last executing test programs: 17m10.918454122s ago: executing program 3 (id=6943): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) 17m10.526258804s ago: executing program 3 (id=6948): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), r1) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) 17m10.248157094s ago: executing program 3 (id=6951): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000004c0)={@local, @random="6cf6566994c6", @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x2d, 0x28, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) 17m9.717770871s ago: executing program 3 (id=6956): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) 17m9.284708677s ago: executing program 3 (id=6961): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x14c, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4001, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@multicast1, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x81}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc, 0xff}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @coaddr={0x14, 0xe, @in=@broadcast}]}, 0x14c}}, 0x844) 17m8.890785307s ago: executing program 3 (id=6965): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 16m53.81885672s ago: executing program 32 (id=6965): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 11m29.726933712s ago: executing program 2 (id=8991): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 11m28.506050597s ago: executing program 2 (id=8999): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="3c0000001000030500000000fcffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400128009000100626f6e64000000000400028008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x23, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x800}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r3], 0x5c}}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0xbf}], {0x95, 0x0, 0x700}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11m26.356565117s ago: executing program 2 (id=9007): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 11m24.736092973s ago: executing program 2 (id=9012): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) 11m23.168985615s ago: executing program 2 (id=9017): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, r2, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3c}, 0x60) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000040)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 11m20.716531441s ago: executing program 2 (id=9025): unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 11m5.337582988s ago: executing program 33 (id=9025): unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) 8m14.909801638s ago: executing program 4 (id=9574): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x5, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29e}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x14, 0x6, 0x6, 0x4}, 0xd}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0xc8c0}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003004024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x20040000) 8m14.12902779s ago: executing program 4 (id=9576): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, 0x80ad}, 0x1c) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xce20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r6, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x1, @mcast1, 0x7}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) r11 = socket(0xa, 0x2, 0x0) bind$inet6(r11, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}}, 0x1c) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast2, 0x5}, 0x1c) 8m13.521056233s ago: executing program 4 (id=9578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x5}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000c000024c1020000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x4005) 8m12.546247084s ago: executing program 4 (id=9580): socket$netlink(0x10, 0x3, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffdfffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x81, 0xfffffffb, 0xb}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x28000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0xa}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200000, 0x1, 0x2, 0x9, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x100007, 0x8, 0x10, 0x2, 0x2, 0x8001, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xfffffff8, 0xd6, 0x4, 0xfffb, 0x40000007, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0xfffffffe, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x1000044, 0x8, 0x8, 0x39e1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x6, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x7, 0x8, 0x7, 0x1, 0x1, 0x1, 0x5, 0x3c, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0xffffff80, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x1, 0x40000f04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x50200523, 0xfffffffb, 0x1, 0x0, 0x3, 0x8, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x4, 0x400001, 0xd, 0x1ff, 0xfffff068, 0x3, 0x429, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x800009, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b1a, 0x9, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x9, 0x1ff, 0x5, 0x9b4, 0x4, 0x6, 0x0, 0x9, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7d, 0x7420, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x4, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x800, 0x1, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x0, 0x0, 0x8, 0xc9cd, 0x7f, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0xfffffffc, 0x8001, 0x6, 0x6, 0x4, 0x5, 0xd, 0x2, 0x2, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x7fff, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0x0, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x400, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x4, 0x6, 0xea6, 0x3, 0x5, 0x3, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0xf, 0x9, 0xffffffff, 0x5, 0x3, 0x1417, 0x82, 0x7f, 0x9, 0x1, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x2, 0xfffffffe, 0x3, 0xb, 0xfffffff7, 0x8, 0xf, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x5, 0x9, 0x6, 0x8000, 0x40000002, 0x1, 0xffffffff, 0x2, 0x5, 0x4, 0x2, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x43d, 0x1b8c, 0x14, 0x62, 0xc00, 0xa, 0x9, 0x3, 0x8, 0x10001, 0x295, 0x6, 0x9, 0x1, 0xb7e, 0x10001, 0x2, 0x7, 0x4, 0x1, 0x2, 0x103ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d5, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x4, 0x2, 0x6, 0x3, 0x270, 0x2, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xbe4, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x80000000, 0xd, 0x1, 0x9, 0xffe, 0x421, 0x3ff, 0x2, 0x2d, 0x7, 0x5, 0xfffffffc, 0xac, 0x7fff, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 8m11.385279534s ago: executing program 4 (id=9584): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvmsg(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000200)=""/133, 0x85}], 0x1}, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000e00)=[{&(0x7f0000000dc0)='?*', 0x2}], 0x1) recvfrom(r0, &(0x7f00000015c0)=""/4059, 0xfdb, 0x17, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 8m5.327386389s ago: executing program 4 (id=9598): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 7m49.577890716s ago: executing program 34 (id=9598): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008040) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 6m48.781803586s ago: executing program 1 (id=9779): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000180)="aabbcc", 0x3}], 0x1, 0x0, 0x6400}}, {{&(0x7f00000001c0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="aabbcc", 0x3}], 0x1}}], 0x2, 0x0) 6m48.382707274s ago: executing program 1 (id=9780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000a00)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x200040d0}, 0x10) 6m48.122460042s ago: executing program 1 (id=9781): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00'}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@empty, @in=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0xd, 0x1, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffc, 0x200}}}, 0xb8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="090325bd7000fcdbdf250800000008000300", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r6, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4090}, 0x24000890) 6m42.841573328s ago: executing program 1 (id=9784): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x3f, @mcast1, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="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", 0x13b}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000008c0)="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", 0x3c3}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 6m41.879016808s ago: executing program 1 (id=9786): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x3}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000016c3e693000000000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000200"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x24, &(0x7f00000007c0)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8fd}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8000002}}, @ldst={0x2, 0x3, 0x6, 0x8, 0x9, 0x2, 0x10}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xcd}, @cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffe}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @map_val={0x18, 0x1, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x315}], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000100001000000000000000033e3297882b128708419b01092000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a"], 0xcc}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$kcm(0x23, 0x4, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200030300004e224e23b62a919030a885be04"], 0x4c}, 0x1, 0x0, 0x0, 0x20040849}, 0x8004) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) listen(r2, 0x800) accept4(r2, 0x0, 0x0, 0x80000) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x0, 0x0, 0x2}}]}}]}, 0x44}}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_netfilter(0x10, 0x3, 0xc) write$tun(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff000000"], 0x78) r8 = socket$kcm(0x10, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@fragment={0x33, 0x0, 0x5, 0x0, 0x0, 0x12, 0x66}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000280)="5c00000013006bcc9e3be35c6e17aa35066b876c3d0000007ea6e763160af36504001ac0080010000500e7daeb660000ef64bc76bd7b6278c206d83f38d833aa516adc24eab556a705251e618294ff0051f60a9553adac000e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) 6m37.828683095s ago: executing program 1 (id=9794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6, 0x0, 0x0, 0x2000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) unshare(0x46000480) 6m22.253678136s ago: executing program 35 (id=9794): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x6, 0x0, 0x0, 0x2000}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xffffffffffffffff}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x88}}, 0x0) unshare(0x46000480) 12.66859752s ago: executing program 8 (id=11532): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0xffff, @broadcast}, {0x0, @local}, 0x38, {0x2, 0x0, @rand_addr=0x64010101}, 'veth0\x00'}) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x7, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f00000009c0)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x3}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000540)=ANY=[@ANYRESHEX=r2, @ANYRES16=r1, @ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f0000000080)={0x1, 0x100000000, 0xa, 0xbede, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000580)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d000014000000f0ffffff0000000005000600000000000a0080ff00000000fc0100000000000000ffffffff000000000000000000000005000500000000000a000000000000000000000000000000000000000000080000000000000000000800120002000200000000000000000030002b0002"], 0xa0}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000003c0), 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000af000000180100002020702500000000002020207b1af8ff00000000dba100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.130972992s ago: executing program 8 (id=11536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0x2c}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef0675c10631d0984e7e6db7f90c5b959a5231eb5d6615538d482", 0x2c}], 0x2) r8 = socket(0xa, 0x3, 0x87) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="05090000000000000000240000000e0001006e6574646576733eaef0c98f972998006e657464657673696d3000000800030020000000e15f8a433a0d6398fbc01ea04542baf5ba6370addb84cf76bb87e0c1d9b96ad8c6aba24df8cb3055d91cc69ac75c898a4f89f49dcbaf740d2e0770366c184ccf7c27e29afd029ceb14f51424deb831b67b4f1001a5ec054eb3949d51f03493ea500a198b"], 0x3c}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x18, r10}) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x8936, &(0x7f00000015c0)) sendmsg$inet_sctp(r8, &(0x7f0000001780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x7, @local, 0xb}, 0x1c, &(0x7f00000016c0)=[{&(0x7f00000000c0)="b5f257e01c8272d0563d51e75911c49673ff9afec25fa05a89a8cfc61d29bb9fc48a5b621c89af5a586fe56eff7e4304bb9ffdfe7764c17cfc7911eeac007df3705452", 0x43}, {&(0x7f0000000240)="628897eb4508a4283e7f77eee2094294ddf865f85ff5254c8cf06c4448e3d4f4823e515726377d8528ab51a29d3ee19c3430da082ec956951b24512306a4b424fb39cb45f22652489652321ae127efeb799762649b175742ea54728b674f749d2a72bf5ea5faa68439efbdfffae8e0d30bfd61251f4fcf4108896bc6721b9ea55c8b8ec39bbea0e1b5711c0fce8c931bfed62e64fbeace84aad1ef9ac2885edcdfc10566e37d7da1f1bd9cce76f333881e042adab3b307478a7cdbeda76a88cb60cefe80ac17741e57c1fe717c62c3686744f3fe4e636ab7171f764fb1fccbed25b07cbabc8bbdb32d1d4a28", 0xec}, {&(0x7f0000000340)="aec1cfcdbd5acf4fd138f16e21325fa4ea9be786f1920ac14846742e1bccc6a32d76ccb8f03a0e5257a589376b9bd145031b80f27e2b226c6c44068bba0904bf46db949d11334af7780376e3b95a0d2b4d", 0x51}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="ce86b3934d2625cabd9d1cc845fce0e090a066cfe8e8fb304cd44bbdbed4556207e6d08814dd669df9349f4cf8f22f064fa4cc4bdf41e9910515e8a74c1e755f67bc8878fd07e1ba8c5d0ddb96f6c8ed7732ed09f4674cb4466bef8a13bd3e988511e4c9737466747d272bfa2b5ccf1834dcb0030aa29ba54fc472af561b3bbc07d2bd5e99b517c3596f7468a9d30ec1ddbf50217496d2d57e3d9e1adec572ef76c35a0742a2bf6322fb", 0xaa}, {&(0x7f0000001580)="e654893fa85ed117dbf76b9415fb5c3df6b20b6be96ade548f73", 0x1a}, {&(0x7f00000017c0)="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", 0x12f}], 0x7, &(0x7f0000001740)=[@authinfo={0x18, 0x84, 0x6, {0x8}}, @authinfo={0x18}], 0x30}, 0x40040) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x300, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 9.425593306s ago: executing program 5 (id=11553): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x5, 0x4, 0x7) sendto$x25(r0, &(0x7f0000000100)="64e5f6cd39d8342ed4081bb398316ec9ba1cd256a062f3292221c6495573adbd42013827a8bf0353e8ea741366b206a49a22bd222317eb0d65e96a32db4ab780b1103288ed3f075054e52a28348703482349e7baa47eb6c1d1e471e17831b0c4c66c123f560f764914367e627d831793617cd771dbeb50d9a3b5de741aebe56266d9b1a4c26033fec622fc40d3cd318f3e31f35e9e19a3fe5a5b302440ef7af4c963609e2de4b9cb4396f97a2f217e3dd1f56e27d37cc5049319aa5b5565ff70c61209c685cbafdc37ba075350e50e641e2a1a903469fb600b3ea5867ca6d34b76487a9061255ce22354ec131c5d941431a3666e70", 0xf5, 0x8004, &(0x7f0000000200)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000009c0)=ANY=[@ANYBLOB="800000000802110000010802110000000802110000000000000000000000000000000c0c0006010101010101010882848b9f0c1218240406000000000003000081760600042a000800ddf6042716ad41bb4488a16c25d003b15beb263d864bffffff7f0000000096435bbaeddd993803000000000000002aa60af9f8c7eb2d4013da73d2aa81dd655c2e24a52e7d65dc2c9be5ed04510ada22c25d53ad0eea4c0a085872de7d28ad29bfee084267e98c5cd97a295a2c04e6b96bf4be35439578e2bf7f2f7052b124aa9df17c088bc1785241aa5d43dc6d11bbc8f8a30038af051614ec2d64c656560afbcc5bbd635c30bb21472206db85542c000000000000000214b3277cfc83da413106ec7e97736dc939608b1ab57da9f7351185b82865de4b9ee6fdeb5e7d52ef6ba49588eaee6c9174e1b1892d307ed10000000000000000ddd473de39a50905ab4ed74ed94fba4eab24822bc7fd5865a07aa64e4bd018c6c5bd2821f652a57ec241ac9764aef420b2ebdfb598ad91b97c64912529e57e0bb5f01c16611a95c8f46fb6b761282fc6db568f4bfbfdc3f9c7a0b728eca090d9644a8a2975709c45c47b9998d940deaba840e96fd0f2f16c0222c1643585a649deffe859fc4e4758a28608f8546610f9991243422ddd592414d6e2bd7b818b8233fbc9c1397143887dc4cd5dc7a221a30073e6ffeac1d3ce7e3386e3ecc061d6cb7d1f5a60f6cd469b79bb2b6c94e2fcd9da60776e86ddd6b5b234f132984867c6f0b75652bf805023876ec4e76159fcfdf82e3b7886e06e32ffc384e87b868c45ae80b5ba3b523ced8f8364c3adf65aea553a8e3059ed9c294f1ebcd20f5aedb7b9d96be679e8053eeaaf32dc93b5fe832ebb319825abd0aaa5eb038064e87eb130923a97839bcad9df661871ecaa48a5b9bf0466ef4d9aed1266f0388cac43feeeb6a7e5187bd1705a2c26cc876c0202e5e777d41485213b2605144dac59e0bcf7b9cefb5532033d6a0652f6c6658ea34923fa7109f261fd718341b7ccf7bf58c022d8afaf2762000000000000ddfd650c29768115d837e9647ef6ad81d14cf5c92c405cb0af90167f4fde0ee409e6bdd0486ff5a624112600d7bb0f1ef6ef51457671280864589bd089c46f52b22fa8946add93fff4807fb059fcfd36a734518d731cd3f956198fe448e2ca3667bd01cfc2d7c017d89119ad57c3dec317367a6aedb5acd44ca7f57d38b2c3a6ce5b80f239f7012e66ae351fc0b795bc1addcfcca12f848429229a109099084fd7ea42a474eb21b012a54f8669f64cbea0bd7bf156977c089954203ef9bf703d2eee91f24cbea53d0135816eabd6a3f367add2a48fc9199a6693dc97870064d6d4d396cecaf0ea05e6dc38dab1454f1a9f849b1beb361b45047252c14c5f82dd29463b7e6caee74460b3b214fab28beea039abd1a50f19ee1816940dbfdf1d52c33d61cc4fffaee6343600"/1063], 0x432) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) close(r1) 3.757406454s ago: executing program 7 (id=11554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x20, 0x1, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0xa0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000020601080000070000000500010007000000000000000000"], 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x17b29}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x404c8c1) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, 0x0, &(0x7f0000000040)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DISASSOCIATE(r5, &(0x7f0000000900)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000680)={0x208, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0xd4, 0x2a, [@supported_rates={0x1, 0x7, [{0x48, 0x1}, {0x60, 0x1}, {0x24}, {0x5}, {0x6}, {0x36, 0x1}, {0x4, 0x1}]}, @gcr_ga={0xbd, 0x6, @broadcast}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @random={0x4, 0xb5, "bad7c5a5f240fc78c8e550bf0f4033e7193b14bef873908a5de621f90de2ba1525624985284e16eca86dea462b01c413f9309bb102f13478289aa15934c5f26658479d581e928638a0e62c38cd788a98c9d27d234e0cae4dd11398054ad839a486c25dff78efde480c4e9c5c07b15dd3ea2be4fa80d87c781d4602572e0e899fbfd13ab67e2c34186c6ed347d712da00d4a09ab1983bd13371401eebc3b4655fb2e39217203b5cdb2aeb1d487fb19b4d4236caa3de"}, @channel_switch={0x25, 0x3, {0x0, 0x8, 0xc}}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x614}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0xef, 0x2a, [@mesh_id={0x72, 0x6}, @erp={0x2a, 0x1, {0x1, 0x1}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x0, 0x29, 0x8}}, @gcr_ga={0xbd, 0x6}, @prep={0x83, 0x1f, {{}, 0x10, 0x8, @device_b, 0x53, @void, 0x80000000, 0x200, @broadcast, 0xcc2}}, @ibss={0x6, 0x2, 0x8}, @perr={0x84, 0x94, {0xf, 0x8, [{{0x0, 0x1}, @device_b, 0x100, @value=@device_b, 0x1}, {{}, @device_a, 0x1000, @void, 0x34}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0xb}, {{0x0, 0x1}, @broadcast, 0x100, @value, 0x2}, {{0x0, 0x1}, @device_b, 0x9, @value=@device_b, 0x29}, {{0x0, 0x1}, @device_a, 0xffffffff, @value=@device_b, 0x18}, {{0x0, 0x1}, @broadcast, 0x5148, @value=@device_b, 0x21}, {{0x0, 0x1}, @device_a, 0x8, @value, 0xa}]}}, @link_id={0x65, 0x12, {@from_mac, @device_b}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4048020}, 0x120408c0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="ffff2abd7000fcdbdf2503"], 0x14}, 0x1, 0x0, 0x0, 0x400c9}, 0x20001800) 3.701259632s ago: executing program 0 (id=11555): socketpair(0x6, 0x1, 0x1, &(0x7f0000000000)) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="300000001c000104000000000000000002000000", @ANYRES32, @ANYBLOB="000014000a000100"], 0x30}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000085000000a000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.701025983s ago: executing program 5 (id=11556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 3.700465235s ago: executing program 6 (id=11557): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, @fallback=0x38, 0x0, 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x1e, 0x5, 0x0) getsockname$packet(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x104}}, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x8, 0x8, 0x0, 0x0, 0x2, 0x5775d27c, 0x158, 0x20100}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c00040006"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 3.554079338s ago: executing program 8 (id=11558): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000a65a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) 3.266955878s ago: