last executing test programs: 3.0357113s ago: executing program 0 (id=17977): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB="8feb01001800000000000000180000001800000002000080000000000100000300"/50], 0x0, 0x32}, 0x20) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1410, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000400)="390000001300090468fe070000000000000eac3736000000480100100000000004002b000a00010014a4ee1ee438d2fd00000000000000720896bba4b0ac43109cd34e9d7dc51dcf26960026404e7a5ef4b249cab8526efda284634ae585a109c012c40676d7d60ebd142af34706d1166b6e66b47ad55be0ed6b1a6f8ee46ad14ab46c", 0x83}, {0x0}, {0x0}], 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) sendto$inet6(r5, &(0x7f0000000280)="3556022889dfe80db44057264eada681cd867877f767cb508b59a42889aa8c22be", 0x21, 0x4008040, &(0x7f00000004c0)={0xa, 0x4e24, 0x3ff, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) recvfrom$inet(r1, 0x0, 0x0, 0x40000000, &(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000006540000000c0a01010000000000000000010000000900020073797a32000000002800038024000080090026400000000018000b80140001800a0001006c696d697400000004fe02800900010073797a30"], 0xd8}}, 0x0) r6 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f00000001c0)={0x84, @broadcast, 0x4e20, 0x3, 'lblc\x00', 0x0, 0xa7e, 0x1c}, 0x2c) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xab, &(0x7f0000000300)=""/171}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7}, 0x18) 2.097695649s ago: executing program 0 (id=17987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x64, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 1.935566218s ago: executing program 0 (id=17991): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1407, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x60}]}, 0x18}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506050e130204430009003f0020480a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) 1.605737503s ago: executing program 0 (id=17994): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x2, 0x200000ff, 0x4, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20002000}, 0x48) socket(0x10, 0x803, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000380)=@req3={0x808000, 0x4, 0x20300, 0xfc, 0x0, 0x2}, 0x1c) 1.408425319s ago: executing program 4 (id=17998): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_delroute={0x140, 0x19, 0x8, 0x70bd26, 0x9, {0xa, 0xb0, 0x20, 0xe5, 0xfc, 0x3, 0xc8, 0xa, 0x2c00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG_NAME={0x6, 0x2, '#\x00'}}}, @RTA_METRICS={0xf9, 0x8, 0x0, 0x1, "d86d3fad066a8180a2d1614d4f46a63b42044770b0cfbf5a5e18b5332b0cbd62ebc5df04297c175f9d321bd8ca33de7360e4020d49aa3a2e7df2e3bc7d92cfd67177c55e293e41918e60a569a93de8420f4ba9a4ac65ed1938c732d770362ceab7a9ca3035127b5ff94c832bdbbaaeb4c22802133881ab05bc92ea984f12a8d75b39224b9e575c8f38606be54de97b269076e66e477e3559004172813fcd4e7ea0fde82397bbc114d43e679755f57a124505896a25b7dad11316c773c20c79fad1a1e9e7b718aa5b0f69d4b613294f6a0ff9e47f12a2203847c528c538c48cd3aabf68b0efa54fe33e974d16f00aa65e01aa94c481"}, @RTA_MARK={0x8, 0x10, 0x5}, @RTA_EXPIRES={0x8, 0x17, 0x37bfd59d}]}, 0x140}, 0x1, 0x0, 0x0, 0x24001011}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5c}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(0xffffffffffffffff, 0x800442d4, &(0x7f0000000340)=0x5) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000380)) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000480)={0x81, 0x18, 0x81a, 0x6, 0x24, 0x1a, 0x1c, "2bfb06cf77807204f97545efdadc0598d741e4e2", "1a2fd9a2a633e65080342802c6e588b24e934457"}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'syztnl2\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x0, 0x9, 0x6, 0x7fffffff, 0x1e, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, 0x10, 0x10, 0x8, 0x4}}) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@RTM_GETMDB={0x18, 0x56, 0x800, 0x70bd28, 0x25dfdbfe, {0x7, r4}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x8100, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000006c0)={'gre0\x00', 0x0}) ioctl$TUNSETIFINDEX(r5, 0x400454da, &(0x7f0000000700)=r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELTABLE={0x28, 0x2, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x50}, 0x1, 0x0, 0x0, 0x20040009}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000900)={'ip6_vti0\x00', &(0x7f0000000880)={'ip6tnl0\x00', r4, 0x29, 0xdb, 0x7, 0xe13, 0x4c, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x20, 0x7800, 0x9, 0x7fffffff}}) sendmsg$nl_route(r0, &(0x7f0000000a40)={&(0x7f0000000940), 0xc, &(0x7f0000000a00)={&(0x7f0000000980)=@ipv6_deladdrlabel={0x54, 0x49, 0x100, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x7, 0x0, r4, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x35}}]}, 0x54}}, 0x40000) getsockopt$IP_SET_OP_GET_BYNAME(r7, 0x1, 0x53, &(0x7f0000000a80)={0x6, 0x7, 'syz2\x00'}, &(0x7f0000000ac0)=0x28) ioctl$SIOCGSKNS(r5, 0x894c, &(0x7f0000000b00)={'xfrm0\x00', 0x200}) r9 = socket(0x2b, 0x5, 0x1000) ioctl$VFAT_IOCTL_READDIR_BOTH(r8, 0x82307201, &(0x7f0000000b40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) sendto$netrom(r9, &(0x7f0000000d80)="72787aad51c5bbd6f79ec90aa3e3741c82bcc88a37cfaefc98e61613c44a1b797d94c626fd8bad76e06c46706f7657427265db43310a6901958a196ccef94c60cf670538ee4149fcc32eda3216e2c7c11dff997fed1dab49d7b5eb48f590ee5b301c13d578d4a675a59df8d9b7bfac6e41ec8575cefa29f11f33acf945d089cede642595bdf44bef64845f64ec973d204b66b8b9fa7e776c39e914415c71bd155e62b2ea0ffbd5716dfda6a2338c155c85d96c95e35a75b48e1ed30b0357b225081c4ca92d40a9", 