last executing test programs: 2m19.807348697s ago: executing program 0 (id=8428): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e24, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be", 0x1}], 0x1}}], 0x1, 0x40) close(r3) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000000206010100000000000000000000000005000100070000000900020073797a30000000000c00078008001240000600000500050002000000050004000000000010000300686173683a6970"], 0x54}, 0x1, 0x0, 0x0, 0x4008450}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000000)={'c', ' *:* ', 'w\x00'}, 0x8) getsockopt$WPAN_SECURITY(r4, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) shutdown(r0, 0x0) bind$802154_dgram(r4, &(0x7f00000002c0)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0202}}}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_KEY_END={0xc, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8, 0x1, "688d33f2"}]}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvmmsg(r1, &(0x7f0000000900), 0x0, 0x40002021, 0x0) 2m18.757157354s ago: executing program 4 (id=8441): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000858000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0xc08ba000) 2m18.109679242s ago: executing program 0 (id=8442): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) (async) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_EXPRESSIONS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x28010804) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002040)={0x4c, r4, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x4c}}, 0x804) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r7, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002040)=ANY=[@ANYBLOB="28000400", @ANYRES16=r8, @ANYBLOB="e9e528bd7000fbdbdf25050000001400018008000500010000000400010002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x98, r8, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x68}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x400}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x5e}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000001) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x14, r9, 0x601, 0x70bd25}, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m18.107830851s ago: executing program 2 (id=8443): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0xc3, 0x40801}, 0x4000000) 2m18.102632203s ago: executing program 4 (id=8446): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x2c, 0x10, 0x801, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8}]}]}, 0x2c}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xb, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000006080)=@newtfilter={0x24, 0x2c, 0x122, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x1e, 0x7}, {0xe, 0x3}, {0x2, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4041080) sendmsg$kcm(r9, 0x0, 0x4) 2m18.100382011s ago: executing program 2 (id=8447): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000428bd7000fddb0025860000000c009900ffffff7f750000000804a0007f000000"], 0x28}, 0x1, 0x0, 0x0, 0x40054}, 0x4000) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000000}, 0x20008071) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0xac4, 0x2, 0x37d7, 0x9, 0x3, 0x81, 0x1, 0x10}}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000440), r1) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x880430}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r4, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_FAMILY={0x5, 0xd, 0xb}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10000041}, 0x4004000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r7, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='lo\x00'}) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="6800000010000104fafffffffcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r6], 0x68}, 0x1, 0x0, 0x0, 0x24000891}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x10002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000000000000079cc41a4b85c57f6cc08d8268c4c0ec95293ab3172e05e3114d6e08614eb12383c1f81f80e7c002499de012c042e0429ac298a3a9acea390dcf5a3d779a08a148d1ef0966b95df181e54f595deb0fa577d4e304027ee50f9d608b4b7d6ed0c2f6d2d2dde12ecb52d572d6d376fe0e5c73ca4b4f70f54b6a63a2ea20a776567e3c16628a1cf1dcf17506b251cfb71bc7633609b959780b70eca3a02397603"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000f80), r8) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000003800)={&(0x7f0000003780)={0x20, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4014}, 0x90) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r8, &(0x7f0000000880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x54, r10, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BACKEND_IDENTIFIER={0x7, 0xa, 'lo\x00'}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xd}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 2m18.096989425s ago: executing program 0 (id=8450): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x57}}]}, &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m17.995537599s ago: executing program 1 (id=8451): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x46, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket(0x15, 0x3, 0x0) r3 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) r4 = gettid() syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/net\x00') getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r6 = getpid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r12 = syz_open_procfs$namespace(r9, &(0x7f0000001780)='ns/ipc\x00') r13 = getpid() sendmmsg$unix(r8, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r9, 0x0, r5}}}], 0x20, 0x44885}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="2d450f1c00000000ff0100000003fe00d20b00", @ANYRES32=r9, @ANYRES32=0x0, @ANYRES32=r11, @ANYRES64=r5, @ANYRES32=r13, @ANYRES32=r10, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r11], 0x58, 0x800}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) sendmmsg$unix(r14, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@cred={{0x1c, 0x1, 0x2, {r16}}}, @rights={{0x14, 0x1, 0x1, [r14]}}], 0x38}}], 0x2, 0x801) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@remote, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000940)=0xe8) r18 = getgid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000980)={{{@in=@loopback, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @dev}}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r24 = syz_open_procfs$namespace(r21, &(0x7f0000001780)='ns/ipc\x00') r25 = getpid() sendmmsg$unix(r20, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r21, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c000000169f48faf4000000002a552d1a3f60dd08", @ANYRES32=r21, @ANYRES32=0x0, @ANYRES32=r23, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r25, @ANYRES32=r22, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r24, @ANYRES32], 0x58, 0x800}}], 0x2, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000180)="4479d94b6f781b110f173cb3898acdcb150cfc982410e2adc6cb77e89f5dc9123c771594e77bd25e46f2ad284685c3c7d119a37bf23715bd05165bc838451ba3a872304d3a6e68f7a71761d0f918369ff322469356e61ff0d57dccf18dab97d9f72b76c7e56f41d4ac3006e5efc75af8c5f855f7203fe73572c8ae30ff2891501f2ef0bcd4cfcbf2f182ea038342d9b89e9401bb1fc2caf200e6a9b8534a7759b6e986628ebd70ca65bfef280d89394796b715a0029d7e78c9de37919f086a769674a48811795954723601d9a6ee45685bfb153e8ba17f3c611fd0e4fee4208b6cae13fe78f02d0b1067", 0xea}, {&(0x7f0000000280)="8192ff0bf1bc9fac7a0c77f72e39436aa33614f4128ee443ec18e46195cc305d95edcb8e078967dffbab2fef39d11c040c1445737744e7e6523a1628b20f52612e04df3dfe9ac22b34d825f936db0e217a40166cbd53b295144eced91df30098a9c6a9c1b19eb65ac8ca914cbd836df103b7c29a1ae310edc128ac6f22dea4f20f658b00ece83b127835de16edd25d3d913f1cc5e0f35de6490ba027b3440832372a41a86bf8fe5466c9", 0xaa}], 0x2, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r2, r0, r2, r1]}}, @cred={{0x1c, 0x1, 0x2, {r4, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}, @cred={{0x1c, 0x1, 0x2, {r16, r17, r18}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r19, r23}}}], 0x128, 0x4000000}, 0x4800) 2m17.942735315s ago: executing program 0 (id=8453): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a0000000000006111800000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(r5, &(0x7f0000001200)={0x23, 0x2, 0xc, 0x21}, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x4c, r6, 0x1, 0x71bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "896890f4d42f635c3119a16b1f"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x8010) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="20002cbd7000fddbdf25760000000c00990007000000340000000c0058007f000000000000000c00580035000000000000000c00580029000000000073f668e7b02c92e1591ef43341e100000c0058002b000000000000000c0058006a000000000000000c0058004f000000000000000c0058005a000000000000000c005800120000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000680)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x0, 0x0, 0x0, 0x3}, 0x94) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="10010000100001002cbd70002000190000000000", @ANYRES32=0x0, @ANYBLOB="13019757c0200000140003006e657464657673696d300000000000000500110004000000d4001680d0000180a4000c8014000100"], 0x110}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20000010) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_OCB(r12, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x98f949e8dfa712a0}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r6, 0x100, 0x70bd25, 0x2, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x2}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000040}, 0x8040) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x54}, 0x1, 0x0, 0x0, 0x4080}, 0x0) 2m17.547460972s ago: executing program 2 (id=8454): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) (async) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000000c0)='syzkaller0\x00', 0xb) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0x8057}, {{0x0, 0x0, &(0x7f0000002900)=[{&(0x7f00000003c0)=""/135, 0x87}, {&(0x7f0000000480)=""/227, 0xe3}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001840)=""/4096, 0x1000}, {&(0x7f0000002840)=""/103, 0x67}, {&(0x7f00000028c0)=""/49, 0x31}], 0x6}, 0x9}], 0x2, 0x10020, 0x0) 2m17.496849449s ago: executing program 1 (id=8455): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x0, @loopback, 0x3ff}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e24, 0x1, @mcast1, 0x9}, @in6={0xa, 0x4e20, 0x50, @remote, 0x1}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000000)={0x1, [0x7ff]}, &(0x7f00000000c0)=0x6) sendmsg$inet6(r0, &(0x7f0000000b80)={&(0x7f0000000500)={0xa, 0x4e22, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000540)="3902715d5a580493a1bc6a446410e5bfe30fa9e5ad78d6c89bda8fd69de4e2413eb5394e8d32347dd4a0d1b97ffb4ceec8eef419c4", 0x35}, {&(0x7f0000000680)="5bfdf61a5b42ef344099087f265f1a29a9bb2ae0960206f1e2a9d7d6adb08ce569b944e03562b65e5b7b2e434305b0370147145676bd569344fab2d287c5e771aa0e5b1fa2904d80dedff2c086ffaaf9c675f6dbc2a63b83ebca66eb15461808882c37976717fc1bd1c61b528c5af5704fc1518555a659aeb151b9a91f0f1e10ac98b6f4f477e8fa4a9c6a44c2bcc5ddf202bbcad9163820114ac82595cd4090b42353267ce01ff1825a5ae88dc7c260127e167e6b66fb7210590e1b313dab089a097b4ab333e5f30acb6d6361710020ff209ecd1b5dd9157fbd13013145", 0xde}, {&(0x7f0000000780)="a6d8ab57cc20e5c711bdcdd6fc661b776585233f0d518a07d2b9c0b42d6038816892311fd66977ed1217df6fa235b497ba26a3efa650e76cdccf7495aec42edc6bf967a8877b1e01cf39e5ffb86e88d9d0ceb2e71d4f7dcf8d281f3d7e0d3068619425a9d31605e0d7876bebf5450d42e23ec9bb77539564331525b40752b574e81c7627c9e44bcab818c210f21f42fe4904de21aed6666d7b920b8140e9e36dd5ef63f7323ec2a59517df45a78771542129adafe7", 0xb5}, {&(0x7f0000000940)="48457b0462f3e7aca3cf681bbf634b2fe576e3e797f71feb324ed9b61f38d3caf3ee6ba51ba70b12c451f8a632b9f7fe3359fdd7db39f0665d4b5422a36d766433d23faba8693a1e8c804206f44b3805a329be4831fa440030a92b460dd5d26f50d11166cf43f0980fc90179a7a3b45581941b0185cc09f6e72c24daa4afe80774ee8f7eb9e8e7aa2ba0756444dc89e9dd3a2acd9a4166ea47af5d788e465f2dabb5e65ed580096369a76b96ca5f8d3208dcb55271fbe1d13a1a1420f5c2dff3d4f14b052dd3a00b38fc990babac932e6db23c85ce30fb719fc8b2792ebac6f5", 0xe0}], 0x4, &(0x7f0000000a80)=[@dontfrag={{0x14, 0x29, 0x3e, 0x10001}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x4, 0x14, 0x2, 0xa, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}, @dev={0xfe, 0x80, '\x00', 0x1f}, @empty, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @local}]}}}], 0xe8}, 0xc000095) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x10, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x395d}, [@ldst={0x0, 0x0, 0x0, 0x9, 0xa}]}, &(0x7f0000000200)='syzkaller\x00', 0xb5, 0x22, &(0x7f0000000240)=""/34, 0x41100, 0x4a, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x4, 0xe, 0x3, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0x1], &(0x7f00000004c0)=[{0x4, 0x3, 0x7, 0xf}, {0x0, 0x2, 0xa, 0xb}], 0x10, 0x10001}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1a, 0x3, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000e97f000000000000ffff09ff9500ef00000000007131e057bf98b9b474d84f017fd9e80848f9bcd33d5a5c47fcdf6c6f678bf60cc3f2072a99740d70eb788ce3c4f0f76fe88de678e8546660ecc891e3b2aa7d49636b3aea8a6caff10bb360ee3be16b"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r4, 0x0, 0x0}, 0x10) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000400)={0xa, 0x4e23, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000580)=']', 0x1}], 0x1}, 0x4000840) 2m17.276557132s ago: executing program 1 (id=8457): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x2000000) 2m12.383523842s ago: executing program 0 (id=8465): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m12.380285305s ago: executing program 2 (id=8466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 2m12.291027177s ago: executing program 3 (id=8467): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="324ccd0263a0dbe6d50000001845849fcf1a094db4a605871988d70764000000000000000000020000000f87a6423ac49037192fc58d9a05966a344eff0300008615cb060050716defdda27528327b3cfa6a308f6dbd6a1ea25e64ac4f36de7b753d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001380)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd25, 0x8004, {0x0, 0x0, 0x0, r6, {0x0, 0xf0}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}, @TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 2m12.290199497s ago: executing program 4 (id=8468): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)={0x1c, 0x29, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="1716c2e9"]}]}, 0x1c}, 0x1, 0xefffffffffffffff}, 0x0) 2m12.220424577s ago: executing program 1 (id=8469): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000022000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000408000b40000000002c0004802800018008000100667764001c000280080002600000000a080003400000000808000140000000170900010073797a30"], 0xc8}}, 0x0) 2m12.181452897s ago: executing program 2 (id=8470): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x7, 0xff, 0x4, 0x4, 0x3, 0x3, 0x0, 0x67, 0x8, 0x7, 0x3, 0xf, 0x52, 0x5}, 0xe) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x2, 0x7f}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @multicast2}}, 0x9, 0x400, 0x3ff, 0xfff, 0x7f}, &(0x7f0000000780)=0x98) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000007c0)={0x0, @in={{0x2, 0x4e21, @private=0xa010102}}}, &(0x7f0000000880)=0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001c00)=[{&(0x7f0000000040)=@in6={0xa, 0x4e22, 0x4, @private2, 0xfffffffe}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="a1562a2e08a9f356d78cbf1eb9d89ab2e9c9418a64313b101f9f096b14ca41a7940bd235123226db3289460e8d0170dcd59af5844eac9e0a557254602d86e32f721a84970c3db9b6311b75eee8325b8946163410ae04581d1066d590760823039d9b144fe60173df02b2a24322279ed9ef1d0c20a0659a1e5d049c6450b8a38d96bb1da5496ec86b4a39fef0bf860f902117", 0x92}, {&(0x7f0000000140)="5608d72f06e075b8a45ec14a9d1d216ae23ced3c959bfa2206704966df09e3c35ab2f36ceb300fbc3379b772ef563190b0b9a299ad93f6f9c5bd698569d376aa10679c252929a034eb19e97ec3c9ff0d735c6b116b50eef9d8b2b604826525c296f1090e6790e84f7b7005ec16be05f8094e3a9c6f8abeb471544593", 0x7c}, {&(0x7f00000001c0)="62f4232f38a4f50469a6b8098863ad604de9fabad4d8767cebe57a62b7a22fd3cdbc94ecdec301b100f6681a9eec34353baa45444f6d4f08662aa7f9e852c9d8207b7a6b91ff4f72187868528f6c43d0e2e31faaa378f85867e3d2198291c41183c1a62ef48ee36b", 0x68}], 0x3, &(0x7f0000000380)=[@dstaddrv6={0x20, 0x84, 0x8, @private1}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x8}}, @authinfo={0x18, 0x84, 0x6, {0x8}}, @dstaddrv6={0x20, 0x84, 0x8, @empty}, @sndrcv={0x30, 0x84, 0x1, {0xff, 0x6, 0x205, 0x1000, 0x8000, 0xca, 0x2, 0x5, r1}}, @dstaddrv4={0x18, 0x84, 0x7, @local}], 0xb8, 0x80}, {&(0x7f0000000440)=@in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1000}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000480)="be5c2fc35b2a070391120ce22d738616bd3e5136c9ae7a5775f6c5a62d524a29d872a321464e2d1d8b07d998f8b83656c740830d6b14f4c5f996068f6aeea923920c64ad4deebd48501380d28114", 0x4e}], 0x1, &(0x7f0000000540)=[@init={0x18, 0x84, 0x0, {0x5, 0x0, 0xf, 0xe}}, @authinfo={0x18, 0x84, 0x6, {0x7}}], 0x30, 0x850}, {&(0x7f0000000580)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000680)=[{&(0x7f00000005c0)="56927f458d6054e2d7b72595f9d7edd9d7a23319599bd44d96d78b71cc4dcc928a5df713cd270a6ee08a373d6f4c08bb42db1f4e60076359eee1bfdb37e1a5bb8287ee26428705fa8fc698bb446dcb8dff81d5eddfc2826b0a863e227571417df9d615ca40562c1c6c541edc1d5c03bf3b2c927cf922516edbb0371f3660d559a8f8fdfc5153288819938d6c6488b7f29410ac40e6", 0x95}], 0x1, &(0x7f00000008c0)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0xffff}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x7, 0x4, 0xb, 0x8001, 0x3, 0x8, 0x6, r2}}, @prinfo={0x18, 0x84, 0x5, {0x0, 0x101}}, @init={0x18, 0x84, 0x0, {0xfff, 0x8, 0xfffc, 0x3}}, @prinfo={0x18, 0x84, 0x5, {0x20}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x732}}, @sndrcv={0x30, 0x84, 0x1, {0xffff, 0x5, 0x204, 0x5, 0x3, 0xb, 0x7, 0x20, r3}}], 0xd8, 0x44}, {&(0x7f00000009c0)=@in6={0xa, 0x4e23, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff}, 