executing program 0 (id=11559): r0 = socket(0x2d, 0x2, 0x0) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000700)=@generic={0x2d, "00000100000008010800000000000000000000000000000000000000000000000000004000"}, 0x80) 3.224403379s ago: executing program 5 (id=11560): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="61128c00000000006113850000000000bf20000000000000070000000f0000002d030100000000009500ffb1000000006926000000000000bf67000000000000150002000fff5d004507000007000000d60600000ee60000bf1600000000000040700000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070400000400f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c043a7bc4b29d2dc480dd7a0d981422b32d93bad720100010000000000b39d0af449deaa27ea949e8f9000d885dfea27834aa7eb8d33ac04060630e78a30fc835e29eb532ba8546fc020c196738b5f32b09f95f5d5b196b9ffc02f952ac53e817671d1000000008ba8583aa4c77097f1c75df9bdd8288fd2f8743924cd6dd4ed457183edc74ca79c79a3da0cea39dbacd0e4b608cece26817f0f53dde0d43388e8f92d0bfdd4b427ee5b708aa2685c735f840e055a163e38a276b7fd16492587edaec8bc43f312c7ddfa59a53c9e772832f527c0ae9afcf582413f6f8c442ce39039a64965facb4340f2249cc60a8dec5b8a9ac6d60e36f57dbe1664decf85b7cae19a1d0d7bce02902284aa9041366eed09c3baafb2a4c14a373f8ffdfe107d401b7b93866f8aadff4df0f226f411d43d579541275f0bacd2dc24faf2d4d992d9f8031a422f2a30cf35e9d00644acc1ff674781281c6b93447312cc93c738b6a83a2e83225af295e0776d033557913ac9096ee1e119a06a38fcd918a18f4c01f60692a1684c55086bec71e819f8b345a5f80d3e5bc7e6854e2ea7a035b975b96e9459382fafc5f6fd106fbbd3b014b5a546f523afd9c9bed9212d7bb745123259e8f46b413e633db1668ad038725e3e01bd6707aee08b267dcd54b961c4d56b608d903ae06cc23eb1d79b3384512f2c424739aba4297063005376b6b900f3416835151fb61f08dfb4ad3732fc0f5a05339608b003a80cce6b032f13b5f2890ec29130022ff6fa874ce885e91c8e4df772286210e5aca1a64dfb12f0a2c1e992aae6afb3514afd648230650e532e8ec540a25b65657a7259922602ffdd3375a4b0f864db09907c7b8e97abb824c1f3167cff71e96682f37f37b156833d729d7369af37345fb97f3ac3e9c01328a3d7f36ae6d48c94bcf630fe6e94c5a080fe3ccde9ff72f98bd0454203a5cbe34ab7df76e54ec26942835ca6b9e0db2b24d19de496bf22d5cac91b6deb25b5622ddd7bddad97d4850735df6fff37098b06d660e5d73efdce87be427bc79e67ad31d7768d65f811ed84f29db15b8456dc951dcb8be1da330fd0c1371dbbfcedaff57e29b95b4277b46aa41eab05a756d8556d4c14b570770bc0a3c9cdd688e3e583ee2284fc32c6eed47d70c6c22c8226ae8d4144fac10d2ca22673cbe55ee11b68bf18f4811cf943b9a7f30f07be34ae41ae192b1222ccc12000966d63ee0f75e73c0ae0cd660cc27583f3a7c81f652948c92569f0ca58d4c42e91000000000000000000000000d8e5c9a920c1418f62bf914bcac98ad06c42b86346d4cc4658abfdf3475a579337d1cf5529a14b64f14c478c0e390628c4702c3daf07d681e412c91484a6bc790ecdb597a461d9ac4d69a005f3fdf015d622c027c0e0181631a9f6d56361187e2076a14caf88c82a37248ff7b26d20a1ff7c1f1a31fe22ed64360c29124bf041f978042f5a23624447ee4d1612268c80e5c3b88a2a22264ad8012750997733121fcbaa2a094ef8ab27579d4daa10d9b42b9f75ef42df0c"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001b40)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/20, 0x14, 0x0, &(0x7f0000000b40)=""/4096, 0x1000}, &(0x7f0000001b80)=0x40) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, 0x0, 0x0) pipe(0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08800000084400001c0012800e000100697036657273fd869508ecdfd3f0afcf70616e0000000800", @ANYRES32=r2, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.223369499s ago: executing program 6 (id=11561): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) 3.158042958s ago: executing program 8 (id=11562): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x10, "000034dc0000000000000040034000dc"}}}]}, 0x48}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0a41, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f00000001c0)={r7, @in6={{0xa, 0x4e20, 0xffffffff, @empty, 0xffffffff}}, 0x0, 0x1}, 0x90) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f00000007c0)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x7, 0x0, {0x6, 0x6, 0x0, 0x8, 0x0, 0x1}, 0x800, 0x0, 0x80}}, @void, @void, [{0xdd, 0x6, 'Po\x00\x00\x00\x00'}, {0xdd, 0x6, "506f9a000000"}]}, 0x62) nanosleep(&(0x7f0000000740), &(0x7f00000003c0)) syz_80211_inject_frame(&(0x7f0000000400)=@device_b, &(0x7f0000000440)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000480)={0x0, 0x2faf080}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000500)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, [{0xdd, 0x6, 'Po\x00\x00\x00\x00'}, {0xdd, 0x6, "506f9a000000"}]}, 0x38) nanosleep(&(0x7f0000000580)={0x0, 0x2faf080}, &(0x7f00000005c0)) syz_80211_inject_frame(&(0x7f0000000600)=@device_b, &(0x7f0000000640)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, [{0xdd, 0x6, 'Po\x00\x00\x00\x00'}, {0xdd, 0x6, "506f9a000000"}]}, 0x46) nanosleep(&(0x7f00000006c0)={0x0, 0x2faf080}, &(0x7f0000000700)) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket(0x40000000015, 0x5, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd027c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000016000500000000000004015c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) 2.983857797s ago: executing program 6 (id=11563): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x0, 0x4}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000000280)="9eb8a2c0e241fb0402ac67d48d04ecbc724648d79b443d283855fdba1e1dc6283591a8a07eb1436788b6b641ed5ea90be62fc7499c9b017d2e73973395411b7efb244a226ba0ae7657c57101711c5aa138abd03dec1e0899824e678aced03a92fec128f69d27d84ee2ff2e4ad3a3db73f406c4aec4ba5a715bf5abce312346bb7d7345e8df1fc10fa733c98030cb193341700961aa2ccb9f0f029190a1d34386c53e7017cf0fe0275d2d6f9531b12f12e29b903ffd774272360efe35269a1835d8f3e07382952f4fd47c9025f538c0bf576243026ed3d16af515d4e31055e765380602c4b42cb4e178350c5f387bdf01ff822a6a26b4cbd04523921adb0bddfd4c657e626ffa46f0a565ee807b56f98d90a48858679c0e5cada93389b479e4547690951c952e877d4139aaddd84d8b01dd791eff7b2c20cad352b1", 0x13b}, {&(0x7f0000000800)="6b783b61028f911c037f84742d3d4b6cd3bc27cfd8cf59ee91737b552b62a5f87392076473bc389f705b45883745d6681ad6de82009143e3eec6e2e3f711b3f10aa3d802f054748459a40e68f331d90b30b62f014d01b57f1cf6d6e9b5cdb0f97bb825df405d118dc7e9ef7acd01733dd59ea1ec012bb657a24055106f36e7ddff98cfb4951e1dd166d062838bc49356383883778cbbaf9e010b4adb98889254740ac86a3c330836b8cc6764cf", 0xad}, {&(0x7f00000008c0)="8f3ed95d228b9e34a9e6eafe5af3f99ddc99dfd8e2963b66fa3e111bf794324cc46c271cc8c5479a76ac841ff8be3bc733253912173d85c4cf709b2d8f4558ee3f749c4d745eb4fd103fcde65d5ad7fb88bd06fddedec3ae49a1dca8292c83cb3eba8012967a4c908ac110fdf05b1be1f8a5b4265f01616efcc780477d2e743b2484755fc98204b7fc5107b02247cc4372a16ae01ada4872f2eeee553206331f799384b79bdeba9f0163def3e7a67eea90efac667ee5c6a6364906afbe9dcedbf9986423c5b0b348b030daa32395517d6ce637b73d12ef2b18efaae439d6e173e4e368b927a1a251d77676814ea3ccc1dd0b35e4cb1f679b95e05b19969d198230751337b6050c001e598e97037d55ef45d45cd0475e4716dfc62354530a0c80b577c9d7ae0fc0eb06eb1b04bcab479efe05ed29a3c6373db00dca22450fbe2eecc01f284009e4c99d6eb7d9a8c761a304acf9fc04d95473ff2aebeaed25aa2e53dd7b28172d81b693e1483eb9a0406cddaebc6bf595c7c3125ae81a090814af948cf2af2d3fd257f392448ae901372fa10a96d8cf2298efb140d2809dae819019c96a418f2510df2d2686927c9a677b747ca147e279205c5234b6c8e012ff619e5e7350e7c01f4ed97f2ff86f6187e49a0f68ebafee8d6d043e432a9cc7b3427046e575520f1004196b44d972e929bd793113bf4f56c239dd051628e1a636f18826984fdd4b0c9e80780fc4ff92678c497e7ec4b11a9da6a8d301c996ddd5bf8b46644e2eca4d653c79a17759d42e9efd1bb12cdbd2c2959271cbdebd08ba6c9d269ebe112ffd985eb39807c09e2ffdc8a774b4c275666289d402d93eed25f1e1dd091b87a30efe5aea2946dde7c286c832b55dbf53947cf4a4fc3fd3ecec04d804cb84303c2f3d709679e0d945cf47d5ce9f09ecb203a1c78fbfd4d042f077a33d580a36841fa92f7e2630da74a90a4e20c7492052d35a810acfafbfff65a636f48f38c12e09aa1e6332a724fbf4f7075385d351492e1b165ac6ac27e49dab68106f316db4a58abe0cef6671690a26e4db2700509a8102f308c176e0a509a351fee8ae9e0af5c49dbbf9fdcf6091c6e0358d1735a4f243e78728cd62cd6e6124aea2447564624dd78276255fe75a41a5c2fea2611ef56655e65ddb4e3b48138166d5d9cd7d249a0c09f2198289ca9877d20a69de79cb9278b9cd2fa4d9215f72dbdf2ab9cf7685bc176b065793dd6ac63eae507acfbaedc57d3e7c50ea6877fe910a646d803e9a670fa8b9ea1b8beb0ac52d6e4a6879df4a3bb9beef9774bc08f5f6df12d17ca10f7f68689b32e5f4239c3a5de48bf81fd41a68145584a2fce7ca49", 0x3c3}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote, 0xfe80}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)='S\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.9254181s ago: executing program 0 (id=11564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000180), 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, &(0x7f0000000040)={@broadcast, @multicast1, 0x1, "0d5011f02b7fab96e0aa834d3a9e7cfc12178ac0ab1e6227c2b6ddaa5effda90", 0x6, 0xf, 0xfffffffe, 0x1}, 0x3c) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000a80)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a8, 0x0, 0x148, 0x1e0, 0x278, 0x310, 0xb0, 0x148, 0x1e0, 0x278, 0x310, 0x6, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x408) syz_emit_ethernet(0x36, &(0x7f0000000000)={@empty, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x28, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x40, 0x0, 0xe7}}}}}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@broadcast, @multicast1, 0x0, "12ceaac82ab7d944e84b6fbd6178697e3b10c9b81bede26c85ee73daab4158e8", 0x2, 0x6, 0x4, 0x4}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000100)=0xe, 0x4) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x68, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0xfffffc00, @media='ib\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x840}, 0x800) 2.726079047s ago: executing program 6 (id=11565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000340)={@val={0x0, 0x9100}, @void, @eth={@local, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x22}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x5, 0x14, 0x65, 0x0, 0x0, 0x89, 0x0, @broadcast, @empty=0x600}}}}}}, 0x2a) 2.688705374s ago: executing program 7 (id=11566): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async, rerun: 64) listen(r2, 0xffffffff) (async, rerun: 64) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000180)=0x8) r4 = socket$rxrpc(0x21, 0x2, 0x2) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008005}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) (async) bind$rxrpc(r4, &(0x7f0000000040)=@in4={0x21, 0x4, 0x2, 0x10, {0x2d, 0x4e21, @broadcast}}, 0x24) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000540001000000000000c4000007008209", @ANYRES32=r0, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00000000e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x8051}, 0x0) (async, rerun: 32) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.4524313s ago: executing program 5 (id=11567): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x3, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0x0, 0xffff}}}, 0x86}}, 0x400c0) pselect6(0x71, 0x0, &(0x7f0000000040)={0x2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140), 0x8}) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000010000104fcffffff0000000000000000", @ANYRES32=r2, @ANYBLOB="0025000200c9331bc1384aaf6387f3000000180012800b000100697036746e6c04000800028004001300"], 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x6, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x1, 0x3, 0x0, 0xffffffff}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) 2.230195939s ago: executing program 0 (id=11568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 1.981214761s ago: executing program 7 (id=11569): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x3000000}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.737704429s ago: executing program 0 (id=11570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x80000001}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f00000000c0)={0xffffffff, 0xfffffffd}, 0x4) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r7 = socket(0x10, 0x803, 0x2) (rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4e00}, 0x0) (async, rerun: 64) sendmsg$nl_route(r5, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_newneigh={0x4c, 0x1c, 0x800, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r8, 0x0, 0x3b, 0x8}, [@NDA_FDB_EXT_ATTRS={0x18, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x3}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_NH_ID={0x8, 0xd, 0x4}, @NDA_PORT={0x6, 0x6, 0x4e21}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf25170000004800068008000600000000003c0004"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) syz_genetlink_get_family_id$nl80211(0x0, r1) 1.560384775s ago: executing program 5 (id=11571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000000000000000001000000000000004400050000000000000000000000000000000001000000003c00000002000000e0000002000000000000000000000000060000000403"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuacct.stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b28, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000100)=r2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xfe80000000000000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)='\x00\x00', 0x2}], 0x1, 0x0, 0x0, 0x900}, 0x4000870) 1.560289749s ago: executing program 7 (id=11572): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="240000005aa61f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) 1.543555202s ago: executing program 6 (id=11573): r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f0000000500)=0x8) 1.491788533s ago: executing program 8 (id=11574): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)=ANY=[], 0x20) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1002}) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000000)=0x3) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000380)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r6, 0x4}, &(0x7f0000000180)=0x8) r7 = socket(0x27, 0x4, 0x0) r8 = socket$kcm(0x29, 0x2, 0x0) close(r8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000002700fbf325af7000f5dbdf2510000000"], 0x14}}, 0x4000080) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) accept4(r9, &(0x7f00000001c0)=@pppoe, &(0x7f0000000240)=0x80, 0x80000) sendmsg$inet(r10, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @multicast2}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r8, 0x1, 0xd, &(0x7f00000000c0), 0x1a) close(r8) sendmsg$NFNL_MSG_COMPAT_GET(r7, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x4}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000085}, 0x4000) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) r11 = socket(0x40000000015, 0x5, 0x0) bind$inet(r11, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.028458174s ago: executing program 7 (id=11575): write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff80}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffe}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000804) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000), 0x4) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan4\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x134, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0x70, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10000}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7fffffff}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffffffffff80}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x3}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x80, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_ID={0x68, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xfffffffffffffffe}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000804) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400080004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) (async) 990.751107ms ago: executing program 5 (id=11576): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000e2ee8e724de420b000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r1, 0x4, r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609a89c9edd34187123b5adceb3968557f4e107445a53c0815c9636d00f896d1e8cd8de77a79f1e3e2c53ddf1bb9f8ac5cb5257ff4e8b960026bc4244c4b09179a97dffdf02563e23546d3e78f944e7e2fee2a00b6313048fe354223318badb21d8c086669c5f7772f4a6d90d0997babdf79f7d557e055b3e6f2e4f41ec06a39a57b9ccc00bbca22395e41f9e9652af665f0e1603fb85d4799d54d44c706ff8df9bb805b182a1260b5936ae44f649b5e2fdca240984dcd0033ec28aeaaa686608", 0xc1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, 0x0, &(0x7f00000000c0)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'nicvf0\x00', 0x800}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000480)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0x108, 0x2c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@fragment={0x3a}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x401, 0x0, 0x1, @private2, @loopback, [@srh={0x62, 0x6, 0x4, 0x3, 0x10, 0x8, 0x5, [@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, @loopback]}, @srh={0x3b, 0x2, 0x4, 0x1, 0x1, 0x50, 0xd6d8, [@dev={0xfe, 0x80, '\x00', 0x16}]}], "ab00204cf3b5df7b000000000000000000000027f3075f84cad8be538e28acd24184307d343e5ab1044a798cd61b0210f9ba068bc128235e47de0a4044027444dbfa69f591578171c6ef1441997a89878970ab74bd4396e0d599d725fae76f74447a5b278e1e9465b46d8799331429de1d5c66e585dfb7cd62166049037eb70c"}}}}}}, 0x13e) 977.677433ms ago: executing program 6 (id=11577): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$alg(0x26, 0x5, 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r4, @ANYBLOB="71e79fd811000000140012800c0001006d6163767461700014000380080001"], 0x3c}}, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r7 = socket$inet(0xa, 0x2, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x63, 0x0, &(0x7f00000001c0)) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r10, &(0x7f00000001c0), 0x12) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000030900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002400000000008000140000000059900030076657468315f6d6163767461700000000900010073797a31000000000c000000050a01020000000000000000010020000c00024000230000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xf0}}, 0x4000040) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) r11 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r11, 0x8917, 0x0) 548.566201ms ago: executing program 7 (id=11578): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000006c0)={0x48, r2, 0x1, 0x70bd2c, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x48}}, 0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000540)={@random="fb57e76be621", @multicast, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x3, 0x2, 0xf}}}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r3) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400070200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000005, 0x42073, 0xffffffffffffffff, 0x4c90000) 85.969322ms ago: executing program 0 (id=11579): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@getnexthop={0x18, 0x76, 0xb0d, 0x4004, 0x25dfdbff, {0x3}}, 0x18}, 0x1, 0xec0}, 0x0) 0s ago: executing program 8 (id=11580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000090003007379"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x50}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) kernel console output (not intermixed with test programs): 590055][T31188] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10341'. [ 1408.662409][T31190] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1408.693817][T31188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.706958][T31188] bond7: (slave bond0): Enslaving as an active interface with a down link [ 1408.971844][T31204] FAULT_INJECTION: forcing a failure. [ 1408.971844][T31204] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.971880][T31204] CPU: 0 UID: 0 PID: 31204 Comm: syz.0.10344 Not tainted syzkaller #0 PREEMPT(full) [ 1408.971906][T31204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1408.971917][T31204] Call Trace: [ 1408.971935][T31204] [ 1408.971944][T31204] dump_stack_lvl+0xe8/0x150 [ 1408.971978][T31204] should_fail_ex+0x410/0x560 [ 1408.972007][T31204] should_failslab+0xa8/0x100 [ 1408.972033][T31204] __kvmalloc_node_noprof+0x176/0x820 [ 1408.972057][T31204] ? __pfx_nft_select_set_ops+0x10/0x10 [ 1408.972077][T31204] ? nla_strcmp+0xf8/0x130 [ 1408.972103][T31204] ? nf_tables_newset+0x134a/0x2570 [ 1408.972128][T31204] ? nf_tables_newset+0x134a/0x2570 [ 1408.972154][T31204] ? nft_set_lookup+0x128/0x150 [ 1408.972186][T31204] nf_tables_newset+0x134a/0x2570 [ 1408.972226][T31204] ? __pfx_nf_tables_newset+0x10/0x10 [ 1408.972257][T31204] ? lock_acquire+0x115/0x350 [ 1408.972293][T31204] ? __nla_parse+0x40/0x60 [ 1408.972322][T31204] nfnetlink_rcv+0x1288/0x28c0 [ 1408.972391][T31204] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1408.972437][T31204] ? ref_tracker_free+0x689/0x830 [ 1408.972495][T31204] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1408.972521][T31204] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 1408.972577][T31204] netlink_unicast+0x7bd/0x940 [ 1408.972619][T31204] netlink_sendmsg+0x813/0xb40 [ 1408.972651][T31204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.972681][T31204] ? apparmor_socket_sendmsg+0x98/0x360 [ 1408.972706][T31204] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1408.972724][T31204] sock_sendmsg_nosec+0x13a/0x180 [ 1408.972749][T31204] ____sys_sendmsg+0x54e/0x850 [ 1408.972782][T31204] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1408.972820][T31204] ? import_iovec+0x73/0xa0 [ 1408.972849][T31204] ___sys_sendmsg+0x2a5/0x360 [ 1408.972875][T31204] ? __lock_acquire+0x747/0x2de0 [ 1408.972901][T31204] ? __pfx____sys_sendmsg+0x10/0x10 [ 1408.972980][T31204] ? __fget_files+0x2a/0x420 [ 1408.973006][T31204] ? __fget_files+0x3a2/0x420 [ 1408.973046][T31204] __x64_sys_sendmsg+0x1b1/0x290 [ 1408.973077][T31204] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1408.973131][T31204] do_syscall_64+0x166/0x520 [ 1408.973154][T31204] ? trace_irq_disable+0x3b/0x140 [ 1408.973173][T31204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.973193][T31204] ? clear_bhb_loop+0x70/0xc0 [ 1408.973217][T31204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.973236][T31204] RIP: 0033:0x7f383d59e159 [ 1408.973256][T31204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1408.973272][T31204] RSP: 002b:00007f383e386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1408.973294][T31204] RAX: ffffffffffffffda RBX: 00007f383d825fa0 RCX: 00007f383d59e159 [ 1408.973309][T31204] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1408.973321][T31204] RBP: 00007f383e386090 R08: 0000000000000000 R09: 0000000000000000 [ 1408.973333][T31204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.973344][T31204] R13: 00007f383d826038 R14: 00007f383d825fa0 R15: 00007ffc24221bd8 [ 1408.973379][T31204] [ 1410.313017][T31225] Bluetooth: hci0: unsupported parameter 5135 [ 1410.313045][T31225] Bluetooth: hci0: unsupported parameter 8192 [ 1410.313059][T31225] Bluetooth: hci0: unsupported parameter 5135 [ 1410.313071][T31225] Bluetooth: hci0: unsupported parameter 8192 [ 1410.317628][T31225] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10349'. [ 1410.679908][T31233] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10353'. [ 1410.679940][T31233] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10353'. [ 1411.048948][T31250] netlink: 'syz.6.10356': attribute type 62 has an invalid length. [ 1412.863611][T31290] ip_tables: iptables: counters copy to user failed while replacing table [ 1412.889235][T31292] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10368'. [ 1412.889264][T31292] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10368'. [ 1413.195184][ T5279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1414.195217][T31328] netlink: NAT attribute has 5 unknown bytes [ 1414.195262][T31328] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1415.572652][T31357] netlink: 'syz.7.10379': attribute type 4 has an invalid length. [ 1416.763140][T31390] Cannot find add_set index 0 as target [ 1416.800408][T31389] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10389'. [ 1416.800440][T31389] netlink: 256 bytes leftover after parsing attributes in process `syz.5.10389'. [ 1417.231764][T31404] syz_tun: entered allmulticast mode [ 1417.262270][T31404] dvmrp8: entered allmulticast mode [ 1418.127470][T31397] syz_tun: left allmulticast mode [ 1419.072505][T31446] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10403'. [ 1420.171622][ T5279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1420.496387][T31437] netlink: 'syz.7.10400': attribute type 1 has an invalid length. [ 1420.668973][T31477] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1420.669064][T31477] gretap2: entered promiscuous mode [ 1420.669080][T31477] gretap2: entered allmulticast mode [ 1420.862171][T31477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10406'. [ 1420.862197][T31477] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10406'. [ 1421.028106][T31484] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1421.363569][T31500] Cannot find add_set index 0 as target [ 1421.721493][T31508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10414'. [ 1421.721519][T31508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10414'. [ 1421.835981][T31510] netlink: 'syz.8.10416': attribute type 4 has an invalid length. [ 1422.763018][T31544] gretap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1422.763105][T31544] gretap3: entered promiscuous mode [ 1422.763120][T31544] gretap3: entered allmulticast mode [ 1422.910061][T31547] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10423'. [ 1422.910096][T31547] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10423'. [ 1423.143201][T31544] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1423.605742][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.223083][T31580] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10434'. [ 1425.194691][T31611] bond5: option mode: unable to set because the bond device is up [ 1425.208186][T31611] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10440'. [ 1425.208211][T31611] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10440'. [ 1425.602659][T31623] netlink: 'syz.0.10442': attribute type 1 has an invalid length. [ 1425.913400][T31623] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1426.046535][T31637] ip_tables: iptables: counters copy to user failed while replacing table [ 1426.988069][T31653] FAULT_INJECTION: forcing a failure. [ 1426.988069][T31653] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1426.988105][T31653] CPU: 0 UID: 0 PID: 31653 Comm: syz.6.10450 Not tainted syzkaller #0 PREEMPT(full) [ 1426.988127][T31653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1426.988138][T31653] Call Trace: [ 1426.988147][T31653] [ 1426.988156][T31653] dump_stack_lvl+0xe8/0x150 [ 1426.988191][T31653] should_fail_ex+0x410/0x560 [ 1426.988221][T31653] _copy_from_user+0x2d/0xb0 [ 1426.988247][T31653] ___sys_sendmsg+0x1c6/0x360 [ 1426.988274][T31653] ? __lock_acquire+0x747/0x2de0 [ 1426.988300][T31653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1426.988365][T31653] ? __fget_files+0x2a/0x420 [ 1426.988390][T31653] ? __fget_files+0x3a2/0x420 [ 1426.988426][T31653] __x64_sys_sendmsg+0x1b1/0x290 [ 1426.988456][T31653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1426.988504][T31653] do_syscall_64+0x166/0x520 [ 1426.988529][T31653] ? trace_irq_disable+0x3b/0x140 [ 1426.988548][T31653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.988567][T31653] ? clear_bhb_loop+0x70/0xc0 [ 1426.988590][T31653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1426.988614][T31653] RIP: 0033:0x7f1cea99e159 [ 1426.988632][T31653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1426.988648][T31653] RSP: 002b:00007f1ceb88d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1426.988671][T31653] RAX: ffffffffffffffda RBX: 00007f1ceac25fa0 RCX: 00007f1cea99e159 [ 1426.988685][T31653] RDX: 0000000000040040 RSI: 0000200000000240 RDI: 0000000000000005 [ 1426.988698][T31653] RBP: 00007f1ceb88d090 R08: 0000000000000000 R09: 0000000000000000 [ 1426.988710][T31653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1426.988722][T31653] R13: 00007f1ceac26038 R14: 00007f1ceac25fa0 R15: 00007fff2fa52e88 [ 1426.988753][T31653] [ 1427.080526][T31655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10451'. [ 1427.569512][T31658] netdevsim netdevsim0: Firmware load for './file0/../file0' refused, path contains '..' component [ 1427.764819][T31655] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8 [ 1428.099606][T31680] bond4: option mode: unable to set because the bond device is up [ 1428.103091][T31680] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10455'. [ 1428.103115][T31680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10455'. [ 1428.372669][T31687] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10458'. [ 1428.393984][T31686] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10456'. [ 1428.418214][T31686] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10456'. [ 1428.696822][T31694] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1429.681578][T31720] bond4: option mode: unable to set because the bond device is up [ 1429.711638][T31720] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10469'. [ 1429.711905][T31720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10469'. [ 1430.420112][T31739] netlink: 'syz.7.10474': attribute type 4 has an invalid length. [ 1430.504337][T31741] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10475'. [ 1430.633506][T31745] tap0: tun_chr_ioctl cmd 1074025672 [ 1430.633533][T31745] tap0: ignored: set checksum disabled [ 1430.675732][T31745] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10477'. [ 1430.676482][T31745] veth1_vlan: left promiscuous mode [ 1430.999935][T31753] FAULT_INJECTION: forcing a failure. [ 1430.999935][T31753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1430.999970][T31753] CPU: 0 UID: 0 PID: 31753 Comm: syz.0.10480 Not tainted syzkaller #0 PREEMPT(full) [ 1430.999992][T31753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1431.000004][T31753] Call Trace: [ 1431.000012][T31753] [ 1431.000021][T31753] dump_stack_lvl+0xe8/0x150 [ 1431.000054][T31753] should_fail_ex+0x410/0x560 [ 1431.000083][T31753] _copy_from_iter+0x1d3/0x1660 [ 1431.000106][T31753] ? __alloc_skb+0x27a/0x7a0 [ 1431.000133][T31753] ? __alloc_skb+0x27a/0x7a0 [ 1431.000156][T31753] ? __alloc_skb+0x27a/0x7a0 [ 1431.000182][T31753] ? __pfx__copy_from_iter+0x10/0x10 [ 1431.000203][T31753] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1431.000230][T31753] ? __alloc_skb+0x27a/0x7a0 [ 1431.000251][T31753] ? __alloc_skb+0x27a/0x7a0 [ 1431.000280][T31753] ? netlink_sendmsg+0x650/0xb40 [ 1431.000299][T31753] ? skb_put+0x112/0x210 [ 1431.000327][T31753] netlink_sendmsg+0x6c0/0xb40 [ 1431.000356][T31753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.000385][T31753] ? apparmor_socket_sendmsg+0x98/0x360 [ 1431.000411][T31753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1431.000438][T31753] sock_sendmsg_nosec+0x13a/0x180 [ 1431.000463][T31753] ____sys_sendmsg+0x54e/0x850 [ 1431.000495][T31753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1431.000533][T31753] ? import_iovec+0x73/0xa0 [ 1431.000561][T31753] ___sys_sendmsg+0x2a5/0x360 [ 1431.000585][T31753] ? __lock_acquire+0x747/0x2de0 [ 1431.000611][T31753] ? __pfx____sys_sendmsg+0x10/0x10 [ 1431.000675][T31753] ? __fget_files+0x2a/0x420 [ 1431.000699][T31753] ? __fget_files+0x3a2/0x420 [ 1431.000737][T31753] __x64_sys_sendmsg+0x1b1/0x290 [ 1431.000766][T31753] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1431.000816][T31753] do_syscall_64+0x166/0x520 [ 1431.000840][T31753] ? trace_irq_disable+0x3b/0x140 [ 1431.000859][T31753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.000878][T31753] ? clear_bhb_loop+0x70/0xc0 [ 1431.000903][T31753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.000922][T31753] RIP: 0033:0x7f383d59e159 [ 1431.000940][T31753] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.000953][T31753] RSP: 002b:00007f383e386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1431.000973][T31753] RAX: ffffffffffffffda RBX: 00007f383d825fa0 RCX: 00007f383d59e159 [ 1431.000987][T31753] RDX: 0000000000040040 RSI: 0000200000000240 RDI: 0000000000000005 [ 1431.000999][T31753] RBP: 00007f383e386090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.001011][T31753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1431.001023][T31753] R13: 00007f383d826038 R14: 00007f383d825fa0 R15: 00007ffc24221bd8 [ 1431.001055][T31753] [ 1431.636300][T31767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10486'. [ 1432.011918][T31780] FAULT_INJECTION: forcing a failure. [ 1432.011918][T31780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1432.011954][T31780] CPU: 1 UID: 0 PID: 31780 Comm: syz.0.10492 Not tainted syzkaller #0 PREEMPT(full) [ 1432.011976][T31780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1432.011988][T31780] Call Trace: [ 1432.011996][T31780] [ 1432.012005][T31780] dump_stack_lvl+0xe8/0x150 [ 1432.012041][T31780] should_fail_ex+0x410/0x560 [ 1432.012071][T31780] _copy_from_user+0x2d/0xb0 [ 1432.012096][T31780] kstrtouint_from_user+0xd6/0x180 [ 1432.012202][T31780] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1432.012234][T31780] ? lock_acquire+0x115/0x350 [ 1432.012260][T31780] proc_fail_nth_write+0x8e/0x210 [ 1432.012283][T31780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1432.012313][T31780] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1432.012333][T31780] vfs_write+0x296/0xba0 [ 1432.012375][T31780] ? __pfx_vfs_write+0x10/0x10 [ 1432.012407][T31780] ? __fget_files+0x2a/0x420 [ 1432.012444][T31780] ? __fget_files+0x3a2/0x420 [ 1432.012478][T31780] ? __fget_files+0x2a/0x420 [ 1432.012516][T31780] ksys_write+0x150/0x270 [ 1432.012549][T31780] ? __pfx_ksys_write+0x10/0x10 [ 1432.012592][T31780] do_syscall_64+0x166/0x520 [ 1432.012617][T31780] ? trace_irq_disable+0x3b/0x140 [ 1432.012637][T31780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.012657][T31780] ? clear_bhb_loop+0x70/0xc0 [ 1432.012683][T31780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.012703][T31780] RIP: 0033:0x7f383d55e98e [ 1432.012724][T31780] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1432.012740][T31780] RSP: 002b:00007f383e385fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1432.012763][T31780] RAX: ffffffffffffffda RBX: 00007f383e3866c0 RCX: 00007f383d55e98e [ 1432.012777][T31780] RDX: 0000000000000001 RSI: 00007f383e3860a0 RDI: 0000000000000004 [ 1432.012789][T31780] RBP: 00007f383e386090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.012801][T31780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1432.012813][T31780] R13: 00007f383d826038 R14: 00007f383d825fa0 R15: 00007ffc24221bd8 [ 1432.012850][T31780] [ 1432.923566][T31804] FAULT_INJECTION: forcing a failure. [ 1432.923566][T31804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1432.923628][T31804] CPU: 1 UID: 0 PID: 31804 Comm: syz.0.10499 Not tainted syzkaller #0 PREEMPT(full) [ 1432.923652][T31804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1432.923664][T31804] Call Trace: [ 1432.923673][T31804] [ 1432.923683][T31804] dump_stack_lvl+0xe8/0x150 [ 1432.923719][T31804] should_fail_ex+0x410/0x560 [ 1432.923749][T31804] _copy_from_user+0x2d/0xb0 [ 1432.923777][T31804] ___sys_sendmsg+0x1c6/0x360 [ 1432.923807][T31804] ? __lock_acquire+0x747/0x2de0 [ 1432.923833][T31804] ? __pfx____sys_sendmsg+0x10/0x10 [ 1432.923901][T31804] ? __fget_files+0x2a/0x420 [ 1432.923938][T31804] ? __fget_files+0x3a2/0x420 [ 1432.923976][T31804] __x64_sys_sendmsg+0x1b1/0x290 [ 1432.924007][T31804] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1432.924059][T31804] do_syscall_64+0x166/0x520 [ 1432.924085][T31804] ? trace_irq_disable+0x3b/0x140 [ 1432.924105][T31804] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.924125][T31804] ? clear_bhb_loop+0x70/0xc0 [ 1432.924151][T31804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1432.924171][T31804] RIP: 0033:0x7f383d59e159 [ 1432.924191][T31804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1432.924208][T31804] RSP: 002b:00007f383e386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1432.924231][T31804] RAX: ffffffffffffffda RBX: 00007f383d825fa0 RCX: 00007f383d59e159 [ 1432.924246][T31804] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1432.924258][T31804] RBP: 00007f383e386090 R08: 0000000000000000 R09: 0000000000000000 [ 1432.924271][T31804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1432.924282][T31804] R13: 00007f383d826038 R14: 00007f383d825fa0 R15: 00007ffc24221bd8 [ 1432.924316][T31804] [ 1433.416336][T31817] __nla_validate_parse: 1 callbacks suppressed [ 1433.416357][T31817] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10497'. [ 1433.823737][T31829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10508'. [ 1434.435971][T31841] netlink: 'syz.6.10512': attribute type 3 has an invalid length. [ 1434.979791][T31855] FAULT_INJECTION: forcing a failure. [ 1434.979791][T31855] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.979826][T31855] CPU: 0 UID: 0 PID: 31855 Comm: syz.5.10515 Not tainted syzkaller #0 PREEMPT(full) [ 1434.979847][T31855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1434.979858][T31855] Call Trace: [ 1434.979867][T31855] [ 1434.979880][T31855] dump_stack_lvl+0xe8/0x150 [ 1434.979914][T31855] should_fail_ex+0x410/0x560 [ 1434.979942][T31855] ? __alloc_skb+0x1db/0x7a0 [ 1434.979966][T31855] should_failslab+0xa8/0x100 [ 1434.980001][T31855] ? __alloc_skb+0x1db/0x7a0 [ 1434.980029][T31855] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1434.980058][T31855] ? __alloc_skb+0x18d/0x7a0 [ 1434.980081][T31855] ? __alloc_skb+0x1db/0x7a0 [ 1434.980111][T31855] __alloc_skb+0x1db/0x7a0 [ 1434.980138][T31855] netlink_sendmsg+0x5d4/0xb40 [ 1434.980169][T31855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1434.980197][T31855] ? apparmor_socket_sendmsg+0x98/0x360 [ 1434.980222][T31855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1434.980240][T31855] sock_sendmsg_nosec+0x13a/0x180 [ 1434.980264][T31855] ____sys_sendmsg+0x54e/0x850 [ 1434.980297][T31855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1434.980340][T31855] ? import_iovec+0x73/0xa0 [ 1434.980369][T31855] ___sys_sendmsg+0x2a5/0x360 [ 1434.980394][T31855] ? __lock_acquire+0x747/0x2de0 [ 1434.980420][T31855] ? __pfx____sys_sendmsg+0x10/0x10 [ 1434.980483][T31855] ? __fget_files+0x2a/0x420 [ 1434.980509][T31855] ? __fget_files+0x3a2/0x420 [ 1434.980546][T31855] __x64_sys_sendmsg+0x1b1/0x290 [ 1434.980575][T31855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1434.980624][T31855] do_syscall_64+0x166/0x520 [ 1434.980655][T31855] ? trace_irq_disable+0x3b/0x140 [ 1434.980680][T31855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.980700][T31855] ? clear_bhb_loop+0x70/0xc0 [ 1434.980724][T31855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.980742][T31855] RIP: 0033:0x7fe8a2f9e159 [ 1434.980762][T31855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.980777][T31855] RSP: 002b:00007fe8a3f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1434.980800][T31855] RAX: ffffffffffffffda RBX: 00007fe8a3225fa0 RCX: 00007fe8a2f9e159 [ 1434.980814][T31855] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1434.980826][T31855] RBP: 00007fe8a3f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.980837][T31855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1434.980849][T31855] R13: 00007fe8a3226038 R14: 00007fe8a3225fa0 R15: 00007fff1dbcc6d8 [ 1434.980882][T31855] [ 1435.424056][T31857] netlink: 'syz.6.10516': attribute type 4 has an invalid length. [ 1435.477296][T26013] Bluetooth: hci4: link tx timeout [ 1435.477529][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.498223][T26013] Bluetooth: hci4: link tx timeout [ 1435.498247][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.498394][T26013] Bluetooth: hci4: link tx timeout [ 1435.498407][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.498520][T26013] Bluetooth: hci4: link tx timeout [ 1435.498532][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.498642][T26013] Bluetooth: hci4: link tx timeout [ 1435.498654][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.499588][T26013] Bluetooth: hci4: link tx timeout [ 1435.499603][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.499712][T26013] Bluetooth: hci4: link tx timeout [ 1435.499724][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.499828][T26013] Bluetooth: hci4: link tx timeout [ 1435.499839][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.499977][T26013] Bluetooth: hci4: link tx timeout [ 1435.499989][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.500101][T26013] Bluetooth: hci4: link tx timeout [ 1435.500112][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.500217][T26013] Bluetooth: hci4: link tx timeout [ 1435.500228][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.500332][T26013] Bluetooth: hci4: link tx timeout [ 1435.500343][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.500446][T26013] Bluetooth: hci4: link tx timeout [ 1435.500457][T26013] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 1435.763027][T31865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10518'. [ 1436.118761][T31871] netlink: 72 bytes leftover after parsing attributes in process `syz.6.10520'. [ 1436.141223][T31871] netlink: 28 bytes leftover after parsing attributes in process `syz.6.10520'. [ 1436.649372][T31881] netlink: 284 bytes leftover after parsing attributes in process `syz.8.10522'. [ 1436.911577][T31892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.031095][T31892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.125863][T31907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1437.520706][T26013] Bluetooth: hci4: command 0x0406 tx timeout [ 1437.636455][T31918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10532'. [ 1438.198377][T31929] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1438.198423][T31929] FAULT_INJECTION: forcing a failure. [ 1438.198423][T31929] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.198450][T31929] CPU: 0 UID: 0 PID: 31929 Comm: syz.8.10534 Not tainted syzkaller #0 PREEMPT(full) [ 1438.198472][T31929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1438.198483][T31929] Call Trace: [ 1438.198492][T31929] [ 1438.198501][T31929] dump_stack_lvl+0xe8/0x150 [ 1438.198537][T31929] should_fail_ex+0x410/0x560 [ 1438.198566][T31929] ? __alloc_skb+0x1db/0x7a0 [ 1438.198590][T31929] should_failslab+0xa8/0x100 [ 1438.198617][T31929] ? __alloc_skb+0x1db/0x7a0 [ 