0xc7, 0x40000, &(0x7f0000000e80)={{0x3, @bcast, 0x1}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_TARGET(r10, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14, r11, 0x400, 0x70bd2a, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001080)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0xe58983a93e9d39d7}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r11, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 1.32587204s ago: executing program 4 (id=18002): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x4}]}}}, @IFLA_ADDRESS={0xa, 0x3, @random="3a712f0756b8"}]}, 0x4c}}, 0x0) (async) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x7, 0x4) 1.221505158s ago: executing program 4 (id=18003): syz_emit_ethernet(0xad, &(0x7f0000000900)={@local, @broadcast, @void, {@generic={0x8863, "821b744f8f3d944136f6a01af15292223eadb065a8dd884d977081ae66c26ab5bb17de88b8f02b85b02ef3528a008b4e2ac7f26fd062240b823daf3d1299cee02a9e1e79e1243215ffee2edeb9366f837fe40519d3fe86e5b38d61aff1586ef5f5a58db21818e91055409b14695715634aa6b023421c2411cb463dbd47d222f31be25cde4632c110b5997f99d78453da8d104c808415d29bfb96b49c00ad91"}}}, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000300)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x2f}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000d00)=r3, 0x4) sendmmsg(r0, &(0x7f0000000200)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote}, 0x80, 0x0}, 0x5b4}], 0x43, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x1ff, 0x7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.151084506s ago: executing program 4 (id=18007): r0 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {0xb, 0xffe0}, {0xfff3, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @dev={0xac, 0x14, 0x14, 0x38}}, @TCA_FLOWER_KEY_IPV4_DST_MASK={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c8c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001d80)={@link_local, @empty, @val={@void}, {@ipv6={0x86dd, @generic={0x0, 0x6, "062111", 0x0, 0x3c, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2}}}}, 0x0) 968.217463ms ago: executing program 1 (id=18010): ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={0x0}, 0x18) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x3, 0x8) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @multicast1, 0x4e20, 0x3, 'sh\x00', 0x1d, 0x84, 0x2a}, {@loopback, 0x4e25, 0x2000, 0xc24, 0x9, 0xfffffff9}}, 0x44) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0xffffff72, 0x24040804, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000140)=0x1, 0x4) 896.602411ms ago: executing program 4 (id=18011): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"875e17f834d46a494a9fa7bc294ddd98", 0x0, 0x0, {0x0, 0x7}, {0x10001, 0x7}, 0x4, [0x1000, 0xfffffffffffffffe, 0x3, 0x6, 0x562472e0, 0x7, 0x2, 0x48, 0x3d08, 0x5, 0x9, 0x5, 0xc208, 0x3, 0x800, 0x9]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000005c0)={{r0}, r2, 0x14, @inherit={0x58, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000002007c0200000000020000000000000009000000000000000100000000000000090000000000000000080000000000007696000000000000fcffffffffffffff03000000000000000900000000000000"]}, @devid=r3}) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000040)={"875e17f834d46a494a9fa7bc294ddd98", 0x0, 0x0, {0x0, 0x7}, {0x10001, 0x7}, 0x4, [0x1000, 0xfffffffffffffffe, 0x3, 0x6, 0x562472e0, 0x7, 0x2, 0x48, 0x3d08, 0x5, 0x9, 0x5, 0xc208, 0x3, 0x800, 0x9]}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000001c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f00000005c0)={{r0}, r2, 0x14, @inherit={0x58, &(0x7f0000000140)=ANY=[@ANYBLOB="000000000000000002007c0200000000020000000000000009000000000000000100000000000000090000000000000000080000000000007696000000000000fcffffffffffffff03000000000000000900000000000000"]}, @devid=r3}) (async) 895.432343ms ago: executing program 3 (id=18012): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000015}, 0x44) (async) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0xc, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000015}, 0x44) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000000a0601010000000d0000000000000000050001"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 895.011773ms ago: executing program 2 (id=18013): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd29, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xce1f, 0xf48f, 0x2, 0x9, 0xfffc, 0x7, 0xffff, 0x9, 0x0]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 826.356213ms ago: executing program 1 (id=18014): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ac0)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x84f}]}}}]}, 0x3c}}, 0x0) 815.35991ms ago: executing program 2 (id=18015): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0, 0x32}, 0x28) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) r3 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)=r3}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x541b, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) 772.542503ms ago: executing