0x1c, &(0x7f0000001bc0)=[{&(0x7f0000000a00)="c062b79f3f5da7b1f519aae056b6d5547a8a5853928bcc4d0cfa1020618a54fd07e7a3c3e0254326a6c463348ea9564dbb014948251e36285a32a97b705f96db25b13bbae2701d20bb9649e3ed204cc92e5dbb20c657b15b9a20f272e9c73a88482686568d553b888ba40e69480ffe5861bb749d9d4a2bf79e4717887fccd8c537ccf48f1fd5ac4286d6b0e30c22792a11718c2267a5cfaa9793e3d458804d5270f0848a6210d958142dc7b9e324d51588f12ec0e6d5dbea00a38537e7f1c3f3e3cc5d7b1f72cc2fe4520b89d499131c696ccf20bcf47a679cc927964d2e479ba1d3513cf2f45c8656d70354213d9d78ebbb7f", 0xf3}, {&(0x7f0000000b00)="622698799d7c86297fe16e67efbb8e1995d3538a65b93258ac93098ba30ecb5cc9fccfd13706e316f202e6f7847aa500677c852c3070f6ba334cfb0339f6ec683fd6b41329eceb813d66f9fce828ce4701ce2175729f4e8aea5437bada9c57dc6922515c87767f1c090d0decb5e5f34e33cc3d75d88e71828063cedb43506eacf76ed9b3508a4c0fb4426357a9c9254c4de9aa531049cc10c8b18d4d8d1e5d1173b7848f2ad8779ffb0ea5ae2a79bfcd7af60602ed402037a5e1cd62d08bd72e", 0xc0}, {&(0x7f0000000bc0)="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", 0x1000}], 0x3, 0x0, 0x0, 0x8000}], 0x4, 0x4000002) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001d00)={r3, 0x800, 0x30}, 0xc) pread64(r0, &(0x7f0000001d40)=""/24, 0x18, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001d80)={r1, 0x7}, &(0x7f0000001dc0)=0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000001e00), 0x12000, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000001e40)={'batadv0\x00'}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001e80)={r4, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000001ec0)={r2, 0x3}, &(0x7f0000001f00)=0x8) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001f40)={0x0, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x1}, @pad1, @enc_lim={0x4, 0x1, 0x9c}]}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001f80)={r0, 0x0, 0x7fff, 0x9}) ioctl$FIBMAP(r7, 0x1, &(0x7f0000001fc0)=0x80000001) bpf$TOKEN_CREATE(0x24, &(0x7f0000002000)={0x0, r5}, 0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000002040)={0x0, 0xc}, &(0x7f0000002080)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000020c0)=@assoc_value={r1, 0x5}, 0x8) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r8, &(0x7f0000002100)="0161033cb8f35ad280016c22c2d9ed8961099831b61e31e3c8b36b67471a9f06561328244592134f64ba72c43670ebc9f65796c31ab16abe50d82ede84549a2a1bf5baf9f54757e6df54e1051adaa057854b62a5ac44f8db6cb283d8b91176ffa5eb0f987dbfabe0da3025d371c374ec6b4006a1c1e6e7e93d0c992d802104af7cab77dc51d325c81b4e947e83b8d142fbc56c8617d0cb3a3159a0228d90", 0x9e, 0x20040000, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000023c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002380)={&(0x7f0000002200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0xff5fa41bd3436e32, 0x0, 0x0, {0x2, 0x0, 0x1}}, @NFT_MSG_DELFLOWTABLE={0x128, 0x18, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xc4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0_to_batadv\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3ff}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'caif0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'team_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) connect$bt_l2cap(r7, &(0x7f0000002400)={0x1f, 0x8, @none, 0x800, 0x2}, 0xe) recvfrom$phonet(r7, &(0x7f0000002440)=""/4096, 0x1000, 0x20, &(0x7f0000003440)={0x23, 0x7, 0x7f, 0x48}, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r9, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x38, r10, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044805}, 0x4000000) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f00000035c0)) getsockopt$bt_hci(r8, 0x0, 0x2, &(0x7f0000003600)=""/158, &(0x7f00000036c0)=0x9e) 2m12.137833211s ago: executing program 4 (id=8471): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r0}, 0x38) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c8"], 0x150}, 0x1, 0x0, 0x0, 0x2400c014}, 0x404a854) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000, 0x1}}}, 0xb8}}, 0x2c000010) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0xfffffffffffffe4b, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {}, 0x2}}, 0xb8}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 2m12.08540694s ago: executing program 1 (id=8472): r0 = socket$unix(0x1, 0x5, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f0000000080)=ANY=[@ANYBLOB='b *:* m'], 0x47) r3 = socket$nl_crypto(0x10, 0x3, 0x15) recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) splice(r1, 0x0, r5, 0x0, 0x1000, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) 2m12.03233233s ago: executing program 0 (id=8473): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0x6, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000003cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 2m12.031991402s ago: executing program 3 (id=8474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2d, 0x2, 0x0) accept$nfc_llcp(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x2, 0x8, 0x0, 0xfd, 0x1}, 0xe) shutdown(r2, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1, 0x4, 0x3, 0x0, 0x0, {0x8, 0x0, 0x1}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x800, 0x2}}, @NFULA_CFG_TIMEOUT={0x8}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x401}, 0x4000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}}}, &(0x7f0000000280)=0x84) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000000000500010063000000080009400000000114000880100007800a0011"], 0x44}, 0x1, 0x0, 0x0, 0x945a24e08e9b4b26}, 0x44000) 2m11.958669424s ago: executing program 2 (id=8475): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x393143, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'dvmrp1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 32) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) (rerun: 32) 2m11.948244678s ago: executing program 4 (id=8476): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}}}, 0x24}}, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r3, 0x1, 0x0, 0x0, {{}, {}, {0x3, 0x1ec0, 'syz0\x00'}}}, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000780)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x13c, r5, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3e}}}}, [@NL80211_ATTR_CQM={0x3c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x7}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x5, 0x5, 0x9, 0x80000001, 0x7, 0x6, 0x1]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x0]}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfffffffe}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x7ff800}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6ce}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x4]}]}, @NL80211_ATTR_CQM={0x64, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x1f4}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x406}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0xd}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10001000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x0, 0x0, 0x10001, 0x8001]}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xa, 0x9]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x1}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x32}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4b7}]}, @NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0x3, 0x4]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x6, 0x55, 0x450, 0x400, 0xa, 0x1, 0xfffffff8]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x7fff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x58f}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x10, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000dfa0dc72b0c0ea470000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000060000000000000000000000000000000000000000000000000000000000000000020000000a00000000000000fe"], 0x190) syz_emit_ethernet(0x52, &(0x7f0000000200)={@multicast, @random="467b5543f090", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x479, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6, 0x1, 0x8, 0x3}}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0xe}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) socket(0x27, 0x3, 0x268000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m11.852276835s ago: executing program 3 (id=8477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) getsockopt(r0, 0x6, 0x3, 0x0, &(0x7f0000000100)) (async) r2 = socket$rds(0x15, 0x5, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@o_path={&(0x7f0000000200)='./file0\x00', r1, 0x4000, r3}, 0x18) connect$rds(r2, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000100)={r2, &(0x7f0000000000)='A&\'!\'\x00', 0x200, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x1]}, {0xd5b, 0x0, 0x8b3d, 0x2}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x2}) getsockname$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, &(0x7f0000000180)=0x10) 2m11.814283097s ago: executing program 3 (id=8478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048014}, 0x20048804) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1800}}, 0x0, 0xc}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004000000100000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e80)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x6c, 0x0, 0x168, 0x0, 0x260, 0x258, 0x258, 0x260, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x6}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [0x0, 0x0, 0x0, 0xff], 'netdevsim0\x00', 'lo\x00', {0xff}}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x390) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2m11.735581888s ago: executing program 1 (id=8479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000008) 2m11.540366229s ago: executing program 3 (id=8480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 2m10.739562655s ago: executing program 4 (id=8481): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069003a000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1m56.240004385s ago: executing program 3 (id=8482): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000408000b40000000002c0004802800018008000100667764001c000280080002600000000a080003400000000808000140000000170900010073797a30"], 0xc8}}, 0x0) 1m31.485535031s ago: executing program 32 (id=8473): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x17, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x1, 0x6, 0x2}, 0x1}}]}, {}, {0x6, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x7}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200080314000e00072f01000000000000003cfdcb00000080ed00827600000000000100", 0x26}, {&(0x7f0000000780)="9942d6af00007f8f", 0x8}], 0x2}, 0x5) 0s ago: executing program 33 (id=8479): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x4000008) kernel console output (not intermixed with test programs): 0033:0x7efef2f9cdd9 [ 789.834076][T27080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 789.834093][T27080] RSP: 002b:00007efef3e6d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 789.834116][T27080] RAX: ffffffffffffffda RBX: 00007efef3215fa0 RCX: 00007efef2f9cdd9 [ 789.834131][T27080] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 789.834142][T27080] RBP: 00007efef3e6d090 R08: 0000000000000022 R09: 0000000000000000 [ 789.834153][T27080] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 789.834165][T27080] R13: 00007efef3216038 R14: 00007efef3215fa0 R15: 00007ffe3c374c48 [ 789.834199][T27080] [ 790.073817][T27084] FAULT_INJECTION: forcing a failure. [ 790.073817][T27084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.087540][T27084] CPU: 1 UID: 0 PID: 27084 Comm: syz.2.7445 Not tainted syzkaller #0 PREEMPT(full) [ 790.087570][T27084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 790.087583][T27084] Call Trace: [ 790.087592][T27084] [ 790.087600][T27084] dump_stack_lvl+0xe8/0x150 [ 790.087631][T27084] should_fail_ex+0x412/0x560 [ 790.087660][T27084] _copy_from_user+0x2d/0xb0 [ 790.087689][T27084] generic_map_update_batch+0x69a/0x990 [ 790.087725][T27084] ? __pfx_generic_map_update_batch+0x10/0x10 [ 790.087752][T27084] ? __fget_files+0x2a/0x420 [ 790.087784][T27084] ? __pfx_generic_map_update_batch+0x10/0x10 [ 790.087810][T27084] bpf_map_do_batch+0x39b/0x630 [ 790.087836][T27084] __sys_bpf+0x7c1/0x950 [ 790.087868][T27084] ? __pfx___sys_bpf+0x10/0x10 [ 790.087925][T27084] ? ksys_write+0x242/0x270 [ 790.087956][T27084] ? __pfx_ksys_write+0x10/0x10 [ 790.087990][T27084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.088014][T27084] __x64_sys_bpf+0x7c/0x90 [ 790.088043][T27084] do_syscall_64+0x15f/0xf80 [ 790.088070][T27084] ? trace_irq_disable+0x3b/0x140 [ 790.088101][T27084] ? clear_bhb_loop+0x40/0x90 [ 790.088126][T27084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.088146][T27084] RIP: 0033:0x7fb9e1b9cdd9 [ 790.088167][T27084] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 790.088184][T27084] RSP: 002b:00007fb9dfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 790.088208][T27084] RAX: ffffffffffffffda RBX: 00007fb9e1e15fa0 RCX: 00007fb9e1b9cdd9 [ 790.088223][T27084] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 790.088236][T27084] RBP: 00007fb9dfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 790.088248][T27084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 790.088260][T27084] R13: 00007fb9e1e16038 R14: 00007fb9e1e15fa0 R15: 00007ffc7fb91608 [ 790.088295][T27084] [ 794.442611][T27095] tipc: Enabling of bearer rejected, already enabled [ 794.545435][T27104] FAULT_INJECTION: forcing a failure. [ 794.545435][T27104] name failslab, interval 1, probability 0, space 0, times 0 [ 794.572296][T27104] CPU: 0 UID: 0 PID: 27104 Comm: syz.4.7450 Not tainted syzkaller #0 PREEMPT(full) [ 794.572326][T27104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.572339][T27104] Call Trace: [ 794.572347][T27104] [ 794.572356][T27104] dump_stack_lvl+0xe8/0x150 [ 794.572388][T27104] should_fail_ex+0x412/0x560 [ 794.572420][T27104] should_failslab+0xa8/0x100 [ 794.572454][T27104] __kmalloc_noprof+0xe8/0x760 [ 794.572483][T27104] ? esp_init_state+0x764/0x1240 [ 794.572514][T27104] esp_init_state+0x764/0x1240 [ 794.572554][T27104] ? __pfx_esp_init_state+0x10/0x10 [ 794.572597][T27104] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 794.572624][T27104] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 794.572659][T27104] ? __xfrm_init_state+0x842/0x1460 [ 794.572684][T27104] __xfrm_init_state+0xac9/0x1460 [ 794.572702][T27104] ? __xfrm_init_state+0x842/0x1460 [ 794.572725][T27104] xfrm_init_state+0x18/0xa0 [ 794.572754][T27104] pfkey_add+0x1d34/0x2df0 [ 794.572804][T27104] ? __pfx_pfkey_add+0x10/0x10 [ 794.572849][T27104] pfkey_sendmsg+0xc56/0x1120 [ 794.572872][T27104] ? unwind_next_frame+0xa6/0x2550 [ 794.572905][T27104] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 794.572951][T27104] ? aa_sock_msg_perm+0xf1/0x1b0 [ 794.572973][T27104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 794.572999][T27104] ____sys_sendmsg+0x972/0x9f0 [ 794.573020][T27104] ? __might_fault+0xaf/0x130 [ 794.573047][T27104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 794.573076][T27104] ? import_iovec+0x73/0xa0 [ 794.573103][T27104] ___sys_sendmsg+0x2a5/0x360 [ 794.573131][T27104] ? __lock_acquire+0x6b5/0x2cf0 [ 794.573153][T27104] ? __pfx____sys_sendmsg+0x10/0x10 [ 794.573205][T27104] ? __fget_files+0x2a/0x420 [ 794.573224][T27104] ? __fget_files+0x3a0/0x420 [ 794.573252][T27104] __x64_sys_sendmsg+0x1bd/0x2a0 [ 794.573276][T27104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 794.573306][T27104] ? __pfx_ksys_write+0x10/0x10 [ 794.573338][T27104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.573357][T27104] do_syscall_64+0x15f/0xf80 [ 794.573378][T27104] ? trace_irq_disable+0x3b/0x140 [ 794.573403][T27104] ? clear_bhb_loop+0x40/0x90 [ 794.573430][T27104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.573446][T27104] RIP: 0033:0x7fdf62b9cdd9 [ 794.573464][T27104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.573478][T27104] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 794.573498][T27104] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 794.573511][T27104] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 794.573522][T27104] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 794.573532][T27104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 794.573542][T27104] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 794.573570][T27104] [ 795.101763][T27103] __nla_validate_parse: 5 callbacks suppressed [ 795.101786][T27103] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7449'. [ 795.138377][T27107] syzkaller1: entered promiscuous mode [ 795.150759][T27107] syzkaller1: entered allmulticast mode [ 795.623724][T27135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7458'. [ 795.649850][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7459'. [ 795.738452][T27141] syzkaller0: entered promiscuous mode [ 795.750944][T27141] syzkaller0: entered allmulticast mode [ 796.004207][T27154] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7465'. [ 796.025720][T27154] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 796.049001][T27157] syzkaller1: entered promiscuous mode [ 796.054932][T27157] syzkaller1: entered allmulticast mode [ 796.068413][T27157] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7466'. [ 797.146150][T27222] syzkaller1: entered promiscuous mode [ 797.152388][T27222] syzkaller1: entered allmulticast mode [ 797.197672][T27222] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7481'. [ 797.466553][T27231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7485'. [ 797.503390][T27233] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7484'. [ 797.523705][T27241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7487'. [ 797.565354][T27242] syzkaller0: entered promiscuous mode [ 797.583579][T27242] syzkaller0: entered allmulticast mode [ 797.672437][T27248] FAULT_INJECTION: forcing a failure. [ 797.672437][T27248] name failslab, interval 1, probability 0, space 0, times 0 [ 797.694588][T27248] CPU: 0 UID: 0 PID: 27248 Comm: syz.4.7491 Not tainted syzkaller #0 PREEMPT(full) [ 797.694622][T27248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 797.694635][T27248] Call Trace: [ 797.694644][T27248] [ 797.694654][T27248] dump_stack_lvl+0xe8/0x150 [ 797.694686][T27248] should_fail_ex+0x412/0x560 [ 797.694721][T27248] should_failslab+0xa8/0x100 [ 797.694755][T27248] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 797.694797][T27248] ? __alloc_skb+0x1d0/0x7d0 [ 797.694821][T27248] ? __local_bh_enable_ip+0xd0/0x130 [ 797.694851][T27248] __alloc_skb+0x1d0/0x7d0 [ 797.694882][T27248] xfrm_alloc_compat+0x1a6/0x16f0 [ 797.694914][T27248] ? xfrm_get_translator+0x1b/0x240 [ 797.694938][T27248] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 797.694963][T27248] xfrm_nlmsg_multicast+0xda/0x1f0 [ 797.694997][T27248] xfrm_send_state_notify+0xc63/0x18d0 [ 797.695034][T27248] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 797.695062][T27248] ? km_state_notify+0x25/0x1f0 [ 797.695095][T27248] ? xfrm_state_add+0x56e/0xc40 [ 797.695122][T27248] ? __local_bh_enable_ip+0xd0/0x130 [ 797.695148][T27248] ? km_state_notify+0x25/0x1f0 [ 797.695177][T27248] ? km_state_notify+0x25/0x1f0 [ 797.695206][T27248] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 797.695237][T27248] km_state_notify+0x110/0x1f0 [ 797.695272][T27248] pfkey_add+0x2008/0x2df0 [ 797.695326][T27248] ? __pfx_pfkey_add+0x10/0x10 [ 797.695372][T27248] pfkey_sendmsg+0xc56/0x1120 [ 797.695405][T27248] ? unwind_next_frame+0xa6/0x2550 [ 797.695449][T27248] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 797.695509][T27248] ? aa_sock_msg_perm+0xf1/0x1b0 [ 797.695540][T27248] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 797.695573][T27248] ____sys_sendmsg+0x972/0x9f0 [ 797.695601][T27248] ? __might_fault+0xaf/0x130 [ 797.695636][T27248] ? __pfx_____sys_sendmsg+0x10/0x10 [ 797.695675][T27248] ? import_iovec+0x73/0xa0 [ 797.695710][T27248] ___sys_sendmsg+0x2a5/0x360 [ 797.695736][T27248] ? __lock_acquire+0x6b5/0x2cf0 [ 797.695766][T27248] ? __pfx____sys_sendmsg+0x10/0x10 [ 797.695846][T27248] ? __fget_files+0x2a/0x420 [ 797.695870][T27248] ? __fget_files+0x3a0/0x420 [ 797.695908][T27248] __x64_sys_sendmsg+0x1bd/0x2a0 [ 797.695938][T27248] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 797.695977][T27248] ? __pfx_ksys_write+0x10/0x10 [ 797.696018][T27248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.696040][T27248] do_syscall_64+0x15f/0xf80 [ 797.696066][T27248] ? trace_irq_disable+0x3b/0x140 [ 797.696097][T27248] ? clear_bhb_loop+0x40/0x90 [ 797.696124][T27248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 797.696145][T27248] RIP: 0033:0x7fdf62b9cdd9 [ 797.696167][T27248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 797.696186][T27248] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 797.696210][T27248] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 797.696226][T27248] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 797.696241][T27248] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 797.696254][T27248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 797.696267][T27248] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 797.696305][T27248] [ 798.072381][T27250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7492'. [ 798.275034][T27268] syzkaller1: entered promiscuous mode [ 798.282646][T27268] syzkaller1: entered allmulticast mode [ 798.382414][T27270] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 799.633357][T27339] FAULT_INJECTION: forcing a failure. [ 799.633357][T27339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 799.656778][T27334] syzkaller0: entered promiscuous mode [ 799.685132][T27334] syzkaller0: entered allmulticast mode [ 799.706328][T27339] CPU: 0 UID: 0 PID: 27339 Comm: syz.0.7520 Not tainted syzkaller #0 PREEMPT(full) [ 799.706362][T27339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.706375][T27339] Call Trace: [ 799.706385][T27339] [ 799.706395][T27339] dump_stack_lvl+0xe8/0x150 [ 799.706427][T27339] should_fail_ex+0x412/0x560 [ 799.706461][T27339] _copy_from_user+0x2d/0xb0 [ 799.706497][T27339] generic_map_update_batch+0x69a/0x990 [ 799.706534][T27339] ? __pfx_generic_map_update_batch+0x10/0x10 [ 799.706562][T27339] ? __fget_files+0x2a/0x420 [ 799.706593][T27339] ? __pfx_generic_map_update_batch+0x10/0x10 [ 799.706619][T27339] bpf_map_do_batch+0x39b/0x630 [ 799.706647][T27339] __sys_bpf+0x7c1/0x950 [ 799.706681][T27339] ? __pfx___sys_bpf+0x10/0x10 [ 799.706731][T27339] ? ksys_write+0x242/0x270 [ 799.706763][T27339] ? __pfx_ksys_write+0x10/0x10 [ 799.706807][T27339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.706831][T27339] __x64_sys_bpf+0x7c/0x90 [ 799.706861][T27339] do_syscall_64+0x15f/0xf80 [ 799.706888][T27339] ? trace_irq_disable+0x3b/0x140 [ 799.706927][T27339] ? clear_bhb_loop+0x40/0x90 [ 799.706959][T27339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.706980][T27339] RIP: 0033:0x7f917dd9cdd9 [ 799.707002][T27339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.707021][T27339] RSP: 002b:00007f917ec2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 799.707044][T27339] RAX: ffffffffffffffda RBX: 00007f917e015fa0 RCX: 00007f917dd9cdd9 [ 799.707060][T27339] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 799.707074][T27339] RBP: 00007f917ec2e090 R08: 0000000000000000 R09: 0000000000000000 [ 799.707088][T27339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 799.707101][T27339] R13: 00007f917e016038 R14: 00007f917e015fa0 R15: 00007ffed15e5028 [ 799.707136][T27339] [ 800.366810][T27365] __nla_validate_parse: 5 callbacks suppressed [ 800.366827][T27365] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7527'. [ 800.474444][T27367] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7529'. [ 800.507386][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7528'. [ 800.553125][T27371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7528'. [ 800.688853][T27383] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7531'. [ 800.715396][T27386] FAULT_INJECTION: forcing a failure. [ 800.715396][T27386] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 800.749858][T27386] CPU: 0 UID: 0 PID: 27386 Comm: syz.0.7533 Not tainted syzkaller #0 PREEMPT(full) [ 800.749887][T27386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 800.749900][T27386] Call Trace: [ 800.749908][T27386] [ 800.749918][T27386] dump_stack_lvl+0xe8/0x150 [ 800.749948][T27386] should_fail_ex+0x412/0x560 [ 800.749990][T27386] _copy_from_user+0x2d/0xb0 [ 800.750030][T27386] generic_map_update_batch+0x648/0x990 [ 800.750066][T27386] ? __pfx_generic_map_update_batch+0x10/0x10 [ 800.750092][T27386] ? __fget_files+0x2a/0x420 [ 800.750124][T27386] ? __pfx_generic_map_update_batch+0x10/0x10 [ 800.750149][T27386] bpf_map_do_batch+0x39b/0x630 [ 800.750177][T27386] __sys_bpf+0x7c1/0x950 [ 800.750210][T27386] ? __pfx___sys_bpf+0x10/0x10 [ 800.750257][T27386] ? ksys_write+0x242/0x270 [ 800.750288][T27386] ? __pfx_ksys_write+0x10/0x10 [ 800.750321][T27386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.750344][T27386] __x64_sys_bpf+0x7c/0x90 [ 800.750372][T27386] do_syscall_64+0x15f/0xf80 [ 800.750399][T27386] ? trace_irq_disable+0x3b/0x140 [ 800.750429][T27386] ? clear_bhb_loop+0x40/0x90 [ 800.750455][T27386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.750476][T27386] RIP: 0033:0x7f917dd9cdd9 [ 800.750496][T27386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.750515][T27386] RSP: 002b:00007f917ec2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 800.750538][T27386] RAX: ffffffffffffffda RBX: 00007f917e015fa0 RCX: 00007f917dd9cdd9 [ 800.750554][T27386] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 800.750567][T27386] RBP: 00007f917ec2e090 R08: 0000000000000000 R09: 0000000000000000 [ 800.750581][T27386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 800.750593][T27386] R13: 00007f917e016038 R14: 00007f917e015fa0 R15: 00007ffed15e5028 [ 800.750627][T27386] [ 801.037364][T27391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7535'. [ 801.067911][T27391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7535'. [ 801.113568][T27391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7535'. [ 801.144071][T27395] netlink: 'syz.0.7536': attribute type 29 has an invalid length. [ 801.176695][T27393] smc: net device team0 applied user defined pnetid SYZ2 [ 801.191914][T23001] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.234182][T23001] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.243471][T27391] smc: net device team0 erased user defined pnetid SYZ2 [ 801.252464][T27391] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7535'. [ 801.266899][T27403] netlink: 'syz.2.7538': attribute type 23 has an invalid length. [ 801.288908][T27391] netlink: 236 bytes leftover after parsing attributes in process `syz.4.7535'. [ 801.385316][T23001] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.405522][T23001] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.512750][T27419] netlink: 'syz.1.7542': attribute type 16 has an invalid length. [ 801.537609][T27419] netlink: 'syz.1.7542': attribute type 17 has an invalid length. [ 801.731131][T27419] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.753727][T27419] tipc: Resetting bearer [ 801.759864][T27419] tipc: Resetting bearer [ 801.769913][T27428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 801.801617][T27419] ip6erspan0: left allmulticast mode [ 801.834493][T27419] vlan2: left allmulticast mode [ 801.840173][T27419] bond9: left allmulticast mode [ 801.845292][T27419] geneve4: left allmulticast mode [ 801.856280][T27419] geneve5: left allmulticast mode [ 801.869218][T27419] vlan3: left allmulticast mode [ 801.874723][T27419] : left allmulticast mode [ 801.880063][T27419] bond_slave_0: left allmulticast mode [ 801.888457][T27419] bond_slave_1: left allmulticast mode [ 801.896087][T27419] gtp1: left allmulticast mode [ 801.902256][T27419] ip6tnl2: left allmulticast mode [ 801.922557][T27419] bond13: left allmulticast mode [ 801.930340][T27419] veth11: left allmulticast mode [ 801.938287][T27419] vlan4: left allmulticast mode [ 801.943551][T27419] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 801.954151][T27419] bond14: left allmulticast mode [ 801.961485][T27419] bond15: left allmulticast mode [ 801.972325][T27419] gretap3: left allmulticast mode [ 802.005479][T27419] geneve6: left allmulticast mode [ 802.017101][T27419] team1: left allmulticast mode [ 802.041493][T27419] gretap4: left promiscuous mode [ 802.046761][T27419] gretap4: left allmulticast mode [ 802.059244][T27419] bond0: left promiscuous mode [ 802.064072][T27419] bridge9: left promiscuous mode [ 802.119819][ T10] xfrm0 speed is unknown, defaulting to 1000 [ 802.130019][T27433] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 802.139158][T27433] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 802.147198][T27433] tipc: Resetting bearer [ 802.249050][T27436] ip6erspan1: entered allmulticast mode [ 802.385914][T27445] netlink: 'syz.2.7550': attribute type 11 has an invalid length. [ 802.402823][T27445] netlink: 'syz.2.7550': attribute type 11 has an invalid length. [ 802.608277][ T1173] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.645881][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.654746][ T1173] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.930147][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 802.976709][T27456] syzkaller0: entered promiscuous mode [ 802.982738][T27456] syzkaller0: entered allmulticast mode [ 803.478230][ T10] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 806.998039][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 807.604366][T27477] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 807.851527][T27521] __nla_validate_parse: 5 callbacks suppressed [ 807.851552][T27521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7563'. [ 807.933340][T27521] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.949743][T27529] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 808.121163][T27536] tipc: Enabling of bearer rejected, already enabled [ 808.145769][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 808.177888][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7568'. [ 808.212378][T27536] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7568'. [ 808.214325][T27544] IPVS: set_ctl: invalid protocol: 60 127.0.0.1:20004 [ 808.239951][T27536] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7568'. [ 808.483908][T27555] syzkaller0: entered promiscuous mode [ 808.499118][T27555] syzkaller0: entered allmulticast mode [ 808.692429][T27564] netlink: 'syz.3.7576': attribute type 1 has an invalid length. [ 808.708450][T27564] netlink: 'syz.3.7576': attribute type 3 has an invalid length. [ 808.716456][T27564] netlink: 172 bytes leftover after parsing attributes in process `syz.3.7576'. [ 808.740864][T27564] NCSI netlink: No device for ifindex 813332851 [ 808.784023][T27561] netlink: 'syz.2.7574': attribute type 10 has an invalid length. [ 808.841360][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.872800][T27561] team0: Device veth1_virt_wifi failed to register rx_handler [ 809.058841][T27582] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7578'. [ 809.200187][T27583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7579'. [ 809.331798][T27583] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7579'. [ 810.613398][T27626] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7590'. [ 811.018698][T27639] netlink: 'syz.4.7593': attribute type 8 has an invalid length. [ 814.371648][T27634] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7594'. [ 814.387095][T27645] ksmbd: Unknown IPC event: 3, ignore. [ 814.725386][T27663] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7602'. [ 814.798868][T27665] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7601'. [ 815.094559][T27680] syzkaller0: entered promiscuous mode [ 815.112711][T27680] syzkaller0: entered allmulticast mode [ 815.207298][T27683] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7608'. [ 815.465634][T27697] vlan3: entered promiscuous mode [ 815.477319][T27697] bridge0: entered promiscuous mode [ 815.493588][T27697] ÿÿÿÿÿÿ€: renamed from virt_wifi0 [ 815.574743][T27702] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7614'. [ 815.786608][T27715] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7617'. [ 815.853252][T27715] FAULT_INJECTION: forcing a failure. [ 815.853252][T27715] name failslab, interval 1, probability 0, space 0, times 0 [ 815.877772][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 815.916074][T27715] CPU: 1 UID: 0 PID: 27715 Comm: syz.1.7617 Not tainted syzkaller #0 PREEMPT(full) [ 815.916106][T27715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 815.916119][T27715] Call Trace: [ 815.916129][T27715] [ 815.916139][T27715] dump_stack_lvl+0xe8/0x150 [ 815.916172][T27715] should_fail_ex+0x412/0x560 [ 815.916204][T27715] should_failslab+0xa8/0x100 [ 815.916236][T27715] ? skb_clone+0x212/0x3a0 [ 815.916265][T27715] kmem_cache_alloc_noprof+0x87/0x650 [ 815.916303][T27715] skb_clone+0x212/0x3a0 [ 815.916336][T27715] __netlink_deliver_tap+0x404/0x850 [ 815.916378][T27715] ? netlink_deliver_tap+0x2e/0x1b0 [ 815.916407][T27715] netlink_deliver_tap+0x19c/0x1b0 [ 815.916435][T27715] netlink_sendskb+0x68/0x140 [ 815.916462][T27715] tipc_nl_net_addr_legacy_get+0x414/0x590 [ 815.916497][T27715] genl_family_rcv_msg_doit+0x22a/0x330 [ 815.916530][T27715] ? __asan_memcpy+0x40/0x70 [ 815.916561][T27715] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 815.916621][T27715] genl_rcv_msg+0x61c/0x7a0 [ 815.916660][T27715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 815.916690][T27715] ? __pfx_tipc_nl_net_addr_legacy_get+0x10/0x10 [ 815.916717][T27715] ? __pfx_ref_tracker_free+0x10/0x10 [ 815.916759][T27715] netlink_rcv_skb+0x232/0x4b0 [ 815.916787][T27715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 815.916820][T27715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 815.916867][T27715] ? down_read+0x270/0x2e0 [ 815.916905][T27715] ? genl_rcv+0xd/0x40 [ 815.916938][T27715] genl_rcv+0x28/0x40 [ 815.916965][T27715] netlink_unicast+0x75c/0x8e0 [ 815.917002][T27715] netlink_sendmsg+0x813/0xb40 [ 815.917041][T27715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 815.917073][T27715] ? aa_sock_msg_perm+0xf1/0x1b0 [ 815.917110][T27715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 815.917143][T27715] ____sys_sendmsg+0x972/0x9f0 [ 815.917170][T27715] ? __might_fault+0xaf/0x130 [ 815.917206][T27715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 815.917245][T27715] ? import_iovec+0x73/0xa0 [ 815.917281][T27715] ___sys_sendmsg+0x2a5/0x360 [ 815.917307][T27715] ? __lock_acquire+0x6b5/0x2cf0 [ 815.917337][T27715] ? __pfx____sys_sendmsg+0x10/0x10 [ 815.917410][T27715] ? __fget_files+0x2a/0x420 [ 815.917433][T27715] ? __fget_files+0x3a0/0x420 [ 815.917467][T27715] __x64_sys_sendmsg+0x1bd/0x2a0 [ 815.917496][T27715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 815.917534][T27715] ? __pfx_ksys_write+0x10/0x10 [ 815.917572][T27715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.917594][T27715] do_syscall_64+0x15f/0xf80 [ 815.917619][T27715] ? trace_irq_disable+0x3b/0x140 [ 815.917736][T27715] ? clear_bhb_loop+0x40/0x90 [ 815.917861][T27715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.917902][T27715] RIP: 0033:0x7efef2f9cdd9 [ 815.917924][T27715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.918003][T27715] RSP: 002b:00007efef3e6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 815.918035][T27715] RAX: ffffffffffffffda RBX: 00007efef3215fa0 RCX: 00007efef2f9cdd9 [ 815.918051][T27715] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 815.918064][T27715] RBP: 00007efef3e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 815.918076][T27715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.918089][T27715] R13: 00007efef3216038 R14: 00007efef3215fa0 R15: 00007ffe3c374c48 [ 815.918126][T27715] [ 816.483145][T27732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7621'. [ 816.564190][T27732] openvswitch: netlink: Flow key attr not present in new flow. [ 816.739863][T27734] syzkaller0: entered promiscuous mode [ 816.745631][T27734] syzkaller0: entered allmulticast mode [ 816.754946][T27735] syzkaller1: entered promiscuous mode [ 816.762725][T27735] syzkaller1: entered allmulticast mode [ 816.790740][T27753] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 816.810851][T27753] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 