609037][T18974] RBP: 00007f9c1ca8e090 R08: 0000000000000000 R09: 0000000000000000 [ 412.609048][T18974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.609059][T18974] R13: 00007f9c1be16038 R14: 00007f9c1be15fa0 R15: 00007ffe1c76e9e8 [ 412.609098][T18974] [ 413.035051][T18988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3725'. [ 413.260062][T18986] bond13 (unregistering): Released all slaves [ 413.452152][T19009] syzkaller0: left promiscuous mode [ 413.457418][T19009] syzkaller0: left allmulticast mode [ 413.772009][T19031] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3731'. [ 413.880138][T19034] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.151455][T19052] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3739'. [ 414.338843][T19050] bond10: option lacp_rate: invalid value (64) [ 414.377320][T19050] bond10 (unregistering): Released all slaves [ 414.436001][T19066] netlink: 288 bytes leftover after parsing attributes in process `syz.1.3738'. [ 414.474803][T19072] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3743'. [ 414.620523][T19079] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3745'. [ 415.258274][T19108] FAULT_INJECTION: forcing a failure. [ 415.258274][T19108] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.263551][T19113] netlink: 'syz.2.3756': attribute type 33 has an invalid length. [ 415.326552][T19115] netlink: 'syz.2.3756': attribute type 21 has an invalid length. [ 415.334413][T19115] IPv6: NLM_F_CREATE should be specified when creating new route [ 415.342706][T19108] CPU: 0 UID: 0 PID: 19108 Comm: syz.3.3755 Not tainted syzkaller #0 PREEMPT(full) [ 415.342730][T19108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.342740][T19108] Call Trace: [ 415.342747][T19108] [ 415.342754][T19108] dump_stack_lvl+0xe8/0x150 [ 415.342781][T19108] should_fail_ex+0x40c/0x560 [ 415.342806][T19108] _copy_from_user+0x2d/0xb0 [ 415.342829][T19108] ___sys_sendmsg+0x1c6/0x360 [ 415.342855][T19108] ? __lock_acquire+0x683/0x2cd0 [ 415.342878][T19108] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.342946][T19108] ? __fget_files+0x2a/0x420 [ 415.342965][T19108] ? __fget_files+0x3a2/0x420 [ 415.342997][T19108] __x64_sys_sendmsg+0x1bd/0x2a0 [ 415.343025][T19108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.343057][T19108] ? __pfx_ksys_write+0x10/0x10 [ 415.343090][T19108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.343110][T19108] do_syscall_64+0x174/0x580 [ 415.343127][T19108] ? trace_irq_disable+0x3b/0x140 [ 415.343152][T19108] ? clear_bhb_loop+0x40/0x90 [ 415.343172][T19108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.343190][T19108] RIP: 0033:0x7f5323b9ce59 [ 415.343206][T19108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.343222][T19108] RSP: 002b:00007f5324a48028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.343241][T19108] RAX: ffffffffffffffda RBX: 00007f5323e15fa0 RCX: 00007f5323b9ce59 [ 415.343252][T19108] RDX: 0000000020008000 RSI: 0000200000000500 RDI: 0000000000000003 [ 415.343264][T19108] RBP: 00007f5324a48090 R08: 0000000000000000 R09: 0000000000000000 [ 415.343275][T19108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.343284][T19108] R13: 00007f5323e16038 R14: 00007f5323e15fa0 R15: 00007ffd59a89148 [ 415.343315][T19108] [ 415.346951][T19113] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 415.550837][T19113] bond6 (unregistering): Released all slaves [ 415.853764][T19136] net_ratelimit: 6 callbacks suppressed [ 415.853785][T19136] openvswitch: netlink: Missing valid actions attribute. [ 415.866411][T19136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 415.889622][T19135] FAULT_INJECTION: forcing a failure. [ 415.889622][T19135] name failslab, interval 1, probability 0, space 0, times 0 [ 415.902266][T19135] CPU: 0 UID: 0 PID: 19135 Comm: syz.4.3761 Not tainted syzkaller #0 PREEMPT(full) [ 415.902288][T19135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.902299][T19135] Call Trace: [ 415.902306][T19135] [ 415.902314][T19135] dump_stack_lvl+0xe8/0x150 [ 415.902341][T19135] should_fail_ex+0x40c/0x560 [ 415.902366][T19135] should_failslab+0xa8/0x100 [ 415.902395][T19135] __kmalloc_noprof+0xe8/0x750 [ 415.902420][T19135] ? nft_trans_alloc+0x22/0x2a0 [ 415.902570][T19135] ? nft_set_elem_expr_setup+0xa7/0x840 [ 415.902601][T19135] nft_trans_alloc+0x22/0x2a0 [ 415.902625][T19135] nf_tables_newsetelem+0x278a/0x4260 [ 415.902687][T19135] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 415.902729][T19135] ? nla_validate_array+0xfc/0x260 [ 415.902782][T19135] ? __pfx___nla_validate_parse+0x10/0x10 [ 415.902807][T19135] ? nfnetlink_rcv+0x8d1/0x28c0 [ 415.902838][T19135] ? nfnl_pernet+0x23/0x240 [ 415.902860][T19135] ? nfnl_pernet+0x23/0x240 [ 415.902893][T19135] ? __nla_parse+0x40/0x60 [ 415.902918][T19135] nfnetlink_rcv+0x1288/0x28c0 [ 415.902977][T19135] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 415.903017][T19135] ? ref_tracker_free+0x689/0x830 [ 415.903061][T19135] ? skb_clone+0x246/0x3a0 [ 415.903083][T19135] ? __netlink_deliver_tap+0x811/0x860 [ 415.903115][T19135] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.903140][T19135] ? netlink_deliver_tap+0x2e/0x1b0 [ 415.903171][T19135] netlink_unicast+0x7bb/0x940 [ 415.903204][T19135] netlink_sendmsg+0x813/0xb40 [ 415.903239][T19135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.903266][T19135] ? aa_sock_msg_perm+0xf1/0x1b0 [ 415.903293][T19135] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 415.903316][T19135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 415.903343][T19135] ____sys_sendmsg+0x9b9/0xa20 [ 415.903369][T19135] ? __might_fault+0xaf/0x130 [ 415.903398][T19135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 415.903434][T19135] ? import_iovec+0x73/0xa0 [ 415.903460][T19135] ___sys_sendmsg+0x2a5/0x360 [ 415.903485][T19135] ? __lock_acquire+0x683/0x2cd0 [ 415.903509][T19135] ? __pfx____sys_sendmsg+0x10/0x10 [ 415.903573][T19135] ? __fget_files+0x2a/0x420 [ 415.903594][T19135] ? __fget_files+0x3a2/0x420 [ 415.903625][T19135] __x64_sys_sendmsg+0x1bd/0x2a0 [ 415.903655][T19135] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 415.903697][T19135] ? __pfx_ksys_write+0x10/0x10 [ 415.903730][T19135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.903750][T19135] do_syscall_64+0x174/0x580 [ 415.903767][T19135] ? trace_irq_disable+0x3b/0x140 [ 415.903792][T19135] ? clear_bhb_loop+0x40/0x90 [ 415.903814][T19135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.903832][T19135] RIP: 0033:0x7f8a1799ce59 [ 415.903850][T19135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.903865][T19135] RSP: 002b:00007f8a188bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 415.903884][T19135] RAX: ffffffffffffffda RBX: 00007f8a17c15fa0 RCX: 00007f8a1799ce59 [ 415.903898][T19135] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000000 [ 415.903909][T19135] RBP: 00007f8a188bd090 R08: 0000000000000000 R09: 0000000000000000 [ 415.903920][T19135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.903931][T19135] R13: 00007f8a17c16038 R14: 00007f8a17c15fa0 R15: 00007ffd1dd4caf8 [ 415.903962][T19135] [ 416.714596][T19166] netlink: 'syz.2.3772': attribute type 1 has an invalid length. [ 416.781309][T19165] netlink: 'syz.4.3771': attribute type 1 has an invalid length. [ 416.893400][T19178] __nla_validate_parse: 6 callbacks suppressed [ 416.893418][T19178] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3771'. [ 416.998882][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3774'. [ 417.059123][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3774'. [ 417.338925][T19192] bridge0: port 3(veth1_to_bridge) entered blocking state [ 417.346372][T19192] bridge0: port 3(veth1_to_bridge) entered disabled state [ 417.353911][T19192] veth1_to_bridge: entered allmulticast mode [ 417.361565][T19192] veth1_to_bridge: entered promiscuous mode [ 417.367653][T19192] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 417.380662][T19192] bridge0: port 3(veth1_to_bridge) entered blocking state [ 417.387889][T19192] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 417.791112][T19222] bond0: Error: CAN devices cannot be enslaved [ 417.820973][T19222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3789'. [ 418.040580][T19242] bridge0: port 3(veth1_to_bridge) entered disabled state [ 418.048012][T19242] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.055537][T19242] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.320962][T19261] netlink: 208 bytes leftover after parsing attributes in process `syz.3.3801'. [ 418.539123][T19268] netlink: 'syz.0.3802': attribute type 1 has an invalid length. [ 418.591981][T19268] 8021q: adding VLAN 0 to HW filter on device bond9 [ 418.652213][T19274] bond9: (slave geneve4): making interface the new active one [ 418.663902][T19274] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 418.767333][T19280] ip6tnl1: entered promiscuous mode [ 419.125354][T19306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3815'. [ 419.156687][T19306] gtp1: entered promiscuous mode [ 419.171753][T19306] gtp1: entered allmulticast mode [ 419.385642][T19322] 8021q: VLANs not supported on lo [ 419.462965][T19332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3824'. [ 419.524479][T19332] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3824'. [ 419.732971][T19345] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3829'. [ 419.851162][T19345] syzkaller0: entered promiscuous mode [ 419.856701][T19345] syzkaller0: entered allmulticast mode [ 419.988795][T19362] FAULT_INJECTION: forcing a failure. [ 419.988795][T19362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.018609][T19362] CPU: 