program 4 (id=18016): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400"/20], 0x14}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0x90000005}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, 0x0, 0x4}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000000c0)=""/102}, 0x20) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {}, {0xffe0, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r10 = socket$kcm(0x11, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r10, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x0) epoll_pwait(r3, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r1, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r13 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000800)=@delchain={0x494, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x458, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x9c, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_connmark={0x60, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x2d, 0x6, "726786f30e509174574dc37f3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaed"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_ACT={0x388, 0x1, [@m_ctinfo={0x100, 0x4, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x53}, @TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x7f, 0x10000000, 0x82c}}]}, {0xb1, 0x6, "c14309d56e11f3e88ad36b866a06cff47631fe31f29c2d83a2e6f0bf13045227d5cfc3c4f57b9a903cf86c567461f60a0fb69f562613042765a016443f0181bfeba7e917511c20f8585f40c15cc948ecdd08e5acfddde4c4d1eeb8e4156045960e71ed491970a569097578137069861cf0a28baddf976ebf5e96eca138cadcea7bfb921158875a49e4975a5dbb3ab54f13ee0f5254fe6f752f120208ad930afb01c2417b4953f4774567f9bbf1"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x2}}}}, @m_skbmod={0x90, 0x4, 0x0, 0x0, {{0xb}, {0x60, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @local}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="7d04a5219f97"}]}, {0x5, 0x6, "cc"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x178, 0x1b, 0x0, 0x0, {{0x8}, {0xcc, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xff, 0x1, 0xffffffffffffffff, 0x0, 0xefb}, @loopback, @empty, 0xffffff00, 0x800}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x4, 0x6, 0x8, 0x9}, @local, @dev={0xac, 0x14, 0x14, 0x1c}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x357a, 0x9, 0x7, 0x101, 0x5}, @broadcast, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5f2, 0x40, 0x5, 0x1, 0x1}, @broadcast, @remote, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0x7, 0x20000000, 0x7, 0x59c3}, @loopback, @loopback, 0xff}}]}, {0x85, 0x6, "eef24a41a52f4314740d880a9749ccbff0e34c74cfcac1e63977a597552daff459d49bffeac63ea994857207934fd2d00f52f25f0f3d8c80b3a218a170d8b1961a361663d049269537cb537e3789e52bb3db1eec99b6cdd8dd022491e57495f8bd3687340df10a1e43f1a2790d3910c094f2c7203385622c8498933c3e883b83b3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_sample={0x7c, 0xc, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7ff}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x5, 0x5, 0x5, 0x8}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x9}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xc00}]}, {0x8, 0x6, "2ff4fb63"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x494}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r13, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x43}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) getsockopt$IP_VS_SO_GET_DESTS(r13, 0x0, 0x484, &(0x7f0000000200)=""/51, &(0x7f0000000240)=0x33) 758.507527ms ago: executing program 3 (id=18017): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="100000001914e400a444b48a00000000"], 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "80566ba2ba50dc45ee638dcd297d88e28ec00175e64b4fb24e448a24b9d9d771", "9d4a472fd54c2d8b439c2cbc8845efe7702ef8d0a7da9943eed625dfa8f6b887", "599b8ba4c1595abfdace8f553a9179c4de952dfebef8877b5681d4ee1bd9edd9", "1105ae55e8240295b492f1b864173f20374dcb1901a8cbd89f90df811a4bb5ad", "2280199939a2fec962d0f810b7e3c19a4d9013ac5f6850b23a353d17920dfa59", "000013f434bc0cdc6d4500", 0x235ffffd, 0x7, 0xc, 0x6, 0x800}}) 724.875938ms ago: executing program 1 (id=18018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r2, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000040)={@multicast, @empty, @void, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "e9081a971a0b8f8b"}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a30000000000900010073797a30"], 0xc0}}, 0x0) 639.630724ms ago: executing program 2 (id=18019): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 638.238102ms ago: executing program 3 (id=18020): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x20, 0x700, 0x10000, 0x0, {{0x13, 0x4, 0x3, 0x1, 0x4c, 0x66, 0x0, 0x4, 0x2f, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x7, [{@broadcast, 0x2}]}, @noop, @noop, @generic={0x86, 0x7, "9998c646a5"}, @generic={0x44, 0xc, "31b3e3b176be5134caa6"}, @end, @timestamp={0x44, 0x14, 0x4c, 0x0, 0x5, [0x5, 0x7, 0x8, 0xfffffffe]}]}}}}}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfc, 0x0}, @multicast1}, {0x300, 0x7000, 0x29, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0xce1300d54c3818a3, @val=0xe0000001}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099bcc"}}}}}}}, 0x4f) 617.01733ms ago: executing program 0 (id=18021): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x40b, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) sendmmsg$unix(r4, &(0x7f0000000240)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="e72b447496135ccf320ae41d1f13e565b80c123762c43d7fec9d5f6d3ae52fc2121a47b92971f5434237d371343b691e0962fdcdd4dad9511571f956bf26ba557e100e991168043ac6ae307bd353f9f838edf92ad8401b11886518b4d21ffa533907701db8768bb0dea09d35bf3d6641c47b0ec963c9035cf10fe487f024aedf16a854d3081b762eda3d2e8f3122238fefcdbcac3f6e0175c76a261c50d6810fe1fdfc25f00797899ec12f4dd7c7ce60f0f2810901dbbbe328e3b011aaa58d1aded263b87440ed50978de9155da431aea587391c732bfda581ff1f86841f43", 0xdf}, {&(0x7f0000000480)="9a8b22517a8346576d801076e96aa24544fd53d5d9f31d97734e212ad76f096cc70d8e01e35a87e5350ab23f1c0227a7019edd562c798ce5b0f2e94ca21caf75fe3b140498a9183a444c09d2b16e79e53df46ecb594439c6d2bb27064c2bcf7d9f5863c42f877d4952205bec4ffe97da322e69b60d491835aceaee2e5057a69d55d4f26883bde5670ec1f82bf9076f8c3ed283e8fde713d0c3c7823e19ac57d562410f16c7ed0752834e5e9e4ca90eccf1e25f74d1249e951f77d7e383811dae6bcd01d5e78496643cc69bf41fc272bfcdfde3d396e8bc4719177285f1", 0xdd}], 0x2, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r5, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r6, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r7]}}], 0x50}}], 0x1, 0x4040080) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x2, 0x11, 0x0) sendmsg$netlink(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x48810) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x58, 0x10, 0x40b, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5, 0x1, 0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r3, 0x0, 0x0, 0x0) (async) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) (async) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) (async) socket$pptp(0x18, 0x1, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x20, 0x0, @in6={0xa, 0x0, 0x0, @private0}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) sendmmsg$unix(r4, &(0x7f0000000240)=[{{&(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000380)="e72b447496135ccf320ae41d1f13e565b80c123762c43d7fec9d5f6d3ae52fc2121a47b92971f5434237d371343b691e0962fdcdd4dad9511571f956bf26ba557e100e991168043ac6ae307bd353f9f838edf92ad8401b11886518b4d21ffa533907701db8768bb0dea09d35bf3d6641c47b0ec963c9035cf10fe487f024aedf16a854d3081b762eda3d2e8f3122238fefcdbcac3f6e0175c76a261c50d6810fe1fdfc25f00797899ec12f4dd7c7ce60f0f2810901dbbbe328e3b011aaa58d1aded263b87440ed50978de9155da431aea587391c732bfda581ff1f86841f43", 0xdf}, {&(0x7f0000000480)="9a8b22517a8346576d801076e96aa24544fd53d5d9f31d97734e212ad76f096cc70d8e01e35a87e5350ab23f1c0227a7019edd562c798ce5b0f2e94ca21caf75fe3b140498a9183a444c09d2b16e79e53df46ecb594439c6d2bb27064c2bcf7d9f5863c42f877d4952205bec4ffe97da322e69b60d491835aceaee2e5057a69d55d4f26883bde5670ec1f82bf9076f8c3ed283e8fde713d0c3c7823e19ac57d562410f16c7ed0752834e5e9e4ca90eccf1e25f74d1249e951f77d7e383811dae6bcd01d5e78496643cc69bf41fc272bfcdfde3d396e8bc4719177285f1", 0xdd}], 0x2, &(0x7f0000000640)=[@rights={{0x18, 0x1, 0x1, [r5, r2]}}, @rights={{0x1c, 0x1, 0x1, [r2, r6, r0]}}, @rights={{0x18, 0x1, 0x1, [r3, r7]}}], 0x50}}], 0x1, 0x4040080) (async) recvmmsg(r4, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}], 0x1}}], 0x2, 0x11, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000600)=[{0x0, 0x1b8}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0x20, 0x1}, 0x4000000) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x48810) (async) 592.154123ms ago: executing program 2 (id=18022): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000000)=0x19, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00'}]}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'gre0\x00'}]}, 0x50}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x94, 0x1, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_ZONE={0x6}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_TUPLE_MASTER={0x68, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xcda}]}, 0x94}}, 0x4000) 500.598566ms ago: executing program 1 (id=18023): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x5, 0xb}, {0x2, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004070}, 0x4008000) (async) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a64000000060a010400000000000000000a0000010900010073797a310000000038000480340001800a000110b02a91062428c10024000280100003001c4bf1f8cf3b69a3ab942767080001006d61630008000240000000000900020073797a32"], 0x8c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x8) (async) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x10}, &(0x7f00000000c0)=0xc) (async) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000580)={&(0x7f0000000300)={0x1d, r3}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x3, 0x20, 0xfffeffff, {0x77359400}, {r11, r12/1000+10000}, {0x4, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x0, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, "dfe0983f7c75fcbba04e6878a512cb746aa0f35b30edd5fb2e7b655a7990b5540e34ff934ff3a2d919f6e83b47bb5ea036c55986b24494d055e7221aa8c6f5b1"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x4004840) 438.487627ms ago: executing program 3 (id=18024): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) (async) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000100)=[{0x2, 