1438.198638][T31929] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1438.198669][T31929] ? __alloc_skb+0x18d/0x7a0 [ 1438.198695][T31929] ? __alloc_skb+0x1db/0x7a0 [ 1438.198726][T31929] __alloc_skb+0x1db/0x7a0 [ 1438.198757][T31929] netlink_ack+0x136/0xb30 [ 1438.198785][T31929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1438.198831][T31929] netlink_rcv_skb+0x2a4/0x4a0 [ 1438.198862][T31929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1438.198891][T31929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1438.198936][T31929] ? down_read+0x2be/0x330 [ 1438.198969][T31929] genl_rcv+0x28/0x40 [ 1438.198990][T31929] netlink_unicast+0x7bd/0x940 [ 1438.199029][T31929] netlink_sendmsg+0x813/0xb40 [ 1438.199060][T31929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.199089][T31929] ? apparmor_socket_sendmsg+0x98/0x360 [ 1438.199115][T31929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.199133][T31929] sock_sendmsg_nosec+0x13a/0x180 [ 1438.199158][T31929] ____sys_sendmsg+0x54e/0x850 [ 1438.199191][T31929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1438.199228][T31929] ? import_iovec+0x73/0xa0 [ 1438.199258][T31929] ___sys_sendmsg+0x2a5/0x360 [ 1438.199282][T31929] ? __lock_acquire+0x747/0x2de0 [ 1438.199306][T31929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.199378][T31929] ? __fget_files+0x2a/0x420 [ 1438.199405][T31929] ? __fget_files+0x3a2/0x420 [ 1438.199443][T31929] __x64_sys_sendmsg+0x1b1/0x290 [ 1438.199473][T31929] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1438.199525][T31929] do_syscall_64+0x166/0x520 [ 1438.199548][T31929] ? trace_irq_disable+0x3b/0x140 [ 1438.199568][T31929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.199588][T31929] ? clear_bhb_loop+0x70/0xc0 [ 1438.199613][T31929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.199632][T31929] RIP: 0033:0x7f3f38b9e159 [ 1438.199651][T31929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.199668][T31929] RSP: 002b:00007f3f39b2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.199690][T31929] RAX: ffffffffffffffda RBX: 00007f3f38e25fa0 RCX: 00007f3f38b9e159 [ 1438.199704][T31929] RDX: 0000000000040040 RSI: 0000200000000240 RDI: 0000000000000005 [ 1438.199716][T31929] RBP: 00007f3f39b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.199729][T31929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.199741][T31929] R13: 00007f3f38e26038 R14: 00007f3f38e25fa0 R15: 00007ffd507591c8 [ 1438.199775][T31929] [ 1438.644839][T31930] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10535'. [ 1438.651486][T31931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10535'. [ 1440.366269][T31980] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10549'. [ 1440.366300][T31980] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10549'. [ 1440.560020][T31989] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 1440.732944][T31989] openvswitch: netlink: Missing key (keys=50, expected=80) [ 1441.351122][T32031] netlink: 'syz.5.10558': attribute type 23 has an invalid length. [ 1442.150987][T32053] netlink: 284 bytes leftover after parsing attributes in process `syz.0.10563'. [ 1442.569002][T32065] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1442.697194][T32079] FAULT_INJECTION: forcing a failure. [ 1442.697194][T32079] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.697232][T32079] CPU: 0 UID: 0 PID: 32079 Comm: syz.5.10572 Not tainted syzkaller #0 PREEMPT(full) [ 1442.697255][T32079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1442.697267][T32079] Call Trace: [ 1442.697276][T32079] [ 1442.697286][T32079] dump_stack_lvl+0xe8/0x150 [ 1442.697322][T32079] should_fail_ex+0x410/0x560 [ 1442.697353][T32079] should_failslab+0xa8/0x100 [ 1442.697381][T32079] __kmalloc_cache_noprof+0xa3/0x600 [ 1442.697404][T32079] ? genl_start+0x1c9/0x6d0 [ 1442.697426][T32079] ? genl_start+0x1c9/0x6d0 [ 1442.697455][T32079] genl_start+0x1c9/0x6d0 [ 1442.697489][T32079] __netlink_dump_start+0x442/0x7b0 [ 1442.697529][T32079] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1442.697560][T32079] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1442.697584][T32079] ? genl_get_cmd+0x6cc/0x960 [ 1442.697613][T32079] ? __pfx_genl_start+0x10/0x10 [ 1442.697633][T32079] ? __pfx_genl_dumpit+0x10/0x10 [ 1442.697655][T32079] ? __pfx_genl_done+0x10/0x10 [ 1442.697682][T32079] ? __dev_queue_xmit+0x29b/0x3820 [ 1442.697727][T32079] genl_rcv_msg+0x5e1/0x7a0 [ 1442.697760][T32079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1442.697784][T32079] ? __pfx_ethnl_default_start+0x10/0x10 [ 1442.697899][T32079] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 1442.697928][T32079] ? __pfx_ethnl_default_done+0x10/0x10 [ 1442.697967][T32079] netlink_rcv_skb+0x226/0x4a0 [ 1442.697996][T32079] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1442.698021][T32079] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1442.698067][T32079] ? down_read+0x2be/0x330 [ 1442.698099][T32079] genl_rcv+0x28/0x40 [ 1442.698119][T32079] netlink_unicast+0x7bd/0x940 [ 1442.698158][T32079] netlink_sendmsg+0x813/0xb40 [ 1442.698188][T32079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1442.698218][T32079] ? apparmor_socket_sendmsg+0x98/0x360 [ 1442.698244][T32079] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1442.698262][T32079] sock_sendmsg_nosec+0x13a/0x180 [ 1442.698288][T32079] ____sys_sendmsg+0x54e/0x850 [ 1442.698321][T32079] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1442.698357][T32079] ? import_iovec+0x73/0xa0 [ 1442.698387][T32079] ___sys_sendmsg+0x2a5/0x360 [ 1442.698412][T32079] ? __lock_acquire+0x747/0x2de0 [ 1442.698438][T32079] ? __pfx____sys_sendmsg+0x10/0x10 [ 1442.698507][T32079] ? __fget_files+0x2a/0x420 [ 1442.698533][T32079] ? __fget_files+0x3a2/0x420 [ 1442.698570][T32079] __x64_sys_sendmsg+0x1b1/0x290 [ 1442.698601][T32079] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1442.698653][T32079] do_syscall_64+0x166/0x520 [ 1442.698678][T32079] ? trace_irq_disable+0x3b/0x140 [ 1442.698698][T32079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.698717][T32079] ? clear_bhb_loop+0x70/0xc0 [ 1442.698742][T32079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.698761][T32079] RIP: 0033:0x7fe8a2f9e159 [ 1442.698781][T32079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.698797][T32079] RSP: 002b:00007fe8a3f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1442.698820][T32079] RAX: ffffffffffffffda RBX: 00007fe8a3225fa0 RCX: 00007fe8a2f9e159 [ 1442.698834][T32079] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1442.698846][T32079] RBP: 00007fe8a3f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.698858][T32079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1442.698870][T32079] R13: 00007fe8a3226038 R14: 00007fe8a3225fa0 R15: 00007fff1dbcc6d8 [ 1442.698904][T32079] [ 1443.209033][T32082] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1443.209124][T32082] gretap2: entered promiscuous mode [ 1443.209141][T32082] gretap2: entered allmulticast mode [ 1443.429204][T32095] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10573'. [ 1443.429231][T32095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10573'. [ 1443.624280][T32085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1443.812446][T32095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1443.831050][T32095] bond1: (slave bond0): making interface the new active one [ 1443.843635][T32095] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1444.474358][T32108] netlink: 284 bytes leftover after parsing attributes in process `syz.0.10580'. [ 1444.856474][T32125] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10586'. [ 1445.144326][T32128] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1445.746712][T32161] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1445.840777][T32164] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.10592'. [ 1445.864984][T32163] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.10592'. [ 1446.490559][T32178] FAULT_INJECTION: forcing a failure. [ 1446.490559][T32178] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.490597][T32178] CPU: 1 UID: 0 PID: 32178 Comm: syz.0.10598 Not tainted syzkaller #0 PREEMPT(full) [ 1446.490620][T32178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1446.490631][T32178] Call Trace: [ 1446.490640][T32178] [ 1446.490648][T32178] dump_stack_lvl+0xe8/0x150 [ 1446.490684][T32178] should_fail_ex+0x410/0x560 [ 1446.490718][T32178] should_failslab+0xa8/0x100 [ 1446.490744][T32178] ? skb_clone+0x212/0x3a0 [ 1446.490771][T32178] kmem_cache_alloc_noprof+0xa1/0x600 [ 1446.490802][T32178] ? skb_clone+0x212/0x3a0 [ 1446.490835][T32178] skb_clone+0x212/0x3a0 [ 1446.490866][T32178] __netlink_deliver_tap+0x413/0x860 [ 1446.490899][T32178] ? netlink_deliver_tap+0x2e/0x1b0 [ 1446.490921][T32178] netlink_deliver_tap+0x19c/0x1b0 [ 1446.490941][T32178] netlink_sendskb+0x68/0x140 [ 1446.490973][T32178] nlmsg_notify+0x126/0x1a0 [ 1446.491007][T32178] tc_ctl_action+0x976/0xc70 [ 1446.491146][T32178] ? __pfx_tc_ctl_action+0x10/0x10 [ 1446.491179][T32178] ? rcu_is_watching+0x16/0xb0 [ 1446.491256][T32178] ? __pfx_tc_ctl_action+0x10/0x10 [ 1446.491289][T32178] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1446.491320][T32178] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1446.491343][T32178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1446.491363][T32178] ? ref_tracker_free+0x689/0x830 [ 1446.491388][T32178] ? __pfx_ref_tracker_free+0x10/0x10 [ 1446.491423][T32178] netlink_rcv_skb+0x226/0x4a0 [ 1446.491453][T32178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1446.491481][T32178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1446.491528][T32178] ? netlink_deliver_tap+0x2e/0x1b0 [ 1446.491547][T32178] ? netlink_deliver_tap+0x2e/0x1b0 [ 1446.491573][T32178] netlink_unicast+0x7bd/0x940 [ 1446.491615][T32178] netlink_sendmsg+0x813/0xb40 [ 1446.491648][T32178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.491676][T32178] ? apparmor_socket_sendmsg+0x98/0x360 [ 1446.491702][T32178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.491721][T32178] sock_sendmsg_nosec+0x13a/0x180 [ 1446.491747][T32178] ____sys_sendmsg+0x54e/0x850 [ 1446.491782][T32178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1446.491821][T32178] ? import_iovec+0x73/0xa0 [ 1446.491852][T32178] ___sys_sendmsg+0x2a5/0x360 [ 1446.491877][T32178] ? __lock_acquire+0x747/0x2de0 [ 1446.491905][T32178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1446.491979][T32178] ? __fget_files+0x2a/0x420 [ 1446.492005][T32178] ? __fget_files+0x3a2/0x420 [ 1446.492046][T32178] __x64_sys_sendmsg+0x1b1/0x290 [ 1446.492078][T32178] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1446.492134][T32178] do_syscall_64+0x166/0x520 [ 1446.492160][T32178] ? trace_irq_disable+0x3b/0x140 [ 1446.492181][T32178] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.492202][T32178] ? clear_bhb_loop+0x70/0xc0 [ 1446.492228][T32178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.492248][T32178] RIP: 0033:0x7f383d59e159 [ 1446.492269][T32178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1446.492295][T32178] RSP: 002b:00007f383e386028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.492319][T32178] RAX: ffffffffffffffda RBX: 00007f383d825fa0 RCX: 00007f383d59e159 [ 1446.492333][T32178] RDX: 0000000004000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1446.492347][T32178] RBP: 00007f383e386090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.492360][T32178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1446.492372][T32178] R13: 00007f383d826038 R14: 00007f383d825fa0 R15: 00007ffc24221bd8 [ 1446.492409][T32178] [ 1446.933605][T32184] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10601'. [ 1447.896019][T32204] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1448.438351][T32217] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10610'. [ 1448.438384][T32217] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10610'. [ 1448.579071][T32220] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10611'. [ 1448.908042][T32226] Bluetooth: MGMT ver 1.23 [ 1448.965884][T32231] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10614'. [ 1449.077996][T32236] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 1449.260621][T32246] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10613'. [ 1449.728688][T32255] netlink: 28 bytes leftover after parsing attributes in process `syz.7.10619'. [ 1450.577275][T32268] openvswitch: netlink: Flow key attr not present in new flow. [ 1451.096159][T32283] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10628'. [ 1451.170055][T32291] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1451.831596][T32302] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1451.831701][T32302] gretap1: entered promiscuous mode [ 1451.831718][T32302] gretap1: entered allmulticast mode [ 1452.065759][T32302] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1452.202168][T32302] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10632'. [ 1452.202198][T32302] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10632'. [ 1452.377097][T32302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1452.438201][T32302] bond1: (slave bond0): making interface the new active one [ 1452.439766][T32302] bond1: (slave bond0): Enslaving as an active interface with an up link [ 1452.635567][ T5616] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 1452.638737][ T5616] Bluetooth: hci0: command 0x0c3a tx timeout [ 1452.690708][T32336] lo speed is unknown, defaulting to 1000 [ 1452.690780][T32336] lo speed is unknown, defaulting to 1000 [ 1452.691815][T32336] lo speed is unknown, defaulting to 1000 [ 1452.693197][T32336] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1452.693227][T32336] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1452.693264][T32336] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1452.840914][T32336] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1452.880954][T32336] lo speed is unknown, defaulting to 1000 [ 1452.883187][T32336] lo speed is unknown, defaulting to 1000 [ 1452.898607][T32336] lo speed is unknown, defaulting to 1000 [ 1452.900951][T32336] lo speed is unknown, defaulting to 1000 [ 1452.903561][T32336] lo speed is unknown, defaulting to 1000 [ 1452.926677][T32336] lo speed is unknown, defaulting to 1000 [ 1453.023278][T32336] netlink: 'syz.0.10643': attribute type 4 has an invalid length. [ 1453.527584][T32355] FAULT_INJECTION: forcing a failure. [ 1453.527584][T32355] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.527620][T32355] CPU: 0 UID: 0 PID: 32355 Comm: syz.5.10648 Not tainted syzkaller #0 PREEMPT(full) [ 1453.527643][T32355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1453.527655][T32355] Call Trace: [ 1453.527664][T32355] [ 1453.527673][T32355] dump_stack_lvl+0xe8/0x150 [ 1453.527708][T32355] should_fail_ex+0x410/0x560 [ 1453.527739][T32355] should_failslab+0xa8/0x100 [ 1453.527764][T32355] ? skb_clone+0x212/0x3a0 [ 1453.527791][T32355] kmem_cache_alloc_noprof+0xa1/0x600 [ 1453.527822][T32355] ? skb_clone+0x212/0x3a0 [ 1453.527858][T32355] skb_clone+0x212/0x3a0 [ 1453.527894][T32355] __netlink_deliver_tap+0x413/0x860 [ 1453.527928][T32355] ? netlink_deliver_tap+0x2e/0x1b0 [ 1453.527950][T32355] netlink_deliver_tap+0x19c/0x1b0 [ 1453.527970][T32355] netlink_unicast+0x781/0x940 [ 1453.528011][T32355] netlink_sendmsg+0x813/0xb40 [ 1453.528042][T32355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1453.528073][T32355] ? apparmor_socket_sendmsg+0x98/0x360 [ 1453.528099][T32355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1453.528118][T32355] sock_sendmsg_nosec+0x13a/0x180 [ 1453.528153][T32355] ____sys_sendmsg+0x54e/0x850 [ 1453.528189][T32355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1453.528228][T32355] ? import_iovec+0x73/0xa0 [ 1453.528259][T32355] ___sys_sendmsg+0x2a5/0x360 [ 1453.528285][T32355] ? __lock_acquire+0x747/0x2de0 [ 1453.528312][T32355] ? __pfx____sys_sendmsg+0x10/0x10 [ 1453.528383][T32355] ? __fget_files+0x2a/0x420 [ 1453.528410][T32355] ? __fget_files+0x3a2/0x420 [ 1453.528450][T32355] __x64_sys_sendmsg+0x1b1/0x290 [ 1453.528481][T32355] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1453.528536][T32355] do_syscall_64+0x166/0x520 [ 1453.528561][T32355] ? trace_irq_disable+0x3b/0x140 [ 1453.528580][T32355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.528601][T32355] ? clear_bhb_loop+0x70/0xc0 [ 1453.528626][T32355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.528646][T32355] RIP: 0033:0x7fe8a2f9e159 [ 1453.528667][T32355] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1453.528684][T32355] RSP: 002b:00007fe8a3f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1453.528707][T32355] RAX: ffffffffffffffda RBX: 00007fe8a3225fa0 RCX: 00007fe8a2f9e159 [ 1453.528722][T32355] RDX: 0000000000000000 RSI: 0000200000000d40 RDI: 0000000000000004 [ 1453.528735][T32355] RBP: 00007fe8a3f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.528747][T32355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.528759][T32355] R13: 00007fe8a3226038 R14: 00007fe8a3225fa0 R15: 00007fff1dbcc6d8 [ 1453.528795][T32355] [ 1455.309116][T32388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10660'. [ 1455.309150][T32388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10660'. [ 1455.358327][T32389] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10661'. [ 1456.395306][T32418] Bluetooth: hci0: command 0x0c3a tx timeout [ 1457.669000][T32451] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10677'. [ 1457.948122][T32461] netlink: 20 bytes leftover after parsing attributes in process `syz.8.10681'. [ 1458.250008][T32464] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1458.478689][T32478] netlink: 'syz.0.10682': attribute type 49 has an invalid length. [ 1458.540331][T32488] block nbd6: not configured, cannot reconfigure [ 1459.814858][T32520] batman_adv: batadv0: Adding interface: gretap4 [ 1459.830934][T32520] batman_adv: batadv0: Interface activated: gretap4 [ 1459.867207][T32518] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1460.125809][T32531] bond2: option resend_igmp: invalid value (32767) [ 1460.125837][T32531] bond2: option resend_igmp: allowed values 0 - 255 [ 1460.160585][T32531] bond2 (unregistering): Released all slaves [ 1460.244192][T32536] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1460.259091][T32536] netlink: 'syz.8.10699': attribute type 21 has an invalid length. [ 1460.259119][T32536] IPv6: NLM_F_CREATE should be specified when creating new route [ 1460.259440][T32537] netlink: 'syz.8.10699': attribute type 21 has an invalid length. [ 1460.300509][T32529] IPVS: set_ctl: invalid protocol: 51 172.20.20.170:20002 [ 1462.729322][T32591] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10712'. [ 1463.171755][T32599] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10715'. [ 1463.401208][T32611] netlink: 'syz.7.10719': attribute type 4 has an invalid length. [ 1463.731659][T32619] netlink: 'syz.8.10721': attribute type 11 has an invalid length. [ 1464.021722][T32628] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10725'. [ 1464.107933][T32634] FAULT_INJECTION: forcing a failure. [ 1464.107933][T32634] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1464.107969][T32634] CPU: 0 UID: 0 PID: 32634 Comm: syz.8.10728 Not tainted syzkaller #0 PREEMPT(full) [ 1464.107991][T32634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1464.108003][T32634] Call Trace: [ 1464.108011][T32634] [ 1464.108020][T32634] dump_stack_lvl+0xe8/0x150 [ 1464.108068][T32634] should_fail_ex+0x410/0x560 [ 1464.108100][T32634] prepare_alloc_pages+0x223/0x600 [ 1464.108132][T32634] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1464.108162][T32634] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1464.108190][T32634] ? __pfx_policy_nodemask+0x10/0x10 [ 1464.108214][T32634] ? __get_vm_area_node+0x155/0x2f0 [ 1464.108239][T32634] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 1464.108267][T32634] ? __vmalloc_noprof+0xd2/0x120 [ 1464.108290][T32634] ? bpf_check+0x115d/0x2ef0 [ 1464.108310][T32634] ? bpf_prog_load+0x14d6/0x1c20 [ 1464.108331][T32634] ? __x64_sys_bpf+0xba/0xd0 [ 1464.108349][T32634] ? do_syscall_64+0x166/0x520 [ 1464.108375][T32634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.108402][T32634] alloc_pages_mpol+0x21e/0x390 [ 1464.108433][T32634] alloc_pages_noprof+0xb1/0x2b0 [ 1464.108460][T32634] get_free_pages_noprof+0xf/0x80 [ 1464.108482][T32634] __kasan_populate_vmalloc+0x38/0x1c0 [ 1464.108502][T32634] ? do_raw_spin_unlock+0xf5/0x200 [ 1464.108536][T32634] alloc_vmap_area+0xd1a/0x1420 [ 1464.108577][T32634] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1464.108602][T32634] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 1464.108625][T32634] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 1464.108645][T32634] ? __get_vm_area_node+0x155/0x2f0 [ 1464.108681][T32634] __get_vm_area_node+0x200/0x2f0 [ 1464.108715][T32634] __vmalloc_node_range_noprof+0x343/0x1540 [ 1464.108743][T32634] ? bpf_check+0x115d/0x2ef0 [ 1464.108794][T32634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1464.108821][T32634] ? __kasan_kmalloc+0x93/0xb0 [ 1464.108845][T32634] ? __kmalloc_cache_noprof+0x321/0x600 [ 1464.108865][T32634] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1464.108883][T32634] ? bpf_diag_init+0x87/0x140 [ 1464.108905][T32634] ? bpf_diag_init+0x87/0x140 [ 1464.108929][T32634] ? bpf_check+0x115d/0x2ef0 [ 1464.108948][T32634] __vmalloc_noprof+0xd2/0x120 [ 1464.108975][T32634] ? bpf_check+0x115d/0x2ef0 [ 1464.108999][T32634] bpf_check+0x115d/0x2ef0 [ 1464.109039][T32634] ? __pfx_bpf_check+0x10/0x10 [ 1464.109071][T32634] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1464.109105][T32634] bpf_prog_load+0x14d6/0x1c20 [ 1464.109141][T32634] ? __pfx_bpf_prog_load+0x10/0x10 [ 1464.109191][T32634] __sys_bpf+0xd0d/0xd90 [ 1464.109222][T32634] ? __pfx___sys_bpf+0x10/0x10 [ 1464.109256][T32634] ? __fget_files+0x2a/0x420 [ 1464.109302][T32634] ? ksys_write+0x242/0x270 [ 1464.109334][T32634] ? __pfx_ksys_write+0x10/0x10 [ 1464.109368][T32634] __x64_sys_bpf+0xba/0xd0 [ 1464.109392][T32634] do_syscall_64+0x166/0x520 [ 1464.109415][T32634] ? trace_irq_disable+0x3b/0x140 [ 1464.109434][T32634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.109453][T32634] ? clear_bhb_loop+0x70/0xc0 [ 1464.109476][T32634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.109495][T32634] RIP: 0033:0x7f3f38b9e159 [ 1464.109515][T32634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.109530][T32634] RSP: 002b:00007f3f39b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1464.109552][T32634] RAX: ffffffffffffffda RBX: 00007f3f38e25fa0 RCX: 00007f3f38b9e159 [ 1464.109566][T32634] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1464.109579][T32634] RBP: 00007f3f39b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.109591][T32634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.109603][T32634] R13: 00007f3f38e26038 R14: 00007f3f38e25fa0 R15: 00007ffd507591c8 [ 1464.109635][T32634] [ 1464.305946][T32634] syz.8.10728: vmalloc error: size 816, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1464.306013][T32634] CPU: 1 UID: 0 PID: 32634 Comm: syz.8.10728 Not tainted syzkaller #0 PREEMPT(full) [ 1464.306032][T32634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1464.306043][T32634] Call Trace: [ 1464.306050][T32634] [ 1464.306058][T32634] dump_stack_lvl+0xe8/0x150 [ 1464.306089][T32634] warn_alloc+0x24d/0x270 [ 1464.306110][T32634] ? lockdep_hardirqs_on+0x7b/0x110 [ 1464.306137][T32634] ? __pfx_warn_alloc+0x10/0x10 [ 1464.306154][T32634] ? kfree+0x1c5/0x650 [ 1464.306184][T32634] ? __get_vm_area_node+0x219/0x2f0 [ 1464.306217][T32634] __vmalloc_node_range_noprof+0x36b/0x1540 [ 1464.306271][T32634] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1464.306296][T32634] ? __kasan_kmalloc+0x93/0xb0 [ 1464.306317][T32634] ? __kmalloc_cache_noprof+0x321/0x600 [ 1464.306336][T32634] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1464.306352][T32634] ? bpf_diag_init+0x87/0x140 [ 1464.306371][T32634] ? bpf_diag_init+0x87/0x140 [ 1464.306393][T32634] ? bpf_check+0x115d/0x2ef0 [ 1464.306411][T32634] __vmalloc_noprof+0xd2/0x120 [ 1464.306443][T32634] ? bpf_check+0x115d/0x2ef0 [ 1464.306465][T32634] bpf_check+0x115d/0x2ef0 [ 1464.306502][T32634] ? __pfx_bpf_check+0x10/0x10 [ 1464.306524][T32634] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1464.306553][T32634] bpf_prog_load+0x14d6/0x1c20 [ 1464.306586][T32634] ? __pfx_bpf_prog_load+0x10/0x10 [ 1464.306633][T32634] __sys_bpf+0xd0d/0xd90 [ 1464.306661][T32634] ? __pfx___sys_bpf+0x10/0x10 [ 1464.306692][T32634] ? __fget_files+0x2a/0x420 [ 1464.306734][T32634] ? ksys_write+0x242/0x270 [ 1464.306762][T32634] ? __pfx_ksys_write+0x10/0x10 [ 1464.306792][T32634] __x64_sys_bpf+0xba/0xd0 [ 1464.306813][T32634] do_syscall_64+0x166/0x520 [ 1464.306834][T32634] ? trace_irq_disable+0x3b/0x140 [ 1464.306852][T32634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.306870][T32634] ? clear_bhb_loop+0x70/0xc0 [ 1464.306892][T32634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.306909][T32634] RIP: 0033:0x7f3f38b9e159 [ 1464.306928][T32634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.306942][T32634] RSP: 002b:00007f3f39b2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1464.306961][T32634] RAX: ffffffffffffffda RBX: 00007f3f38e25fa0 RCX: 00007f3f38b9e159 [ 1464.306973][T32634] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 1464.306985][T32634] RBP: 00007f3f39b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.306996][T32634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.307006][T32634] R13: 00007f3f38e26038 R14: 00007f3f38e25fa0 R15: 00007ffd507591c8 [ 1464.307036][T32634] [ 1464.307043][T32634] Mem-Info: [ 1464.307052][T32634] active_anon:7483 inactive_anon:0 isolated_anon:0 [ 1464.307052][T32634] active_file:6 inactive_file:44327 isolated_file:0 [ 1464.307052][T32634] unevictable:0 dirty:242 writeback:0 [ 1464.307052][T32634] slab_reclaimable:11881 slab_unreclaimable:114264 [ 1464.307052][T32634] mapped:29736 shmem:605 pagetables:3766 [ 1464.307052][T32634] sec_pagetables:0 bounce:0 [ 1464.307052][T32634] kernel_misc_reclaimable:0 [ 1464.307052][T32634] free:1302927 free_pcp:8363 free_cma:0 [ 1464.307095][T32634] Node 0 active_anon:29932kB inactive_anon:0kB active_file:24kB inactive_file:177116kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118944kB dirty:968kB writeback:0kB shmem:2420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14252kB pagetables:14908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1464.307142][T32634] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1464.307185][T32634] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.307233][T32634] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1464.307267][T32634] Node 0 DMA32 free:1260536kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29932kB inactive_anon:0kB active_file:24kB inactive_file:177116kB unevictable:0kB writepending:968kB zspages:0kB present:3129332kB managed:2546900kB mlocked:0kB bounce:0kB free_pcp:33452kB local_pcp:19240kB free_cma:0kB [ 1464.307319][T32634] lowmem_reserve[]: 0 0 0 0 0 [ 1464.307355][T32634] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.307405][T32634] lowmem_reserve[]: 0 0 0 0 0 [ 1464.307450][T32634] Node 1 Normal free:3935812kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1464.307499][T32634] lowmem_reserve[]: 0 0 0 0 0 [ 1464.307531][T32634] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1464.307636][T32634] Node 0 DMA32: 2462*4kB (UME) 2692*8kB (UM) 1612*16kB (UM) 469*32kB (UM) 115*64kB (UME) 622*128kB (UME) 426*256kB (UM) 234*512kB (UME) 78*1024kB (UM) 5*2048kB (UM) 191*4096kB (UM) = 1260472kB [ 1464.307779][T32634] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1464.307867][T32634] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 7*16kB (UM) 6*32kB (UM) 10*64kB (UM) 3*128kB (UM) 3*256kB (UM) 5*512kB (UM) 1*1024kB (M) 1*2048kB (U) 959*4096kB (M) = 3935812kB [ 1464.308006][T32634] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.308020][T32634] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1464.308034][T32634] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1464.308048][T32634] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1464.308061][T32634] 44934 total pagecache pages [ 1464.308068][T32634] 0 pages in swap cache [ 1464.308075][T32634] Free swap = 124996kB [ 1464.308081][T32634] Total swap = 124996kB [ 1464.308088][T32634] 2097051 pages RAM [ 1464.308095][T32634] 0 pages HighMem/MovableOnly [ 1464.308102][T32634] 428710 pages reserved [ 1464.308108][T32634] 0 pages cma reserved [ 1465.257022][ T12] IPVS: starting estimator thread 0... [ 1465.376393][T32648] IPVS: using max 28 ests per chain, 67200 per kthread [ 1465.931701][T32658] FAULT_INJECTION: forcing a failure. [ 1465.931701][T32658] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.931736][T32658] CPU: 0 UID: 0 PID: 32658 Comm: syz.7.10733 Not tainted syzkaller #0 PREEMPT(full) [ 1465.931760][T32658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1465.931772][T32658] Call Trace: [ 1465.931781][T32658] [ 1465.931790][T32658] dump_stack_lvl+0xe8/0x150 [ 1465.931826][T32658] should_fail_ex+0x410/0x560 [ 1465.931862][T32658] should_failslab+0xa8/0x100 [ 1465.931887][T32658] ? skb_clone+0x212/0x3a0 [ 1465.931920][T32658] kmem_cache_alloc_noprof+0xa1/0x600 [ 1465.931954][T32658] ? skb_clone+0x212/0x3a0 [ 1465.931990][T32658] skb_clone+0x212/0x3a0 [ 1465.932023][T32658] __netlink_deliver_tap+0x413/0x860 [ 1465.932058][T32658] ? netlink_deliver_tap+0x2e/0x1b0 [ 1465.932089][T32658] netlink_deliver_tap+0x19c/0x1b0 [ 1465.932111][T32658] netlink_unicast+0x781/0x940 [ 1465.932152][T32658] netlink_sendmsg+0x813/0xb40 [ 1465.932182][T32658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1465.932218][T32658] ? apparmor_socket_sendmsg+0x98/0x360 [ 1465.932244][T32658] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1465.932283][T32658] sock_sendmsg_nosec+0x13a/0x180 [ 1465.932306][T32658] ____sys_sendmsg+0x54e/0x850 [ 1465.932339][T32658] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1465.932376][T32658] ? import_iovec+0x73/0xa0 [ 1465.932406][T32658] ___sys_sendmsg+0x2a5/0x360 [ 1465.932431][T32658] ? __lock_acquire+0x747/0x2de0 [ 1465.932456][T32658] ? __pfx____sys_sendmsg+0x10/0x10 [ 1465.932523][T32658] ? __fget_files+0x2a/0x420 [ 1465.932548][T32658] ? __fget_files+0x3a2/0x420 [ 1465.932585][T32658] __x64_sys_sendmsg+0x1b1/0x290 [ 1465.932615][T32658] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1465.932666][T32658] do_syscall_64+0x166/0x520 [ 1465.932689][T32658] ? trace_irq_disable+0x3b/0x140 [ 1465.932709][T32658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.932729][T32658] ? clear_bhb_loop+0x70/0xc0 [ 1465.932754][T32658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.932773][T32658] RIP: 0033:0x7f96c5d9e159 [ 1465.932793][T32658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1465.932810][T32658] RSP: 002b:00007f96c6d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1465.932831][T32658] RAX: ffffffffffffffda RBX: 00007f96c6025fa0 RCX: 00007f96c5d9e159 [ 1465.932845][T32658] RDX: 0000000000000080 RSI: 0000200000000100 RDI: 0000000000000003 [ 1465.932858][T32658] RBP: 00007f96c6d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1465.932871][T32658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.932883][T32658] R13: 00007f96c6026038 R14: 00007f96c6025fa0 R15: 00007fff5bd7cb48 [ 1465.932917][T32658] [ 1467.377000][T32688] netlink: 'syz.8.10744': attribute type 1 has an invalid length. [ 1467.436369][T32688] ip_tables: iptables: counters copy to user failed while replacing table [ 1467.618958][T32697] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10748'. [ 1468.238148][T32717] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10752'. [ 1468.306521][T32717] netlink: 'syz.0.10752': attribute type 2 has an invalid length. [ 1471.433665][T32723] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1471.476971][T32738] netlink: 'syz.5.10758': attribute type 2 has an invalid length. [ 1471.977343][T26268] IPVS: starting estimator thread 0... [ 1472.075379][ T305] IPVS: using max 25 ests per chain, 60000 per kthread [ 1472.100068][ T300] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10766'. [ 1472.100097][ T300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10766'. [ 1472.180061][ T300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1472.220364][ T312] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10769'. [ 1472.222119][ T300] bond4: (slave bond0): Enslaving as an active interface with a down link [ 1472.377729][ T307] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10768'. [ 1472.940749][ T321] vxcan2: entered promiscuous mode [ 1472.940775][ T321] vxcan2: entered allmulticast mode [ 1473.657375][ T335] netlink: 'syz.8.10778': attribute type 64 has an invalid length. [ 1473.812274][ T347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10782'. [ 1473.882435][ T349] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10784'. [ 1474.332120][ T359] x_tables: duplicate underflow at hook 1 [ 1474.551722][ T368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1474.551998][ T10] lo speed is unknown, defaulting to 1000 [ 1474.823200][ T379] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10795'. [ 1475.419902][ T399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10798'. [ 1475.438146][ T399] netlink: 65011 bytes leftover after parsing attributes in process `syz.5.10798'. [ 1476.618558][ T433] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10809'. [ 1476.618593][ T433] netlink: 12 bytes leftover after parsing attributes in process `syz.8.10809'. [ 1476.931133][ T440] netlink: 40 bytes leftover after parsing attributes in process `syz.8.10811'. [ 1478.092710][ T390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1478.584414][ T462] netlink: 'syz.8.10814': attribute type 2 has an invalid length. [ 1479.211146][ T482] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10822'. [ 1479.212682][ T477] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10822'. [ 1479.226044][ T481] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10822'. [ 1479.226234][ T481] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10822'. [ 1479.226410][ T481] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10822'. [ 1479.226591][ T481] netlink: 92 bytes leftover after parsing attributes in process `syz.7.10822'. [ 1479.734784][ T496] netlink: 20 bytes leftover after parsing attributes in process `syz.6.10828'. [ 1479.734841][ T496] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 1479.744038][ T494] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10827'. [ 1480.214510][ T507] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10832'. [ 1480.214554][ T507] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10832'. [ 1480.411364][T23449] bond1: (slave bond0): link status definitely down, disabling slave [ 1480.450254][T23449] bond1: now running without any active interface! [ 1480.932469][ T527] ip_tables: iptables: counters copy to user failed while replacing table [ 1481.470450][T23451] nci: nci_ntf_packet: unknown ntf opcode 0xc06 [ 1481.827886][ T558] netlink: 'syz.0.10847': attribute type 4 has an invalid length. [ 1484.013242][ T606] netlink: 'syz.0.10856': attribute type 4 has an invalid length. [ 1484.267304][ T545] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1485.045567][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.571202][ T647] netlink: 'syz.6.10867': attribute type 16 has an invalid length. [ 1485.571226][ T647] __nla_validate_parse: 10 callbacks suppressed [ 1485.571239][ T647] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10867'. [ 1485.571478][ T647] veth0_macvtap: entered allmulticast mode [ 1485.711476][ T653] netlink: 'syz.6.10867': attribute type 16 has an invalid length. [ 1485.711500][ T653] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10867'. [ 1486.376556][ T677] netlink: 'syz.7.10873': attribute type 49 has an invalid length. [ 1486.407157][ T674] netlink: 36 bytes leftover after parsing attributes in process `syz.5.10872'. [ 1487.471070][ T712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10885'. [ 1487.670144][ T713] tipc: Started in network mode [ 1487.670251][ T713] tipc: Node identity 369098395861, cluster identity 4711 [ 1487.670436][ T713] tipc: Enabled bearer , priority 0 [ 1487.962883][ T722] netlink: 36 bytes leftover after parsing attributes in process `syz.7.10890'. [ 1488.036380][ T713] syzkaller0: entered promiscuous mode [ 1488.036410][ T713] syzkaller0: entered allmulticast mode [ 1488.037140][ T713] tipc: Resetting bearer [ 1488.486637][T23451] tipc: Resetting bearer [ 1488.492208][ T711] tipc: Resetting bearer [ 1494.001555][ T711] tipc: Disabling bearer [ 1494.015602][ T731] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10894'. [ 1494.322591][ T10] tipc: Node number set to 1861326905 [ 1494.919291][ T770] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10904'. [ 1495.110034][ T774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10906'. [ 1495.110061][ T774] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10906'. [ 1495.252417][ T779] nbd3: detected capacity change from 0 to 63 [ 1495.494350][ T787] nbd4: detected capacity change from 0 to 63 [ 1495.623029][ T790] netlink: 52 bytes leftover after parsing attributes in process `syz.6.10907'. [ 1495.845890][T26013] block nbd3: Receive control failed (result -104) [ 1495.847370][ T5616] block nbd4: Receive control failed (result -32) [ 1495.977037][ T804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10911'. [ 1496.410347][ T817] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10912'. [ 1496.451776][ T817] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10912'. [ 1496.644617][ T820] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10918'. [ 1496.818808][ T823] netlink: 48 bytes leftover after parsing attributes in process `syz.6.10916'. [ 1497.488917][ T840] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1497.804506][ T842] pimreg: entered allmulticast mode [ 1498.853111][ T871] macvtap1: entered promiscuous mode [ 1498.853380][ T871] macvtap1: entered allmulticast mode [ 1498.853398][ T871] gretap0: entered allmulticast mode [ 1498.926953][ T871] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 1499.402648][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554d3000: rx timeout, send abort [ 1499.597459][ T892] __nla_validate_parse: 3 callbacks suppressed [ 1499.597485][ T892] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10941'. [ 1499.726341][ T896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1499.792156][ T898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10942'. [ 1499.902763][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880554d3000: abort rx timeout. Force session deactivation [ 1499.902996][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805859a000: rx timeout, send abort [ 1500.066620][ T901] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10943'. [ 1500.403071][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805859a000: abort rx timeout. Force session deactivation [ 1500.547290][ T908] netlink: 36 bytes leftover after parsing attributes in process `syz.8.10945'. [ 1501.020155][ T922] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10950'. [ 1501.308335][ T934] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10952'. [ 1502.128171][ T972] netlink: 'syz.6.10960': attribute type 12 has an invalid length. [ 1502.217116][ T975] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10960'. [ 1502.419820][ T978] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10960'. [ 1502.472399][ T982] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10961'. [ 1503.232087][ T976] netlink: 'syz.6.10960': attribute type 12 has an invalid length. [ 1504.269639][ T1023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1505.193873][ T1054] netlink: 'syz.0.10978': attribute type 1 has an invalid length. [ 1505.193899][ T1054] netlink: 'syz.0.10978': attribute type 4 has an invalid length. [ 1505.194670][ T1054] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10978'. [ 1505.224913][ T1054] netlink: 'syz.0.10978': attribute type 1 has an invalid length. [ 1505.224937][ T1054] netlink: 'syz.0.10978': attribute type 4 has an invalid length. [ 1505.224950][ T1054] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.10978'. [ 1505.271273][ T540] bond1: (slave bond0): link status definitely up, 20000 Mbps full duplex [ 1505.271378][ T540] bond1: (slave bond0): making interface the new active one [ 1505.282177][ T1045] FAULT_INJECTION: forcing a failure. [ 1505.282177][ T1045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1505.282209][ T1045] CPU: 0 UID: 0 PID: 1045 Comm: syz.6.10976 Not tainted syzkaller #0 PREEMPT(full) [ 1505.282229][ T1045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1505.282240][ T1045] Call Trace: [ 1505.282249][ T1045] [ 1505.282258][ T1045] dump_stack_lvl+0xe8/0x150 [ 1505.282292][ T1045] should_fail_ex+0x410/0x560 [ 1505.282318][ T1045] _copy_from_user+0x2d/0xb0 [ 1505.282343][ T1045] ___sys_recvmsg+0x173/0x5a0 [ 1505.282376][ T1045] ? __pfx____sys_recvmsg+0x10/0x10 [ 1505.282407][ T1045] ? lock_acquire+0x115/0x350 [ 1505.282456][ T1045] do_recvmmsg+0x31a/0x7f0 [ 1505.282491][ T1045] ? __pfx_do_recvmmsg+0x10/0x10 [ 1505.282545][ T1045] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1505.282572][ T1045] ? __fget_files+0x3a2/0x420 [ 1505.282608][ T1045] __x64_sys_recvmmsg+0x198/0x250 [ 1505.282637][ T1045] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1505.282675][ T1045] do_syscall_64+0x166/0x520 [ 1505.282698][ T1045] ? trace_irq_disable+0x3b/0x140 [ 1505.282716][ T1045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.282735][ T1045] ? clear_bhb_loop+0x70/0xc0 [ 1505.282757][ T1045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.282775][ T1045] RIP: 0033:0x7f1cea99e159 [ 1505.282795][ T1045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.282810][ T1045] RSP: 002b:00007f1ceb86c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1505.282831][ T1045] RAX: ffffffffffffffda RBX: 00007f1ceac26090 RCX: 00007f1cea99e159 [ 1505.282856][ T1045] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 1505.282868][ T1045] RBP: 00007f1ceb86c090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.282880][ T1045] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 1505.282892][ T1045] R13: 00007f1ceac26128 R14: 00007f1ceac26090 R15: 