0 UID: 0 PID: 19362 Comm: syz.1.3836 Not tainted syzkaller #0 PREEMPT(full) [ 420.018642][T19362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.018658][T19362] Call Trace: [ 420.018664][T19362] [ 420.018676][T19362] dump_stack_lvl+0xe8/0x150 [ 420.018704][T19362] should_fail_ex+0x40c/0x560 [ 420.018729][T19362] _copy_from_user+0x2d/0xb0 [ 420.018752][T19362] __sys_bpf+0x229/0x950 [ 420.018780][T19362] ? __pfx___sys_bpf+0x10/0x10 [ 420.018823][T19362] ? ksys_write+0x242/0x270 [ 420.018850][T19362] ? __pfx_ksys_write+0x10/0x10 [ 420.018877][T19362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.018897][T19362] __x64_sys_bpf+0x7c/0x90 [ 420.018921][T19362] do_syscall_64+0x174/0x580 [ 420.018939][T19362] ? trace_irq_disable+0x3b/0x140 [ 420.018964][T19362] ? clear_bhb_loop+0x40/0x90 [ 420.018987][T19362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.019005][T19362] RIP: 0033:0x7f9c1bb9ce59 [ 420.019023][T19362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.019039][T19362] RSP: 002b:00007f9c1ca8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.019059][T19362] RAX: ffffffffffffffda RBX: 00007f9c1be15fa0 RCX: 00007f9c1bb9ce59 [ 420.019073][T19362] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 420.019086][T19362] RBP: 00007f9c1ca8e090 R08: 0000000000000000 R09: 0000000000000000 [ 420.019098][T19362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.019109][T19362] R13: 00007f9c1be16038 R14: 00007f9c1be15fa0 R15: 00007ffe1c76e9e8 [ 420.019140][T19362] [ 420.068025][T19369] netlink: 'syz.1.3838': attribute type 12 has an invalid length. [ 420.291062][T19369] netlink: 'syz.1.3838': attribute type 29 has an invalid length. [ 420.343569][T19369] netlink: 148 bytes leftover after parsing attributes in process `syz.1.3838'. [ 420.420810][T19370] block nbd1: server does not support multiple connections per device. [ 420.432554][T19375] openvswitch: netlink: IP tunnel dst address not specified [ 420.440240][T19370] block nbd1: shutting down sockets [ 420.507732][T19380] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 420.531401][T19380] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 420.624739][T19380] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 420.649910][T19380] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 420.658313][T19380] netlink: 'syz.3.3842': attribute type 1 has an invalid length. [ 420.980633][T19403] FAULT_INJECTION: forcing a failure. [ 420.980633][T19403] name failslab, interval 1, probability 0, space 0, times 0 [ 420.993595][T19403] CPU: 0 UID: 0 PID: 19403 Comm: syz.2.3848 Not tainted syzkaller #0 PREEMPT(full) [ 420.993618][T19403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.993629][T19403] Call Trace: [ 420.993636][T19403] [ 420.993644][T19403] dump_stack_lvl+0xe8/0x150 [ 420.993671][T19403] should_fail_ex+0x40c/0x560 [ 420.993695][T19403] should_failslab+0xa8/0x100 [ 420.993724][T19403] __kmalloc_cache_node_noprof+0x8c/0x690 [ 420.993748][T19403] ? unwind_next_frame+0x8f/0x2550 [ 420.993803][T19403] ? __get_vm_area_node+0x136/0x300 [ 420.993831][T19403] __get_vm_area_node+0x136/0x300 [ 420.993866][T19403] __vmalloc_node_range_noprof+0x358/0x1730 [ 420.993891][T19403] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 420.993944][T19403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 420.993968][T19403] ? __lock_acquire+0x683/0x2cd0 [ 420.993996][T19403] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 420.994020][T19403] __vmalloc_noprof+0xd2/0x120 [ 420.994043][T19403] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 420.994070][T19403] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 420.994094][T19403] ? bpf_prog_alloc+0x2a/0x1a0 [ 420.994122][T19403] bpf_prog_alloc+0x3c/0x1a0 [ 420.994150][T19403] bpf_prog_load+0x788/0x1a10 [ 420.994182][T19403] ? get_pid_task+0x20/0x1f0 [ 420.994209][T19403] ? __pfx_bpf_prog_load+0x10/0x10 [ 420.994235][T19403] ? __might_fault+0xaf/0x130 [ 420.994273][T19403] ? bpf_lsm_bpf+0x9/0x20 [ 420.994287][T19403] ? security_bpf+0x7e/0x2d0 [ 420.994397][T19403] __sys_bpf+0x618/0x950 [ 420.994424][T19403] ? __pfx___sys_bpf+0x10/0x10 [ 420.994462][T19403] ? ksys_write+0x242/0x270 [ 420.994489][T19403] ? __pfx_ksys_write+0x10/0x10 [ 420.994517][T19403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.994537][T19403] __x64_sys_bpf+0x7c/0x90 [ 420.994560][T19403] do_syscall_64+0x174/0x580 [ 420.994578][T19403] ? trace_irq_disable+0x3b/0x140 [ 420.994602][T19403] ? clear_bhb_loop+0x40/0x90 [ 420.994624][T19403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.994641][T19403] RIP: 0033:0x7f59d2f9ce59 [ 420.994658][T19403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.994673][T19403] RSP: 002b:00007f59d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 420.994692][T19403] RAX: ffffffffffffffda RBX: 00007f59d3215fa0 RCX: 00007f59d2f9ce59 [ 420.994705][T19403] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 420.994717][T19403] RBP: 00007f59d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.994728][T19403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.994738][T19403] R13: 00007f59d3216038 R14: 00007f59d3215fa0 R15: 00007ffcf92ef4e8 [ 420.994765][T19403] [ 420.995281][T19403] syz.2.3848: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 421.331636][T19403] CPU: 0 UID: 0 PID: 19403 Comm: syz.2.3848 Not tainted syzkaller #0 PREEMPT(full) [ 421.331659][T19403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.331669][T19403] Call Trace: [ 421.331675][T19403] [ 421.331683][T19403] dump_stack_lvl+0xe8/0x150 [ 421.331709][T19403] warn_alloc+0x249/0x340 [ 421.331741][T19403] ? __pfx_warn_alloc+0x10/0x10 [ 421.331768][T19403] ? __get_vm_area_node+0x136/0x300 [ 421.331795][T19403] ? __get_vm_area_node+0x2af/0x300 [ 421.331830][T19403] __vmalloc_node_range_noprof+0x37d/0x1730 [ 421.331878][T19403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 421.331901][T19403] ? __lock_acquire+0x683/0x2cd0 [ 421.331929][T19403] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.331953][T19403] __vmalloc_noprof+0xd2/0x120 [ 421.331976][T19403] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.332001][T19403] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 421.332023][T19403] ? bpf_prog_alloc+0x2a/0x1a0 [ 421.332047][T19403] bpf_prog_alloc+0x3c/0x1a0 [ 421.332070][T19403] bpf_prog_load+0x788/0x1a10 [ 421.332103][T19403] ? get_pid_task+0x20/0x1f0 [ 421.332128][T19403] ? __pfx_bpf_prog_load+0x10/0x10 [ 421.332153][T19403] ? __might_fault+0xaf/0x130 [ 421.332188][T19403] ? bpf_lsm_bpf+0x9/0x20 [ 421.332202][T19403] ? security_bpf+0x7e/0x2d0 [ 421.332225][T19403] __sys_bpf+0x618/0x950 [ 421.332251][T19403] ? __pfx___sys_bpf+0x10/0x10 [ 421.332290][T19403] ? ksys_write+0x242/0x270 [ 421.332315][T19403] ? __pfx_ksys_write+0x10/0x10 [ 421.332343][T19403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.332361][T19403] __x64_sys_bpf+0x7c/0x90 [ 421.332385][T19403] do_syscall_64+0x174/0x580 [ 421.332402][T19403] ? trace_irq_disable+0x3b/0x140 [ 421.332425][T19403] ? clear_bhb_loop+0x40/0x90 [ 421.332448][T19403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.332466][T19403] RIP: 0033:0x7f59d2f9ce59 [ 421.332483][T19403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.332498][T19403] RSP: 002b:00007f59d11f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 421.332516][T19403] RAX: ffffffffffffffda RBX: 00007f59d3215fa0 RCX: 00007f59d2f9ce59 [ 421.332529][T19403] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000005 [ 421.332540][T19403] RBP: 00007f59d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 421.332551][T19403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.332561][T19403] R13: 00007f59d3216038 R14: 00007f59d3215fa0 R15: 00007ffcf92ef4e8 [ 421.332589][T19403] [ 421.332610][T19403] Mem-Info: [ 421.642476][T19403] active_anon:10020 inactive_anon:11 isolated_anon:0 [ 421.642476][T19403] active_file:2698 inactive_file:40680 isolated_file:0 [ 421.642476][T19403] unevictable:768 dirty:74 writeback:15 [ 421.642476][T19403] slab_reclaimable:11508 slab_unreclaimable:108414 [ 421.642476][T19403] mapped:32449 shmem:4084 pagetables:1879 [ 421.642476][T19403] sec_pagetables:0 bounce:0 [ 421.642476][T19403] kernel_misc_reclaimable:0 [ 421.642476][T19403] free:1308613 free_pcp:9726 free_cma:0 [ 421.688779][T19403] Node 0 active_anon:40080kB inactive_anon:44kB active_file:10792kB inactive_file:162516kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129796kB dirty:296kB writeback:60kB shmem:14800kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15356kB pagetables:7388kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 421.790359][T19403] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 421.844693][T19403] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 421.876203][T19403] lowmem_reserve[]: 0 2493 2494 2494 2494 [ 421.882046][T19403] Node 0 DMA32 free:1276936kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37380kB inactive_anon:44kB active_file:10792kB inactive_file:162516kB unevictable:1536kB writepending:356kB zspages:0kB present:3129332kB managed:2553212kB mlocked:0kB bounce:0kB free_pcp:37976kB local_pcp:17564kB free_cma:0kB [ 421.915919][T19403] lowmem_reserve[]: 0 0 0 0 0 [ 421.920736][T19403] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 421.989590][T19403] lowmem_reserve[]: 0 0 0 0 0 [ 421.995408][T19419] __nla_validate_parse: 5 callbacks suppressed [ 421.995426][T19419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3851'. [ 421.997698][T19403] Node 1 Normal free:3945556kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 422.048815][T19403] lowmem_reserve[]: 0 0 0 0 0 [ 