0x1, {0x2, 0x0, 0x1}, {0x1, 0xf0, 0x1}, 0x0, 0x2}], 0x20) 411.382844ms ago: executing program 0 (id=18025): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000020900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01020000000000000000070000000900020073797a30000000000900010073797a30"], 0xc0}}, 0x0) (fail_nth: 11) 348.578377ms ago: executing program 1 (id=18026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x48}, 0x1, 0x0, 0x2000000}, 0x0) 348.406233ms ago: executing program 3 (id=18027): socket(0x27, 0x1, 0x2) 347.408376ms ago: executing program 2 (id=18028): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x14, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (fail_nth: 33) 288.846481ms ago: executing program 1 (id=18029): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000000)='/dev/ppp\x00', 0x200101, &(0x7f0000000200)={@align=0x100000001, {0x6, 0x81, 0x3, 0x5a9e}}, 0xffff, &(0x7f0000000300), &(0x7f0000000380)=0xc18}) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000400)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000008000000000d000000000000"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r1, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="200000000514210600000000000000006c852b099b7c00390800030000000000"], 0x20}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000c00), r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161242, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) syz_init_net_socket$rose(0xb, 0x5, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x48800}, 0x4008000) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x73, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x0, &(0x7f0000000080)}) socket$inet6(0xa, 0x2, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 213.970204ms ago: executing program 3 (id=18030): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f"], 0xcfa4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="001175f37538bcb83ff83ceff92ebf0000000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xe4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00e98bc1290700000000000000faf78c8ed10000414775d1fcb82db02a49d1526125ba5daf03410efb72484c476fe96bad3effeabf573e7ad55a509bfb41c0cae803784173a1bd14922fe998481690959c9c355a7fe253f38903f0f6ba128d7211a081cd6ac264f702d131dfecb483399201eef4", @ANYRES32=0x0, @ANYRES32, @ANYRES64], 0x48) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240), 0x0}, 0x20) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r3) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f0000000580)={'sit0\x00', &(0x7f00000004c0)={@local, 0x1, 0x0, 0x80, 0x0, [{@private}, {@initdev}, {@dev}, {@broadcast}, {@multicast1}, {@multicast1}, {@local}, {@multicast2}]}}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) syz_open_procfs$namespace(r4, &(0x7f00000001c0)='ns/time\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r5, 0x11, 0x4, 0x0, 0x1000000000000) r6 = socket$netlink(0x10, 0x3, 0x8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="60000000031400022abd8900000800410073697700140033006d6163736563300000000000000000000900020073787a31000000000800410073697700140033007465616d5f736c6176655f31e11ddc9aa20e6629de088b0346d80637865e98b71616d304128c81b4c6e5559fb19f113071a9e51d1e63002b14237470b8ec93a19d2ec901faafb30a12096b8a388ae8bc0228595bdd5fb94728b7459974703d4b2e7664f0a9b127fab9e0275a9cbe88955149b03955fc0b841c0c"], 0x60}, 0x1, 0x0, 0x0, 0x4051}, 0x4000004) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111770000000000850000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_init_net_socket$ax25(0x3, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x33) r7 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000600), &(0x7f0000000640)=0xe) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x4000000) 0s ago: executing program 2 (id=18031): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x9000000}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) kernel console output (not intermixed with test programs): 00246 R12: 0000000000000001 [ 986.893360][T15618] R13: 00007fd44cc16038 R14: 00007fd44cc15fa0 R15: 00007ffedc7cef28 [ 986.893392][T15618] [ 987.362955][T15644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 987.460044][T15657] netlink: 'syz.4.16596': attribute type 1 has an invalid length. [ 987.609683][T15651] veth15: entered promiscuous mode [ 987.618046][T15669] nbd: socks must be embedded in a SOCK_ITEM attr [ 987.910381][T15688] FAULT_INJECTION: forcing a failure. [ 987.910381][T15688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.925622][T15688] CPU: 1 UID: 0 PID: 15688 Comm: syz.1.16613 Not tainted syzkaller #0 PREEMPT(full) [ 987.925648][T15688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 987.925660][T15688] Call Trace: [ 987.925667][T15688] [ 987.925675][T15688] dump_stack_lvl+0xe8/0x150 [ 987.925706][T15688] should_fail_ex+0x412/0x560 [ 987.925732][T15688] _copy_from_user+0x2d/0xb0 [ 987.925769][T15688] ___sys_sendmsg+0x1c6/0x360 [ 987.925801][T15688] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.925856][T15688] ? __fget_files+0x2a/0x420 [ 987.925878][T15688] ? __fget_files+0x3a0/0x420 [ 987.925907][T15688] __x64_sys_sendmsg+0x1bd/0x2a0 [ 987.925934][T15688] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 987.925966][T15688] ? __pfx_ksys_write+0x10/0x10 [ 987.925994][T15688] do_syscall_64+0x14d/0xf80 [ 987.926012][T15688] ? trace_irq_disable+0x3b/0x150 [ 987.926035][T15688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.926053][T15688] ? clear_bhb_loop+0x40/0x90 [ 987.926073][T15688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.926089][T15688] RIP: 0033:0x7f4c36b9c799 [ 987.926107][T15688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 987.926122][T15688] RSP: 002b:00007f4c34df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 987.926141][T15688] RAX: ffffffffffffffda RBX: 00007f4c36e15fa0 RCX: 00007f4c36b9c799 [ 987.926155][T15688] RDX: 0000000000008000 RSI: 0000200000000940 RDI: 0000000000000003 [ 987.926165][T15688] RBP: 00007f4c34df6090 R08: 0000000000000000 R09: 0000000000000000 [ 987.926175][T15688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.926186][T15688] R13: 00007f4c36e16038 R14: 00007f4c36e15fa0 R15: 00007ffc629fdd18 [ 987.926214][T15688] [ 987.985773][T15693] tipc: Enabled bearer , priority 11 [ 988.161567][T15701] netlink: 'syz.2.16617': attribute type 64 has an invalid length. [ 988.407505][T15719] netlink: 'syz.1.16622': attribute type 16 has an invalid length. [ 988.447115][T15719] netlink: 'syz.1.16622': attribute type 17 has an invalid length. [ 988.514144][T15725] netlink: 'syz.4.16625': attribute type 21 has an invalid length. [ 988.585868][T15719] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 988.597228][T15719] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 988.605651][T15719] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 988.647448][T15719] bond5: left allmulticast mode [ 988.661880][T15719] bridge9: left promiscuous mode [ 988.666956][T15719] bridge9: left allmulticast mode [ 988.685475][T15719] gretap1: left promiscuous mode [ 988.695506][T15719] vlan4: left allmulticast mode [ 988.702159][T15719] bridge12: left allmulticast mode [ 988.716748][T15719] bond11: left promiscuous mode [ 988.731502][T15719] wireguard0: left promiscuous mode [ 988.737254][T15719] wireguard0: left allmulticast mode [ 988.747682][T15719] team1: left promiscuous mode [ 988.753308][T15719] team1: left allmulticast mode [ 988.766180][T15719] veth19: left promiscuous mode [ 988.783715][T15719] bond17: left promiscuous mode [ 988.817467][T15725] netlink: 'syz.4.16625': attribute type 5 has an invalid length. [ 988.827145][ T978] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.841703][ T978] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.863462][ T978] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 988.919718][T15743] bond28: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 988.938064][T15743] bond28 (unregistering): Released all slaves [ 988.955331][T15750] Cannot find del_set index 4 as target [ 988.984546][ T978] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 989.187130][T15765] x_tables: unsorted entry at hook 3 [ 989.210266][T15765] x_tables: unsorted entry at hook 3 [ 989.267050][T15772] __nla_validate_parse: 15 callbacks suppressed [ 989.267068][T15772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16641'. [ 989.526101][T15786] Cannot find del_set index 4 as target [ 989.557604][T15790] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16648'. [ 989.590373][T15792] netlink: 168 bytes leftover after parsing attributes in process `syz.1.16648'. [ 989.663401][T15796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16650'. [ 990.041139][T15826] netlink: 348 bytes leftover after parsing attributes in process `syz.0.16655'. [ 990.192357][T15835] Cannot find del_set index 4 as target [ 990.350233][T15845] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16664'. [ 990.361366][T15845] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16664'. [ 990.402892][T15854] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 990.497529][T15858] netlink: 'syz.4.16669': attribute type 2 has an invalid length. [ 990.680522][T15866] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16671'. [ 990.862249][T15878] openvswitch: netlink: Key 20 has unexpected len 2 expected 4 [ 990.899614][T15878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16677'. [ 990.912658][T15878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16677'. [ 991.144239][T15889] 0: reclassify loop, rule prio 0, protocol 700 [ 991.317390][T15905] FAULT_INJECTION: forcing a failure. [ 991.317390][T15905] name failslab, interval 1, probability 0, space 0, times 0 [ 991.344600][T15905] CPU: 0 UID: 0 PID: 15905 Comm: syz.1.16686 Not tainted syzkaller #0 PREEMPT(full) [ 991.344626][T15905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 991.344637][T15905] Call Trace: [ 991.344646][T15905] [ 991.344654][T15905] dump_stack_lvl+0xe8/0x150 [ 991.344685][T15905] should_fail_ex+0x412/0x560 [ 991.344711][T15905] should_failslab+0xa8/0x100 [ 991.344734][T15905] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 991.344763][T15905] ? __alloc_skb+0x1d0/0x7d0 [ 991.344785][T15905] ? __local_bh_enable_ip+0xd0/0x130 [ 991.344812][T15905] __alloc_skb+0x1d0/0x7d0 [ 991.344833][T15905] ? netlink_ack_tlv_len+0x6c/0x210 [ 991.344858][T15905] netlink_ack+0x146/0xa50 [ 991.344874][T15905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 991.344901][T15905] ? __lock_acquire+0x6b5/0x2cf0 [ 991.344942][T15905] netlink_rcv_skb+0x2b6/0x4b0 [ 991.344963][T15905] ? __pfx_genl_rcv_msg+0x10/0x10 [ 991.344990][T15905] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 991.345026][T15905] ? down_read+0x272/0x2e0 [ 991.345045][T15905] ? genl_rcv+0xd/0x40 [ 991.345067][T15905] genl_rcv+0x28/0x40 [ 991.345088][T15905] netlink_unicast+0x80f/0x9b0 [ 991.345114][T15905] ? __pfx_netlink_unicast+0x10/0x10 [ 991.345136][T15905] ? netlink_sendmsg+0x650/0xb40 [ 991.345154][T15905] ? skb_put+0x11b/0x210 [ 991.345178][T15905] netlink_sendmsg+0x813/0xb40 [ 991.345209][T15905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 991.345233][T15905] ? aa_sock_msg_perm+0xf1/0x1b0 [ 991.345254][T15905] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 991.345275][T15905] ? __pfx_netlink_sendmsg+0x10/0x10 [ 991.345293][T15905] ____sys_sendmsg+0xa68/0xad0 [ 991.345327][T15905] ? __pfx_____sys_sendmsg+0x10/0x10 [ 991.345358][T15905] ? import_iovec+0x73/0xa0 [ 991.345384][T15905] ___sys_sendmsg+0x2a5/0x360 [ 991.345409][T15905] ? __pfx____sys_sendmsg+0x10/0x10 [ 991.345444][T15905] ? __fget_files+0x2a/0x420 [ 991.345458][T15905] ? __fget_files+0x3a0/0x420 [ 991.345477][T15905] __x64_sys_sendmsg+0x1bd/0x2a0 [ 991.345492][T15905] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 991.345511][T15905] ? __pfx_ksys_write+0x10/0x10 [ 991.345527][T15905] do_syscall_64+0x14d/0xf80 [ 991.345537][T15905] ? trace_irq_disable+0x3b/0x150 [ 991.345551][T15905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.345562][T15905] ? clear_bhb_loop+0x40/0x90 [ 991.345574][T15905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 991.345584][T15905] RIP: 0033:0x7f4c36b9c799 [ 991.345596][T15905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 991.345605][T15905] RSP: 002b:00007f4c34df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 991.345618][T15905] RAX: ffffffffffffffda RBX: 00007f4c36e15fa0 RCX: 00007f4c36b9c799 [ 991.345625][T15905] RDX: 000000000000c114 RSI: 00002000000002c0 RDI: 0000000000000005 [ 991.345632][T15905] RBP: 00007f4c34df6090 R08: 0000000000000000 R09: 0000000000000000 [ 991.345639][T15905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 991.345645][T15905] R13: 00007f4c36e16038 R14: 00007f4c36e15fa0 R15: 00007ffc629fdd18 [ 991.345661][T15905] [ 991.940845][T15932] tipc: Enabling of bearer rejected, failed to enable media [ 992.597072][T15974] netlink: 'syz.0.16712': attribute type 24 has an invalid length. [ 992.814733][T15990] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 992.822171][T15991] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 992.838062][T15993] Cannot find del_set index 4 as target [ 993.138371][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 993.200604][T16016] syzkaller0: entered promiscuous mode [ 993.212984][T16016] syzkaller0: entered allmulticast mode [ 993.443598][T16033] geneve5: entered promiscuous mode [ 993.449405][T16033] geneve5: entered allmulticast mode [ 993.456591][ T978] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 19999 - 0 [ 993.466886][ T978] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 19999 - 0 [ 993.516748][ T978] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 19999 - 0 [ 993.548309][ T978] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 19999 - 0 [ 993.588035][T16043] netlink: 'syz.3.16734': attribute type 3 has an invalid length. [ 993.785796][T16056] netlink: 'syz.2.16740': attribute type 1 has an invalid length. [ 993.818827][T16057] netlink: 'syz.2.16740': attribute type 1 has an invalid length. [ 993.826874][T16057] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 993.840153][T16056] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.011017][T16075] syzkaller1: entered promiscuous mode [ 994.016628][T16075] syzkaller1: entered allmulticast mode [ 994.176754][T16078] netlink: 'syz.0.16747': attribute type 3 has an invalid length. [ 994.418545][T16109] __nla_validate_parse: 14 callbacks suppressed [ 994.418585][T16109] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16757'. [ 994.542860][T16117] netlink: 120 bytes leftover after parsing attributes in process `syz.0.16760'. [ 994.619184][T16124] Cannot find set identified by id 4 to match [ 994.658328][T16126] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16765'. [ 994.783164][T16136] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 995.041253][T16160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16775'. [ 995.060705][T16160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16775'. [ 995.129742][T16157] netlink: 'syz.0.16773': attribute type 1 has an invalid length. [ 995.166245][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16773'. [ 995.224841][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16773'. [ 995.579078][T16203] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16785'. [ 995.745879][T16214] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16790'. [ 995.966255][T16233] netlink: 272 bytes leftover after parsing attributes in process `syz.3.16798'. [ 995.996784][T16234] Cannot find del_set index 4 as target [ 996.344770][T16256] lo speed is unknown, defaulting to 1000 [ 996.376353][T16256] vxcan1 speed is unknown, defaulting to 1000 [ 996.672258][T16287] Cannot find del_set index 4 as target [ 997.004305][T16302] syzkaller0: entered promiscuous mode [ 