816.820078][T27753] gretap2: entered promiscuous mode [ 816.825375][T27753] gretap2: entered allmulticast mode [ 816.876699][T27760] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7629'. [ 816.966713][T27762] ieee802154 phy1 wpan1: encryption failed: -90 [ 816.976542][T27763] ieee802154 phy1 wpan1: encryption failed: -90 [ 821.219268][T27758] vlan1: entered promiscuous mode [ 821.466725][T27780] netlink: 'syz.3.7634': attribute type 64 has an invalid length. [ 821.473523][T27784] IPVS: set_ctl: invalid protocol: 1 172.20.20.45:20002 [ 821.489063][T27784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7636'. [ 821.580097][ T5731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 821.608612][T27786] block nbd1: server does not support multiple connections per device. [ 821.628749][T27796] FAULT_INJECTION: forcing a failure. [ 821.628749][T27796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.633233][T27786] block nbd1: shutting down sockets [ 821.686539][T27796] CPU: 0 UID: 0 PID: 27796 Comm: syz.2.7639 Not tainted syzkaller #0 PREEMPT(full) [ 821.686573][T27796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 821.686586][T27796] Call Trace: [ 821.686595][T27796] [ 821.686605][T27796] dump_stack_lvl+0xe8/0x150 [ 821.686638][T27796] should_fail_ex+0x412/0x560 [ 821.686680][T27796] _copy_from_user+0x2d/0xb0 [ 821.686711][T27796] ___sys_sendmsg+0x1c6/0x360 [ 821.686738][T27796] ? __lock_acquire+0x6b5/0x2cf0 [ 821.686768][T27796] ? __pfx____sys_sendmsg+0x10/0x10 [ 821.686833][T27796] ? __fget_files+0x2a/0x420 [ 821.686863][T27796] ? __fget_files+0x3a0/0x420 [ 821.686898][T27796] __x64_sys_sendmsg+0x1bd/0x2a0 [ 821.686927][T27796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 821.686963][T27796] ? __pfx_ksys_write+0x10/0x10 [ 821.687000][T27796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.687024][T27796] do_syscall_64+0x15f/0xf80 [ 821.687048][T27796] ? trace_irq_disable+0x3b/0x140 [ 821.687078][T27796] ? clear_bhb_loop+0x40/0x90 [ 821.687102][T27796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.687122][T27796] RIP: 0033:0x7fb9e1b9cdd9 [ 821.687141][T27796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.687158][T27796] RSP: 002b:00007fb9dfdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 821.687182][T27796] RAX: ffffffffffffffda RBX: 00007fb9e1e15fa0 RCX: 00007fb9e1b9cdd9 [ 821.687198][T27796] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 821.687212][T27796] RBP: 00007fb9dfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 821.687225][T27796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.687239][T27796] R13: 00007fb9e1e16038 R14: 00007fb9e1e15fa0 R15: 00007ffc7fb91608 [ 821.687274][T27796] [ 821.898993][T27798] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7640'. [ 822.004771][T27803] FAULT_INJECTION: forcing a failure. [ 822.004771][T27803] name failslab, interval 1, probability 0, space 0, times 0 [ 822.024975][T27803] CPU: 1 UID: 0 PID: 27803 Comm: syz.4.7642 Not tainted syzkaller #0 PREEMPT(full) [ 822.025022][T27803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.025035][T27803] Call Trace: [ 822.025044][T27803] [ 822.025054][T27803] dump_stack_lvl+0xe8/0x150 [ 822.025085][T27803] should_fail_ex+0x412/0x560 [ 822.025117][T27803] should_failslab+0xa8/0x100 [ 822.025151][T27803] __kvmalloc_node_noprof+0x178/0x8a0 [ 822.025179][T27803] ? __raw_spin_lock_init+0x45/0x100 [ 822.025209][T27803] ? alloc_netdev_mqs+0xaa6/0x1210 [ 822.025251][T27803] alloc_netdev_mqs+0xaa6/0x1210 [ 822.025288][T27803] rtnl_create_link+0x31f/0xd70 [ 822.025327][T27803] rtnl_newlink_create+0x277/0xb70 [ 822.025354][T27803] ? __pfx___nla_validate_parse+0x10/0x10 [ 822.025396][T27803] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 822.025428][T27803] ? __pfx___mutex_lock+0x10/0x10 [ 822.025471][T27803] ? ns_capable+0x89/0xe0 [ 822.025496][T27803] rtnl_newlink+0x166a/0x1bb0 [ 822.025540][T27803] ? __pfx_rtnl_newlink+0x10/0x10 [ 822.025572][T27803] ? __lock_acquire+0x6b5/0x2cf0 [ 822.025600][T27803] ? __lock_acquire+0x6b5/0x2cf0 [ 822.025633][T27803] ? unwind_next_frame+0xa6/0x2550 [ 822.025668][T27803] ? unwind_next_frame+0xa6/0x2550 [ 822.025698][T27803] ? is_bpf_text_address+0x26/0x2b0 [ 822.025733][T27803] ? is_bpf_text_address+0x26/0x2b0 [ 822.025761][T27803] ? __lock_acquire+0x6b5/0x2cf0 [ 822.025789][T27803] ? kernel_text_address+0xa5/0xe0 [ 822.025820][T27803] ? __kernel_text_address+0xd/0x30 [ 822.025849][T27803] ? unwind_get_return_address+0x4d/0x90 [ 822.025883][T27803] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.025914][T27803] ? arch_stack_walk+0xfb/0x150 [ 822.025954][T27803] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 822.026020][T27803] ? __pfx_rtnl_newlink+0x10/0x10 [ 822.026045][T27803] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 822.026067][T27803] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 822.026095][T27803] ? netlink_sendmsg+0x5d4/0xb40 [ 822.026124][T27803] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 822.026148][T27803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 822.026173][T27803] ? __lock_acquire+0x6b5/0x2cf0 [ 822.026209][T27803] netlink_rcv_skb+0x232/0x4b0 [ 822.026236][T27803] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 822.026264][T27803] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 822.026306][T27803] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.026332][T27803] ? netlink_deliver_tap+0x2e/0x1b0 [ 822.026365][T27803] netlink_unicast+0x75c/0x8e0 [ 822.026403][T27803] netlink_sendmsg+0x813/0xb40 [ 822.026442][T27803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.026473][T27803] ? aa_sock_msg_perm+0xf1/0x1b0 [ 822.026503][T27803] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 822.026536][T27803] ____sys_sendmsg+0x972/0x9f0 [ 822.026564][T27803] ? __might_fault+0xaf/0x130 [ 822.026599][T27803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.026637][T27803] ? import_iovec+0x73/0xa0 [ 822.026671][T27803] ___sys_sendmsg+0x2a5/0x360 [ 822.026698][T27803] ? __lock_acquire+0x6b5/0x2cf0 [ 822.026726][T27803] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.026797][T27803] ? __fget_files+0x2a/0x420 [ 822.026822][T27803] ? __fget_files+0x3a0/0x420 [ 822.026860][T27803] __x64_sys_sendmsg+0x1bd/0x2a0 [ 822.026900][T27803] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.026939][T27803] ? __pfx_ksys_write+0x10/0x10 [ 822.026980][T27803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.027004][T27803] do_syscall_64+0x15f/0xf80 [ 822.027031][T27803] ? trace_irq_disable+0x3b/0x140 [ 822.027061][T27803] ? clear_bhb_loop+0x40/0x90 [ 822.027089][T27803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.027110][T27803] RIP: 0033:0x7fdf62b9cdd9 [ 822.027132][T27803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.027150][T27803] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.027174][T27803] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 822.027190][T27803] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 822.027206][T27803] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 822.027220][T27803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 822.027233][T27803] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 822.027270][T27803] [ 822.471599][T27806] FAULT_INJECTION: forcing a failure. [ 822.471599][T27806] name failslab, interval 1, probability 0, space 0, times 0 [ 822.478777][ T5731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 822.485025][T27806] CPU: 0 UID: 0 PID: 27806 Comm: syz.2.7644 Not tainted syzkaller #0 PREEMPT(full) [ 822.485051][T27806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.485063][T27806] Call Trace: [ 822.485072][T27806] [ 822.485082][T27806] dump_stack_lvl+0xe8/0x150 [ 822.485110][T27806] should_fail_ex+0x412/0x560 [ 822.485139][T27806] should_failslab+0xa8/0x100 [ 822.485169][T27806] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 822.485195][T27806] ? __alloc_skb+0x186/0x7d0 [ 822.485217][T27806] ? __alloc_skb+0x1d0/0x7d0 [ 822.485235][T27806] ? __local_bh_enable_ip+0xd0/0x130 [ 822.485260][T27806] __alloc_skb+0x1d0/0x7d0 [ 822.485286][T27806] netlink_sendmsg+0x5d4/0xb40 [ 822.485320][T27806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 822.485348][T27806] ? aa_sock_msg_perm+0xf1/0x1b0 [ 822.485374][T27806] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 822.485403][T27806] ____sys_sendmsg+0x972/0x9f0 [ 822.485427][T27806] ? __might_fault+0xaf/0x130 [ 822.485457][T27806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 822.485490][T27806] ? import_iovec+0x73/0xa0 [ 822.485520][T27806] ___sys_sendmsg+0x2a5/0x360 [ 822.485542][T27806] ? __lock_acquire+0x6b5/0x2cf0 [ 822.485568][T27806] ? __pfx____sys_sendmsg+0x10/0x10 [ 822.485626][T27806] ? __fget_files+0x2a/0x420 [ 822.485648][T27806] ? __fget_files+0x3a0/0x420 [ 822.485680][T27806] __x64_sys_sendmsg+0x1bd/0x2a0 [ 822.485706][T27806] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 822.485740][T27806] ? __pfx_ksys_write+0x10/0x10 [ 822.485774][T27806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.485795][T27806] do_syscall_64+0x15f/0xf80 [ 822.485818][T27806] ? trace_irq_disable+0x3b/0x140 [ 822.485845][T27806] ? clear_bhb_loop+0x40/0x90 [ 822.485877][T27806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.485896][T27806] RIP: 0033:0x7fb9e1b9cdd9 [ 822.485916][T27806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.485933][T27806] RSP: 002b:00007fb9dfdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 822.485954][T27806] RAX: ffffffffffffffda RBX: 00007fb9e1e15fa0 RCX: 00007fb9e1b9cdd9 [ 822.485974][T27806] RDX: 0000000004000004 RSI: 0000200000002d80 RDI: 0000000000000003 [ 822.485987][T27806] RBP: 00007fb9dfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 822.485999][T27806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.486011][T27806] R13: 00007fb9e1e16038 R14: 00007fb9e1e15fa0 R15: 00007ffc7fb91608 [ 822.486041][T27806] [ 822.775194][T27808] syzkaller0: entered promiscuous mode [ 822.781214][T27808] syzkaller0: entered allmulticast mode [ 823.134520][T27829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7653'. [ 823.315519][T27836] FAULT_INJECTION: forcing a failure. [ 823.315519][T27836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.352134][T27836] CPU: 1 UID: 0 PID: 27836 Comm: syz.0.7656 Not tainted syzkaller #0 PREEMPT(full) [ 823.352165][T27836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.352178][T27836] Call Trace: [ 823.352188][T27836] [ 823.352198][T27836] dump_stack_lvl+0xe8/0x150 [ 823.352229][T27836] should_fail_ex+0x412/0x560 [ 823.352264][T27836] _copy_from_iter+0x1d3/0x1670 [ 823.352295][T27836] ? rcu_is_watching+0x15/0xb0 [ 823.352328][T27836] ? __pfx__copy_from_iter+0x10/0x10 [ 823.352365][T27836] ? netlink_sendmsg+0x650/0xb40 [ 823.352390][T27836] ? skb_put+0x11b/0x210 [ 823.352419][T27836] netlink_sendmsg+0x6c0/0xb40 [ 823.352456][T27836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.352485][T27836] ? aa_sock_msg_perm+0xf1/0x1b0 [ 823.352513][T27836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.352544][T27836] ____sys_sendmsg+0x972/0x9f0 [ 823.352581][T27836] ? __might_fault+0xaf/0x130 [ 823.352615][T27836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.352651][T27836] ? import_iovec+0x73/0xa0 [ 823.352683][T27836] ___sys_sendmsg+0x2a5/0x360 [ 823.352708][T27836] ? __lock_acquire+0x6b5/0x2cf0 [ 823.352734][T27836] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.352797][T27836] ? __fget_files+0x2a/0x420 [ 823.352821][T27836] ? __fget_files+0x3a0/0x420 [ 823.352854][T27836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 823.352885][T27836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.352921][T27836] ? __pfx_ksys_write+0x10/0x10 [ 823.352967][T27836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.352989][T27836] do_syscall_64+0x15f/0xf80 [ 823.353015][T27836] ? trace_irq_disable+0x3b/0x140 [ 823.353046][T27836] ? clear_bhb_loop+0x40/0x90 [ 823.353073][T27836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.353093][T27836] RIP: 0033:0x7f917dd9cdd9 [ 823.353113][T27836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.353132][T27836] RSP: 002b:00007f917ec2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.353156][T27836] RAX: ffffffffffffffda RBX: 00007f917e015fa0 RCX: 00007f917dd9cdd9 [ 823.353171][T27836] RDX: 0000000004000004 RSI: 0000200000002d80 RDI: 0000000000000003 [ 823.353186][T27836] RBP: 00007f917ec2e090 R08: 0000000000000000 R09: 0000000000000000 [ 823.353200][T27836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.353213][T27836] R13: 00007f917e016038 R14: 00007f917e015fa0 R15: 00007ffed15e5028 [ 823.353248][T27836] [ 823.652242][T27843] FAULT_INJECTION: forcing a failure. [ 823.652242][T27843] name failslab, interval 1, probability 0, space 0, times 0 [ 823.705836][T27843] CPU: 1 UID: 0 PID: 27843 Comm: syz.4.7658 Not tainted syzkaller #0 PREEMPT(full) [ 823.705867][T27843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.705881][T27843] Call Trace: [ 823.705891][T27843] [ 823.705901][T27843] dump_stack_lvl+0xe8/0x150 [ 823.705932][T27843] should_fail_ex+0x412/0x560 [ 823.705966][T27843] should_failslab+0xa8/0x100 [ 823.706001][T27843] __kvmalloc_node_noprof+0x178/0x8a0 [ 823.706031][T27843] ? __raw_spin_lock_init+0x45/0x100 [ 823.706060][T27843] ? alloc_netdev_mqs+0xaa6/0x1210 [ 823.706101][T27843] alloc_netdev_mqs+0xaa6/0x1210 [ 823.706140][T27843] rtnl_create_link+0x31f/0xd70 [ 823.706179][T27843] rtnl_newlink_create+0x277/0xb70 [ 823.706207][T27843] ? __pfx___nla_validate_parse+0x10/0x10 [ 823.706250][T27843] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 823.706282][T27843] ? __pfx___mutex_lock+0x10/0x10 [ 823.706325][T27843] ? ns_capable+0x89/0xe0 [ 823.706357][T27843] rtnl_newlink+0x166a/0x1bb0 [ 823.706401][T27843] ? __pfx_rtnl_newlink+0x10/0x10 [ 823.706431][T27843] ? __lock_acquire+0x6b5/0x2cf0 [ 823.706458][T27843] ? __lock_acquire+0x6b5/0x2cf0 [ 823.706493][T27843] ? unwind_next_frame+0xa6/0x2550 [ 823.706529][T27843] ? unwind_next_frame+0xa6/0x2550 [ 823.706553][T27843] ? is_bpf_text_address+0x26/0x2b0 [ 823.706583][T27843] ? is_bpf_text_address+0x26/0x2b0 [ 823.706606][T27843] ? __lock_acquire+0x6b5/0x2cf0 [ 823.706628][T27843] ? kernel_text_address+0xa5/0xe0 [ 823.706659][T27843] ? __kernel_text_address+0xd/0x30 [ 823.706688][T27843] ? unwind_get_return_address+0x4d/0x90 [ 823.706713][T27843] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 823.706746][T27843] ? arch_stack_walk+0xfb/0x150 [ 823.706855][T27843] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 823.706899][T27843] ? __pfx_rtnl_newlink+0x10/0x10 [ 823.706923][T27843] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 823.706946][T27843] ? kmem_cache_alloc_node_noprof+0x384/0x690 [ 823.706973][T27843] ? netlink_sendmsg+0x5d4/0xb40 [ 823.707002][T27843] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 823.707026][T27843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 823.707052][T27843] ? __lock_acquire+0x6b5/0x2cf0 [ 823.707091][T27843] netlink_rcv_skb+0x232/0x4b0 [ 823.707120][T27843] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 823.707146][T27843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 823.707189][T27843] ? netlink_deliver_tap+0x2e/0x1b0 [ 823.707215][T27843] ? netlink_deliver_tap+0x2e/0x1b0 [ 823.707248][T27843] netlink_unicast+0x75c/0x8e0 [ 823.707286][T27843] netlink_sendmsg+0x813/0xb40 [ 823.707325][T27843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 823.707356][T27843] ? aa_sock_msg_perm+0xf1/0x1b0 [ 823.707386][T27843] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 823.707418][T27843] ____sys_sendmsg+0x972/0x9f0 [ 823.707445][T27843] ? __might_fault+0xaf/0x130 [ 823.707476][T27843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 823.707514][T27843] ? import_iovec+0x73/0xa0 [ 823.707546][T27843] ___sys_sendmsg+0x2a5/0x360 [ 823.707571][T27843] ? __lock_acquire+0x6b5/0x2cf0 [ 823.707597][T27843] ? __pfx____sys_sendmsg+0x10/0x10 [ 823.707664][T27843] ? __fget_files+0x2a/0x420 [ 823.707687][T27843] ? __fget_files+0x3a0/0x420 [ 823.707723][T27843] __x64_sys_sendmsg+0x1bd/0x2a0 [ 823.707752][T27843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 823.707798][T27843] ? __pfx_ksys_write+0x10/0x10 [ 823.707838][T27843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.707861][T27843] do_syscall_64+0x15f/0xf80 [ 823.707887][T27843] ? trace_irq_disable+0x3b/0x140 [ 823.707917][T27843] ? clear_bhb_loop+0x40/0x90 [ 823.707944][T27843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.707966][T27843] RIP: 0033:0x7fdf62b9cdd9 [ 823.707987][T27843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.708004][T27843] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 823.708027][T27843] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 823.708043][T27843] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 823.708056][T27843] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 823.708069][T27843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 823.708082][T27843] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 823.708117][T27843] [ 824.363770][T27847] xfrm0 speed is unknown, defaulting to 1000 [ 824.426412][T27864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7664'. [ 824.440129][T27864] veth1_macvtap: Caught tx_queue_len zero misconfig [ 824.592635][T27868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7666'. [ 824.661255][T27871] syzkaller0: entered promiscuous mode [ 824.666985][T27871] syzkaller0: entered allmulticast mode [ 825.076729][T27886] netlink: 'syz.1.7669': attribute type 1 has an invalid length. [ 825.114453][T27886] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 825.218783][T27892] set match dimension is over the limit! [ 825.387052][T27898] dvmrp0: entered allmulticast mode [ 825.493253][T27904] FAULT_INJECTION: forcing a failure. [ 825.493253][T27904] name failslab, interval 1, probability 0, space 0, times 0 [ 825.527988][T27904] CPU: 0 UID: 0 PID: 27904 Comm: syz.0.7674 Not tainted syzkaller #0 PREEMPT(full) [ 825.528028][T27904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 825.528042][T27904] Call Trace: [ 825.528051][T27904] [ 825.528061][T27904] dump_stack_lvl+0xe8/0x150 [ 