422.053607][T19403] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 422.087015][T19403] Node 0 DMA32: 5905*4kB (UME) 4065*8kB (UM) 2524*16kB (UME) 693*32kB (UM) 251*64kB (UME) 220*128kB (UME) 315*256kB (UM) 208*512kB (UME) 110*1024kB (UM) 4*2048kB (UM) 199*4096kB (UM) = 1285996kB [ 422.105550][T19425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3854'. [ 422.107013][T19403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 422.127900][T19423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3853'. [ 422.137007][T19425] bond5: Invalid ad_actor_system MAC address. [ 422.138036][T19423] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3853'. [ 422.143550][T19425] bond5: option ad_actor_system: invalid value (1) [ 422.155889][T19423] validate_nla: 60 callbacks suppressed [ 422.155905][T19423] netlink: 'syz.4.3853': attribute type 10 has an invalid length. [ 422.172547][T19403] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 4*16kB (UM) 7*32kB (UM) 8*64kB (UM) 4*128kB (UM) 7*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3945556kB [ 422.228606][T19403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.238279][T19403] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.241044][T19425] bond5 (unregistering): Released all slaves [ 422.247685][T19403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 422.263405][T19403] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 422.279901][T19403] 44690 total pagecache pages [ 422.286134][T19403] 0 pages in swap cache [ 422.302370][T19403] Free swap = 124996kB [ 422.310358][T19403] Total swap = 124996kB [ 422.319895][T19403] 2097051 pages RAM [ 422.326014][T19423] team0: Device dummy0 failed to register rx_handler [ 422.329864][T19403] 0 pages HighMem/MovableOnly [ 422.340973][T19403] 426960 pages reserved [ 422.345191][T19403] 0 pages cma reserved [ 422.382107][T19432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3855'. [ 422.733733][T19453] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3863'. [ 423.000824][T19465] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3866'. [ 423.370085][T19454] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3862'. [ 423.385472][T19454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3862'. [ 423.550292][T19483] netlink: 328 bytes leftover after parsing attributes in process `syz.2.3872'. [ 423.992398][T19515] netlink: 'syz.3.3883': attribute type 1 has an invalid length. [ 423.998094][T19511] IPVS: set_ctl: invalid protocol: 108 100.1.1.1:20002 [ 424.034881][T19513] tipc: Enabled bearer , priority 0 [ 424.042575][T19513] netlink: zone id is out of range [ 424.047718][T19513] netlink: zone id is out of range [ 424.103560][T19513] netlink: zone id is out of range [ 424.108717][T19513] netlink: zone id is out of range [ 424.113809][T19513] netlink: zone id is out of range [ 424.118990][T19513] netlink: zone id is out of range [ 424.139851][T19513] netlink: zone id is out of range [ 424.145014][T19513] netlink: zone id is out of range [ 424.150133][T19513] netlink: zone id is out of range [ 424.155251][T19513] netlink: zone id is out of range [ 424.320247][T19526] netlink: 'syz.0.3886': attribute type 1 has an invalid length. [ 424.377209][T19512] tipc: Disabling bearer [ 425.690260][T19582] tipc: Enabled bearer , priority 0 [ 425.798217][T19579] tipc: Disabling bearer [ 426.777563][T19632] bond13 (unregistering): Released all slaves [ 426.859633][T19642] netlink: 'syz.3.3916': attribute type 22 has an invalid length. [ 426.920922][T19645] FAULT_INJECTION: forcing a failure. [ 426.920922][T19645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 426.955111][T19645] CPU: 1 UID: 0 PID: 19645 Comm: syz.1.3918 Not tainted syzkaller #0 PREEMPT(full) [ 426.955137][T19645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.955148][T19645] Call Trace: [ 426.955155][T19645] [ 426.955163][T19645] dump_stack_lvl+0xe8/0x150 [ 426.955189][T19645] should_fail_ex+0x40c/0x560 [ 426.955215][T19645] _copy_from_iter+0x1d3/0x1660 [ 426.955239][T19645] ? rcu_is_watching+0x15/0xb0 [ 426.955299][T19645] ? __pfx__copy_from_iter+0x10/0x10 [ 426.955316][T19645] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 426.955350][T19645] ? netlink_sendmsg+0x650/0xb40 [ 426.955374][T19645] ? skb_put+0x112/0x210 [ 426.955401][T19645] netlink_sendmsg+0x6c0/0xb40 [ 426.955435][T19645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.955464][T19645] ? aa_sock_msg_perm+0xf1/0x1b0 [ 426.955492][T19645] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 426.955515][T19645] ? __pfx_netlink_sendmsg+0x10/0x10 [ 426.955544][T19645] ____sys_sendmsg+0x9b9/0xa20 [ 426.955580][T19645] ? __might_fault+0xaf/0x130 [ 426.955610][T19645] ? __pfx_____sys_sendmsg+0x10/0x10 [ 426.955644][T19645] ? import_iovec+0x73/0xa0 [ 426.955669][T19645] ___sys_sendmsg+0x2a5/0x360 [ 426.955701][T19645] ? __lock_acquire+0x683/0x2cd0 [ 426.955725][T19645] ? __pfx____sys_sendmsg+0x10/0x10 [ 426.955787][T19645] ? __fget_files+0x2a/0x420 [ 426.955808][T19645] ? __fget_files+0x3a2/0x420 [ 426.955840][T19645] __x64_sys_sendmsg+0x1bd/0x2a0 [ 426.955869][T19645] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 426.955906][T19645] ? __pfx_ksys_write+0x10/0x10 [ 426.955940][T19645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.955960][T19645] do_syscall_64+0x174/0x580 [ 426.955979][T19645] ? trace_irq_disable+0x3b/0x140 [ 426.956004][T19645] ? clear_bhb_loop+0x40/0x90 [ 426.956027][T19645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.956046][T19645] RIP: 0033:0x7f9c1bb9ce59 [ 426.956063][T19645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.956078][T19645] RSP: 002b:00007f9c1ca8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 426.956098][T19645] RAX: ffffffffffffffda RBX: 00007f9c1be15fa0 RCX: 00007f9c1bb9ce59 [ 426.956112][T19645] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 426.956125][T19645] RBP: 00007f9c1ca8e090 R08: 0000000000000000 R09: 0000000000000000 [ 426.956137][T19645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.956148][T19645] R13: 00007f9c1be16038 R14: 00007f9c1be15fa0 R15: 00007ffe1c76e9e8 [ 426.956180][T19645] [ 426.962777][T19642] netlink: 'syz.3.3916': attribute type 22 has an invalid length. [ 427.319940][T19642] __nla_validate_parse: 6 callbacks suppressed [ 427.319959][T19642] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3916'. [ 427.438861][T19656] netlink: 211792 bytes leftover after parsing attributes in process `syz.2.3919'. [ 427.458136][T19642] xt_hashlimit: size too large, truncated to 1048576 [ 427.871216][T19647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3916'. [ 428.111738][T19670] tipc: Enabled bearer , priority 0 [ 428.165787][T19669] tipc: Disabling bearer [ 428.181361][T19675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3924'. [ 428.422971][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3928'. [ 428.434973][T19694] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.3929'. [ 429.035864][T19727] netlink: 'syz.3.3937': attribute type 1 has an invalid length. [ 429.279664][T19740] net_ratelimit: 31 callbacks suppressed [ 429.279687][T19740] openvswitch: netlink: Flow key attr not present in new flow. [ 430.103038][T19777] bond7: (slave gre0): Device is not bonding slave [ 430.109603][T19777] bond7: option active_slave: invalid value (gre0) [ 430.168242][T19777] bond7 (unregistering): Released all slaves [ 430.990550][T19836] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3966'. [ 431.080169][T19842] bridge_slave_0: invalid flags given to default FDB implementation [ 431.314208][T19859] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3976'. [ 431.395714][T19854] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3971'. [ 431.405533][T19854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3971'. [ 431.499404][T19866] netlink: 'syz.1.3978': attribute type 1 has an invalid length. [ 431.533844][T19866] 8021q: adding VLAN 0 to HW filter on device bond11 [ 432.748237][T19926] netlink: 'syz.0.3996': attribute type 11 has an invalid length. [ 433.031945][T19940] FAULT_INJECTION: forcing a failure. [ 433.031945][T19940] name failslab, interval 1, probability 0, space 0, times 0 [ 433.070519][T19940] CPU: 1 UID: 0 PID: 19940 Comm: syz.3.4002 Not tainted syzkaller #0 PREEMPT(full) [ 433.070546][T19940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.070556][T19940] Call Trace: [ 433.070565][T19940] [ 433.070574][T19940] dump_stack_lvl+0xe8/0x150 [ 433.070601][T19940] should_fail_ex+0x40c/0x560 [ 433.070627][T19940] should_failslab+0xa8/0x100 [ 433.070653][T19940] ? skb_clone+0x212/0x3a0 [ 433.070670][T19940] kmem_cache_alloc_noprof+0x87/0x650 [ 433.070702][T19940] skb_clone+0x212/0x3a0 [ 433.070721][T19940] __netlink_deliver_tap+0x413/0x860 [ 433.070758][T19940] ? netlink_deliver_tap+0x2e/0x1b0 [ 433.070786][T19940] netlink_deliver_tap+0x19c/0x1b0 [ 433.070813][T19940] netlink_unicast+0x77f/0x940 [ 433.070848][T19940] netlink_sendmsg+0x813/0xb40 [ 433.070884][T19940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.070913][T19940] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.070942][T19940] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.070964][T19940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.071000][T19940] ____sys_sendmsg+0x9b9/0xa20 [ 433.071027][T19940] ? __might_fault+0xaf/0x130 [ 433.071055][T19940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.071090][T19940] ? import_iovec+0x73/0xa0 [ 433.071115][T19940] ___sys_sendmsg+0x2a5/0x360 [ 433.071139][T19940] ? __lock_acquire+0x683/0x2cd0 [ 433.071163][T19940] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.071223][T19940] ? __fget_files+0x2a/0x420 [ 