00007fff2fa52e88 [ 1505.282922][ T1045] [ 1505.357086][ T540] bond1: active interface up! [ 1505.771675][ T1058] netlink: 8 bytes leftover after parsing attributes in process `syz.8.10979'. [ 1505.784908][ T1067] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10980'. [ 1505.784940][ T1067] netlink: 256 bytes leftover after parsing attributes in process `syz.7.10980'. [ 1505.839997][ T1070] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10981'. [ 1506.175679][ T1080] netlink: 48 bytes leftover after parsing attributes in process `syz.7.10984'. [ 1506.431765][ T1092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10987'. [ 1506.990081][ T1111] netlink: 'syz.8.10991': attribute type 5 has an invalid length. [ 1507.133246][ T1105] netlink: Failed to add helper -22 [ 1507.133305][ T1105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1507.861263][ T1130] netlink: 'syz.0.11000': attribute type 2 has an invalid length. [ 1507.861289][ T1130] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11000'. [ 1507.895136][ T1132] netlink: 'syz.0.11000': attribute type 2 has an invalid length. [ 1507.895161][ T1132] netlink: 40 bytes leftover after parsing attributes in process `syz.0.11000'. [ 1510.592708][ T1223] __nla_validate_parse: 7 callbacks suppressed [ 1510.592731][ T1223] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11027'. [ 1510.713422][ T1231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11029'. [ 1511.116947][ T1243] netlink: NAT attribute has 5 unknown bytes [ 1511.116992][ T1243] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.223280][ T1248] nbd: must specify a device to reconfigure [ 1511.437321][ T1250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1511.892603][ T1262] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11038'. [ 1512.027023][ T1264] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11039'. [ 1512.032827][ T1266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11039'. [ 1512.537151][ T1282] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11042'. [ 1512.809146][ T1289] netlink: NAT attribute has 5 unknown bytes [ 1512.809186][ T1289] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1512.812271][ T1290] netlink: 'syz.7.11048': attribute type 4 has an invalid length. [ 1512.853303][ T1286] nbd: must specify a device to reconfigure [ 1513.939478][ T1323] netlink: NAT attribute has 5 unknown bytes [ 1513.939518][ T1323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1514.625866][ T1342] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11066'. [ 1515.072420][ T1357] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11070'. [ 1515.093569][ T1355] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11068'. [ 1515.113287][ T1355] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11068'. [ 1515.512618][ T1366] veth1_macvtap: left promiscuous mode [ 1515.802943][ T1375] netlink: NAT attribute has 5 unknown bytes [ 1515.802982][ T1375] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1515.808064][ T1368] netlink: 108 bytes leftover after parsing attributes in process `syz.8.11074'. [ 1516.059445][ T1387] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11078'. [ 1516.144444][ T1388] netlink: 'syz.7.11078': attribute type 19 has an invalid length. [ 1516.144471][ T1388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11078'. [ 1516.233710][ T1383] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.274320][ T1391] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1516.319052][ T1392] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11081'. [ 1516.590607][ T1396] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11082'. [ 1516.599764][ T1388] netlink: 'syz.7.11078': attribute type 19 has an invalid length. [ 1516.599786][ T1388] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11078'. [ 1516.615455][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1516.622942][T23451] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1516.622985][T23451] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1517.359914][ T1420] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1517.556150][ T1424] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11093'. [ 1517.700566][ T1426] netlink: 332 bytes leftover after parsing attributes in process `syz.6.11094'. [ 1517.821702][ T1434] netlink: NAT attribute has 5 unknown bytes [ 1517.821744][ T1434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1517.928962][ T1430] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11095'. [ 1518.598207][ T1458] FAULT_INJECTION: forcing a failure. [ 1518.598207][ T1458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.598242][ T1458] CPU: 0 UID: 0 PID: 1458 Comm: syz.5.11102 Not tainted syzkaller #0 PREEMPT(full) [ 1518.598264][ T1458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1518.598276][ T1458] Call Trace: [ 1518.598285][ T1458] [ 1518.598295][ T1458] dump_stack_lvl+0xe8/0x150 [ 1518.598330][ T1458] should_fail_ex+0x410/0x560 [ 1518.598360][ T1458] _copy_to_user+0x31/0xb0 [ 1518.598388][ T1458] simple_read_from_buffer+0xe1/0x170 [ 1518.598422][ T1458] proc_fail_nth_read+0x1bb/0x230 [ 1518.598443][ T1458] ? common_file_perm+0x20e/0x2b0 [ 1518.598471][ T1458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1518.598496][ T1458] ? rw_verify_area+0x24a/0x4c0 [ 1518.598526][ T1458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1518.598546][ T1458] vfs_read+0x213/0xa80 [ 1518.598580][ T1458] ? __pfx___mutex_lock+0x10/0x10 [ 1518.598608][ T1458] ? __pfx_vfs_read+0x10/0x10 [ 1518.598638][ T1458] ? __fget_files+0x2a/0x420 [ 1518.598673][ T1458] ? __fget_files+0x3a2/0x420 [ 1518.598705][ T1458] ? __fget_files+0x2a/0x420 [ 1518.598742][ T1458] ksys_read+0x150/0x270 [ 1518.598773][ T1458] ? __pfx_ksys_read+0x10/0x10 [ 1518.598814][ T1458] do_syscall_64+0x166/0x520 [ 1518.598838][ T1458] ? trace_irq_disable+0x3b/0x140 [ 1518.598859][ T1458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.598880][ T1458] ? clear_bhb_loop+0x70/0xc0 [ 1518.598904][ T1458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.598925][ T1458] RIP: 0033:0x7fe8a2f5e98e [ 1518.598944][ T1458] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1518.598961][ T1458] RSP: 002b:00007fe8a3f20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1518.598984][ T1458] RAX: ffffffffffffffda RBX: 00007fe8a3f216c0 RCX: 00007fe8a2f5e98e [ 1518.598998][ T1458] RDX: 000000000000000f RSI: 00007fe8a3f210a0 RDI: 0000000000000004 [ 1518.599011][ T1458] RBP: 00007fe8a3f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1518.599024][ T1458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1518.599036][ T1458] R13: 00007fe8a3226038 R14: 00007fe8a3225fa0 R15: 00007fff1dbcc6d8 [ 1518.599071][ T1458] [ 1518.862474][ T1459] netlink: 88 bytes leftover after parsing attributes in process `syz.8.11101'. [ 1519.394069][ T1466] FAULT_INJECTION: forcing a failure. [ 1519.394069][ T1466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.394104][ T1466] CPU: 0 UID: 0 PID: 1466 Comm: syz.8.11107 Not tainted syzkaller #0 PREEMPT(full) [ 1519.394127][ T1466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1519.394139][ T1466] Call Trace: [ 1519.394148][ T1466] [ 1519.394158][ T1466] dump_stack_lvl+0xe8/0x150 [ 1519.394193][ T1466] should_fail_ex+0x410/0x560 [ 1519.394232][ T1466] _copy_to_user+0x31/0xb0 [ 1519.394261][ T1466] simple_read_from_buffer+0xe1/0x170 [ 1519.394296][ T1466] proc_fail_nth_read+0x1bb/0x230 [ 1519.394315][ T1466] ? common_file_perm+0x20e/0x2b0 [ 1519.394343][ T1466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1519.394368][ T1466] ? rw_verify_area+0x24a/0x4c0 [ 1519.394398][ T1466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1519.394418][ T1466] vfs_read+0x213/0xa80 [ 1519.394452][ T1466] ? __pfx___mutex_lock+0x10/0x10 [ 1519.394480][ T1466] ? __pfx_vfs_read+0x10/0x10 [ 1519.394510][ T1466] ? __fget_files+0x2a/0x420 [ 1519.394542][ T1466] ? __fget_files+0x3a2/0x420 [ 1519.394571][ T1466] ? __fget_files+0x2a/0x420 [ 1519.394606][ T1466] ksys_read+0x150/0x270 [ 1519.394637][ T1466] ? __pfx_ksys_read+0x10/0x10 [ 1519.394679][ T1466] do_syscall_64+0x166/0x520 [ 1519.394702][ T1466] ? trace_irq_disable+0x3b/0x140 [ 1519.394722][ T1466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.394742][ T1466] ? clear_bhb_loop+0x70/0xc0 [ 1519.394767][ T1466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.394787][ T1466] RIP: 0033:0x7f3f38b5e98e [ 1519.394807][ T1466] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1519.394824][ T1466] RSP: 002b:00007f3f39b2efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1519.394846][ T1466] RAX: ffffffffffffffda RBX: 00007f3f39b2f6c0 RCX: 00007f3f38b5e98e [ 1519.394860][ T1466] RDX: 000000000000000f RSI: 00007f3f39b2f0a0 RDI: 0000000000000004 [ 1519.394872][ T1466] RBP: 00007f3f39b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.394885][ T1466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1519.394897][ T1466] R13: 00007f3f38e26038 R14: 00007f3f38e25fa0 R15: 00007ffd507591c8 [ 1519.394931][ T1466] [ 1519.764691][ T1472] openvswitch: netlink: EtherType 548 is less than min 600 [ 1520.143030][ T1481] netlink: NAT attribute has 5 unknown bytes [ 1520.143069][ T1481] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1521.904633][ T1531] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 1521.904910][ T1531] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 1522.048576][ T1528] xt_hashlimit: size too large, truncated to 1048576 [ 1522.513052][ T1547] netlink: NAT attribute has 5 unknown bytes [ 1522.513096][ T1547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1523.358549][ T1574] macvlan0: entered promiscuous mode [ 1523.510989][ T5279] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1523.770291][ T1587] openvswitch: netlink: IPv4 tun info is not correct [ 1524.270662][ T1598] __nla_validate_parse: 4 callbacks suppressed [ 1524.270687][ T1598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11147'. [ 1524.353548][ T1600] netlink: NAT attribute has 5 unknown bytes [ 1524.353587][ T1600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1525.228133][ T1624] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11154'. [ 1525.361044][ T1948] block nbd3: Possible stuck request ffff888026f30000: control (read@0,1024B). Runtime 30 seconds [ 1525.361098][ T1948] block nbd3: Possible stuck request ffff888026f301c0: control (read@1024,1024B). Runtime 30 seconds [ 1525.361125][ T1948] block nbd3: Possible stuck request ffff888026f30380: control (read@2048,1024B). Runtime 30 seconds [ 1525.361149][ T1948] block nbd3: Possible stuck request ffff888026f30540: control (read@3072,1024B). Runtime 30 seconds [ 1525.752378][ T1640] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11161'. [ 1526.015199][ T1948] block nbd4: Possible stuck request ffff888026fe6200: control (read@0,1024B). Runtime 30 seconds [ 1526.015247][ T1948] block nbd4: Possible stuck request ffff888026fe63c0: control (read@1024,1024B). Runtime 30 seconds [ 1526.015275][ T1948] block nbd4: Possible stuck request ffff888026fe6580: control (read@2048,1024B). Runtime 30 seconds [ 1526.015301][ T1948] block nbd4: Possible stuck request ffff888026fe6740: control (read@3072,1024B). Runtime 30 seconds [ 1526.203331][ T1659] netlink: NAT attribute has 5 unknown bytes [ 1526.203373][ T1659] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1526.740972][ T1669] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11171'. [ 1526.939323][ T5279] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1527.110237][ T1675] netlink: 40 bytes leftover after parsing attributes in process `syz.5.11173'. [ 1527.472266][ T1688] mac80211_hwsim hwsim45 wlan1: entered promiscuous mode [ 1527.684240][ T1695] FAULT_INJECTION: forcing a failure. [ 1527.684240][ T1695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1527.684275][ T1695] CPU: 0 UID: 0 PID: 1695 Comm: syz.7.11180 Not tainted syzkaller #0 PREEMPT(full) [ 1527.684298][ T1695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1527.684310][ T1695] Call Trace: [ 1527.684319][ T1695] [ 1527.684328][ T1695] dump_stack_lvl+0xe8/0x150 [ 1527.684363][ T1695] should_fail_ex+0x410/0x560 [ 1527.684393][ T1695] _copy_from_user+0x2d/0xb0 [ 1527.684420][ T1695] ___sys_sendmsg+0x1c6/0x360 [ 1527.684449][ T1695] ? __lock_acquire+0x747/0x2de0 [ 1527.684475][ T1695] ? __pfx____sys_sendmsg+0x10/0x10 [ 1527.684545][ T1695] ? __fget_files+0x2a/0x420 [ 1527.684571][ T1695] ? __fget_files+0x3a2/0x420 [ 1527.684608][ T1695] __x64_sys_sendmsg+0x1b1/0x290 [ 1527.684638][ T1695] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1527.684686][ T1695] do_syscall_64+0x166/0x520 [ 1527.684711][ T1695] ? trace_irq_disable+0x3b/0x140 [ 1527.684730][ T1695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.684751][ T1695] ? clear_bhb_loop+0x70/0xc0 [ 1527.684775][ T1695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1527.684795][ T1695] RIP: 0033:0x7f96c5d9e159 [ 1527.684815][ T1695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1527.684832][ T1695] RSP: 002b:00007f96c6d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1527.684855][ T1695] RAX: ffffffffffffffda RBX: 00007f96c6025fa0 RCX: 00007f96c5d9e159 [ 1527.684869][ T1695] RDX: 0000000020040004 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1527.684882][ T1695] RBP: 00007f96c6d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1527.684895][ T1695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1527.684907][ T1695] R13: 00007f96c6026038 R14: 00007f96c6025fa0 R15: 00007fff5bd7cb48 [ 1527.684937][ T1695] [ 1528.029655][ T1697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11181'. [ 1528.330661][ T1701] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11184'. [ 1528.449952][ T1703] netlink: NAT attribute has 5 unknown bytes [ 1528.449996][ T1703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1529.668041][ T1739] nbd: couldn't find a device at index 65533 [ 1530.083333][ T1745] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11197'. [ 1530.207652][ T1753] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11200'. [ 1530.208237][ T1753] netlink: 'syz.8.11200': attribute type 61 has an invalid length. [ 1530.652395][ T1758] netlink: NAT attribute has 5 unknown bytes [ 1530.652435][ T1758] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1530.858966][ T1765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11203'. [ 1531.053653][ T1769] nbd: couldn't find a device at index 33554432 [ 1531.181311][ T1779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11208'. [ 1531.181355][ T1779] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11208'. [ 1531.385824][ T5279] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1531.860859][ T1787] netlink: 'syz.8.11212': attribute type 1 has an invalid length. [ 1532.104706][ T1792] pim6reg: entered allmulticast mode [ 1532.166558][ T1787] tap0: tun_chr_ioctl cmd 2148553947 [ 1532.172322][ T1787] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11212'. [ 1532.874516][ T1822] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11223'. [ 1533.024887][ T1826] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20002 [ 1533.672245][ T1846] batadv_slave_0: entered promiscuous mode [ 1534.073522][ T1842] batadv_slave_0: left promiscuous mode [ 1534.233689][ T1840] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1534.474017][ T1860] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11236'. [ 1534.618884][ T5279] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1535.148253][ T1882] netlink: 'syz.7.11241': attribute type 1 has an invalid length. [ 1535.667132][ T1891] bond2: (slave veth0_to_bond): making interface the new active one [ 1535.689095][ T1891] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1536.320400][ T1910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11245'. [ 1536.575633][ T1924] FAULT_INJECTION: forcing a failure. [ 1536.575633][ T1924] name failslab, interval 1, probability 0, space 0, times 0 [ 1536.575668][ T1924] CPU: 0 UID: 0 PID: 1924 Comm: syz.5.11248 Not tainted syzkaller #0 PREEMPT(full) [ 1536.575690][ T1924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1536.575702][ T1924] Call Trace: [ 1536.575711][ T1924] [ 1536.575720][ T1924] dump_stack_lvl+0xe8/0x150 [ 1536.575754][ T1924] should_fail_ex+0x410/0x560 [ 1536.575782][ T1924] ? __alloc_skb+0x1db/0x7a0 [ 1536.575807][ T1924] should_failslab+0xa8/0x100 [ 1536.575837][ T1924] ? __alloc_skb+0x1db/0x7a0 [ 1536.575858][ T1924] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1536.575887][ T1924] ? __alloc_skb+0x18d/0x7a0 [ 1536.575910][ T1924] ? __alloc_skb+0x1db/0x7a0 [ 1536.575939][ T1924] __alloc_skb+0x1db/0x7a0 [ 1536.575967][ T1924] netlink_sendmsg+0x5d4/0xb40 [ 1536.575999][ T1924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.576029][ T1924] ? apparmor_socket_sendmsg+0x98/0x360 [ 1536.576054][ T1924] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.576073][ T1924] sock_sendmsg_nosec+0x13a/0x180 [ 1536.576098][ T1924] ____sys_sendmsg+0x54e/0x850 [ 1536.576131][ T1924] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1536.576169][ T1924] ? import_iovec+0x73/0xa0 [ 1536.576199][ T1924] ___sys_sendmsg+0x2a5/0x360 [ 1536.576224][ T1924] ? __lock_acquire+0x747/0x2de0 [ 1536.576250][ T1924] ? __pfx____sys_sendmsg+0x10/0x10 [ 1536.576315][ T1924] ? __fget_files+0x2a/0x420 [ 1536.576340][ T1924] ? __fget_files+0x3a2/0x420 [ 1536.576376][ T1924] __x64_sys_sendmsg+0x1b1/0x290 [ 1536.576405][ T1924] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1536.576463][ T1924] do_syscall_64+0x166/0x520 [ 1536.576488][ T1924] ? trace_irq_disable+0x3b/0x140 [ 1536.576508][ T1924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.576528][ T1924] ? clear_bhb_loop+0x70/0xc0 [ 1536.576553][ T1924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.576573][ T1924] RIP: 0033:0x7fe8a2f9e159 [ 1536.576593][ T1924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.576610][ T1924] RSP: 002b:00007fe8a3f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.576633][ T1924] RAX: ffffffffffffffda RBX: 00007fe8a3225fa0 RCX: 00007fe8a2f9e159 [ 1536.576648][ T1924] RDX: 0000000004000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1536.576661][ T1924] RBP: 00007fe8a3f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.576673][ T1924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.576685][ T1924] R13: 00007fe8a3226038 R14: 00007fe8a3225fa0 R15: 00007fff1dbcc6d8 [ 1536.576718][ T1924] [ 1536.652979][ T1926] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11249'. [ 1537.372461][ T1945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1537.474996][ T1949] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11256'. [ 1537.475023][ T1949] netlink: 4 bytes leftover after parsing attributes in process `syz.8.11256'. [ 1537.720827][ T1955] netlink: 'syz.0.11257': attribute type 1 has an invalid length. [ 1538.224554][ T540] bond1: (slave bond0): link status definitely down, disabling slave [ 1538.284132][ T540] bond1: now running without any active interface! [ 1539.161858][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.161858][ T1980] Use struct sctp_assoc_value instead [ 1539.162336][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.162336][ T1980] Use struct sctp_assoc_value instead [ 1539.162803][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.162803][ T1980] Use struct sctp_assoc_value instead [ 1539.163288][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.163288][ T1980] Use struct sctp_assoc_value instead [ 1539.163741][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.163741][ T1980] Use struct sctp_assoc_value instead [ 1539.164229][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.164229][ T1980] Use struct sctp_assoc_value instead [ 1539.164589][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.164589][ T1980] Use struct sctp_assoc_value instead [ 1539.164938][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.164938][ T1980] Use struct sctp_assoc_value instead [ 1539.165368][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.165368][ T1980] Use struct sctp_assoc_value instead [ 1539.165776][ T1980] sctp: [Deprecated]: syz.0.11265 (pid 1980) Use of int in max_burst socket option. [ 1539.165776][ T1980] Use struct sctp_assoc_value instead [ 1539.533730][ T1986] netlink: 12 bytes leftover after parsing attributes in process `syz.8.11269'. [ 1539.697890][ T1990] xt_IDLETIMER: timeout value is too big [ 1540.493187][ T2014] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1540.619930][ T2019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1540.790996][ T2020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1542.418658][ T2096] netlink: 48 bytes leftover after parsing attributes in process `syz.8.11294'. [ 1542.740989][ T2080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.771989][ T2077] netlink: 216 bytes leftover after parsing attributes in process `syz.6.11291'. [ 1542.804166][ T2077] netlink: 32 bytes leftover after parsing attributes in process `syz.6.11291'. [ 1543.605460][ T2141] ieee802154 phy1 wpan1: encryption failed: -22 [ 1544.145851][ T2169] FAULT_INJECTION: forcing a failure. [ 1544.145851][ T2169] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.145889][ T2169] CPU: 1 UID: 0 PID: 2169 Comm: syz.6.11303 Not