825.528095][T27904] should_fail_ex+0x412/0x560 [ 825.528129][T27904] should_failslab+0xa8/0x100 [ 825.528163][T27904] __kmalloc_cache_noprof+0x88/0x660 [ 825.528192][T27904] ? __asan_memset+0x22/0x50 [ 825.528217][T27904] ? alloc_netdev_mqs+0xbf0/0x1210 [ 825.528246][T27904] ? __xdp_rxq_info_reg+0x171/0x280 [ 825.528278][T27904] alloc_netdev_mqs+0xbf0/0x1210 [ 825.528317][T27904] rtnl_create_link+0x31f/0xd70 [ 825.528357][T27904] rtnl_newlink_create+0x277/0xb70 [ 825.528385][T27904] ? irqentry_exit+0x218/0x730 [ 825.528420][T27904] ? __mutex_lock+0x608/0x1550 [ 825.528451][T27904] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 825.528483][T27904] ? __pfx___mutex_lock+0x10/0x10 [ 825.528525][T27904] ? ns_capable+0x89/0xe0 [ 825.528552][T27904] rtnl_newlink+0x166a/0x1bb0 [ 825.528605][T27904] ? __pfx_rtnl_newlink+0x10/0x10 [ 825.528627][T27904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.528691][T27904] ? kasan_quarantine_put+0xbb/0x1f0 [ 825.528718][T27904] ? lockdep_hardirqs_on+0x7a/0x110 [ 825.528751][T27904] ? nlmon_xmit+0xb0/0x100 [ 825.528775][T27904] ? kmem_cache_free+0x182/0x650 [ 825.528819][T27904] ? __lock_acquire+0x6b5/0x2cf0 [ 825.528853][T27904] ? __dev_queue_xmit+0x2b6/0x3950 [ 825.528884][T27904] ? __local_bh_enable_ip+0xd0/0x130 [ 825.528907][T27904] ? lockdep_hardirqs_on+0x7a/0x110 [ 825.528932][T27904] ? __dev_queue_xmit+0x2b6/0x3950 [ 825.528958][T27904] ? __local_bh_enable_ip+0xd0/0x130 [ 825.528978][T27904] ? __dev_queue_xmit+0x2b6/0x3950 [ 825.529015][T27904] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 825.529054][T27904] ? __pfx_rtnl_newlink+0x10/0x10 [ 825.529078][T27904] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 825.529107][T27904] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 825.529131][T27904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 825.529152][T27904] ? ref_tracker_free+0x693/0x840 [ 825.529185][T27904] ? __pfx_ref_tracker_free+0x10/0x10 [ 825.529226][T27904] netlink_rcv_skb+0x232/0x4b0 [ 825.529253][T27904] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 825.529280][T27904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 825.529321][T27904] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.529347][T27904] ? netlink_deliver_tap+0x2e/0x1b0 [ 825.529380][T27904] netlink_unicast+0x75c/0x8e0 [ 825.529418][T27904] netlink_sendmsg+0x813/0xb40 [ 825.529455][T27904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 825.529488][T27904] ? __pfx_bpf_lsm_socket_sendmsg+0x10/0x10 [ 825.529519][T27904] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 825.529550][T27904] ____sys_sendmsg+0x972/0x9f0 [ 825.529578][T27904] ? __might_fault+0xaf/0x130 [ 825.529620][T27904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 825.529660][T27904] ? import_iovec+0x73/0xa0 [ 825.529694][T27904] ___sys_sendmsg+0x2a5/0x360 [ 825.529721][T27904] ? __lock_acquire+0x6b5/0x2cf0 [ 825.529750][T27904] ? __pfx____sys_sendmsg+0x10/0x10 [ 825.529822][T27904] ? __fget_files+0x2a/0x420 [ 825.529846][T27904] ? __fget_files+0x3a0/0x420 [ 825.529883][T27904] __x64_sys_sendmsg+0x1bd/0x2a0 [ 825.529915][T27904] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 825.529955][T27904] ? __pfx_ksys_write+0x10/0x10 [ 825.529997][T27904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.530020][T27904] do_syscall_64+0x15f/0xf80 [ 825.530047][T27904] ? trace_irq_disable+0x3b/0x140 [ 825.530078][T27904] ? clear_bhb_loop+0x40/0x90 [ 825.530105][T27904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.530128][T27904] RIP: 0033:0x7f917dd9cdd9 [ 825.530149][T27904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.530169][T27904] RSP: 002b:00007f917ec0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 825.530194][T27904] RAX: ffffffffffffffda RBX: 00007f917e016090 RCX: 00007f917dd9cdd9 [ 825.530210][T27904] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 825.530225][T27904] RBP: 00007f917ec0d090 R08: 0000000000000000 R09: 0000000000000000 [ 825.530239][T27904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 825.530252][T27904] R13: 00007f917e016128 R14: 00007f917e016090 R15: 00007ffed15e5028 [ 825.530289][T27904] [ 826.078260][T27913] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7677'. [ 826.201355][T27916] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7675'. [ 826.241302][T27916] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 826.284503][T27919] syzkaller0: entered promiscuous mode [ 826.324623][T27919] syzkaller0: entered allmulticast mode [ 827.117006][T27953] set match dimension is over the limit! [ 827.279859][T27961] FAULT_INJECTION: forcing a failure. [ 827.279859][T27961] name failslab, interval 1, probability 0, space 0, times 0 [ 827.304141][T27962] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7691'. [ 827.314476][T27961] CPU: 0 UID: 0 PID: 27961 Comm: syz.1.7690 Not tainted syzkaller #0 PREEMPT(full) [ 827.314508][T27961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 827.314521][T27961] Call Trace: [ 827.314531][T27961] [ 827.314540][T27961] dump_stack_lvl+0xe8/0x150 [ 827.314572][T27961] should_fail_ex+0x412/0x560 [ 827.314616][T27961] should_failslab+0xa8/0x100 [ 827.314650][T27961] __kvmalloc_node_noprof+0x178/0x8a0 [ 827.314679][T27961] ? __raw_spin_lock_init+0x45/0x100 [ 827.314709][T27961] ? alloc_netdev_mqs+0xaa6/0x1210 [ 827.314748][T27961] alloc_netdev_mqs+0xaa6/0x1210 [ 827.314785][T27961] rtnl_create_link+0x31f/0xd70 [ 827.314825][T27961] rtnl_newlink_create+0x277/0xb70 [ 827.314851][T27961] ? __pfx___nla_validate_parse+0x10/0x10 [ 827.314894][T27961] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 827.314922][T27961] ? __pfx___mutex_lock+0x10/0x10 [ 827.314961][T27961] ? ns_capable+0x89/0xe0 [ 827.314987][T27961] rtnl_newlink+0x166a/0x1bb0 [ 827.315028][T27961] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.315056][T27961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.315122][T27961] ? kasan_quarantine_put+0xbb/0x1f0 [ 827.315150][T27961] ? lockdep_hardirqs_on+0x7a/0x110 [ 827.315182][T27961] ? nlmon_xmit+0xb0/0x100 [ 827.315203][T27961] ? kmem_cache_free+0x182/0x650 [ 827.315245][T27961] ? __lock_acquire+0x6b5/0x2cf0 [ 827.315273][T27961] ? __dev_queue_xmit+0x2b6/0x3950 [ 827.315305][T27961] ? __local_bh_enable_ip+0xd0/0x130 [ 827.315326][T27961] ? lockdep_hardirqs_on+0x7a/0x110 [ 827.315350][T27961] ? __dev_queue_xmit+0x2b6/0x3950 [ 827.315376][T27961] ? __local_bh_enable_ip+0xd0/0x130 [ 827.315394][T27961] ? __dev_queue_xmit+0x2b6/0x3950 [ 827.315430][T27961] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 827.315470][T27961] ? __pfx_rtnl_newlink+0x10/0x10 [ 827.315491][T27961] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 827.315519][T27961] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 827.315542][T27961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.315562][T27961] ? ref_tracker_free+0x693/0x840 [ 827.315601][T27961] ? __pfx_ref_tracker_free+0x10/0x10 [ 827.315642][T27961] netlink_rcv_skb+0x232/0x4b0 [ 827.315669][T27961] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 827.315696][T27961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 827.315737][T27961] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.315762][T27961] ? netlink_deliver_tap+0x2e/0x1b0 [ 827.315794][T27961] netlink_unicast+0x75c/0x8e0 [ 827.315830][T27961] netlink_sendmsg+0x813/0xb40 [ 827.315867][T27961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 827.315897][T27961] ? aa_sock_msg_perm+0xf1/0x1b0 [ 827.315925][T27961] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 827.315957][T27961] ____sys_sendmsg+0x972/0x9f0 [ 827.315985][T27961] ? __might_fault+0xaf/0x130 [ 827.316018][T27961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 827.316056][T27961] ? import_iovec+0x73/0xa0 [ 827.316090][T27961] ___sys_sendmsg+0x2a5/0x360 [ 827.316115][T27961] ? __lock_acquire+0x6b5/0x2cf0 [ 827.316142][T27961] ? __pfx____sys_sendmsg+0x10/0x10 [ 827.316212][T27961] ? __fget_files+0x2a/0x420 [ 827.316235][T27961] ? __fget_files+0x3a0/0x420 [ 827.316271][T27961] __x64_sys_sendmsg+0x1bd/0x2a0 [ 827.316301][T27961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 827.316340][T27961] ? __pfx_ksys_write+0x10/0x10 [ 827.316379][T27961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.316402][T27961] do_syscall_64+0x15f/0xf80 [ 827.316427][T27961] ? trace_irq_disable+0x3b/0x140 [ 827.316457][T27961] ? clear_bhb_loop+0x40/0x90 [ 827.316484][T27961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.316504][T27961] RIP: 0033:0x7efef2f9cdd9 [ 827.316524][T27961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.316543][T27961] RSP: 002b:00007efef3e6d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 827.316567][T27961] RAX: ffffffffffffffda RBX: 00007efef3215fa0 RCX: 00007efef2f9cdd9 [ 827.316588][T27961] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 827.316602][T27961] RBP: 00007efef3e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 827.316615][T27961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 827.316628][T27961] R13: 00007efef3216038 R14: 00007efef3215fa0 R15: 00007ffe3c374c48 [ 827.316662][T27961] [ 827.800625][T27962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 827.866970][T27967] ip6tnl3: entered allmulticast mode [ 827.936763][T27970] bond14 (unregistering): Released all slaves [ 828.213449][T27970] bond14 (unregistering): Released all slaves [ 828.416877][T28004] netlink: 'syz.3.7698': attribute type 64 has an invalid length. [ 828.432966][T27970] bond14 (unregistering): Released all slaves [ 828.441852][T28004] netlink: 5 bytes leftover after parsing attributes in process `syz.3.7698'. [ 828.631825][T27979] syzkaller0: entered promiscuous mode [ 828.650994][T27979] syzkaller0: entered allmulticast mode [ 828.662995][T27970] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 829.048888][T28034] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7704'. [ 829.106028][T28034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 833.095434][T28024] FAULT_INJECTION: forcing a failure. [ 833.095434][T28024] name failslab, interval 1, probability 0, space 0, times 0 [ 833.109022][T28024] CPU: 0 UID: 0 PID: 28024 Comm: syz.3.7703 Not tainted syzkaller #0 PREEMPT(full) [ 833.109051][T28024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 833.109063][T28024] Call Trace: [ 833.109072][T28024] [ 833.109081][T28024] dump_stack_lvl+0xe8/0x150 [ 833.109113][T28024] should_fail_ex+0x412/0x560 [ 833.109146][T28024] should_failslab+0xa8/0x100 [ 833.109180][T28024] __kvmalloc_node_noprof+0x178/0x8a0 [ 833.109211][T28024] ? alloc_netdev_mqs+0xce1/0x1210 [ 833.109244][T28024] ? alloc_netdev_mqs+0xc51/0x1210 [ 833.109280][T28024] alloc_netdev_mqs+0xce1/0x1210 [ 833.109319][T28024] rtnl_create_link+0x31f/0xd70 [ 833.109358][T28024] rtnl_newlink_create+0x277/0xb70 [ 833.109385][T28024] ? __pfx___nla_validate_parse+0x10/0x10 [ 833.109421][T28024] ? __mutex_lock+0x608/0x1550 [ 833.109452][T28024] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 833.109483][T28024] ? __pfx___mutex_lock+0x10/0x10 [ 833.109524][T28024] ? ns_capable+0x89/0xe0 [ 833.109561][T28024] rtnl_newlink+0x166a/0x1bb0 [ 833.109605][T28024] ? __pfx_rtnl_newlink+0x10/0x10 [ 833.109627][T28024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.109692][T28024] ? kasan_quarantine_put+0xbb/0x1f0 [ 833.109719][T28024] ? lockdep_hardirqs_on+0x7a/0x110 [ 833.109750][T28024] ? nlmon_xmit+0xb0/0x100 [ 833.109774][T28024] ? kmem_cache_free+0x182/0x650 [ 833.109816][T28024] ? __lock_acquire+0x6b5/0x2cf0 [ 833.109846][T28024] ? __dev_queue_xmit+0x2b6/0x3950 [ 833.109879][T28024] ? __local_bh_enable_ip+0xd0/0x130 [ 833.109902][T28024] ? lockdep_hardirqs_on+0x7a/0x110 [ 833.109927][T28024] ? __dev_queue_xmit+0x2b6/0x3950 [ 833.109959][T28024] ? __local_bh_enable_ip+0xd0/0x130 [ 833.109979][T28024] ? __dev_queue_xmit+0x2b6/0x3950 [ 833.110014][T28024] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 833.110055][T28024] ? __pfx_rtnl_newlink+0x10/0x10 [ 833.110078][T28024] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 833.110107][T28024] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 833.110130][T28024] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 833.110151][T28024] ? ref_tracker_free+0x693/0x840 [ 833.110180][T28024] ? __pfx_ref_tracker_free+0x10/0x10 [ 833.110218][T28024] netlink_rcv_skb+0x232/0x4b0 [ 833.110245][T28024] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 833.110271][T28024] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 833.110310][T28024] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.110335][T28024] ? netlink_deliver_tap+0x2e/0x1b0 [ 833.110367][T28024] netlink_unicast+0x75c/0x8e0 [ 833.110405][T28024] netlink_sendmsg+0x813/0xb40 [ 833.110442][T28024] ? __pfx_netlink_sendmsg+0x10/0x10 [ 833.110472][T28024] ? aa_sock_msg_perm+0xf1/0x1b0 [ 833.110501][T28024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 833.110533][T28024] ____sys_sendmsg+0x972/0x9f0 [ 833.110571][T28024] ? __might_fault+0xaf/0x130 [ 833.110605][T28024] ? __pfx_____sys_sendmsg+0x10/0x10 [ 833.110644][T28024] ? import_iovec+0x73/0xa0 [ 833.110678][T28024] ___sys_sendmsg+0x2a5/0x360 [ 833.110703][T28024] ? __lock_acquire+0x6b5/0x2cf0 [ 833.110730][T28024] ? __pfx____sys_sendmsg+0x10/0x10 [ 833.110795][T28024] ? __fget_files+0x2a/0x420 [ 833.110818][T28024] ? __fget_files+0x3a0/0x420 [ 833.110852][T28024] __x64_sys_sendmsg+0x1bd/0x2a0 [ 833.110881][T28024] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 833.110917][T28024] ? __pfx_ksys_write+0x10/0x10 [ 833.110954][T28024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.110978][T28024] do_syscall_64+0x15f/0xf80 [ 833.111002][T28024] ? trace_irq_disable+0x3b/0x140 [ 833.111032][T28024] ? clear_bhb_loop+0x40/0x90 [ 833.111059][T28024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.111078][T28024] RIP: 0033:0x7f4e7ef9cdd9 [ 833.111099][T28024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.111117][T28024] RSP: 002b:00007f4e7fef9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 833.111142][T28024] RAX: ffffffffffffffda RBX: 00007f4e7f215fa0 RCX: 00007f4e7ef9cdd9 [ 833.111158][T28024] RDX: 0000000004000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 833.111172][T28024] RBP: 00007f4e7fef9090 R08: 0000000000000000 R09: 0000000000000000 [ 833.111186][T28024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 833.111199][T28024] R13: 00007f4e7f216038 R14: 00007f4e7f215fa0 R15: 00007ffd43787f08 [ 833.111234][T28024] [ 833.112017][T28025] syzkaller1: entered promiscuous mode [ 833.558862][T28025] syzkaller1: entered allmulticast mode [ 833.798335][ C0] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 834.034968][T28057] x_tables: duplicate underflow at hook 2 [ 834.059497][T28068] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7715'. [ 834.071407][T28059] ip6gre2: entered allmulticast mode [ 834.098488][T28068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 834.103889][T28061] xfrm0 speed is unknown, defaulting to 1000 [ 834.117022][T28071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7716'. [ 834.214567][T28075] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7717'. [ 834.556579][T28084] xfrm1: entered allmulticast mode [ 834.764738][T28083] syzkaller0: entered promiscuous mode [ 834.770570][T28083] syzkaller0: entered allmulticast mode [ 834.804757][T28099] FAULT_INJECTION: forcing a failure. [ 834.804757][T28099] name failslab, interval 1, probability 0, space 0, times 0 [ 834.826030][T28099] CPU: 1 UID: 0 PID: 28099 Comm: syz.4.7725 Not tainted syzkaller #0 PREEMPT(full) [ 834.826062][T28099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 834.826076][T28099] Call Trace: [ 834.826086][T28099] [ 834.826096][T28099] dump_stack_lvl+0xe8/0x150 [ 834.826129][T28099] should_fail_ex+0x412/0x560 [ 834.826163][T28099] should_failslab+0xa8/0x100 [ 834.826197][T28099] __kmalloc_noprof+0xe8/0x760 [ 834.826227][T28099] ? esp_init_state+0x764/0x1240 [ 834.826260][T28099] esp_init_state+0x764/0x1240 [ 834.826300][T28099] ? __pfx_esp_init_state+0x10/0x10 [ 834.826344][T28099] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 834.826373][T28099] ? xfrm_state_get_afinfo+0x2e/0x1b0 [ 834.826409][T28099] ? __xfrm_init_state+0x842/0x1460 [ 834.826437][T28099] __xfrm_init_state+0xac9/0x1460 [ 834.826465][T28099] ? __xfrm_init_state+0x842/0x1460 [ 834.826498][T28099] xfrm_init_state+0x18/0xa0 [ 834.826528][T28099] pfkey_add+0x1d34/0x2df0 [ 834.826581][T28099] ? __pfx_pfkey_add+0x10/0x10 [ 834.826627][T28099] pfkey_sendmsg+0xc56/0x1120 [ 834.826655][T28099] ? unwind_next_frame+0xa6/0x2550 [ 834.826699][T28099] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 834.826758][T28099] ? aa_sock_msg_perm+0xf1/0x1b0 [ 834.826788][T28099] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 834.826821][T28099] ____sys_sendmsg+0x972/0x9f0 [ 834.826849][T28099] ? __might_fault+0xaf/0x130 [ 834.826884][T28099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 834.826923][T28099] ? import_iovec+0x73/0xa0 [ 834.826958][T28099] ___sys_sendmsg+0x2a5/0x360 [ 834.826984][T28099] ? __lock_acquire+0x6b5/0x2cf0 [ 834.827013][T28099] ? __pfx____sys_sendmsg+0x10/0x10 [ 834.827084][T28099] ? __fget_files+0x2a/0x420 [ 834.827108][T28099] ? __fget_files+0x3a0/0x420 [ 834.827146][T28099] __x64_sys_sendmsg+0x1bd/0x2a0 [ 834.827178][T28099] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 834.827217][T28099] ? __pfx_ksys_write+0x10/0x10 [ 834.827258][T28099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.827282][T28099] do_syscall_64+0x15f/0xf80 [ 834.827309][T28099] ? trace_irq_disable+0x3b/0x140 [ 834.827340][T28099] ? clear_bhb_loop+0x40/0x90 [ 834.827367][T28099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 834.827388][T28099] RIP: 0033:0x7fdf62b9cdd9 [ 834.827410][T28099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 834.827429][T28099] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 834.827451][T28099] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 834.827475][T28099] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000003 [ 834.827488][T28099] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 834.827502][T28099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 