433.071244][T19940] ? __fget_files+0x3a2/0x420 [ 433.071276][T19940] __x64_sys_sendmsg+0x1bd/0x2a0 [ 433.071307][T19940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.071342][T19940] ? __pfx_ksys_write+0x10/0x10 [ 433.071375][T19940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.071396][T19940] do_syscall_64+0x174/0x580 [ 433.071414][T19940] ? trace_irq_disable+0x3b/0x140 [ 433.071439][T19940] ? clear_bhb_loop+0x40/0x90 [ 433.071460][T19940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.071477][T19940] RIP: 0033:0x7f5323b9ce59 [ 433.071495][T19940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.071509][T19940] RSP: 002b:00007f5324a27028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.071528][T19940] RAX: ffffffffffffffda RBX: 00007f5323e16090 RCX: 00007f5323b9ce59 [ 433.071542][T19940] RDX: 0000000000000804 RSI: 00002000000003c0 RDI: 0000000000000007 [ 433.071554][T19940] RBP: 00007f5324a27090 R08: 0000000000000000 R09: 0000000000000000 [ 433.071565][T19940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.071576][T19940] R13: 00007f5323e16128 R14: 00007f5323e16090 R15: 00007ffd59a89148 [ 433.071604][T19940] [ 433.496764][T19944] geneve2: entered promiscuous mode [ 433.535349][T14659] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 40797 - 0 [ 433.581319][T14659] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 40797 - 0 [ 433.589652][T14659] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 40797 - 0 [ 433.598043][T14659] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 40797 - 0 [ 433.598130][T19956] __nla_validate_parse: 3 callbacks suppressed [ 433.598144][T19956] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4004'. [ 433.679351][T19958] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4007'. [ 433.858979][T19969] syzkaller1: entered promiscuous mode [ 433.872986][T19969] syzkaller1: entered allmulticast mode [ 434.197154][T19986] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4018'. [ 434.474549][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4023'. [ 434.505662][T20009] netlink: 'syz.4.4023': attribute type 33 has an invalid length. [ 435.127362][T20041] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4031'. [ 435.127870][T20035] openvswitch: netlink: Key 6 has unexpected len 0 expected 2 [ 435.236709][T20054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4034'. [ 435.320039][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4035'. [ 435.324628][T20054] batadv0: entered promiscuous mode [ 435.359769][T20054] macsec1: entered promiscuous mode [ 435.455725][T20054] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 435.670229][T20076] FAULT_INJECTION: forcing a failure. [ 435.670229][T20076] name failslab, interval 1, probability 0, space 0, times 0 [ 435.698627][T20080] syzkaller0: entered promiscuous mode [ 435.717007][T20080] syzkaller0: entered allmulticast mode [ 435.722083][T20076] CPU: 0 UID: 0 PID: 20076 Comm: syz.1.4038 Not tainted syzkaller #0 PREEMPT(full) [ 435.722108][T20076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 435.722119][T20076] Call Trace: [ 435.722127][T20076] [ 435.722135][T20076] dump_stack_lvl+0xe8/0x150 [ 435.722163][T20076] should_fail_ex+0x40c/0x560 [ 435.722187][T20076] should_failslab+0xa8/0x100 [ 435.722214][T20076] ? ovs_flow_alloc+0x24/0x1f0 [ 435.722334][T20076] kmem_cache_alloc_noprof+0x87/0x650 [ 435.722366][T20076] ovs_flow_alloc+0x24/0x1f0 [ 435.722389][T20076] ovs_flow_cmd_new+0x2b9/0xe80 [ 435.722444][T20076] ? kasan_save_track+0x3e/0x80 [ 435.722466][T20076] ? kasan_save_free_info+0x40/0x50 [ 435.722493][T20076] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 435.722572][T20076] ? __nla_parse+0x40/0x60 [ 435.722595][T20076] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 435.722729][T20076] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 435.722760][T20076] genl_family_rcv_msg_doit+0x233/0x340 [ 435.722789][T20076] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 435.722824][T20076] ? bpf_lsm_capable+0x9/0x20 [ 435.722843][T20076] ? security_capable+0x7e/0x2c0 [ 435.722875][T20076] genl_rcv_msg+0x614/0x7a0 [ 435.722902][T20076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.722923][T20076] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 435.722949][T20076] ? __pfx_ref_tracker_free+0x10/0x10 [ 435.722980][T20076] netlink_rcv_skb+0x226/0x4a0 [ 435.723007][T20076] ? __pfx_genl_rcv_msg+0x10/0x10 [ 435.723030][T20076] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 435.723072][T20076] ? down_read+0x270/0x2e0 [ 435.723091][T20076] ? genl_rcv+0xd/0x40 [ 435.723113][T20076] genl_rcv+0x28/0x40 [ 435.723132][T20076] netlink_unicast+0x7bb/0x940 [ 435.723167][T20076] netlink_sendmsg+0x813/0xb40 [ 435.723203][T20076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.723232][T20076] ? aa_sock_msg_perm+0xf1/0x1b0 [ 435.723260][T20076] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 435.723283][T20076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.723310][T20076] ____sys_sendmsg+0x9b9/0xa20 [ 435.723338][T20076] ? __might_fault+0xaf/0x130 [ 435.723368][T20076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.723411][T20076] ? import_iovec+0x73/0xa0 [ 435.723437][T20076] ___sys_sendmsg+0x2a5/0x360 [ 435.723463][T20076] ? __lock_acquire+0x683/0x2cd0 [ 435.723487][T20076] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.723552][T20076] ? __fget_files+0x2a/0x420 [ 435.723573][T20076] ? __fget_files+0x3a2/0x420 [ 435.723606][T20076] __x64_sys_sendmsg+0x1bd/0x2a0 [ 435.723636][T20076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 435.723673][T20076] ? __pfx_ksys_write+0x10/0x10 [ 435.723708][T20076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.723730][T20076] do_syscall_64+0x174/0x580 [ 435.723747][T20076] ? trace_irq_disable+0x3b/0x140 [ 435.723772][T20076] ? clear_bhb_loop+0x40/0x90 [ 435.723796][T20076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.723815][T20076] RIP: 0033:0x7f9c1bb9ce59 [ 435.723834][T20076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.723850][T20076] RSP: 002b:00007f9c1ca8e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.723871][T20076] RAX: ffffffffffffffda RBX: 00007f9c1be15fa0 RCX: 00007f9c1bb9ce59 [ 435.723885][T20076] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 435.723898][T20076] RBP: 00007f9c1ca8e090 R08: 0000000000000000 R09: 0000000000000000 [ 435.723911][T20076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 435.723923][T20076] R13: 00007f9c1be16038 R14: 00007f9c1be15fa0 R15: 00007ffe1c76e9e8 [ 435.723956][T20076] [ 436.623564][T20111] netlink: 'syz.3.4047': attribute type 39 has an invalid length. [ 436.763730][T20120] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4049'. [ 436.907659][T20128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4051'. [ 437.206752][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4054'. [ 437.380362][T20157] SET target dimension over the limit! [ 437.483770][T20161] netlink: 'syz.4.4058': attribute type 11 has an invalid length. [ 437.589587][T20173] FAULT_INJECTION: forcing a failure. [ 437.589587][T20173] name failslab, interval 1, probability 0, space 0, times 0 [ 437.630386][T20173] CPU: 1 UID: 0 PID: 20173 Comm: syz.0.4063 Not tainted syzkaller #0 PREEMPT(full) [ 437.630412][T20173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.630423][T20173] Call Trace: [ 437.630430][T20173] [ 437.630437][T20173] dump_stack_lvl+0xe8/0x150 [ 437.630464][T20173] should_fail_ex+0x40c/0x560 [ 437.630490][T20173] should_failslab+0xa8/0x100 [ 437.630519][T20173] __kmalloc_cache_noprof+0x88/0x660 [ 437.630544][T20173] ? ovs_flow_cmd_new+0x356/0xe80 [ 437.630578][T20173] ovs_flow_cmd_new+0x356/0xe80 [ 437.630612][T20173] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 437.630701][T20173] ? __nla_parse+0x40/0x60 [ 437.630728][T20173] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 437.630749][T20173] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 437.630778][T20173] genl_family_rcv_msg_doit+0x233/0x340 [ 437.630806][T20173] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 437.630839][T20173] ? bpf_lsm_capable+0x9/0x20 [ 437.630857][T20173] ? security_capable+0x7e/0x2c0 [ 437.630887][T20173] genl_rcv_msg+0x614/0x7a0 [ 437.630915][T20173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.630935][T20173] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 437.630973][T20173] netlink_rcv_skb+0x226/0x4a0 [ 437.630999][T20173] ? __pfx_genl_rcv_msg+0x10/0x10 [ 437.631022][T20173] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 437.631062][T20173] ? down_read+0x270/0x2e0 [ 437.631080][T20173] ? genl_rcv+0xd/0x40 [ 437.631102][T20173] genl_rcv+0x28/0x40 [ 437.631119][T20173] netlink_unicast+0x7bb/0x940 [ 437.631153][T20173] netlink_sendmsg+0x813/0xb40 [ 437.631189][T20173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.631218][T20173] ? aa_sock_msg_perm+0xf1/0x1b0 [ 437.631245][T20173] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 437.631267][T20173] ? __pfx_netlink_sendmsg+0x10/0x10 [ 437.631295][T20173] ____sys_sendmsg+0x9b9/0xa20 [ 437.631321][T20173] ? __might_fault+0xaf/0x130 [ 437.631349][T20173] ? __pfx_____sys_sendmsg+0x10/0x10 [ 437.631391][T20173] ? import_iovec+0x73/0xa0 [ 437.631418][T20173] ___sys_sendmsg+0x2a5/0x360 [ 437.631443][T20173] ? __lock_acquire+0x683/0x2cd0 [ 437.631467][T20173] ? __pfx____sys_sendmsg+0x10/0x10 [ 437.631529][T20173] ? __fget_files+0x2a/0x420 [ 437.631550][T20173] ? __fget_files+0x3a2/0x420 [ 437.631583][T20173] __x64_sys_sendmsg+0x1bd/0x2a0 [ 437.631612][T20173] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 437.631653][T20173] ? __pfx_ksys_write+0x10/0x10 [ 437.631687][T20173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.631708][T20173] do_syscall_64+0x174/0x580 [ 437.631725][T20173] ? trace_irq_disable+0x3b/0x140 [ 437.631752][T20173] ? clear_bhb_loop+0x40/0x90 [ 437.631775][T20173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.631793][T20173] RIP: 0033:0x7f19a639ce59 [ 437.631810][T20173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 437.631825][T20173] RSP: 002b:00007f19a7320028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 437.631845][T20173] RAX: ffffffffffffffda RBX: 00007f19a6615fa0 RCX: 00007f19a639ce59 [ 437.631859][T20173] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000008 [ 437.631871][T20173] RBP: 00007f19a7320090 R08: 0000000000000000 R09: 0000000000000000 [ 437.631882][T20173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.631893][T20173] R13: 00007f19a6616038 R14: 00007f19a6615fa0 R15: 00007ffe200bb1f8 [ 437.631925][T20173] [ 437.990727][T20161] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 438.009751][T20161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.017996][T20161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 438.026799][T20161] 8021q: adding VLAN 0 to HW filter on device bond3 [ 438.037568][T20161] 8021q: adding VLAN 0 to HW filter on device bond5 [ 438.045738][T20161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 438.138135][T20161] 8021q: adding VLAN 0 to HW filter on device bond7 [ 438.157621][T20161] 8021q: adding VLAN 0 to HW filter on device bond10 [ 438.220791][T20161] 8021q: adding VLAN 0 to HW filter on device bond11 [ 438.258485][ T6299] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.265721][ T6299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.312166][T20161] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 438.319281][T20161] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 438.887292][T20211] __nla_validate_parse: 1 callbacks suppressed [ 438.887312][T20211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4073'. [ 438.929856][T20211] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 439.216662][T20233] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4079'. [ 439.228305][T20233] : left promiscuous mode [ 439.314923][T20238] openvswitch: netlink: Key 6 has unexpected len 31 expected 2 [ 439.571314][T20251] openvswitch: netlink: Key 6 has unexpected len 31 expected 2 [ 440.810650][T20292] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4093'. [ 441.028132][T20298] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4097'. [ 441.040272][T20305] openvswitch: netlink: Missing valid actions attribute. [ 441.063138][T20305] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.326928][T20323] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4103'. [ 441.557161][T20333] netlink: 408 bytes leftover after parsing attributes in process `syz.1.4106'. [ 441.572187][T20332] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4107'. [ 441.845625][T20354] openvswitch: netlink: Key type 218 is out of range max 32 [ 441.866270][T20355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4108'. [ 441.995766][T20334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4108'. [ 442.110929][T20367] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 442.122729][T20368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4115'. [ 442.914240][T20409] openvswitch: netlink: nsh attr 0 has unexpected len 1 expected 0 [ 443.084351][T20418] openvswitch: netlink: Unexpected mask (mask=240040, allowed=10048) [ 443.425703][T20426] netlink: 'syz.4.4130': attribute type 5 has an invalid length. [ 445.796381][T20398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 446.033231][T20510] __nla_validate_parse: 6 callbacks suppressed [ 446.033251][T20510] netlink: 232 bytes leftover after parsing attributes in process `syz.2.4136'. [ 446.443901][T20534] bridge2: port 2(veth0_to_bond) entered disabled state [ 446.466217][T20534] bond0: (slave bond_slave_0): Releasing backup interface [ 446.474209][T20534] bond_slave_0 (unregistering): left allmulticast mode [ 446.492697][T20534] veth0_to_bond (unregistering): left allmulticast mode [ 446.499734][T20534] veth0_to_bond (unregistering): left promiscuous mode [ 446.508782][T20534] bridge2: port 2(veth0_to_bond) entered disabled state [ 446.544050][T20537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4144'. [ 446.575395][T20537] team1 (uninitialized): Failed to send options change via netlink (err -105) [ 446.669236][T20537] team1: entered promiscuous mode [ 446.692377][T20537] team1: entered allmulticast mode [ 446.742639][T20547] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4147'. [ 446.755024][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4148'. [ 446.768940][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4148'. [ 446.812357][T20551] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4149'. [ 446.953425][T20560] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4151'. [ 446.975513][T20557] IPv6: NLM_F_REPLACE set, but no existing node found! [ 447.083532][T20560] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4151'. [ 447.137123][T20573] Unsupported ieee802154 address type: 0 [ 447.400417][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4160'. [ 447.428612][T20589] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 447.464458][T20589] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 447.503918][T20589] tipc: Enabled bearer , priority 0 [ 447.594306][T20589] tipc: Resetting bearer [ 447.609979][T20601] netlink: 788 bytes leftover after parsing attributes in process `syz.4.4162'. [ 447.696317][T20600] sctp: [Deprecated]: syz.2.4163 (pid 20600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 447.696317][T20600] Use struct sctp_sack_info instead [ 447.794471][T20612] openvswitch: netlink: Unknown nsh attribute 0 [ 448.036976][T20621] openvswitch: netlink: Flow actions attr not present in new flow. [ 450.589234][T20597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 450.600975][T20625] netlink: 'syz.1.4171': attribute type 1 has an invalid length. [ 450.623901][T20625] netlink: 'syz.1.4171': attribute type 1 has an invalid length. [ 450.869699][T20636] vcan0: tx drop: invalid da for name 0x0000000000000015 [ 450.891176][T20641] tipc: Enabled bearer , priority 0 [ 450.906436][T20641] netlink: zone id is out of range [ 450.908044][T20646] veth0: entered promiscuous mode [ 450.911588][T20641] netlink: zone id is out of range [ 450.911602][T20641] netlink: zone id is out of range [ 450.911611][T20641] netlink: zone id is out of range [ 450.911619][T20641] netlink: zone id is out of range [ 450.911627][T20641] netlink: zone id is out of range [ 450.911635][T20641] netlink: zone id is out of range [ 450.911645][T20641] netlink: zone id is out of range [ 451.021519][T20646] veth0: left promiscuous mode [ 453.204080][T20753] FAULT_INJECTION: forcing a failure. [ 453.204080][T20753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.229338][T20753] CPU: 1 UID: 0 PID: 20753 Comm: syz.1.4201 Not tainted syzkaller #0 PREEMPT(full) [ 453.229364][T20753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 453.229374][T20753] Call Trace: [ 453.229382][T20753] [ 453.229390][T20753] dump_stack_lvl+0xe8/0x150 [ 453.229418][T20753] should_fail_ex+0x40c/0x560 [ 453.229445][T20753] _copy_from_iter+0x1d3/0x1660 [ 453.229470][T20753] ? rcu_is_watching+0x15/0xb0 [ 453.229497][T20753] ? __pfx__copy_from_iter+0x10/0x10 [ 453.229514][T20753] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 453.229546][T20753] ? netlink_sendmsg+0x650/0xb40 [ 453.229574][T20753] ? skb_put+0x112/0x210 [ 453.229603][T20753] netlink_sendmsg+0x6c0/0xb40 [ 453.229637][T20753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.229666][T20753] ? aa_sock_msg_perm+0xf1/0x1b0 [ 453.229694][T20753] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 453.229718][T20753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 453.229747][T20753] ____sys_sendmsg+0x9b9/0xa20 [ 453.229771][T20753] ? __might_fault+0xaf/0x130 [ 453.229798][T20753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 453.229831][T20753] ? import_iovec+0x73/0xa0 [ 453.229855][T20753] ___sys_sendmsg+0x2a5/0x360 [ 453.229880][T20753] ? __lock_acquire+0x683/0x2cd0 [ 453.229903][T20753] ? __pfx____sys_sendmsg+0x10/0x10 [ 453.229964][T20753] ? __fget_files+0x2a/0x420 [ 453.229986][T20753] ? __fget_files+0x3a2/0x420 [ 453.230027][T20753] __x64_sys_sendmsg+0x1bd/0x2a0 [ 453.230057][T20753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 453.230093][T20753] ? __pfx_ksys_write+0x10/0x10 [ 453.230127][T20753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.230147][T20753] do_syscall_64+0x174/0x580 [ 453.230168][T20753] ? trace_irq_disable+0x3b/0x140 [ 453.230193][T20753] ? clear_bhb_loop+0x40/0x90 [ 453.230217][T20753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.230235][T20753] RIP: 0033:0x7f9c1bb9ce59 [ 453.230253][T20753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 453.230268][T20753] RSP: 002b:00007f9c1ca6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 453.230288][T20753] RAX: ffffffffffffffda RBX: 00007f9c1be16090 RCX: 00007f9c1bb9ce59 [ 453.230302][T20753] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 453.230314][T20753] RBP: 00007f9c1ca6d090 R08: 0000000000000000 R09: 0000000000000000 [ 453.230326][T20753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.230337][T20753] R13: 00007f9c1be16128 R14: 00007f9c1be16090 R15: 00007ffe1c76e9e8 [ 453.230368][T20753] [ 454.372702][T20673] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 454.701027][T20791] __nla_validate_parse: 7 callbacks