tainted syzkaller #0 PREEMPT(full) [ 1544.145913][ T2169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1544.145926][ T2169] Call Trace: [ 1544.145936][ T2169] [ 1544.145946][ T2169] dump_stack_lvl+0xe8/0x150 [ 1544.145982][ T2169] should_fail_ex+0x410/0x560 [ 1544.146014][ T2169] should_failslab+0xa8/0x100 [ 1544.146043][ T2169] __kmalloc_cache_noprof+0xa3/0x600 [ 1544.146067][ T2169] ? tcf_action_init_1+0x1c2/0x740 [ 1544.146093][ T2169] ? tcf_action_init_1+0x1c2/0x740 [ 1544.146127][ T2169] tcf_action_init_1+0x1c2/0x740 [ 1544.146160][ T2169] ? __pfx_tcf_action_init_1+0x10/0x10 [ 1544.146186][ T2169] ? _raw_read_unlock+0x28/0x50 [ 1544.146294][ T2169] ? tc_action_load_ops+0x247/0x540 [ 1544.146345][ T2169] ? __nla_parse+0x40/0x60 [ 1544.146376][ T2169] tcf_action_init+0x31b/0xa60 [ 1544.146416][ T2169] ? __pfx_tcf_action_init+0x10/0x10 [ 1544.146476][ T2169] ? __pfx___nla_validate_parse+0x10/0x10 [ 1544.146503][ T2169] ? finish_task_switch+0x40e/0xc60 [ 1544.146572][ T2169] tc_ctl_action+0x43b/0xc70 [ 1544.146612][ T2169] ? __pfx_tc_ctl_action+0x10/0x10 [ 1544.146646][ T2169] ? rcu_is_watching+0x16/0xb0 [ 1544.146719][ T2169] ? __pfx_tc_ctl_action+0x10/0x10 [ 1544.146752][ T2169] rtnetlink_rcv_msg+0x7b9/0xc00 [ 1544.146784][ T2169] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1544.146809][ T2169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1544.146830][ T2169] ? ref_tracker_free+0x689/0x830 [ 1544.146858][ T2169] ? __pfx_ref_tracker_free+0x10/0x10 [ 1544.146895][ T2169] netlink_rcv_skb+0x226/0x4a0 [ 1544.146928][ T2169] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1544.146955][ T2169] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1544.147016][ T2169] netlink_unicast+0x7bd/0x940 [ 1544.147058][ T2169] netlink_sendmsg+0x813/0xb40 [ 1544.147091][ T2169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1544.147122][ T2169] ? apparmor_socket_sendmsg+0x98/0x360 [ 1544.147149][ T2169] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1544.147168][ T2169] sock_sendmsg_nosec+0x13a/0x180 [ 1544.147195][ T2169] ____sys_sendmsg+0x54e/0x850 [ 1544.147230][ T2169] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1544.147267][ T2169] ? import_iovec+0x73/0xa0 [ 1544.147299][ T2169] ___sys_sendmsg+0x2a5/0x360 [ 1544.147325][ T2169] ? __lock_acquire+0x747/0x2de0 [ 1544.147354][ T2169] ? __pfx____sys_sendmsg+0x10/0x10 [ 1544.147424][ T2169] ? __fget_files+0x2a/0x420 [ 1544.147451][ T2169] ? __fget_files+0x3a2/0x420 [ 1544.147492][ T2169] __x64_sys_sendmsg+0x1b1/0x290 [ 1544.147524][ T2169] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1544.147578][ T2169] do_syscall_64+0x166/0x520 [ 1544.147603][ T2169] ? trace_irq_disable+0x3b/0x140 [ 1544.147623][ T2169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.147646][ T2169] ? clear_bhb_loop+0x70/0xc0 [ 1544.147671][ T2169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.147692][ T2169] RIP: 0033:0x7f1cea99e159 [ 1544.147714][ T2169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.147740][ T2169] RSP: 002b:00007f1ceb88d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1544.147764][ T2169] RAX: ffffffffffffffda RBX: 00007f1ceac25fa0 RCX: 00007f1cea99e159 [ 1544.147779][ T2169] RDX: 0000000004000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1544.147793][ T2169] RBP: 00007f1ceb88d090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.147807][ T2169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.147820][ T2169] R13: 00007f1ceac26038 R14: 00007f1ceac25fa0 R15: 00007fff2fa52e88 [ 1544.147854][ T2169] [ 1544.379512][ T2179] tipc: New replicast peer: 255.255.255.255 [ 1544.380467][ T2179] tipc: Enabled bearer , priority 10 [ 1545.639472][ T2205] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11313'. [ 1545.753180][ T2209] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11312'. [ 1546.488412][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.514417][ T2223] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11315'. [ 1546.514455][ T2223] netlink: 28 bytes leftover after parsing attributes in process `syz.8.11315'. [ 1546.667820][ T2229] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11317'. [ 1547.340380][ T2239] netlink: 'syz.7.11320': attribute type 3 has an invalid length. [ 1547.340407][ T2239] netlink: 666 bytes leftover after parsing attributes in process `syz.7.11320'. [ 1547.369332][ T2239] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11320'. [ 1547.893720][ T2250] nbd: couldn't find a device at index -33619968 [ 1548.697225][ T2271] sctp: [Deprecated]: syz.5.11328 (pid 2271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1548.697225][ T2271] Use struct sctp_sack_info instead [ 1548.729162][ T2271] sctp: [Deprecated]: syz.5.11328 (pid 2271) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1548.729162][ T2271] Use struct sctp_sack_info instead [ 1548.751279][ T2274] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11330'. [ 1549.620063][ T2299] FAULT_INJECTION: forcing a failure. [ 1549.620063][ T2299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.623930][ T2298] nbd: couldn't find a device at index -196608 [ 1549.635203][ T2299] CPU: 0 UID: 0 PID: 2299 Comm: syz.7.11338 Not tainted syzkaller #0 PREEMPT(full) [ 1549.635229][ T2299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1549.635240][ T2299] Call Trace: [ 1549.635248][ T2299] [ 1549.635257][ T2299] dump_stack_lvl+0xe8/0x150 [ 1549.635298][ T2299] should_fail_ex+0x410/0x560 [ 1549.635326][ T2299] _copy_from_user+0x2d/0xb0 [ 1549.635351][ T2299] ___sys_recvmsg+0x173/0x5a0 [ 1549.635383][ T2299] ? __pfx____sys_recvmsg+0x10/0x10 [ 1549.635414][ T2299] ? lock_acquire+0x115/0x350 [ 1549.635463][ T2299] do_recvmmsg+0x31a/0x7f0 [ 1549.635497][ T2299] ? __pfx_do_recvmmsg+0x10/0x10 [ 1549.635534][ T2299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1549.635561][ T2299] ? __fget_files+0x3a2/0x420 [ 1549.635596][ T2299] __x64_sys_recvmmsg+0x198/0x250 [ 1549.635624][ T2299] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1549.635662][ T2299] do_syscall_64+0x166/0x520 [ 1549.635684][ T2299] ? trace_irq_disable+0x3b/0x140 [ 1549.635702][ T2299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.635720][ T2299] ? clear_bhb_loop+0x70/0xc0 [ 1549.635742][ T2299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.635760][ T2299] RIP: 0033:0x7f96c5d9e159 [ 1549.635780][ T2299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.635795][ T2299] RSP: 002b:00007f96c6d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1549.635817][ T2299] RAX: ffffffffffffffda RBX: 00007f96c6025fa0 RCX: 00007f96c5d9e159 [ 1549.635834][ T2299] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 1549.635846][ T2299] RBP: 00007f96c6d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.635857][ T2299] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 1549.635869][ T2299] R13: 00007f96c6026038 R14: 00007f96c6025fa0 R15: 00007fff5bd7cb48 [ 1549.635900][ T2299] [ 1550.057443][ T2309] netlink: 'syz.8.11340': attribute type 1 has an invalid length. [ 1550.057469][ T2309] netlink: 224 bytes leftover after parsing attributes in process `syz.8.11340'. [ 1550.116019][ T2306] netlink: 'syz.6.11341': attribute type 15 has an invalid length. [ 1550.491366][ T2319] netlink: 256 bytes leftover after parsing attributes in process `syz.6.11345'. [ 1550.491397][ T2319] netlink: 256 bytes leftover after parsing attributes in process `syz.6.11345'. [ 1550.632668][ T2322] netlink: 36 bytes leftover after parsing attributes in process `syz.8.11344'. [ 1550.649755][ T2327] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11343'. [ 1551.197069][ T2337] ip_tables: iptables: counters copy to user failed while replacing table [ 1551.467999][ T2345] bridge0: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1552.834979][ T2380] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11362'. [ 1553.251390][ T2388] tipc: Failed to remove unknown binding: 66,1,1/0:4057821843/4057821845 [ 1555.232192][ T2428] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11373'. [ 1555.433408][ T2434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11376'. [ 1555.433434][ T2434] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11376'. [ 1555.435602][ T1948] block nbd3: Possible stuck request ffff888026f30000: control (read@0,1024B). Runtime 60 seconds [ 1555.435646][ T1948] block nbd3: Possible stuck request ffff888026f301c0: control (read@1024,1024B). Runtime 60 seconds [ 1555.435672][ T1948] block nbd3: Possible stuck request ffff888026f30380: control (read@2048,1024B). Runtime 60 seconds [ 1555.435708][ T1948] block nbd3: Possible stuck request ffff888026f30540: control (read@3072,1024B). Runtime 60 seconds [ 1556.093923][ T1948] block nbd4: Possible stuck request ffff888026fe6200: control (read@0,1024B). Runtime 60 seconds [ 1556.093966][ T1948] block nbd4: Possible stuck request ffff888026fe63c0: control (read@1024,1024B). Runtime 60 seconds [ 1556.094243][ T1948] block nbd4: Possible stuck request ffff888026fe6580: control (read@2048,1024B). Runtime 60 seconds [ 1556.094272][ T1948] block nbd4: Possible stuck request ffff888026fe6740: control (read@3072,1024B). Runtime 60 seconds [ 1556.928884][ T2477] netlink: 196 bytes leftover after parsing attributes in process `syz.8.11383'. [ 1557.220454][ T2497] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20003 [ 1557.371509][ T2504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11389'. [ 1557.371535][ T2504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11389'. [ 1557.405760][ T2504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1557.431027][ T2504] bond5: (slave bond0): Enslaving as an active interface with a down link [ 1558.232107][ T2536] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11394'. [ 1558.233848][ T2536] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11394'. [ 1559.600036][ T2477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1560.219780][ T2583] tipc: MTU too low for tipc bearer [ 1560.229134][ T2579] netlink: 36 bytes leftover after parsing attributes in process `syz.7.11396'. [ 1561.063668][ T2613] syzkaller0: entered promiscuous mode [ 1561.063732][ T2613] syzkaller0: entered allmulticast mode [ 1561.161648][ T2626] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11408'. [ 1562.548654][ T2681] netlink: 36 bytes leftover after parsing attributes in process `syz.6.11421'. [ 1563.227231][ T2712] netlink: 'syz.7.11429': attribute type 4 has an invalid length. [ 1563.418734][ T2715] FAULT_INJECTION: forcing a failure. [ 1563.418734][ T2715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1563.418769][ T2715] CPU: 0 UID: 0 PID: 2715 Comm: syz.8.11430 Not tainted syzkaller #0 PREEMPT(full) [ 1563.418791][ T2715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1563.418803][ T2715] Call Trace: [ 1563.418812][ T2715] [ 1563.418826][ T2715] dump_stack_lvl+0xe8/0x150 [ 1563.418861][ T2715] should_fail_ex+0x410/0x560 [ 1563.418890][ T2715] _copy_from_iter+0x1d3/0x1660 [ 1563.418916][ T2715] ? __alloc_skb+0x27a/0x7a0 [ 1563.418943][ T2715] ? __alloc_skb+0x27a/0x7a0 [ 1563.418969][ T2715] ? __alloc_skb+0x27a/0x7a0 [ 1563.418994][ T2715] ? __pfx__copy_from_iter+0x10/0x10 [ 1563.419015][ T2715] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 1563.419043][ T2715] ? __alloc_skb+0x27a/0x7a0 [ 1563.419064][ T2715] ? __alloc_skb+0x27a/0x7a0 [ 1563.419094][ T2715] ? netlink_sendmsg+0x650/0xb40 [ 1563.419115][ T2715] ? skb_put+0x112/0x210 [ 1563.419143][ T2715] netlink_sendmsg+0x6c0/0xb40 [ 1563.419173][ T2715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.419202][ T2715] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1563.419228][ T2715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1563.419246][ T2715] sock_sendmsg_nosec+0x13a/0x180 [ 1563.419272][ T2715] ____sys_sendmsg+0x54e/0x850 [ 1563.419304][ T2715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1563.419342][ T2715] ? import_iovec+0x73/0xa0 [ 1563.419371][ T2715] ___sys_sendmsg+0x2a5/0x360 [ 1563.419397][ T2715] ? __lock_acquire+0x747/0x2de0 [ 1563.419423][ T2715] ? __pfx____sys_sendmsg+0x10/0x10 [ 1563.419496][ T2715] ? __fget_files+0x2a/0x420 [ 1563.419522][ T2715] ? __fget_files+0x3a2/0x420 [ 1563.419559][ T2715] __x64_sys_sendmsg+0x1b1/0x290 [ 1563.419591][ T2715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1563.419640][ T2715] do_syscall_64+0x166/0x520 [ 1563.419665][ T2715] ? trace_irq_disable+0x3b/0x140 [ 1563.419685][ T2715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.419705][ T2715] ? clear_bhb_loop+0x70/0xc0 [ 1563.419730][ T2715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.419750][ T2715] RIP: 0033:0x7f3f38b9e159 [ 1563.419770][ T2715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.419787][ T2715] RSP: 002b:00007f3f39b2f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1563.419809][ T2715] RAX: ffffffffffffffda RBX: 00007f3f38e25fa0 RCX: 00007f3f38b9e159 [ 1563.419825][ T2715] RDX: 0000000020008000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1563.419839][ T2715] RBP: 00007f3f39b2f090 R08: 0000000000000000 R09: 0000000000000000 [ 1563.419851][ T2715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1563.419862][ T2715] R13: 00007f3f38e26038 R14: 00007f3f38e25fa0 R15: 00007ffd507591c8 [ 1563.419896][ T2715] [ 1564.412562][ T2753] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11438'. [ 1564.851128][ T2764] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11440'. [ 1564.934612][ T2769] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11440'. [ 1564.948329][ T2769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11440'. [ 1564.948361][ T2769] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11440'. [ 1565.405024][ T2769] vlan0: entered promiscuous mode [ 1566.345183][ T2823] netlink: 28 bytes leftover after parsing attributes in process `syz.7.11453'. [ 1566.567113][ T2797] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1566.572149][ T2823] netlink: 'syz.7.11453': attribute type 2 has an invalid length. [ 1566.636393][ T2823] : entered promiscuous mode [ 1568.301186][ T2786] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1568.366237][ T2815] netlink: 'syz.7.11453': attribute type 3 has an invalid length. [ 1568.366264][ T2815] netlink: 'syz.7.11453': attribute type 1 has an invalid length. [ 1568.366278][ T2815] netlink: 212 bytes leftover after parsing attributes in process `syz.7.11453'. [ 1568.366295][ T2815] NCSI netlink: No device for ifindex 813332851 [ 1569.634266][ T2933] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1569.663270][ T2932] netlink: 'syz.5.11463': attribute type 3 has an invalid length. [ 1570.284204][ T2949] FAULT_INJECTION: forcing a failure. [ 1570.284204][ T2949] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.284244][ T2949] CPU: 1 UID: 0 PID: 2949 Comm: syz.6.11468 Not tainted syzkaller #0 PREEMPT(full) [ 1570.284268][ T2949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1570.284281][ T2949] Call Trace: [ 1570.284291][ T2949] [ 1570.284300][ T2949] dump_stack_lvl+0xe8/0x150 [ 1570.284337][ T2949] should_fail_ex+0x410/0x560 [ 1570.284369][ T2949] should_failslab+0xa8/0x100 [ 1570.284398][ T2949] __kvmalloc_node_noprof+0x176/0x820 [ 1570.284426][ T2949] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1570.284452][ T2949] ? bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1570.284488][ T2949] bpf_jit_binary_pack_alloc+0x10a/0x300 [ 1570.284514][ T2949] ? __pfx_jit_fill_hole+0x10/0x10 [ 1570.284550][ T2949] bpf_int_jit_compile+0xa16/0x17e0 [ 1570.284603][ T2949] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 1570.284636][ T2949] ? kfree+0x1c5/0x650 [ 1570.284663][ T2949] ? bpf_prog_calc_tag+0x310/0x370 [ 1570.284685][ T2949] ? vfree+0x42b/0x490 [ 1570.284719][ T2949] ? bpf_prog_calc_tag+0x310/0x370 [ 1570.284748][ T2949] bpf_jit_subprogs+0x1d01/0x4590 [ 1570.284803][ T2949] bpf_check+0x1ca8/0x2ef0 [ 1570.284848][ T2949] ? __pfx_bpf_check+0x10/0x10 [ 1570.284874][ T2949] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1570.284906][ T2949] bpf_prog_load+0x14d6/0x1c20 [ 1570.284953][ T2949] ? __pfx_bpf_prog_load+0x10/0x10 [ 1570.285005][ T2949] __sys_bpf+0xd0d/0xd90 [ 1570.285039][ T2949] ? __pfx___sys_bpf+0x10/0x10 [ 1570.285075][ T2949] ? __fget_files+0x2a/0x420 [ 1570.285122][ T2949] ? ksys_write+0x242/0x270 [ 1570.285156][ T2949] ? __pfx_ksys_write+0x10/0x10 [ 1570.285191][ T2949] __x64_sys_bpf+0xba/0xd0 [ 1570.285216][ T2949] do_syscall_64+0x166/0x520 [ 1570.285243][ T2949] ? trace_irq_disable+0x3b/0x140 [ 1570.285263][ T2949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.285283][ T2949] ? clear_bhb_loop+0x70/0xc0 [ 1570.285308][ T2949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.285328][ T2949] RIP: 0033:0x7f1cea99e159 [ 1570.285349][ T2949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.285366][ T2949] RSP: 002b:00007f1ceb88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1570.285391][ T2949] RAX: ffffffffffffffda RBX: 00007f1ceac25fa0 RCX: 00007f1cea99e159 [ 1570.285406][ T2949] RDX: 0000000000000070 RSI: 0000200000000440 RDI: 0000000000000005 [ 1570.285418][ T2949] RBP: 00007f1ceb88d090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.285432][ T2949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1570.285444][ T2949] R13: 00007f1ceac26038 R14: 00007f1ceac25fa0 R15: 00007fff2fa52e88 [ 1570.285479][ T2949] [ 1570.978617][ T2962] syzkaller0: entered promiscuous mode [ 1570.978644][ T2962] syzkaller0: entered allmulticast mode [ 1571.448189][ T2973] FAULT_INJECTION: forcing a failure. [ 1571.448189][ T2973] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1571.448226][ T2973] CPU: 0 UID: 0 PID: 2973 Comm: syz.5.11475 Not tainted syzkaller #0 PREEMPT(full) [ 1571.448249][ T2973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1571.448262][ T2973] Call Trace: [ 1571.448271][ T2973] [ 1571.448281][ T2973] dump_stack_lvl+0xe8/0x150 [ 1571.448316][ T2973] should_fail_ex+0x410/0x560 [ 1571.448346][ T2973] _copy_from_user+0x2d/0xb0 [ 1571.448377][ T2973] kstrtouint_from_user+0xd6/0x180 [ 1571.448411][ T2973] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1571.448444][ T2973] ? lock_acquire+0x115/0x350 [ 1571.448471][ T2973] proc_fail_nth_write+0x8e/0x210 [ 1571.448493][ T2973] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1571.448523][ T2973] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1571.448543][ T2973] vfs_write+0x296/0xba0 [ 1571.448583][ T2973] ? __pfx_vfs_write+0x10/0x10 [ 1571.448614][ T2973] ? __fget_files+0x2a/0x420 [ 1571.448647][ T2973] ? __fget_files+0x3a2/0x420 [ 1571.448672][ T2973] ? __fget_files+0x2a/0x420 [ 1571.448709][ T2973] ksys_write+0x150/0x270 [ 1571.448741][ T2973] ? __pfx_ksys_write+0x10/0x10 [ 1571.448783][ T2973] do_syscall_64+0x166/0x520 [ 1571.448808][ T2973] ? trace_irq_disable+0x3b/0x140 [ 1571.448828][ T2973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.448848][ T2973] ? clear_bhb_loop+0x70/0xc0 [ 1571.448873][ T2973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.448893][ T2973] RIP: 0033:0x7fe8a2f5e98e [ 1571.448913][ T2973] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1571.448929][ T2973] RSP: 002b:00007fe8a3f20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1571.448952][ T2973] RAX: ffffffffffffffda RBX: 00007fe8a3f216c0 RCX: 00007fe8a2f5e98e [ 1571.448966][ T2973] RDX: 0000000000000001 RSI: 00007fe8a3f210a0 RDI: 0000000000000005 [ 1571.448979][ T2973] RBP: 00007fe8a3f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.448991][ T2973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1571.449003][ T2973] R13: 00007fe8a3226038 R14: 00007fe8a3225fa0 R15: 00007fff1dbcc6d8 [ 1571.449055][ T2973] [ 1572.225857][ T2986] netlink: 'syz.6.11479': attribute type 2 has an invalid length. [ 1572.679850][ T3000] netlink: 'syz.6.11485': attribute type 1 has an invalid length. [ 1573.404505][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11491'. [ 1574.228514][ T3036] pimreg: entered allmulticast mode [ 1574.392730][ T3036] vlan2: entered allmulticast mode [ 1574.392753][ T3036] bond0: entered allmulticast mode [ 1574.962360][ T3070] FAULT_INJECTION: forcing a failure. [ 1574.962360][ T3070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1574.962396][ T3070] CPU: 0 UID: 0 PID: 3070 Comm: syz.7.11504 Not tainted syzkaller #0 PREEMPT(full) [ 1574.962418][ T3070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1574.962431][ T3070] Call Trace: [ 1574.962439][ T3070] [ 1574.962449][ T3070] dump_stack_lvl+0xe8/0x150 [ 1574.962489][ T3070] should_fail_ex+0x410/0x560 [ 1574.962522][ T3070] _copy_to_user+0x31/0xb0 [ 1574.962553][ T3070] sctp_getsockopt_sctp_status+0x7a2/0xae0 [ 1574.962720][ T3070] ? __pfx_sctp_getsockopt_sctp_status+0x10/0x10 [ 1574.962774][ T3070] ? sctp_getsockopt+0x12f/0xb90 [ 1574.962801][ T3070] ? __local_bh_enable_ip+0xd6/0x140 [ 1574.962839][ T3070] sctp_getsockopt+0x65e/0xb90 [ 1574.962873][ T3070] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1574.962900][ T3070] do_sock_getsockopt+0x51d/0x7e0 [ 1574.962932][ T3070] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1574.962976][ T3070] ? __fget_files+0x3a2/0x420 [ 1574.963006][ T3070] ? __fget_files+0x2a/0x420 [ 1574.963041][ T3070] __x64_sys_getsockopt+0x1a4/0x240 [ 1574.963079][ T3070] do_syscall_64+0x166/0x520 [ 1574.963105][ T3070] ? trace_irq_disable+0x3b/0x140 [ 1574.963127][ T3070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.963150][ T3070] ? clear_bhb_loop+0x70/0xc0 [ 1574.963177][ T3070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.963198][ T3070] RIP: 0033:0x7f96c5d9e159 [ 1574.963220][ T3070] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.963239][ T3070] RSP: 002b:00007f96c6d4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1574.963262][ T3070] RAX: ffffffffffffffda RBX: 00007f96c6025fa0 RCX: 00007f96c5d9e159 [ 1574.963278][ T3070] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000004 [ 1574.963291][ T3070] RBP: 00007f96c6d4f090 R08: 0000200000000380 R09: 0000000000000000 [ 1574.963305][ T3070] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1574.963319][ T3070] R13: 00007f96c6026038 R14: 00007f96c6025fa0 R15: 00007fff5bd7cb48 [ 1574.963354][ T3070] [ 1575.594530][ T3086] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11507'. [ 1575.627591][ T3086] netlink: 'syz.7.11507': attribute type 10 has an invalid length. [ 1575.627622][ T3086] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11507'. [ 1576.382211][ T3106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11517'. [ 1576.593116][ T3118] netlink: 'syz.6.11516': attribute type 64 has an invalid length. [ 1576.667390][ T3124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.11519'. [ 1577.050402][ T3138] ip_tables: iptables: counters copy to user failed while replacing table [ 1577.433875][ T3141] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1577.943021][ T3149] hsr0: entered allmulticast mode [ 1577.943048][ T3149] hsr_slave_0: entered allmulticast mode [ 1577.943066][ T3149] hsr_slave_1: entered allmulticast mode [ 1578.130601][ T3165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11530'. [ 1578.130631][ T3165] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11530'. [ 1578.215989][ T3163] netlink: 2 bytes leftover after parsing attributes in process `syz.6.11530'. [ 1578.235383][ T3163] netlink: 84 bytes leftover after parsing attributes in process `syz.6.11530'. [ 1578.235407][ T3163] netlink: 128 bytes leftover after parsing attributes in process `syz.6.11530'. [ 1578.493328][ T3174] FAULT_INJECTION: forcing a failure. [ 1578.493328][ T3174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1578.505510][ T3174] CPU: 0 UID: 0 PID: 3174 Comm: syz.7.11534 Not tainted syzkaller #0 PREEMPT(full) [ 1578.505540][ T3174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1578.505553][ T3174] Call Trace: [ 1578.505562][ T3174] [ 1578.505572][ T3174] dump_stack_lvl+0xe8/0x150 [ 1578.505606][ T3174] should_fail_ex+0x410/0x560 [ 1578.505635][ T3174] _copy_from_user+0x2d/0xb0 [ 1578.505663][ T3174] ___sys_recvmsg+0x173/0x5a0 [ 1578.505699][ T3174] ? __pfx____sys_recvmsg+0x10/0x10 [ 1578.505735][ T3174] ? lock_acquire+0x115/0x350 [ 1578.505791][ T3174] do_recvmmsg+0x31a/0x7f0 [ 1578.505832][ T3174] ? __pfx_do_recvmmsg+0x10/0x10 [ 1578.505871][ T3174] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1578.505900][ T3174] ? __fget_files+0x3a2/0x420 [ 1578.505939][ T3174] __x64_sys_recvmmsg+0x198/0x250 [ 1578.505970][ T3174] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1578.506011][ T3174] do_syscall_64+0x166/0x520 [ 1578.506035][ T3174] ? trace_irq_disable+0x3b/0x140 [ 1578.506054][ T3174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.506075][ T3174] ? clear_bhb_loop+0x70/0xc0 [ 1578.506099][ T3174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.506118][ T3174] RIP: 0033:0x7f96c5d9e159 [ 1578.506138][ T3174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.506155][ T3174] RSP: 002b:00007f96c6d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1578.506179][ T3174] RAX: ffffffffffffffda RBX: 00007f96c6025fa0 RCX: 00007f96c5d9e159 [ 1578.506194][ T3174] RDX: 0000000000000032 RSI: 0000200000001600 RDI: 0000000000000003 [ 1578.506207][ T3174] RBP: 00007f96c6d4f090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.506218][ T3174] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 1578.506231][ T3174] R13: 00007f96c6026038 R14: 00007f96c6025fa0 R15: 00007fff5bd7cb48 [ 1578.506274][ T3174] [ 1579.089798][ T3186] netlink: 'syz.6.11537': attribute type 16 has an invalid length. [ 1579.089826][ T3186] netlink: 'syz.6.11537': attribute type 17 has an invalid length. [ 1579.546992][ T3218] Bluetooth: hci0: unsupported parameter 5135 [ 1579.547020][ T3218] Bluetooth: hci0: unsupported parameter 8192 [ 1579.547035][ T3218] Bluetooth: hci0: unsupported parameter 5135 [ 1579.547048][ T3218] Bluetooth: hci0: unsupported parameter 8192 [ 1579.670295][ T3186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.793638][ T3186] hsr0: left allmulticast mode [ 1579.801626][ T3186] hsr_slave_0: left allmulticast mode [ 1579.801653][ T3186] hsr_slave_1: left allmulticast mode [ 1579.861378][ T3186] vlan0: left promiscuous mode [ 1579.878742][ T3186] veth1_vlan: entered promiscuous mode [ 1579.981548][ T3186] veth0_macvtap: left allmulticast mode [ 1580.014761][ T3186] vlan1: left allmulticast mode [ 1580.014792][ T3186] netdevsim netdevsim6 netdevsim0: left allmulticast mode [ 1580.107740][ T3186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1580.147891][ T3186] bond3: left promiscuous mode [ 1580.148307][ T3186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1580.149051][ T3186] veth0_to_team: entered promiscuous mode [ 1580.152689][ T3186] gretap2: left promiscuous mode [ 1580.152713][ T3186] gretap2: left allmulticast mode [ 1580.189286][ T3186] A link change request failed with some changes committed already. Interface vxlan2 may have been left with an inconsistent configuration, please check. [ 1580.269605][ T3183] tipc: Enabled bearer , priority 0 [ 1580.757130][ T3244] x_tables: unsorted entry at hook 4 [ 1580.826809][ T3201] syzkaller0: entered promiscuous mode [ 1580.827041][ T3201] syzkaller0: entered allmulticast mode [ 1580.830923][ T3201] tipc: Resetting bearer [ 1581.438345][ T3266] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1581.507770][T26270] tipc: Resetting bearer [ 1581.555942][ T3181] tipc: Resetting bearer [ 1581.716189][ T3271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1584.526210][ T4984] udevd[4984]: worker [759] /devices/virtual/block/nbd3 is taking a long time [ 1584.526273][ T4984] udevd[4984]: worker [791] /devices/virtual/block/nbd4 is taking a long time [ 1585.529753][ T1948] block nbd3: Possible stuck request ffff888026f30000: control (read@0,1024B). Runtime 90 seconds [ 1585.530045][ T1948] block nbd3: Possible stuck request ffff888026f301c0: control (read@1024,1024B). Runtime 90 seconds [ 1585.530072][ T1948] block nbd3: Possible stuck request ffff888026f30380: control (read@2048,1024B). Runtime 90 seconds [ 1585.530095][ T1948] block nbd3: Possible stuck request ffff888026f30540: control (read@3072,1024B). Runtime 90 seconds [ 1586.165762][ T1948] block nbd4: Possible stuck request ffff888026fe6200: control (read@0,1024B). Runtime 90 seconds [ 1586.165809][ T1948] block nbd4: Possible stuck request ffff888026fe63c0: control (read@1024,1024B). Runtime 90 seconds [ 1586.165844][ T1948] block nbd4: Possible stuck request ffff888026fe6580: control (read@2048,1024B). Runtime 90 seconds [ 1586.165868][ T1948] block nbd4: Possible stuck request ffff888026fe6740: control (read@3072,1024B). Runtime 90 seconds [ 1586.911158][ T3181] tipc: Disabling bearer [ 1587.317031][ T3279] __nla_validate_parse: 2 callbacks suppressed [ 1587.317055][ T3279] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11554'. [ 1587.347194][ T3279] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11554'. [ 1587.363266][ T3284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11555'. [ 1587.784801][ T3294] netlink: 'syz.5.11560': attribute type 1 has an invalid length. [ 1587.876330][ T3301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11560'. [ 1587.876357][ T3301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11560'. [ 1588.072426][ T3294] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1588.152378][ T3309] ip_tables: iptables: counters copy to user failed while replacing table [ 1588.288334][ T3303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1588.319244][ T3303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1588.379880][ T3303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1588.438383][ T3311] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1588.679567][ T3328] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11567'. [ 1588.812560][ T3328] ip6tnl2: entered promiscuous mode [ 1589.355459][ T3338] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1590.185856][ T3371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11577'. [ 1590.221377][ T3371] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11577'. [ 1590.984438][ T3375] [ 1590.986841][ T3375] ====================================================== [ 1590.994138][ T3375] WARNING: possible circular locking dependency detected [ 1591.001344][ T3375] syzkaller #0 Not tainted [ 1591.005969][ T3375] ------------------------------------------------------ [ 1591.013055][ T3375] syz.7.11578/3375 is trying to acquire lock: [ 1591.019129][ T3375] ffff888026f6b418 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 1591.028844][ T3375] [ 1591.028844][ T3375] but task is already holding lock: [ 1591.036405][ T3375] ffff888026f6aef0 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1591.046699][ T3375] [ 1591.046699][ T3375] which lock already depends on the new lock. [ 1591.046699][ T3375] [ 1591.057214][ T3375] [ 1591.057214][ T3375] the existing dependency chain (in reverse order) is: [ 1591.066343][ T3375] [ 1591.066343][ T3375] -> #6 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 1591.075157][ T3375] blk_alloc_queue+0x544/0x690 [ 1591.080487][ T3375] __blk_mq_alloc_disk+0x194/0x390 [ 1591.086178][ T3375] nbd_dev_add+0x494/0xb60 [ 1591.091172][ T3375] nbd_init+0x168/0x1f0 [ 1591.095987][ T3375] do_one_initcall+0x250/0x870 [ 1591.101296][ T3375] do_initcall_level+0x10a/0x1a0 [ 1591.106816][ T3375] do_initcalls+0x59/0xa0 [ 1591.111665][ T3375] kernel_init_freeable+0x29d/0x3e0 [ 1591.117404][ T3375] kernel_init+0x22/0x1d0 [ 1591.122442][ T3375] ret_from_fork+0x514/0xb70 [ 1591.127602][ T3375] ret_from_fork_asm+0x1a/0x30 [ 1591.132914][ T3375] [ 1591.132914][ T3375] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 1591.140149][ T3375] fs_reclaim_acquire+0x71/0x100 [ 1591.145625][ T3375] kmem_cache_alloc_node_noprof+0x5f/0x610 [ 1591.151965][ T3375] __alloc_skb+0x1db/0x7a0 [ 1591.156915][ T3375] tcp_stream_alloc_skb+0x3f/0x580 [ 1591.162631][ T3375] tcp_sendmsg_locked+0x138c/0x5400 [ 1591.168354][ T3375] tcp_sendmsg+0x2f/0x50 [ 1591.173124][ T3375] sock_sendmsg_nosec+0x10e/0x180 [ 1591.178762][ T3375] sock_write_iter+0x2de/0x3e0 [ 1591.184054][ T3375] vfs_write+0x612/0xba0 [ 1591.189046][ T3375] ksys_write+0x150/0x270 [ 1591.193918][ T3375] do_syscall_64+0x166/0x520 [ 1591.199060][ T3375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.205598][ T3375] [ 1591.205598][ T3375] -> #4 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1591.213258][ T3375] lock_sock_nested+0x41/0x100 [ 1591.218560][ T3375] inet_shutdown+0x6a/0x390 [ 1591.223670][ T3375] nbd_mark_nsock_dead+0x2cb/0x550 [ 1591.229357][ T3375] recv_work+0x1cee/0x1e10 [ 1591.234473][ T3375] process_scheduled_works+0xc3d/0x1630 [ 1591.240652][ T3375] worker_thread+0xa47/0xfb0 [ 1591.245779][ T3375] kthread+0x38b/0x480 [ 1591.251416][ T3375] ret_from_fork+0x514/0xb70 [ 1591.256529][ T3375] ret_from_fork_asm+0x1a/0x30 [ 1591.262173][ T3375] [ 1591.262173][ T3375] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 1591.270007][ T3375] __mutex_lock+0x19d/0x1550 [ 1591.275133][ T3375] nbd_queue_rq+0x373/0xff0 [ 1591.280161][ T3375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1591.286240][ T3375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1591.293145][ T3375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1591.299742][ T3375] blk_mq_run_work_fn+0x16c/0x300 [ 1591.305760][ T3375] process_scheduled_works+0xc3d/0x1630 [ 1591.311834][ T3375] worker_thread+0xa47/0xfb0 [ 1591.316958][ T3375] kthread+0x38b/0x480 [ 1591.321637][ T3375] ret_from_fork+0x514/0xb70 [ 1591.326769][ T3375] ret_from_fork_asm+0x1a/0x30 [ 1591.332065][ T3375] [ 1591.332065][ T3375] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 1591.339368][ T3375] __mutex_lock+0x19d/0x1550 [ 1591.344491][ T3375] nbd_queue_rq+0xc1/0xff0 [ 1591.349630][ T3375] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1591.355704][ T3375] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1591.362558][ T3375] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1591.369150][ T3375] blk_mq_run_work_fn+0x16c/0x300 [ 1591.374712][ T3375] process_scheduled_works+0xc3d/0x1630 [ 1591.380789][ T3375] worker_thread+0xa47/0xfb0 [ 1591.385996][ T3375] kthread+0x38b/0x480 [ 1591.390591][ T3375] ret_from_fork+0x514/0xb70 [ 1591.395735][ T3375] ret_from_fork_asm+0x1a/0x30 [ 1591.401030][ T3375] [ 1591.401030][ T3375] -> #1 (set->srcu){.+.+}-{0:0}: [ 1591.408166][ T3375] __synchronize_srcu+0xc9/0x2f0 [ 1591.413638][ T3375] elevator_switch+0x1e8/0x7b0 [ 1591.418931][ T3375] elevator_change+0x2fa/0x480 [ 1591.424230][ T3375] elevator_set_default+0x375/0x440 [ 1591.429958][ T3375] blk_register_queue+0x3f3/0x4e0 [ 1591.435969][ T3375] __add_disk+0x6b8/0xdb0 [ 1591.440833][ T3375] add_disk_fwnode+0x100/0x3a0 [ 1591.446151][ T3375] nbd_dev_add+0x733/0xb60 [ 1591.451189][ T3375] nbd_init+0x168/0x1f0 [ 1591.456071][ T3375] do_one_initcall+0x250/0x870 [ 1591.461453][ T3375] do_initcall_level+0x10a/0x1a0 [ 1591.466926][ T3375] do_initcalls+0x59/0xa0 [ 1591.471777][ T3375] kernel_init_freeable+0x29d/0x3e0 [ 1591.477495][ T3375] kernel_init+0x22/0x1d0 [ 1591.482345][ T3375] ret_from_fork+0x514/0xb70 [ 1591.487467][ T3375] ret_from_fork_asm+0x1a/0x30 [ 1591.492800][ T3375] [ 1591.492800][ T3375] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 1591.500734][ T3375] __lock_acquire+0x164c/0x2de0 [ 1591.506304][ T3375] lock_acquire+0x115/0x350 [ 1591.511334][ T3375] __mutex_lock+0x19d/0x1550 [ 1591.516453][ T3375] elevator_change+0x1af/0x480 [ 1591.521750][ T3375] elevator_set_none+0xb5/0x140 [ 1591.527299][ T3375] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1591.533635][ T3375] nbd_start_device+0x189/0xb30 [ 1591.539012][ T3375] nbd_genl_connect+0x167d/0x1cd0 [ 1591.544651][ T3375] genl_family_rcv_msg_doit+0x233/0x340 [ 1591.550812][ T3375] genl_rcv_msg+0x614/0x7a0 [ 1591.555846][ T3375] netlink_rcv_skb+0x226/0x4a0 [ 1591.561140][ T3375] genl_rcv+0x28/0x40 [ 1591.565650][ T3375] netlink_unicast+0x7bd/0x940 [ 1591.570945][ T3375] netlink_sendmsg+0x813/0xb40 [ 1591.576329][ T3375] sock_sendmsg_nosec+0x13a/0x180 [ 1591.581877][ T3375] ____sys_sendmsg+0x54e/0x850 [ 1591.587167][ T3375] ___sys_sendmsg+0x2a5/0x360 [ 1591.592372][ T3375] __x64_sys_sendmsg+0x1b1/0x290 [ 1591.597837][ T3375] do_syscall_64+0x166/0x520 [ 1591.602959][ T3375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1591.609469][ T3375] [ 1591.609469][ T3375] other info that might help us debug this: [ 1591.609469][ T3375] [ 1591.619869][ T3375] Chain exists of: [ 1591.619869][ T3375] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#54 [ 1591.619869][ T3375] [ 1591.633637][ T3375] Possible unsafe locking scenario: [ 1591.633637][ T3375] [ 1591.641110][ T3375] CPU0 CPU1 [ 1591.646640][ T3375] ---- ---- [ 1591.652018][ T3375] lock(&q->q_usage_counter(io)#54); [ 1591.657401][ T3375] lock(fs_reclaim); [ 1591.663915][ T3375] lock(&q->q_usage_counter(io)#54); [ 1591.671810][ T3375] lock(&q->elevator_lock); [ 1591.676577][ T3375] [ 1591.676577][ T3375] *** DEADLOCK *** [ 1591.676577][ T3375] [ 1591.684861][ T3375] locks held by syz.7.11578/3375: 6, last CPU#0: [ 1591.691248][ T3375] #0: ffffffff902c5cc8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1591.699536][ T3375] #1: ffffffff902c5b00 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 1591.708530][ T3375] #2: ffff888026f679c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 1591.725267][ T3375] #3: ffff888026f678d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 1591.736327][ T3375] #4: ffff888026f6aef0 (&q->q_usage_counter(io)#54){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 1591.746951][ T3375] #5: ffff888026f6af28 (&q->q_usage_counter(queue)#38){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 1591.757922][ T3375] [ 1591.757922][ T3375] stack backtrace: [ 1591.763813][ T3375] CPU: 0 UID: 0 PID: 3375 Comm: syz.7.11578 Not tainted syzkaller #0 PREEMPT(full) [ 1591.773184][ T3375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1591.783242][ T3375] Call Trace: [ 1591.786528][ T3375] [ 1591.789466][ T3375] dump_stack_lvl+0xe8/0x150 [ 1591.794067][ T3375] print_circular_bug+0x2e2/0x300 [ 1591.799100][ T3375] check_noncircular+0x12f/0x150 [ 1591.804045][ T3375] __lock_acquire+0x164c/0x2de0 [ 1591.808926][ T3375] lock_acquire+0x115/0x350 [ 1591.813430][ T3375] ? elevator_change+0x1af/0x480 [ 1591.818640][ T3375] __mutex_lock+0x19d/0x1550 [ 1591.823242][ T3375] ? elevator_change+0x1af/0x480 [ 1591.828182][ T3375] ? rcu_is_watching+0x16/0xb0 [ 1591.833041][ T3375] ? elevator_change+0x1af/0x480 [ 1591.837980][ T3375] ? __pfx___mutex_lock+0x10/0x10 [ 1591.843023][ T3375] ? enable_work+0x17f/0x230 [ 1591.847624][ T3375] ? lockdep_hardirqs_on+0x7b/0x110 [ 1591.852842][ T3375] ? __cancel_work_sync+0xf8/0x110 [ 1591.858049][ T3375] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 1591.863541][ T3375] elevator_change+0x1af/0x480 [ 1591.868313][ T3375] elevator_set_none+0xb5/0x140 [ 1591.873166][ T3375] ? __pfx_elevator_set_none+0x10/0x10 [ 1591.878630][ T3375] ? xa_load+0x1db/0x210 [ 1591.882946][ T3375] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1591.888766][ T3375] ? kernfs_add_one+0xfc/0x6f0 [ 1591.893570][ T3375] ? nbd_start_device+0x17d/0xb30 [ 1591.898638][ T3375] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 1591.904915][ T3375] ? sysfs_add_file_mode_ns+0x258/0x300 [ 1591.910481][ T3375] nbd_start_device+0x189/0xb30 [ 1591.915373][ T3375] ? device_create_file+0xf4/0x1b0 [ 1591.920597][ T3375] nbd_genl_connect+0x167d/0x1cd0 [ 1591.925655][ T3375] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1591.931044][ T3375] ? rcu_is_watching+0x16/0xb0 [ 1591.935818][ T3375] ? __nla_parse+0x40/0x60 [ 1591.940251][ T3375] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1591.946599][ T3375] genl_family_rcv_msg_doit+0x233/0x340 [ 1591.952155][ T3375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1591.958252][ T3375] ? __dev_queue_xmit+0x29b/0x3820 [ 1591.963442][ T3375] genl_rcv_msg+0x614/0x7a0 [ 1591.967975][ T3375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1591.973023][ T3375] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1591.978435][ T3375] netlink_rcv_skb+0x226/0x4a0 [ 1591.983234][ T3375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1591.988300][ T3375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1591.993691][ T3375] ? down_read+0x2be/0x330 [ 1591.998211][ T3375] genl_rcv+0x28/0x40 [ 1592.002202][ T3375] netlink_unicast+0x7bd/0x940 [ 1592.006998][ T3375] netlink_sendmsg+0x813/0xb40 [ 1592.011860][ T3375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.017157][ T3375] ? apparmor_socket_sendmsg+0x98/0x360 [ 1592.022838][ T3375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1592.029372][ T3375] sock_sendmsg_nosec+0x13a/0x180 [ 1592.034504][ T3375] ____sys_sendmsg+0x54e/0x850 [ 1592.039818][ T3375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1592.046152][ T3375] ? import_iovec+0x73/0xa0 [ 1592.050719][ T3375] ___sys_sendmsg+0x2a5/0x360 [ 1592.056239][ T3375] ? __lock_acquire+0x747/0x2de0 [ 1592.061282][ T3375] ? __pfx____sys_sendmsg+0x10/0x10 [ 1592.066686][ T3375] ? futex_wait+0x2a2/0x390 [ 1592.071245][ T3375] ? __fget_files+0x2a/0x420 [ 1592.075854][ T3375] ? __fget_files+0x3a2/0x420 [ 1592.080563][ T3375] __x64_sys_sendmsg+0x1b1/0x290 [ 1592.085602][ T3375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1592.091088][ T3375] do_syscall_64+0x166/0x520 [ 1592.095684][ T3375] ? trace_irq_disable+0x3b/0x140 [ 1592.100746][ T3375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.106819][ T3375] ? clear_bhb_loop+0x70/0xc0 [ 1592.111677][ T3375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1592.117576][ T3375] RIP: 0033:0x7f96c5d9e159 [ 1592.122024][ T3375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1592.141906][ T3375] RSP: 002b:00007f96c6d4f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1592.150344][ T3375] RAX: ffffffffffffffda RBX: 00007f96c6025fa0 RCX: 00007f96c5d9e159 [ 1592.158419][ T3375] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000006 [ 1592.166407][ T3375] RBP: 00007f96c5e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1592.174441][ T3375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1592.182544][ T3375] R13: 00007f96c6026038 R14: 00007f96c6025fa0 R15: 00007fff5bd7cb48 [ 1592.190534][ T3375] [ 1592.495256][ T5616] block nbd5: Receive control failed (result -32) [ 1592.495418][ T5616] block nbd5: Receive control failed (result -32) [ 1597.964262][ T5279] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1598.392636][ T5279] veth0_vlan: left promiscuous mode [ 1598.410757][T30635] veth0_vlan: entered promiscuous mode