834.827514][T28099] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 834.827551][T28099] [ 835.268377][T28108] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7727'. [ 835.294233][T28108] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.546451][T28119] openvswitch: netlink: IP tunnel dst address not specified [ 835.793928][T28128] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7731'. [ 839.453523][T28116] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 839.461562][T28116] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 839.469938][T28116] tipc: Resetting bearer [ 839.557777][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 839.720164][T28149] set match dimension is over the limit! [ 839.936469][T28157] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7738'. [ 839.951601][T28157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 840.043414][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.083966][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.095931][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.128411][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.163491][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.202618][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.238173][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.260338][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.285817][T28163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7740'. [ 840.623852][T28188] set match dimension is over the limit! [ 840.816173][T28203] netlink: 'syz.0.7751': attribute type 1 has an invalid length. [ 840.894388][T28207] netlink: 'syz.4.7753': attribute type 1 has an invalid length. [ 840.923253][T28203] 8021q: adding VLAN 0 to HW filter on device bond14 [ 840.991511][T28208] ipvlan2: entered allmulticast mode [ 840.997123][T28208] bond14: entered allmulticast mode [ 841.046619][T28203] bond14: (slave bridge0): making interface the new active one [ 841.054488][T28203] bridge0: entered allmulticast mode [ 841.061173][T28203] bond14: (slave bridge0): Enslaving as an active interface with an up link [ 842.485353][T28280] set match dimension is over the limit! [ 843.610584][T28339] ip6tnl0: Caught tx_queue_len zero misconfig [ 844.171580][T28361] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 844.205311][T28363] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 844.322484][T28366] netlink: 'syz.3.7810': attribute type 17 has an invalid length. [ 844.346599][T28366] gretap0: entered promiscuous mode [ 844.369755][T28366] gretap0: left promiscuous mode [ 844.515385][T28379] syzkaller0: entered promiscuous mode [ 844.532039][T28379] syzkaller0: entered allmulticast mode [ 844.920327][T28401] netlink: 'syz.1.7821': attribute type 19 has an invalid length. [ 845.092004][T28408] netlink: 'syz.0.7824': attribute type 13 has an invalid length. [ 845.153133][T28408] __nla_validate_parse: 76 callbacks suppressed [ 845.153158][T28408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7824'. [ 845.487382][T28422] syzkaller1: entered promiscuous mode [ 845.521980][T28422] syzkaller1: entered allmulticast mode [ 845.552861][T28422] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.7827'. [ 845.584832][T28422] netlink: Conntrack attr has 3 unknown bytes [ 845.653899][T28426] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7829'. [ 845.681036][T28426] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7829'. [ 845.707569][T28426] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7829'. [ 845.867291][T28429] netlink: 140 bytes leftover after parsing attributes in process `syz.1.7830'. [ 846.105130][T28424] netlink: 'syz.2.7828': attribute type 1 has an invalid length. [ 846.122583][T28424] netlink: 88 bytes leftover after parsing attributes in process `syz.2.7828'. [ 846.147045][T28424] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7828'. [ 846.170315][T28424] netlink: 658 bytes leftover after parsing attributes in process `syz.2.7828'. [ 846.260823][T28448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7837'. [ 846.845483][T28474] FAULT_INJECTION: forcing a failure. [ 846.845483][T28474] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 846.899198][T28474] CPU: 1 UID: 0 PID: 28474 Comm: syz.0.7847 Not tainted syzkaller #0 PREEMPT(full) [ 846.899231][T28474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 846.899244][T28474] Call Trace: [ 846.899253][T28474] [ 846.899263][T28474] dump_stack_lvl+0xe8/0x150 [ 846.899295][T28474] should_fail_ex+0x412/0x560 [ 846.899338][T28474] _copy_from_user+0x2d/0xb0 [ 846.899369][T28474] generic_map_update_batch+0x69a/0x990 [ 846.899408][T28474] ? __pfx_generic_map_update_batch+0x10/0x10 [ 846.899435][T28474] ? __fget_files+0x2a/0x420 [ 846.899466][T28474] ? __pfx_generic_map_update_batch+0x10/0x10 [ 846.899490][T28474] bpf_map_do_batch+0x39b/0x630 [ 846.899518][T28474] __sys_bpf+0x7c1/0x950 [ 846.899549][T28474] ? __pfx___sys_bpf+0x10/0x10 [ 846.899593][T28474] ? ksys_write+0x242/0x270 [ 846.899620][T28474] ? __pfx_ksys_write+0x10/0x10 [ 846.899647][T28474] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.899668][T28474] __x64_sys_bpf+0x7c/0x90 [ 846.899697][T28474] do_syscall_64+0x15f/0xf80 [ 846.899723][T28474] ? trace_irq_disable+0x3b/0x140 [ 846.899754][T28474] ? clear_bhb_loop+0x40/0x90 [ 846.899781][T28474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 846.899802][T28474] RIP: 0033:0x7f917dd9cdd9 [ 846.899824][T28474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.899843][T28474] RSP: 002b:00007f917ec2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 846.899866][T28474] RAX: ffffffffffffffda RBX: 00007f917e015fa0 RCX: 00007f917dd9cdd9 [ 846.899881][T28474] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 846.899894][T28474] RBP: 00007f917ec2e090 R08: 0000000000000000 R09: 0000000000000000 [ 846.899908][T28474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 846.899926][T28474] R13: 00007f917e016038 R14: 00007f917e015fa0 R15: 00007ffed15e5028 [ 846.899961][T28474] [ 846.920352][T28475] syzkaller0: entered promiscuous mode [ 847.189871][T28475] syzkaller0: entered allmulticast mode [ 847.640447][T28513] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 847.681107][T28516] ksmbd: Unknown IPC event: 3, ignore. [ 847.690359][T28513] bond0: (slave lo): Error: Device can not be enslaved while up [ 847.985391][T28528] syzkaller0: entered promiscuous mode [ 847.999251][T28528] syzkaller0: entered allmulticast mode [ 848.033812][T28528] macvlan0: entered promiscuous mode [ 848.258392][T28544] openvswitch: netlink: Flow actions attr not present in new flow. [ 848.410412][T28538] syzkaller0: entered promiscuous mode [ 848.426789][T28538] syzkaller0: entered allmulticast mode [ 848.530594][T28554] netlink: 'syz.4.7866': attribute type 15 has an invalid length. [ 848.696896][T28561] ksmbd: Unknown IPC event: 3, ignore. [ 852.933168][T28554] netlink: 'syz.4.7866': attribute type 15 has an invalid length. [ 852.942399][T28554] __nla_validate_parse: 12 callbacks suppressed [ 852.942422][T28554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7866'. [ 853.205972][T28580] vlan3: entered promiscuous mode [ 853.218159][T28580] bridge0: entered promiscuous mode [ 853.395766][T28598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7878'. [ 853.554247][T28604] ksmbd: Unknown IPC event: 3, ignore. [ 853.756042][T28608] geneve1: left promiscuous mode [ 853.799856][T28608] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 853.835327][T28623] netlink: 'syz.3.7886': attribute type 9 has an invalid length. [ 854.083179][T28632] FAULT_INJECTION: forcing a failure. [ 854.083179][T28632] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.151394][T28632] CPU: 1 UID: 0 PID: 28632 Comm: syz.2.7888 Not tainted syzkaller #0 PREEMPT(full) [ 854.151426][T28632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 854.151440][T28632] Call Trace: [ 854.151450][T28632] [ 854.151459][T28632] dump_stack_lvl+0xe8/0x150 [ 854.151491][T28632] should_fail_ex+0x412/0x560 [ 854.151524][T28632] _copy_from_user+0x2d/0xb0 [ 854.151556][T28632] generic_map_update_batch+0x648/0x990 [ 854.151594][T28632] ? __pfx_generic_map_update_batch+0x10/0x10 [ 854.151622][T28632] ? __fget_files+0x2a/0x420 [ 854.151654][T28632] ? __pfx_generic_map_update_batch+0x10/0x10 [ 854.151679][T28632] bpf_map_do_batch+0x39b/0x630 [ 854.151705][T28632] __sys_bpf+0x7c1/0x950 [ 854.151737][T28632] ? __pfx___sys_bpf+0x10/0x10 [ 854.151784][T28632] ? ksys_write+0x242/0x270 [ 854.151814][T28632] ? __pfx_ksys_write+0x10/0x10 [ 854.151848][T28632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.151870][T28632] __x64_sys_bpf+0x7c/0x90 [ 854.151898][T28632] do_syscall_64+0x15f/0xf80 [ 854.151925][T28632] ? trace_irq_disable+0x3b/0x140 [ 854.151954][T28632] ? clear_bhb_loop+0x40/0x90 [ 854.151980][T28632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.152001][T28632] RIP: 0033:0x7fb9e1b9cdd9 [ 854.152022][T28632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.152042][T28632] RSP: 002b:00007fb9dfdf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 854.152066][T28632] RAX: ffffffffffffffda RBX: 00007fb9e1e15fa0 RCX: 00007fb9e1b9cdd9 [ 854.152082][T28632] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 854.152096][T28632] RBP: 00007fb9dfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 854.152110][T28632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 854.152123][T28632] R13: 00007fb9e1e16038 R14: 00007fb9e1e15fa0 R15: 00007ffc7fb91608 [ 854.152159][T28632] [ 854.579851][T28643] netlink: 64 bytes leftover after parsing attributes in process `syz.2.7890'. [ 854.642400][T28640] netlink: 'syz.3.7891': attribute type 30 has an invalid length. [ 855.236950][T28669] vlan2: entered promiscuous mode [ 855.264478][T28669] bridge0: entered promiscuous mode [ 855.915517][T28707] IPVS: length: 8 != 1152 [ 856.086872][T28696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 856.095717][T28709] sock: sock_timestamping_bind_phc: sock not bind to device [ 856.121112][T28696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 856.151279][T28696] tipc: Resetting bearer [ 856.960847][T28698] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.003482][T28698] bridge_slave_1: entered promiscuous mode [ 857.052035][T28698] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 857.061903][T28723] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7918'. [ 857.065236][T28698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 857.092629][T28698] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 857.103918][T28698] veth1_macvtap: left promiscuous mode [ 857.111377][T28698] veth0_macvtap: left promiscuous mode [ 857.118819][T28698] veth0_macvtap: entered promiscuous mode [ 857.130080][T28698] tap0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 857.139182][T28698] veth0_macvtap: entered allmulticast mode [ 857.147076][T28698] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 857.195860][T28122] xfrm0 speed is unknown, defaulting to 1000 [ 857.204435][T23001] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.225731][T28122] syz1: Port: 1 Link DOWN [ 857.237274][T23001] netdevsim netdevsim1 netdevsim0: unset [0, 1] type 1 family 0 port 256 - 0 [ 857.273652][T23001] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.286149][T23001] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.299713][T23001] netdevsim netdevsim1 netdevsim1: unset [0, 1] type 1 family 0 port 256 - 0 [ 857.309701][T23001] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.347902][T23001] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.359646][T27429] xfrm0 speed is unknown, defaulting to 1000 [ 857.384092][T23001] netdevsim netdevsim1 netdevsim2: unset [0, 1] type 1 family 0 port 256 - 0 [ 857.415400][T23001] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.447322][T23001] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 857.486026][T23001] netdevsim netdevsim1 netdevsim3: unset [0, 1] type 1 family 0 port 256 - 0 [ 857.510539][T23001] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.521001][T23001] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.538012][T23001] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.554398][T28735] netlink: 830 bytes leftover after parsing attributes in process `syz.0.7921'. [ 857.577173][T23001] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.601572][T23001] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.821543][T28742] ksmbd: Unknown IPC event: 3, ignore. [ 858.031257][T28757] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 858.259496][T28765] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7932'. [ 858.273260][T28766] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7934'. [ 858.534170][T28754] geneve7: entered promiscuous mode [ 858.560951][T10405] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 34541 - 0 [ 858.610080][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 34541 - 0 [ 858.653390][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 34541 - 0 [ 858.687754][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 34541 - 0 [ 858.783096][T28784] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 858.811473][T28784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7941'. [ 858.934071][T28788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7942'. [ 859.144310][T28797] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7946'. [ 859.720659][T28824] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7957'. [ 859.773352][T28833] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7957'. [ 859.812132][T28835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7959'. [ 859.902415][T28837] netlink: 'syz.3.7961': attribute type 11 has an invalid length. [ 859.985558][T28846] netlink: 'syz.0.7963': attribute type 20 has an invalid length. [ 859.996308][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7963'. [ 860.125535][T28846] netlink: 'syz.0.7963': attribute type 20 has an invalid length. [ 860.156922][T28846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7963'. [ 860.934653][T28896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.064196][T28902] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 861.602115][T28930] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.292108][T28964] lo: left promiscuous mode [ 862.530875][T28977] netlink: 'syz.0.8004': attribute type 1 has an invalid length. [ 862.558571][T28976] netlink: 'syz.0.8004': attribute type 1 has an invalid length. [ 862.596640][T28964] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 862.625432][ T5731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 862.640645][T28976] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 862.642119][T28977] workqueue: Failed to create a rescuer kthread for wq "bond15": -EINTR [ 862.928081][T28997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.973717][T28999] netlink: 'syz.3.8008': attribute type 15 has an invalid length. [ 863.287753][ T5731] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 863.297016][T29011] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 863.631881][T29028] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 863.961175][T29048] __nla_validate_parse: 16 callbacks suppressed [ 863.961199][T29048] netlink: 52 bytes leftover after parsing attributes in process `syz.4.8023'. [ 864.078921][T29056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8026'. [ 864.085200][T29048] syzkaller0: entered promiscuous mode [ 864.133442][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8026'. [ 864.134040][T29048] syzkaller0: entered allmulticast mode [ 864.242268][T29059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8026'. [ 864.244685][T29068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8023'. [ 864.269833][T29075] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8029'. [ 864.298036][T29068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8023'. [ 864.329898][T23002] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.354490][T23002] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.553367][T29087] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8031'. [ 864.767650][T23002] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.791775][T23002] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 864.922439][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8031'. [ 865.272233][T29116] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8037'. [ 865.563903][T29132] syzkaller0: entered promiscuous mode [ 865.580160][T29132] syzkaller0: entered allmulticast mode [ 866.029183][T29152] sctp: [Deprecated]: syz.4.8051 (pid 29152) Use of int in max_burst socket option. [ 866.029183][T29152] Use struct sctp_assoc_value instead [ 866.905782][T29199] netlink: 'syz.4.8065': attribute type 2 has an invalid length. [ 867.065762][T29206] set match dimension is over the limit! [ 867.258967][T29213] IPVS: Unknown mcast interface: vcan0 [ 868.009217][T29257] netlink: 'syz.4.8081': attribute type 1 has an invalid length. [ 868.024417][T29261] FAULT_INJECTION: forcing a failure. [ 868.024417][T29261] name failslab, interval 1, probability 0, space 0, times 0 [ 868.047357][T29261] CPU: 0 UID: 0 PID: 29261 Comm: syz.0.8082 Not tainted syzkaller #0 PREEMPT(full) [ 868.047388][T29261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 868.047401][T29261] Call Trace: [ 868.047411][T29261] [ 868.047427][T29261] dump_stack_lvl+0xe8/0x150 [ 868.047459][T29261] should_fail_ex+0x412/0x560 [ 868.047492][T29261] should_failslab+0xa8/0x100 [ 868.047523][T29261] ? skb_clone+0x212/0x3a0 [ 868.047551][T29261] kmem_cache_alloc_noprof+0x87/0x650 [ 868.047578][T29261] ? sk_filter_trim_cap+0x19e/0xce0 [ 868.047616][T29261] skb_clone+0x212/0x3a0 [ 868.047647][T29261] __netlink_deliver_tap+0x404/0x850 [ 868.047689][T29261] ? netlink_deliver_tap+0x2e/0x1b0 [ 868.047717][T29261] netlink_deliver_tap+0x19c/0x1b0 [ 868.047745][T29261] netlink_dump+0x8ed/0xe10 [ 868.047784][T29261] ? __pfx_netlink_dump+0x10/0x10 [ 868.047835][T29261] netlink_recvmsg+0x690/0xa50 [ 868.047873][T29261] ? __pfx_netlink_recvmsg+0x10/0x10 [ 868.047905][T29261] ? __lock_acquire+0x6b5/0x2cf0 [ 868.047936][T29261] ? __pfx_netlink_recvmsg+0x10/0x10 [ 868.047964][T29261] sock_recvmsg_nosec+0x10c/0x140 [ 868.047989][T29261] ____sys_recvmsg+0x3e3/0x4a0 [ 868.048029][T29261] ? __pfx_____sys_recvmsg+0x10/0x10 [ 868.048076][T29261] ? import_iovec+0x73/0xa0 [ 868.048111][T29261] ___sys_recvmsg+0x215/0x590 [ 868.048146][T29261] ? __pfx____sys_recvmsg+0x10/0x10 [ 868.048180][T29261] ? __fget_files+0x2a/0x420 [ 868.048352][T29261] do_recvmmsg+0x334/0x800 [ 868.048389][T29261] ? __pfx_do_recvmmsg+0x10/0x10 [ 868.048430][T29261] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 868.048477][T29261] __x64_sys_recvmmsg+0x198/0x250 [ 868.048508][T29261] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 868.048546][T29261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.048567][T29261] do_syscall_64+0x15f/0xf80 [ 868.048592][T29261] ? trace_irq_disable+0x3b/0x140 [ 868.048622][T29261] ? clear_bhb_loop+0x40/0x90 [ 868.048648][T29261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 868.048667][T29261] RIP: 0033:0x7f917dd9cdd9 [ 868.048689][T29261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 868.048707][T29261] RSP: 002b:00007f917ec2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 868.048730][T29261] RAX: ffffffffffffffda RBX: 00007f917e015fa0 RCX: 00007f917dd9cdd9 [ 868.048746][T29261] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 868.048759][T29261] RBP: 00007f917ec2e090 R08: 0000000000000000 R09: 0000000000000000 [ 868.048772][T29261] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 868.048785][T29261] R13: 00007f917e016038 R14: 00007f917e015fa0 R15: 00007ffed15e5028 [ 868.048819][T29261] [ 868.577765][T29275] bond0: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 868.616059][T29275] bond0: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 868.664404][T29275] bond0: (slave ip6gre2): making interface the new active one [ 868.690693][T29275] bond0: (slave ip6gre2): Enslaving as an active interface with an up link [ 869.082316][T29313] netlink: 'syz.3.8090': attribute type 3 has an invalid length. [ 869.222110][T29322] netlink: 'syz.3.8093': attribute type 1 has an invalid length. [ 869.233008][T29322] netlink: 'syz.3.8093': attribute type 11 has an invalid length. [ 869.241915][T29322] __nla_validate_parse: 15 callbacks suppressed [ 869.241937][T29322] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8093'. [ 869.245033][T29315] tipc: Enabled bearer , priority 0 [ 869.347404][T29315] syzkaller0: entered promiscuous mode [ 869.360204][T29315] syzkaller0: entered allmulticast mode [ 869.446783][T29332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8095'. [ 869.534371][T29318] tipc: Resetting bearer [ 869.666222][T29340] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8098'. [ 869.739399][T29314] tipc: Resetting bearer [ 869.874472][T29314] tipc: Disabling bearer [ 869.993901][T29340] netlink: 84 bytes leftover after parsing attributes in process `syz.0.8098'. [ 870.041505][T29340] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8098'. [ 870.184476][ T30] audit: type=1804 audit(1778137091.394:13): pid=29368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.8105" name="/newroot/1579/cgroup.controllers" dev="tmpfs" ino=8015 res=1 errno=0 [ 870.276714][ T30] audit: type=1800 audit(1778137091.394:14): pid=29368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.8105" name="cgroup.controllers" dev="tmpfs" ino=8015 res=0 errno=0 [ 870.301368][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.511567][T29385] FAULT_INJECTION: forcing a failure. [ 870.511567][T29385] name failslab, interval 1, probability 0, space 0, times 0 [ 870.580915][T29385] CPU: 0 UID: 0 PID: 29385 Comm: syz.4.8108 Not tainted syzkaller #0 PREEMPT(full) [ 870.580947][T29385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 870.580960][T29385] Call Trace: [ 870.580969][T29385] [ 870.580979][T29385] dump_stack_lvl+0xe8/0x150 [ 870.581011][T29385] should_fail_ex+0x412/0x560 [ 870.581043][T29385] should_failslab+0xa8/0x100 [ 870.581077][T29385] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 870.581108][T29385] ? __alloc_skb+0x1d0/0x7d0 [ 870.581131][T29385] ? __local_bh_enable_ip+0xd0/0x130 [ 870.581161][T29385] __alloc_skb+0x1d0/0x7d0 [ 870.581191][T29385] netlink_dump+0x1d8/0xe10 [ 870.581219][T29385] ? lockdep_hardirqs_on+0x7a/0x110 [ 870.581258][T29385] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 870.581284][T29385] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 870.581321][T29385] ? __pfx_netlink_dump+0x10/0x10 [ 870.581371][T29385] netlink_recvmsg+0x690/0xa50 [ 870.581410][T29385] ? __pfx_netlink_recvmsg+0x10/0x10 [ 870.581441][T29385] ? __lock_acquire+0x6b5/0x2cf0 [ 870.581473][T29385] ? __pfx_netlink_recvmsg+0x10/0x10 [ 870.581500][T29385] sock_recvmsg_nosec+0x10c/0x140 [ 870.581526][T29385] ____sys_recvmsg+0x3e3/0x4a0 [ 870.581565][T29385] ? __pfx_____sys_recvmsg+0x10/0x10 [ 870.581611][T29385] ? import_iovec+0x73/0xa0 [ 870.581645][T29385] ___sys_recvmsg+0x215/0x590 [ 870.581680][T29385] ? __pfx____sys_recvmsg+0x10/0x10 [ 870.581713][T29385] ? __fget_files+0x2a/0x420 [ 870.581774][T29385] do_recvmmsg+0x334/0x800 [ 870.581814][T29385] ? __pfx_do_recvmmsg+0x10/0x10 [ 870.581856][T29385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 870.581905][T29385] __x64_sys_recvmmsg+0x198/0x250 [ 870.581938][T29385] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 870.581977][T29385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.582001][T29385] do_syscall_64+0x15f/0xf80 [ 870.582027][T29385] ? trace_irq_disable+0x3b/0x140 [ 870.582059][T29385] ? clear_bhb_loop+0x40/0x90 [ 870.582086][T29385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.582107][T29385] RIP: 0033:0x7fdf62b9cdd9 [ 870.582128][T29385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.582147][T29385] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 870.582171][T29385] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 870.582187][T29385] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 870.582201][T29385] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 870.582214][T29385] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 870.582227][T29385] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 870.582273][T29385] [ 870.972120][T29391] set match dimension is over the limit! [ 871.006717][T29399] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 871.014349][T29399] IPv6: NLM_F_CREATE should be set when creating new route [ 871.350340][T29411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8119'. [ 871.372777][T29411] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8119'. [ 871.495416][T29425] xt_ecn: cannot match TCP bits for non-tcp packets [ 871.998037][T29447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8127'. [ 872.276753][T29464] netlink: 220 bytes leftover after parsing attributes in process `syz.1.8132'. [ 872.319274][T29468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8131'. [ 872.679851][T29489] netlink: 'syz.3.8135': attribute type 1 has an invalid length. [ 872.837586][T29492] bond21: (slave vxcan3): The slave device specified does not support setting the MAC address [ 872.853835][T29492] bond21: (slave vxcan3): Error -95 calling set_mac_address [ 873.075471][T29507] set match dimension is over the limit! [ 873.496930][T29527] xt_policy: too many policy elements [ 873.581539][T29534] x_tables: duplicate underflow at hook 1 [ 873.612158][T29533] x_tables: duplicate underflow at hook 1 [ 873.998961][T29549] xt_bpf: check failed: parse error [ 874.049585][T29528] sctp: [Deprecated]: syz.1.8150 (pid 29528) Use of int in maxseg socket option. [ 874.049585][T29528] Use struct sctp_assoc_value instead [ 874.115738][T29551] veth0: entered promiscuous mode [ 874.352284][T29562] __nla_validate_parse: 4 callbacks suppressed [ 874.352308][T29562] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8160'. [ 874.720974][T29576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8163'. [ 874.744595][T29576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8163'. [ 874.781493][T29576] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8163'. [ 874.833999][T29585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8164'. [ 875.280956][T29608] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8171'. [ 875.424040][T29615] netlink: 'syz.3.8177': attribute type 1 has an invalid length. [ 875.437992][T29614] xt_hashlimit: size too large, truncated to 1048576 [ 875.547120][T29615] bond22: entered promiscuous mode [ 875.564140][T29615] 8021q: adding VLAN 0 to HW filter on device bond22 [ 875.593651][T29614] netlink: 'syz.0.8174': attribute type 21 has an invalid length. [ 875.620816][T29614] netlink: 'syz.0.8174': attribute type 6 has an invalid length. [ 875.659758][T29614] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8174'. [ 875.698560][T29620] pim6reg1: entered promiscuous mode [ 875.713515][T29620] pim6reg1: entered allmulticast mode [ 875.755683][T29632] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8182'. [ 875.826690][T29631] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 875.882108][T29641] netlink: 'syz.3.8186': attribute type 16 has an invalid length. [ 875.890899][T29641] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8186'. [ 875.931884][T29640] netlink: 220 bytes leftover after parsing attributes in process `syz.3.8186'. [ 876.125131][T29646] tunl0: entered promiscuous mode [ 876.162282][T29646] netlink: 'syz.2.8187': attribute type 3 has an invalid length. [ 876.608649][T29670] netlink: 'syz.2.8194': attribute type 4 has an invalid length. [ 877.116412][T29694] openvswitch: netlink: Message has 8 unknown bytes. [ 877.123852][T29694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 877.272383][T29701] syzkaller1: entered promiscuous mode [ 877.285724][T29701] syzkaller1: entered allmulticast mode [ 877.632687][T29715] scsi_nl_rcv_msg: discarding partial skb [ 878.026898][T29736] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 878.208092][T29748] openvswitch: netlink: Flow actions attr not present in new flow. [ 878.560731][T29752] erspan0: left promiscuous mode [ 878.634391][T29752] 8021q: adding VLAN 0 to HW filter on device  [ 878.667124][T29752] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.687152][T29752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.783977][T29752] veth0_to_team: left promiscuous mode [ 878.815027][T29752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.864833][T29752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.897317][T29752] tipc: Resetting bearer [ 878.915120][T29752] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 878.920904][T29773] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:20004 [ 878.945948][T29752] veth1_vlan: left promiscuous mode [ 878.953643][T29752] veth0_vlan: left promiscuous mode [ 878.963852][T29752] veth0_vlan: entered promiscuous mode [ 878.974448][T29752] veth1_vlan: entered promiscuous mode [ 878.980997][T29752] macvlan0: left promiscuous mode [ 878.995463][T29752] veth1_macvtap: left promiscuous mode [ 879.006875][T29752] veth0_macvtap: left promiscuous mode [ 879.030748][T29752] veth1_macvtap: entered promiscuous mode [ 879.051646][T29752] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 879.066283][T29752] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 879.095640][T29752] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 879.106651][T29752] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 879.123517][T29752] erspan0: entered promiscuous mode [ 879.134316][T29752] veth0_macvtap: entered promiscuous mode [ 879.145768][T29752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 879.159577][T29752] 8021q: adding VLAN 0 to HW filter on device bond2 [ 879.180159][T29752] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.204184][T29752] 8021q: adding VLAN 0 to HW filter on device bond4 [ 879.216313][T29752] veth0_to_team: entered promiscuous mode [ 879.238784][T29752] 8021q: adding VLAN 0 to HW filter on device bond5 [ 879.253352][T29752] 8021q: adding VLAN 0 to HW filter on device bond6 [ 879.262001][T29752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 879.272900][T29752] 8021q: adding VLAN 0 to HW filter on device bond8 [ 879.287189][T29752] 8021q: adding VLAN 0 to HW filter on device bond9 [ 879.300930][T29752] 8021q: adding VLAN 0 to HW filter on device bond10 [ 879.309879][T29752] 8021q: adding VLAN 0 to HW filter on device bond11 [ 879.323745][T29752] 8021q: adding VLAN 0 to HW filter on device bond12 [ 879.345926][T29752] 8021q: adding VLAN 0 to HW filter on device bond13 [ 879.359402][T29752] 8021q: adding VLAN 0 to HW filter on device bond14 [ 879.367816][T29752] 8021q: adding VLAN 0 to HW filter on device bond15 [ 879.416651][T29752] 8021q: adding VLAN 0 to HW filter on device team1 [ 879.427889][T29752] 8021q: adding VLAN 0 to HW filter on device bond16 [ 879.449100][T29752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 879.459936][T29752] geneve7: left promiscuous mode [ 879.471518][T10405] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.479531][T10405] bridge0: port 2(bridge_slave_1) entered forwarding state [ 879.554853][T29756] syzkaller1: entered promiscuous mode [ 879.566074][T29756] syzkaller1: entered allmulticast mode [ 879.582224][T23002] netdevsim netdevsim1 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 879.582355][ T5731] xfrm0 speed is unknown, defaulting to 1000 [ 879.594368][T23002] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 879.608614][ T5731] syz1: Port: 1 Link ACTIVE [ 879.612065][T23002] netdevsim netdevsim1 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 879.623643][T23002] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 879.636044][T29779] lo speed is unknown, defaulting to 1000 [ 879.703401][ T29] xfrm0 speed is unknown, defaulting to 1000 [ 879.703458][T23002] netdevsim netdevsim1 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 879.720789][T23002] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 879.747127][T29779] lo speed is unknown, defaulting to 1000 [ 879.761862][T23002] netdevsim netdevsim1 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 879.782270][T23002] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 879.804057][T29779] lo speed is unknown, defaulting to 1000 [ 879.821544][T29779] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 879.822537][T29797] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 879.845280][T29779] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 879.875020][T29779] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 879.914251][T29779] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 879.943441][T29779] lo speed is unknown, defaulting to 1000 [ 879.953150][T29779] lo speed is unknown, defaulting to 1000 [ 879.961719][T29779] lo speed is unknown, defaulting to 1000 [ 879.972994][T29779] lo speed is unknown, defaulting to 1000 [ 879.982780][T29779] lo speed is unknown, defaulting to 1000 [ 880.149373][T29810] set match dimension is over the limit! [ 881.775625][T29781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 882.064090][T29819] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 882.087179][T29822] netlink: 'syz.0.8237': attribute type 1 has an invalid length. [ 882.093989][T29819] __nla_validate_parse: 15 callbacks suppressed [ 882.094012][T29819] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.8235'. [ 882.116861][T29819] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.8235'. [ 882.203144][T29825] tunl0: left promiscuous mode [ 882.230667][T29822] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8237'. [ 882.250232][T29825] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 882.290462][T29829] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8234'. [ 882.361808][T29822] 8021q: adding VLAN 0 to HW filter on device bond15 [ 882.402488][T29840] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8238'. [ 882.445209][T29823] netlink: 'syz.1.8234': attribute type 1 has an invalid length. [ 882.481672][T29837] syzkaller1: entered promiscuous mode [ 882.488832][T29837] syzkaller1: entered allmulticast mode [ 882.530606][T29846] FAULT_INJECTION: forcing a failure. [ 882.530606][T29846] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.546383][T29846] CPU: 1 UID: 0 PID: 29846 Comm: syz.0.8241 Not tainted syzkaller #0 PREEMPT(full) [ 882.546412][T29846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 882.546424][T29846] Call Trace: [ 882.546432][T29846] [ 882.546441][T29846] dump_stack_lvl+0xe8/0x150 [ 882.546469][T29846] should_fail_ex+0x412/0x560 [ 882.546497][T29846] _copy_from_user+0x2d/0xb0 [ 882.546524][T29846] ___sys_recvmsg+0x175/0x590 [ 882.546555][T29846] ? __pfx____sys_recvmsg+0x10/0x10 [ 882.546584][T29846] ? __fget_files+0x2a/0x420 [ 882.546637][T29846] do_recvmmsg+0x334/0x800 [ 882.546670][T29846] ? __pfx_do_recvmmsg+0x10/0x10 [ 882.546706][T29846] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 882.546749][T29846] __x64_sys_recvmmsg+0x198/0x250 [ 882.546776][T29846] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 882.546810][T29846] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.546830][T29846] do_syscall_64+0x15f/0xf80 [ 882.546853][T29846] ? trace_irq_disable+0x3b/0x140 [ 882.546879][T29846] ? clear_bhb_loop+0x40/0x90 [ 882.546902][T29846] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.546920][T29846] RIP: 0033:0x7f917dd9cdd9 [ 882.546940][T29846] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 882.546956][T29846] RSP: 002b:00007f917ec2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 882.546977][T29846] RAX: ffffffffffffffda RBX: 00007f917e015fa0 RCX: 00007f917dd9cdd9 [ 882.546991][T29846] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 882.547003][T29846] RBP: 00007f917ec2e090 R08: 0000000000000000 R09: 0000000000000000 [ 882.547014][T29846] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 882.547025][T29846] R13: 00007f917e016038 R14: 00007f917e015fa0 R15: 00007ffed15e5028 [ 882.547058][T29846] [ 883.165488][T23001] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x94 [ 883.282822][T29873] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8249'. [ 883.312762][T29873] netlink: 'syz.4.8249': attribute type 7 has an invalid length. [ 883.332432][T29873] netlink: 'syz.4.8249': attribute