suppressed [ 454.701048][T20791] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4205'. [ 454.733685][T20795] netlink: 'syz.4.4208': attribute type 16 has an invalid length. [ 454.788182][T20795] netlink: 'syz.4.4208': attribute type 17 has an invalid length. [ 454.840431][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4205'. [ 454.863481][T20796] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4205'. [ 454.889817][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4205'. [ 454.923095][T20805] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4208'. [ 454.959542][T20795] bridge0: left allmulticast mode [ 455.002218][T20795] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 455.045938][T20795] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 455.052898][T20795] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 455.066992][T20795] macvlan2: left allmulticast mode [ 455.072977][T20795] dummy0: left allmulticast mode [ 455.079733][T20795] geneve2: left allmulticast mode [ 455.087935][T20795] geneve3: left promiscuous mode [ 455.092976][T20795] geneve3: left allmulticast mode [ 455.104789][T20795] bond4: left promiscuous mode [ 455.109616][T20795] bond4: left allmulticast mode [ 455.117762][T20795] vlan2: left promiscuous mode [ 455.137695][T20795] bridge0: left promiscuous mode [ 455.145818][T20795] gretap1: left promiscuous mode [ 455.150838][T20795] gretap1: left allmulticast mode [ 455.156922][T20795] ip6gre1: left allmulticast mode [ 455.171150][T20795] veth3: left promiscuous mode [ 455.176646][T20795] gretap3: left promiscuous mode [ 455.182004][T20795] gretap3: left allmulticast mode [ 455.187488][T20810] FAULT_INJECTION: forcing a failure. [ 455.187488][T20810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.201753][T20795] net_ratelimit: 4 callbacks suppressed [ 455.201772][T20795] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 455.223529][T20810] CPU: 0 UID: 0 PID: 20810 Comm: syz.2.4212 Not tainted syzkaller #0 PREEMPT(full) [ 455.223551][T20810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 455.223562][T20810] Call Trace: [ 455.223568][T20810] [ 455.223576][T20810] dump_stack_lvl+0xe8/0x150 [ 455.223601][T20810] should_fail_ex+0x40c/0x560 [ 455.223624][T20810] _copy_from_iter+0x1d3/0x1660 [ 455.223647][T20810] ? rcu_is_watching+0x15/0xb0 [ 455.223672][T20810] ? __pfx__copy_from_iter+0x10/0x10 [ 455.223688][T20810] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 455.223720][T20810] ? netlink_sendmsg+0x650/0xb40 [ 455.223745][T20810] ? skb_put+0x112/0x210 [ 455.223771][T20810] netlink_sendmsg+0x6c0/0xb40 [ 455.223805][T20810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.223833][T20810] ? aa_sock_msg_perm+0xf1/0x1b0 [ 455.223859][T20810] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 455.223881][T20810] ? __pfx_netlink_sendmsg+0x10/0x10 [ 455.223908][T20810] ____sys_sendmsg+0x9b9/0xa20 [ 455.223933][T20810] ? __might_fault+0xaf/0x130 [ 455.223962][T20810] ? __pfx_____sys_sendmsg+0x10/0x10 [ 455.223997][T20810] ? import_iovec+0x73/0xa0 [ 455.224021][T20810] ___sys_sendmsg+0x2a5/0x360 [ 455.224043][T20810] ? __lock_acquire+0x683/0x2cd0 [ 455.224066][T20810] ? __pfx____sys_sendmsg+0x10/0x10 [ 455.224120][T20810] ? __fget_files+0x2a/0x420 [ 455.224138][T20810] ? __fget_files+0x3a2/0x420 [ 455.224169][T20810] __x64_sys_sendmsg+0x1bd/0x2a0 [ 455.224196][T20810] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 455.224230][T20810] ? __pfx_ksys_write+0x10/0x10 [ 455.224262][T20810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.224279][T20810] do_syscall_64+0x174/0x580 [ 455.224294][T20810] ? trace_irq_disable+0x3b/0x140 [ 455.224318][T20810] ? clear_bhb_loop+0x40/0x90 [ 455.224342][T20810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.224367][T20810] RIP: 0033:0x7f59d2f9ce59 [ 455.224383][T20810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.224398][T20810] RSP: 002b:00007f59d11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.224417][T20810] RAX: ffffffffffffffda RBX: 00007f59d3215fa0 RCX: 00007f59d2f9ce59 [ 455.224430][T20810] RDX: 0000000000000040 RSI: 0000200000000140 RDI: 0000000000000003 [ 455.224441][T20810] RBP: 00007f59d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 455.224453][T20810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.224463][T20810] R13: 00007f59d3216038 R14: 00007f59d3215fa0 R15: 00007ffcf92ef4e8 [ 455.224492][T20810] [ 455.897852][T20830] tipc: Resetting bearer [ 455.925109][T20833] netlink: 'syz.3.4216': attribute type 2 has an invalid length. [ 456.068203][T20851] netlink: 'syz.4.4220': attribute type 1 has an invalid length. [ 456.337028][T20851] 8021q: adding VLAN 0 to HW filter on device bond13 [ 456.589307][T20853] syzkaller0: left promiscuous mode [ 456.596495][T20873] xt_CT: You must specify a L4 protocol and not use inversions on it [ 456.626983][T20853] syzkaller0: left allmulticast mode [ 456.814363][T20880] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4227'. [ 457.056259][T20893] syzkaller0: entered promiscuous mode [ 457.061785][T20893] syzkaller0: entered allmulticast mode [ 457.136678][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4225'. [ 457.143682][T20905] netlink: 'syz.3.4234': attribute type 10 has an invalid length. [ 457.153777][T20893] netlink: 'syz.1.4231': attribute type 1 has an invalid length. [ 457.259113][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4235'. [ 457.729470][T20918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4237'. [ 457.795727][T20920] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.4238'. [ 457.913950][T20920] netlink: 'syz.1.4238': attribute type 4 has an invalid length. [ 459.877883][T20883] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 459.888160][T20897] netlink: 'syz.4.4232': attribute type 11 has an invalid length. [ 459.896590][T20897] netlink: 'syz.4.4232': attribute type 11 has an invalid length. [ 459.904748][T20897] __nla_validate_parse: 1 callbacks suppressed [ 459.904764][T20897] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4232'. [ 460.172711][T20928] : entered promiscuous mode [ 460.228776][T20931] netlink: 'syz.3.4240': attribute type 26 has an invalid length. [ 460.252054][T20928] bond_slave_0: entered promiscuous mode [ 460.277475][T20931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4240'. [ 460.581952][T20945] netlink: 1216 bytes leftover after parsing attributes in process `syz.1.4245'. [ 460.642891][T20953] netlink: 'syz.3.4248': attribute type 29 has an invalid length. [ 461.797251][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4252'. [ 461.896315][T20974] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4252'. [ 462.507784][T20984] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4256'. [ 462.700114][T20991] netlink: 'syz.4.4258': attribute type 30 has an invalid length. [ 464.833688][T21036] openvswitch: netlink: IP tunnel TTL not specified. [ 465.415808][T21054] netlink: 'syz.1.4279': attribute type 4 has an invalid length. [ 465.493792][T21055] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4280'. [ 466.071934][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 466.080847][T21075] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4286'. [ 466.730254][T21086] gre1: entered promiscuous mode [ 466.735253][T21086] gre1: entered allmulticast mode [ 467.349993][T21101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4296'. [ 467.549772][T21086] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4291'. [ 467.665227][T21109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4298'. [ 467.759006][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4291'. [ 467.880736][T21115] netlink: 'syz.1.4301': attribute type 1 has an invalid length. [ 467.888512][T21115] netlink: 'syz.1.4301': attribute type 2 has an invalid length. [ 468.871219][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4307'. [ 469.406115][T21149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4311'. [ 469.415038][T21149] netlink: 'syz.4.4311': attribute type 6 has an invalid length. [ 469.422777][T21149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4311'. [ 470.754634][T21180] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.4321'. [ 470.773378][T21183] netlink: 232 bytes leftover after parsing attributes in process `syz.0.4322'. [ 472.071124][T21204] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 472.616018][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 472.625074][T21214] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4333'. [ 472.861728][T21226] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 473.256887][T21238] netlink: 'syz.0.4338': attribute type 12 has an invalid length. [ 473.307851][T21238] vti0: entered allmulticast mode [ 473.520252][T21247] FAULT_INJECTION: forcing a failure. [ 473.520252][T21247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.575425][T21247] CPU: 0 UID: 0 PID: 21247 Comm: syz.2.4343 Not tainted syzkaller #0 PREEMPT(full) [ 473.575450][T21247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 473.575461][T21247] Call Trace: [ 473.575469][T21247] [ 473.575477][T21247] dump_stack_lvl+0xe8/0x150 [ 473.575505][T21247] should_fail_ex+0x40c/0x560 [ 473.575530][T21247] _copy_from_user+0x2d/0xb0 [ 473.575554][T21247] ___sys_recvmsg+0x173/0x590 [ 473.575578][T21247] ? __pfx____sys_recvmsg+0x10/0x10 [ 473.575601][T21247] ? __fget_files+0x2a/0x420 [ 473.575653][T21247] do_recvmmsg+0x329/0x810 [ 473.575680][T21247] ? __pfx_do_recvmmsg+0x10/0x10 [ 473.575710][T21247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 473.575747][T21247] __x64_sys_recvmmsg+0x198/0x250 [ 473.575769][T21247] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 473.575796][T21247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.575817][T21247] do_syscall_64+0x174/0x580 [ 473.575834][T21247] ? trace_irq_disable+0x3b/0x140 [ 473.575860][T21247] ? clear_bhb_loop+0x40/0x90 [ 473.575883][T21247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.575901][T21247] RIP: 0033:0x7f59d2f9ce59 [ 473.575919][T21247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.575935][T21247] RSP: 002b:00007f59d11f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 473.575955][T21247] RAX: ffffffffffffffda RBX: 00007f59d3215fa0 RCX: 00007f59d2f9ce59 [ 473.575969][T21247] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000004 [ 473.575981][T21247] RBP: 00007f59d11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 473.575993][T21247] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 473.576004][T21247] R13: 00007f59d3216038 R14: 00007f59d3215fa0 R15: 00007ffcf92ef4e8 [ 473.576035][T21247] [ 473.616330][T21248] netlink: 'syz.1.4344': attribute type 4 has an invalid length. [ 473.964183][T21248] netlink: 'syz.1.4344': attribute type 2 has an invalid length. [ 473.978107][T21256] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4348'. [ 474.170366][T21261] netlink: 'syz.0.4349': attribute type 21 has an invalid length. [ 474.178236][T21261] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4349'. [ 474.746036][T21269] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.4351'. [ 475.172468][T21261] netlink: 'syz.0.4349': attribute type 5 has an invalid length. [ 475.180248][T21261] netlink: 'syz.0.4349': attribute type 6 has an invalid length. [ 475.187981][T21261] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4349'. [ 475.432784][T21279] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4355'. [ 475.526234][T21279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4355'. [ 476.092647][T21295] __nla_validate_parse: 2 callbacks suppressed [ 476.092668][T21295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4359'. [ 478.645552][T21286] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 479.686826][ C1] sched: DL replenish lagged too much [ 486.426687][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 583.600193][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 583.607224][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21306/1:b..l [ 583.616434][ C0] rcu: (detected by 0, t=10504 jiffies, g=84473, q=1171 ncpus=2) [ 583.624561][ C0] task:syz.4.4356 state:R running task stack:26040 pid:21306 tgid:21297 ppid:5630 task_flags:0x400140 flags:0x00080000 [ 583.639251][ C0] Call Trace: [ 583.642560][ C0] [ 583.645508][ C0] __schedule+0x1840/0x57a0 [ 583.650073][ C0] ? __lock_acquire+0x683/0x2cd0 [ 583.655038][ C0] ? __pfx___schedule+0x10/0x10 [ 583.659916][ C0] ? __lock_acquire+0x683/0x2cd0 [ 583.664923][ C0] preempt_schedule_irq+0x4d/0xa0 [ 583.669982][ C0] irqentry_exit+0x14f/0x8e0 [ 583.674584][ C0] ? trace_irq_disable+0x3b/0x140 [ 583.679720][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 583.685724][ C0] RIP: 0010:kasan_check_range+0x1c8/0x2c0 [ 583.691648][ C0] Code: 49 01 dc 4d 01 f3 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 da e8 74 09 cc 45 84 ff 0f 85 a1 00 [ 583.711623][ C0] RSP: 0018:ffffc9000cf3ecf0 EFLAGS: 00000256 [ 583.717906][ C0] RAX: ffffc9000cf3ef01 RBX: 0000000000000010 RCX: ffffffff8176abf4 [ 583.726076][ C0] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc9000cf3ee38 [ 583.734245][ C0] RBP: 0000000000000000 R08: ffffc9000cf3ee47 R09: 1ffff920019e7dc8 [ 583.742422][ C0] R10: dffffc0000000000 R11: fffff520019e7dc9 R12: 0000000000000002 [ 583.750682][ C0] R13: ffffffff90c8038c R14: fffff520019e7dc9 R15: 1ffff920019e7dc7 [ 583.758787][ C0] ? unwind_next_frame+0xd04/0x2550 [ 583.764304][ C0] __asan_memset+0x22/0x50 [ 583.768801][ C0] unwind_next_frame+0xd04/0x2550 [ 583.773874][ C0] ? stack_trace_save+0xa9/0x100 [ 583.778870][ C0] ? unwind_next_frame+0x8f/0x2550 [ 583.784025][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 583.790218][ C0] arch_stack_walk+0x11b/0x150 [ 583.795065][ C0] ? save_stack+0x122/0x230 [ 583.799634][ C0] stack_trace_save+0xa9/0x100 [ 583.804424][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 583.809835][ C0] save_stack+0x122/0x230 [ 583.814220][ C0] ? __pfx_save_stack+0x10/0x10 [ 583.819288][ C0] ? page_ext_put+0x97/0xc0 [ 583.824038][ C0] __reset_page_owner+0x71/0x1f0 [ 583.829015][ C0] __free_frozen_pages+0xc0d/0xd20 [ 583.834345][ C0] ? __free_slab+0x172/0x280 [ 583.838968][ C0] __slab_free+0x274/0x2c0 [ 583.843419][ C0] qlist_free_all+0x99/0x100 [ 583.848043][ C0] kasan_quarantine_reduce+0x148/0x160 [ 583.853544][ C0] __kasan_slab_alloc+0x22/0x80 [ 583.858429][ C0] __kmalloc_noprof+0x312/0x750 [ 583.863387][ C0] ? nft_trans_alloc+0x22/0x2a0 [ 583.868256][ C0] ? __kmalloc_noprof+0x1b4/0x750 [ 583.873326][ C0] nft_trans_alloc+0x22/0x2a0 [ 583.878026][ C0] nf_tables_newtable+0x118f/0x1940 [ 583.883259][ C0] nfnetlink_rcv+0x1288/0x28c0 [ 583.888344][ C0] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 583.893578][ C0] ? ref_tracker_free+0x689/0x830 [ 583.898718][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 583.903940][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 583.909768][ C0] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 583.916417][ C0] netlink_unicast+0x7bb/0x940 [ 583.921313][ C0] netlink_sendmsg+0x813/0xb40 [ 583.926208][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.931517][ C0] ? __se_sys_ioctl+0x47/0x170 [ 583.936301][ C0] ? do_syscall_64+0x174/0x580 [ 583.941071][ C0] ? aa_sock_msg_perm+0xf1/0x1b0 [ 583.946134][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 583.951470][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.956794][ C0] ____sys_sendmsg+0x9b9/0xa20 [ 583.961672][ C0] ? __might_fault+0xaf/0x130 [ 583.966635][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.971951][ C0] ? import_iovec+0x73/0xa0 [ 583.976476][ C0] ___sys_sendmsg+0x2a5/0x360 [ 583.981192][ C0] ? __lock_acquire+0x683/0x2cd0 [ 583.986149][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.991389][ C0] ? tomoyo_path_number_perm+0x219/0x5f0 [ 583.997071][ C0] ? __fget_files+0x2a/0x420 [ 584.001768][ C0] ? __fget_files+0x3a2/0x420 [ 584.006488][ C0] __x64_sys_sendmsg+0x1bd/0x2a0 [ 584.011453][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 584.016935][ C0] ? rcu_is_watching+0x15/0xb0 [ 584.021724][ C0] ? __pfx_kcov_ioctl+0x10/0x10 [ 584.026641][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.032740][ C0] do_syscall_64+0x174/0x580 [ 584.037354][ C0] ? trace_irq_disable+0x3b/0x140 [ 584.042408][ C0] ? clear_bhb_loop+0x40/0x90 [ 584.047107][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.053015][ C0] RIP: 0033:0x7f8a1799ce59 [ 584.057443][ C0] RSP: 002b:00007f8a1889c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 584.066653][ C0] RAX: ffffffffffffffda RBX: 00007f8a17c16090 RCX: 00007f8a1799ce59 [ 584.074651][ C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 584.082644][ C0] RBP: 00007f8a17a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 584.090627][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 584.098613][ C0] R13: 00007f8a17c16128 R14: 00007f8a17c16090 R15: 00007ffd1dd4caf8 [ 584.106618][ C0] [ 584.109675][ C0] rcu: rcu_preempt kthread starved for 8605 jiffies! g84473 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 584.120798][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 584.130779][ C0] rcu: RCU grace-period kthread stack dump: [ 584.136681][ C0] task:rcu_preempt state:R running task stack:26912 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 584.150197][ C0] Call Trace: [ 584.153493][ C0] [ 584.156436][ C0] __schedule+0x1840/0x57a0 [ 584.160960][ C0] ? __lock_acquire+0x683/0x2cd0 [ 584.165943][ C0] ? __pfx___schedule+0x10/0x10 [ 584.170824][ C0] ? schedule+0x90/0x360 [ 584.175089][ C0] schedule+0x164/0x360 [ 584.179268][ C0] schedule_timeout+0x152/0x2c0 [ 584.184142][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 584.189534][ C0] ? __pfx_process_timeout+0x10/0x10 [ 584.194852][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 584.200684][ C0] ? prepare_to_swait_event+0x322/0x350 [ 584.206258][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 584.211135][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 584.217307][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 584.222607][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 584.227832][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 584.233671][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 584.238290][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 584.243506][ C0] ? __kthread_parkme+0x71/0x1f0 [ 584.248469][ C0] ? __kthread_parkme+0x196/0x1f0 [ 584.253634][ C0] kthread+0x389/0x470 [ 584.257724][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 584.263032][ C0] ? __pfx_kthread+0x10/0x10 [ 584.267815][ C0] ret_from_fork+0x514/0xb70 [ 584.272424][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 584.277549][ C0] ? __switch_to+0xc89/0x1420 [ 584.282246][ C0] ? __pfx_kthread+0x10/0x10 [ 584.286855][ C0] ret_from_fork_asm+0x1a/0x30 [ 584.291649][ C0] [ 584.294672][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 584.301010][ C0] Sending NMI from CPU 0 to CPUs 1: [ 584.306226][ C1] NMI backtrace for cpu 1 [ 584.306243][ C1] CPU: 1 UID: 0 PID: 6299 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) [ 584.306261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 584.306270][ C1] Workqueue: krds_cp_wq#1/3 rds_connect_worker [ 584.306390][ C1] RIP: 0010:deref_stack_reg+0x196/0x220 [ 584.306412][ C1] Code: 46 49 