type 8 has an invalid length. [ 883.351756][T29873] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8249'. [ 883.361940][T29877] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 883.383625][ T5745] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 883.636134][T29886] FAULT_INJECTION: forcing a failure. [ 883.636134][T29886] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 883.669700][T29886] CPU: 1 UID: 0 PID: 29886 Comm: syz.4.8252 Not tainted syzkaller #0 PREEMPT(full) [ 883.669732][T29886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 883.669745][T29886] Call Trace: [ 883.669755][T29886] [ 883.669765][T29886] dump_stack_lvl+0xe8/0x150 [ 883.669797][T29886] should_fail_ex+0x412/0x560 [ 883.669831][T29886] _copy_from_user+0x2d/0xb0 [ 883.669862][T29886] generic_map_update_batch+0x69a/0x990 [ 883.669900][T29886] ? __pfx_generic_map_update_batch+0x10/0x10 [ 883.669928][T29886] ? __fget_files+0x2a/0x420 [ 883.669960][T29886] ? __pfx_generic_map_update_batch+0x10/0x10 [ 883.669986][T29886] bpf_map_do_batch+0x39b/0x630 [ 883.670013][T29886] __sys_bpf+0x7c1/0x950 [ 883.670047][T29886] ? __pfx___sys_bpf+0x10/0x10 [ 883.670096][T29886] ? ksys_write+0x242/0x270 [ 883.670130][T29886] ? __pfx_ksys_write+0x10/0x10 [ 883.670165][T29886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.670189][T29886] __x64_sys_bpf+0x7c/0x90 [ 883.670219][T29886] do_syscall_64+0x15f/0xf80 [ 883.670246][T29886] ? trace_irq_disable+0x3b/0x140 [ 883.670277][T29886] ? clear_bhb_loop+0x40/0x90 [ 883.670313][T29886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 883.670335][T29886] RIP: 0033:0x7fdf62b9cdd9 [ 883.670357][T29886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 883.670378][T29886] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 883.670403][T29886] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 883.670420][T29886] RDX: 0000000000000038 RSI: 0000200000000300 RDI: 000000000000001a [ 883.670434][T29886] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 883.670448][T29886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 883.670461][T29886] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 883.670497][T29886] [ 883.678424][T27429] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 884.362506][T29911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 884.464739][T29916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 884.564211][T29918] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8261'. [ 885.904945][T29859] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 886.114667][T29931] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8265'. [ 886.153214][T29931] IPVS: Unknown mcast interface: vcan0 [ 886.236641][T29939] FAULT_INJECTION: forcing a failure. [ 886.236641][T29939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 886.257588][T29939] CPU: 1 UID: 0 PID: 29939 Comm: syz.2.8270 Not tainted syzkaller #0 PREEMPT(full) [ 886.257622][T29939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 886.257636][T29939] Call Trace: [ 886.257645][T29939] [ 886.257655][T29939] dump_stack_lvl+0xe8/0x150 [ 886.257687][T29939] should_fail_ex+0x412/0x560 [ 886.257719][T29939] _copy_from_user+0x2d/0xb0 [ 886.257750][T29939] ___sys_recvmsg+0x175/0x590 [ 886.257787][T29939] ? __pfx____sys_recvmsg+0x10/0x10 [ 886.257821][T29939] ? __fget_files+0x2a/0x420 [ 886.257881][T29939] do_recvmmsg+0x334/0x800 [ 886.257919][T29939] ? __pfx_do_recvmmsg+0x10/0x10 [ 886.257961][T29939] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 886.258009][T29939] __x64_sys_recvmmsg+0x198/0x250 [ 886.258042][T29939] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 886.258081][T29939] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.258114][T29939] do_syscall_64+0x15f/0xf80 [ 886.258140][T29939] ? trace_irq_disable+0x3b/0x140 [ 886.258172][T29939] ? clear_bhb_loop+0x40/0x90 [ 886.258198][T29939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 886.258219][T29939] RIP: 0033:0x7fb9e1b9cdd9 [ 886.258240][T29939] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 886.258259][T29939] RSP: 002b:00007fb9dfdf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 886.258283][T29939] RAX: ffffffffffffffda RBX: 00007fb9e1e15fa0 RCX: 00007fb9e1b9cdd9 [ 886.258299][T29939] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 886.258313][T29939] RBP: 00007fb9dfdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 886.258326][T29939] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 886.258339][T29939] R13: 00007fb9e1e16038 R14: 00007fb9e1e15fa0 R15: 00007ffc7fb91608 [ 886.258375][T29939] [ 886.517234][T29942] netem: change failed [ 886.887849][T29955] netlink: 'syz.1.8274': attribute type 28 has an invalid length. [ 886.920985][T29955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8274'. [ 887.039734][T29973] sctp: [Deprecated]: syz.0.8280 (pid 29973) Use of int in maxseg socket option. [ 887.039734][T29973] Use struct sctp_assoc_value instead [ 887.131356][T29978] __nla_validate_parse: 1 callbacks suppressed [ 887.131377][T29978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8281'. [ 887.188154][T29973] netlink: 56 bytes leftover after parsing attributes in process `syz.0.8280'. [ 887.224242][T29973] netlink: 96 bytes leftover after parsing attributes in process `syz.0.8280'. [ 887.327299][T29989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8285'. [ 887.346788][T29989] netlink: 50 bytes leftover after parsing attributes in process `syz.2.8285'. [ 887.390778][T29989] netlink: 50 bytes leftover after parsing attributes in process `syz.2.8285'. [ 887.602985][T29997] syzkaller0: entered promiscuous mode [ 887.619864][T29997] syzkaller0: entered allmulticast mode [ 887.962141][T30024] netlink: 'syz.4.8294': attribute type 10 has an invalid length. [ 888.081952][T30034] set match dimension is over the limit! [ 888.436059][T30055] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8308'. [ 888.446630][T30052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8306'. [ 888.460003][T30055] IPVS: Unknown mcast interface: vcan0 [ 888.761201][T30073] FAULT_INJECTION: forcing a failure. [ 888.761201][T30073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.774898][T30073] CPU: 0 UID: 0 PID: 30073 Comm: syz.4.8312 Not tainted syzkaller #0 PREEMPT(full) [ 888.774928][T30073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.774942][T30073] Call Trace: [ 888.774951][T30073] [ 888.774961][T30073] dump_stack_lvl+0xe8/0x150 [ 888.774994][T30073] should_fail_ex+0x412/0x560 [ 888.775025][T30073] _copy_from_user+0x2d/0xb0 [ 888.775054][T30073] ___sys_recvmsg+0x175/0x590 [ 888.775088][T30073] ? __pfx____sys_recvmsg+0x10/0x10 [ 888.775121][T30073] ? __fget_files+0x2a/0x420 [ 888.775174][T30073] do_recvmmsg+0x334/0x800 [ 888.775209][T30073] ? __pfx_do_recvmmsg+0x10/0x10 [ 888.775249][T30073] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 888.775296][T30073] __x64_sys_recvmmsg+0x198/0x250 [ 888.775338][T30073] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 888.775376][T30073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.775401][T30073] do_syscall_64+0x15f/0xf80 [ 888.775426][T30073] ? trace_irq_disable+0x3b/0x140 [ 888.775457][T30073] ? clear_bhb_loop+0x40/0x90 [ 888.775481][T30073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.775502][T30073] RIP: 0033:0x7fdf62b9cdd9 [ 888.775524][T30073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.775544][T30073] RSP: 002b:00007fdf63983028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 888.775567][T30073] RAX: ffffffffffffffda RBX: 00007fdf62e15fa0 RCX: 00007fdf62b9cdd9 [ 888.775583][T30073] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 888.775597][T30073] RBP: 00007fdf63983090 R08: 0000000000000000 R09: 0000000000000000 [ 888.775611][T30073] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 888.775624][T30073] R13: 00007fdf62e16038 R14: 00007fdf62e15fa0 R15: 00007fff8e0b0da8 [ 888.775657][T30073] [ 889.165652][T30084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8315'. [ 889.422498][T30094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8319'. [ 889.885704][T30124] set match dimension is over the limit! [ 890.680139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.690850][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 890.726230][T30170] sctp: [Deprecated]: syz.4.8341 (pid 30170) Use of int in max_burst socket option. [ 890.726230][T30170] Use struct sctp_assoc_value instead [ 890.928263][T30185] netlink: 'syz.4.8344': attribute type 10 has an invalid length. [ 890.992378][T30186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 890.999752][T30186] IPv6: NLM_F_CREATE should be set when creating new route [ 891.007185][T30186] IPv6: NLM_F_CREATE should be set when creating new route [ 891.200939][T30186] bridge_slave_1: entered allmulticast mode [ 891.267387][T30192] bond23: Invalid ad_actor_system MAC address. [ 891.283000][T30192] bond23: option ad_actor_system: invalid value (1) [ 891.302476][T30192] bond23 (unregistering): Released all slaves [ 891.862092][T30220] tipc: Resetting bearer [ 892.130489][T30240] sctp: [Deprecated]: syz.3.8356 (pid 30240) Use of int in max_burst socket option. [ 892.130489][T30240] Use struct sctp_assoc_value instead [ 892.590044][T30261] __nla_validate_parse: 7 callbacks suppressed [ 892.590067][T30261] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8361'. [ 892.916382][T30276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8367'. [ 892.954051][T30276] netlink: 'syz.2.8367': attribute type 4 has an invalid length. [ 892.966312][T30282] ksmbd: Unknown IPC event: 3, ignore. [ 892.990658][T30281] netlink: 'syz.0.8369': attribute type 1 has an invalid length. [ 893.010898][T30286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8368'. [ 893.021049][T30281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8369'. [ 893.163023][T30284] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8369'. [ 893.187875][T30284] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8369'. [ 893.218163][T30281] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8369'. [ 893.237967][T30299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8373'. [ 893.249474][T30281] netlink: 80 bytes leftover after parsing attributes in process `syz.0.8369'. [ 893.448187][T30311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8374'. [ 893.899586][T30329] ksmbd: Unknown IPC event: 3, ignore. [ 894.116548][T30341] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 894.329698][T30341] bond11: (slave geneve2): Enslaving as an active interface with an up link [ 894.371765][ T47] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.388464][ T47] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.491981][ T47] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.505175][ T47] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 894.803598][T30385] openvswitch: netlink: Unknown key attributes 2 [ 895.157289][T30399] set match dimension is over the limit! [ 895.185567][T30401] syzkaller0: entered promiscuous mode [ 895.196510][T30401] syzkaller0: entered allmulticast mode [ 895.208027][T30405] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 895.410854][T30418] xt_connbytes: Forcing CT accounting to be enabled [ 895.474155][T30422] netlink: 'syz.3.8408': attribute type 1 has an invalid length. [ 895.688528][T30432] netlink: 'syz.2.8411': attribute type 13 has an invalid length. [ 895.727821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.731935][T30422] 8021q: adding VLAN 0 to HW filter on device bond23 [ 895.736425][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 895.753255][T30434] netlink: 'syz.4.8413': attribute type 11 has an invalid length. [ 895.844562][T30418] vlan1: entered allmulticast mode [ 895.858143][T30418] bond23: entered allmulticast mode [ 895.924223][T30425] bond23: (slave geneve3): making interface the new active one [ 895.935620][T30425] geneve3: entered allmulticast mode [ 895.941391][T30446] netlink: 'syz.0.8416': attribute type 3 has an invalid length. [ 895.955599][T30446] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 895.956675][T30448] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 895.978464][T30425] bond23: (slave geneve3): Enslaving as an active interface with an up link [ 896.104857][T30432] tipc: Resetting bearer [ 896.378756][T30468] netlink: 'syz.2.8420': attribute type 10 has an invalid length. [ 896.520366][T30472] netlink: 'syz.4.8421': attribute type 1 has an invalid length. [ 896.591548][T30472] 8021q: adding VLAN 0 to HW filter on device bond12 [ 896.687174][T30483] netlink: 'syz.4.8421': attribute type 10 has an invalid length. [ 896.710287][T30476] veth7: entered allmulticast mode [ 896.722540][T30476] bond12: (slave veth7): Enslaving as an active interface with a down link [ 896.793829][T30482] gtp2: entered promiscuous mode [ 896.810197][T30482] gtp2: entered allmulticast mode [ 896.831486][T30472] bridge0: entered allmulticast mode [ 896.831632][T30488] netlink: 'syz.1.8424': attribute type 15 has an invalid length. [ 897.038819][T30483] netlink: 'syz.4.8421': attribute type 1 has an invalid length. [ 897.085432][T10405] netdevsim netdevsim1 netdevsim0: set [0, 2] type 1 family 0 port 2816 - 0 [ 897.116239][T10405] netdevsim netdevsim1 netdevsim1: set [0, 2] type 1 family 0 port 2816 - 0 [ 897.136541][T30485] tipc: Resetting bearer [ 897.315293][T10405] netdevsim netdevsim1 netdevsim2: set [0, 2] type 1 family 0 port 2816 - 0 [ 897.335426][T10405] netdevsim netdevsim1 netdevsim3: set [0, 2] type 1 family 0 port 2816 - 0 [ 897.386346][T30485] tipc: Resetting bearer [ 897.956616][T30525] __nla_validate_parse: 19 callbacks suppressed [ 897.956639][T30525] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8430'. [ 898.110975][T30535] netlink: 'syz.2.8435': attribute type 1 has an invalid length. [ 898.135432][T30535] netlink: 'syz.2.8435': attribute type 1 has an invalid length. [ 898.161437][T30537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8433'. [ 898.172420][T30535] netlink: 'syz.2.8435': attribute type 1 has an invalid length. [ 898.210884][T30535] netlink: 'syz.2.8435': attribute type 2 has an invalid length. [ 898.243959][T30535] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8435'. [ 898.532699][T30549] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 898.904705][T30565] netlink: 'syz.0.8442': attribute type 1 has an invalid length. [ 899.041294][T30565] bond17: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 899.079008][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.087790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.092675][T30565] bond17: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 899.096428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.114430][T30565] bond17: (slave ip6gre2): making interface the new active one [ 899.114838][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.130390][T30565] bond17: (slave ip6gre2): Enslaving as an active interface with an up link [ 899.130748][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.148289][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.156854][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.157994][T30579] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 899.165800][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 899.211014][T30580] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8447'. [ 899.258917][T30579] bond0: (slave lo): Error: Device can not be enslaved while up [ 899.304537][T30589] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8447'. [ 899.438001][T30580] ipvlan0: entered promiscuous mode [ 899.679036][T30589] ipvlan1: entered promiscuous mode [ 899.756718][T30606] netlink: 'syz.0.8453': attribute type 1 has an invalid length. [ 899.844818][T30606] bond18: entered promiscuous mode [ 899.851197][T30606] 8021q: adding VLAN 0 to HW filter on device bond18 [ 900.095905][T30626] netlink: 'syz.3.8456': attribute type 3 has an invalid length. [ 900.785673][T30656] net_ratelimit: 8 callbacks suppressed [ 900.785697][T30656] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.369269][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.378201][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.386864][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.395367][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.403831][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.412399][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.421118][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 902.430499][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 903.910353][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 905.014274][T30615] bridge0: Device is already in use. [ 905.233114][T30681] ksmbd: Unknown IPC event: 3, ignore. [ 905.430003][T30690] bridge0: port 1(veth1_to_bridge) entered blocking state [ 905.452190][T30690] bridge0: port 1(veth1_to_bridge) entered disabled state [ 905.467894][T30690] veth1_to_bridge: entered allmulticast mode [ 905.510986][T30690] veth1_to_bridge: entered promiscuous mode [ 905.535148][T30690] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 905.578099][T30690] bridge0: port 1(veth1_to_bridge) entered blocking state [ 905.585568][T30690] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 905.711286][T30709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 906.004142][T30696] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8473'. [ 911.497459][ C1] sched: DL replenish lagged too much [ 932.498109][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.692300][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 993.280390][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.843172][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 1086.064049][ T31] INFO: task kworker/u8:11:10398 blocked for more than 166 seconds. [ 1088.116112][ T31] Not tainted syzkaller #0 [ 1088.127711][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1090.637165][ T31] task:kworker/u8:11 state:D stack:21632 pid:10398 tgid:10398 ppid:2 task_flags:0x4208160 flags:0x00080000 [ 1091.611536][ T31] Workqueue: events_unbound linkwatch_event [ 1092.380596][ T31] Call Trace: [ 1092.383964][ T31] [ 1092.386944][ T31] __schedule+0x17b4/0x5680