8d 40 08 4c 39 e0 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 4c 89 c7 49 89 f7 e8 f2 06 00 00 49 89 c6 48 8b 5c 24 08 <48> 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 44 b6 b9 00 [ 584.306425][ C1] RSP: 0018:ffffc90000a071d8 EFLAGS: 00000202 [ 584.306439][ C1] RAX: ffffc90000a088b0 RBX: ffffc90000a07308 RCX: 0000000000000001 [ 584.306451][ C1] RDX: ffffc90000a07308 RSI: dffffc0000000000 RDI: ffffc90000a087b0 [ 584.306462][ C1] RBP: ffffc90000a01000 R08: ffffc90000a087b0 R09: 0000000000000000 [ 584.306473][ C1] R10: ffffc90000a07318 R11: fffff52000140e65 R12: 1ffff92000140e5a [ 584.306485][ C1] R13: 1ffff92000140e5b R14: ffffc90000a088b0 R15: dffffc0000000000 [ 584.306497][ C1] FS: 0000000000000000(0000) GS:ffff8881253b9000(0000) knlGS:0000000000000000 [ 584.306510][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 584.306521][ C1] CR2: 00007f2b0d468031 CR3: 000000003697a000 CR4: 00000000003526f0 [ 584.306536][ C1] Call Trace: [ 584.306542][ C1] [ 584.306553][ C1] unwind_next_frame+0x19bd/0x2550 [ 584.306574][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 584.306661][ C1] ? unwind_next_frame+0x8f/0x2550 [ 584.306680][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 584.306709][ C1] arch_stack_walk+0x11b/0x150 [ 584.306730][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 584.306749][ C1] stack_trace_save+0xa9/0x100 [ 584.306768][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 584.306794][ C1] kasan_save_track+0x3e/0x80 [ 584.306813][ C1] ? kasan_save_track+0x3e/0x80 [ 584.306831][ C1] ? kasan_save_free_info+0x40/0x50 [ 584.306846][ C1] ? __kasan_slab_free+0x5c/0x80 [ 584.306865][ C1] ? kmem_cache_free+0x182/0x650 [ 584.306885][ C1] ? skb_scrub_packet+0x2c8/0x3d0 [ 584.306904][ C1] ? __dev_forward_skb2+0x28c/0x730 [ 584.306924][ C1] ? veth_xmit+0x493/0xe60 [ 584.307001][ C1] ? dev_hard_start_xmit+0x2cd/0x830 [ 584.307015][ C1] ? __dev_queue_xmit+0x1435/0x37f0 [ 584.307030][ C1] ? br_dev_queue_push_xmit+0x370/0x4b0 [ 584.307107][ C1] ? NF_HOOK+0x64e/0x6e0 [ 584.307120][ C1] ? br_nf_post_routing+0xa53/0xee0 [ 584.307134][ C1] ? nf_hook_slow+0xc5/0x220 [ 584.307148][ C1] ? NF_HOOK+0x23e/0x3f0 [ 584.307167][ C1] ? br_forward_finish+0xd3/0x130 [ 584.307186][ C1] ? br_nf_forward_finish+0xa76/0xea0 [ 584.307201][ C1] ? NF_HOOK+0x64e/0x6e0 [ 584.307214][ C1] ? br_nf_forward_ip+0x7eb/0xa30 [ 584.307229][ C1] ? nf_hook_slow+0xc5/0x220 [ 584.307241][ C1] ? NF_HOOK+0x23e/0x3f0 [ 584.307260][ C1] ? __br_forward+0x397/0x540 [ 584.307281][ C1] ? br_flood+0x6aa/0xb50 [ 584.307300][ C1] ? br_handle_frame_finish+0x10f8/0x1930 [ 584.307316][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 584.307330][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 584.307362][ C1] ? handle_softirqs+0x225/0x840 [ 584.307379][ C1] ? skb_scrub_packet+0x2c8/0x3d0 [ 584.307398][ C1] kasan_save_free_info+0x40/0x50 [ 584.307415][ C1] __kasan_slab_free+0x5c/0x80 [ 584.307434][ C1] kmem_cache_free+0x182/0x650 [ 584.307453][ C1] ? __skb_ext_put+0x221/0x2f0 [ 584.307473][ C1] ? veth_xmit+0x66/0xe60 [ 584.307490][ C1] ? lock_acquire+0x106/0x350 [ 584.307508][ C1] skb_scrub_packet+0x2c8/0x3d0 [ 584.307529][ C1] __dev_forward_skb2+0x28c/0x730 [ 584.307547][ C1] ? __dev_forward_skb+0x12/0x30 [ 584.307566][ C1] ? veth_xmit+0x66/0xe60 [ 584.307584][ C1] veth_xmit+0x493/0xe60 [ 584.307603][ C1] ? veth_xmit+0x66/0xe60 [ 584.307626][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 584.307649][ C1] __dev_queue_xmit+0x1435/0x37f0 [ 584.307669][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 584.307720][ C1] ? __dev_queue_xmit+0x29b/0x37f0 [ 584.307735][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 584.307757][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 584.307774][ C1] ? ip6table_mangle_hook+0x2b8/0x730 [ 584.307794][ C1] ? nf_nat_ipv6_fn+0xf3/0x2f0 [ 584.307872][ C1] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 584.307894][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 584.307917][ C1] ? NF_HOOK+0xa2/0x6e0 [ 584.307932][ C1] NF_HOOK+0x64e/0x6e0 [ 584.307949][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 584.307964][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 584.307980][ C1] ? net_generic+0x1e/0x240 [ 584.307995][ C1] ? net_generic+0x1e/0x240 [ 584.308011][ C1] br_nf_post_routing+0xa53/0xee0 [ 584.308026][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 584.308043][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 584.308060][ C1] nf_hook_slow+0xc5/0x220 [ 584.308076][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.308098][ C1] NF_HOOK+0x23e/0x3f0 [ 584.308120][ C1] ? NF_HOOK+0xa2/0x3f0 [ 584.308140][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 584.308159][ C1] ? net_generic+0x1e/0x240 [ 584.308174][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.308198][ C1] ? net_generic+0x1e/0x240 [ 584.308214][ C1] br_forward_finish+0xd3/0x130 [ 584.308234][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 584.308257][ C1] br_nf_forward_finish+0xa76/0xea0 [ 584.308277][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 584.308294][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 584.308318][ C1] ? NF_HOOK+0xa2/0x6e0 [ 584.308332][ C1] ? NF_HOOK+0xa2/0x6e0 [ 584.308346][ C1] NF_HOOK+0x64e/0x6e0 [ 584.308363][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 584.308376][ C1] ? net_generic+0x1e/0x240 [ 584.308391][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 584.308408][ C1] ? net_generic+0x1e/0x240 [ 584.308422][ C1] ? net_generic+0x1e/0x240 [ 584.308438][ C1] br_nf_forward_ip+0x7eb/0xa30 [ 584.308453][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 584.308470][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 584.308486][ C1] nf_hook_slow+0xc5/0x220 [ 584.308501][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 584.308523][ C1] NF_HOOK+0x23e/0x3f0 [ 584.308545][ C1] ? NF_HOOK+0xa2/0x3f0 [ 584.308565][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 584.308587][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 584.308610][ C1] ? br_handle_vlan+0x5e/0x530 [ 584.308678][ C1] __br_forward+0x397/0x540 [ 584.308704][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 584.308727][ C1] br_flood+0x6aa/0xb50 [ 584.308756][ C1] br_handle_frame_finish+0x10f8/0x1930 [ 584.308778][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 584.308803][ C1] ? nf_hook_slow+0x176/0x220 [ 584.308819][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 584.308835][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 584.308855][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 584.308871][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 584.308888][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 584.308907][ C1] ? lock_acquire+0x106/0x350 [ 584.308925][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 584.308943][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 584.308962][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 584.308980][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 584.308996][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 584.309015][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 584.309032][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 584.309051][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 584.309066][ C1] br_handle_frame+0x1272/0x1510 [ 584.309086][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 584.309104][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 584.309125][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 584.309140][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 584.309222][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 584.309249][ C1] ? process_backlog+0x3c3/0x1860 [ 584.309271][ C1] ? process_backlog+0x3c3/0x1860 [ 584.309289][ C1] ? process_backlog+0x3c3/0x1860 [ 584.309309][ C1] process_backlog+0x706/0x1860 [ 584.309330][ C1] ? process_backlog+0x3c3/0x1860 [ 584.309355][ C1] __napi_poll+0xaa/0x330 [ 584.309374][ C1] net_rx_action+0x61d/0xf50 [ 584.309399][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 584.309431][ C1] handle_softirqs+0x225/0x840 [ 584.309448][ C1] ? do_softirq+0x76/0xd0 [ 584.309464][ C1] ? __inet6_bind+0x301/0xf30 [ 584.309516][ C1] do_softirq+0x76/0xd0 [ 584.309531][ C1] [ 584.309537][ C1] [ 584.309542][ C1] __local_bh_enable_ip+0xf8/0x130 [ 584.309557][ C1] __inet6_bind+0x301/0xf30 [ 584.309579][ C1] kernel_bind+0x13e/0x1c0 [ 584.309594][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 584.309615][ C1] ? __pfx_kernel_bind+0x10/0x10 [ 584.309638][ C1] ? rds_tcp_conn_path_connect+0x336/0x920 [ 584.309703][ C1] rds_tcp_conn_path_connect+0x53b/0x920 [ 584.309729][ C1] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 584.309749][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 584.309770][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 584.309786][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 584.309804][ C1] rds_connect_worker+0x1d8/0x290 [ 584.309822][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 584.309836][ C1] process_scheduled_works+0xa8e/0x14e0 [ 584.309865][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 584.309890][ C1] ? assign_work+0x3cf/0x5d0 [ 584.309913][ C1] worker_thread+0xa47/0xfb0 [ 584.309942][ C1] kthread+0x389/0x470 [ 584.309960][ C1] ? __pfx_worker_thread+0x10/0x10 [ 584.309974][ C1] ? __pfx_kthread+0x10/0x10 [ 584.309992][ C1] ret_from_fork+0x514/0xb70 [ 584.310009][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 584.310024][ C1] ? __switch_to+0xc89/0x1420 [ 584.310045][ C1] ? __pfx_kthread+0x10/0x10 [ 584.310063][ C1] ret_from_fork_asm+0x1a/0x30 [ 584.310088][ C1]