997.010122][T16302] syzkaller0: entered allmulticast mode [ 997.814872][T16345] lo speed is unknown, defaulting to 1000 [ 997.843231][T16345] vxcan1 speed is unknown, defaulting to 1000 [ 998.148183][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 998.156282][ C1] lec:lec_tx_timeout: lec0 [ 998.210326][T16365] bond19: option arp_all_targets: invalid value (18446744073709551613) [ 998.235018][T16365] bond19 (unregistering): Released all slaves [ 998.293096][T16374] tipc: Enabling of bearer rejected, failed to enable media [ 998.595763][T16396] netlink: 'syz.1.16845': attribute type 1 has an invalid length. [ 998.659490][T16396] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 998.696606][T16403] veth0: Caught tx_queue_len zero misconfig [ 998.851825][T16416] netlink: 'syz.1.16850': attribute type 33 has an invalid length. [ 998.911126][T16416] pim6reg527: entered allmulticast mode [ 998.937695][T16421] netlink: 'syz.2.16853': attribute type 11 has an invalid length. [ 999.049757][T16425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 999.128741][T16428] netlink: 'syz.1.16856': attribute type 2 has an invalid length. [ 999.148878][T16432] Cannot find set identified by id 4 to match [ 999.152908][T16428] 9: entered promiscuous mode [ 999.207965][T16429] lo speed is unknown, defaulting to 1000 [ 999.245056][T16429] vxcan1 speed is unknown, defaulting to 1000 [ 999.420040][T16453] FAULT_INJECTION: forcing a failure. [ 999.420040][T16453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 999.461500][T16453] CPU: 1 UID: 0 PID: 16453 Comm: syz.3.16863 Not tainted syzkaller #0 PREEMPT(full) [ 999.461529][T16453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 999.461541][T16453] Call Trace: [ 999.461548][T16453] [ 999.461557][T16453] dump_stack_lvl+0xe8/0x150 [ 999.461590][T16453] should_fail_ex+0x412/0x560 [ 999.461618][T16453] _copy_from_user+0x2d/0xb0 [ 999.461645][T16453] __copy_msghdr+0x3c5/0x5b0 [ 999.461675][T16453] ___sys_sendmsg+0x213/0x360 [ 999.461705][T16453] ? __pfx____sys_sendmsg+0x10/0x10 [ 999.461764][T16453] ? __fget_files+0x2a/0x420 [ 999.461788][T16453] ? __fget_files+0x3a0/0x420 [ 999.461822][T16453] __x64_sys_sendmsg+0x1bd/0x2a0 [ 999.461850][T16453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 999.461883][T16453] ? __pfx_ksys_write+0x10/0x10 [ 999.461913][T16453] do_syscall_64+0x14d/0xf80 [ 999.461930][T16453] ? trace_irq_disable+0x3b/0x150 [ 999.461953][T16453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.461970][T16453] ? clear_bhb_loop+0x40/0x90 [ 999.461987][T16453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.462001][T16453] RIP: 0033:0x7f776599c799 [ 999.462017][T16453] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.462031][T16453] RSP: 002b:00007f7763bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 999.462051][T16453] RAX: ffffffffffffffda RBX: 00007f7765c15fa0 RCX: 00007f776599c799 [ 999.462063][T16453] RDX: 0000000000000844 RSI: 0000200000000340 RDI: 0000000000000003 [ 999.462074][T16453] RBP: 00007f7763bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 999.462093][T16453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.462104][T16453] R13: 00007f7765c16038 R14: 00007f7765c15fa0 R15: 00007ffdb0147348 [ 999.462133][T16453] [ 999.754412][T16465] __nla_validate_parse: 40 callbacks suppressed [ 999.754433][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16866'. [ 999.917416][T16478] netlink: 'syz.4.16872': attribute type 2 has an invalid length. [ 999.939378][T16476] netlink: 'syz.0.16870': attribute type 1 has an invalid length. [ 1000.034622][T16484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16874'. [ 1000.102410][T16482] bond18: (slave veth15): Enslaving as an active interface with a down link [ 1000.149012][T16491] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16877'. [ 1000.190119][T16476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16870'. [ 1000.282208][T16476] 8021q: adding VLAN 0 to HW filter on device bond18 [ 1000.335097][T16488] syzkaller0: entered promiscuous mode [ 1000.359728][T16488] syzkaller0: entered allmulticast mode [ 1000.377448][T16488] tipc: Enabled bearer , priority 0 [ 1000.378530][T16501] Cannot find set identified by id 4 to match [ 1000.419777][T16487] tipc: Resetting bearer [ 1000.499482][T16487] tipc: Disabling bearer [ 1000.543178][T16512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16884'. [ 1000.555618][T16512] FAULT_INJECTION: forcing a failure. [ 1000.555618][T16512] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.586000][T16512] CPU: 0 UID: 0 PID: 16512 Comm: syz.1.16884 Not tainted syzkaller #0 PREEMPT(full) [ 1000.586028][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1000.586038][T16512] Call Trace: [ 1000.586046][T16512] [ 1000.586055][T16512] dump_stack_lvl+0xe8/0x150 [ 1000.586087][T16512] should_fail_ex+0x412/0x560 [ 1000.586111][T16512] should_failslab+0xa8/0x100 [ 1000.586130][T16512] __kmalloc_cache_noprof+0x88/0x660 [ 1000.586149][T16512] ? nfnetlink_rcv+0xfe1/0x27b0 [ 1000.586171][T16512] nfnetlink_rcv+0xfe1/0x27b0 [ 1000.586185][T16512] ? is_bpf_text_address+0x26/0x2b0 [ 1000.586234][T16512] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1000.586261][T16512] ? __lock_acquire+0x6b5/0x2cf0 [ 1000.586313][T16512] ? netlink_deliver_tap+0x2e/0x1b0 [ 1000.586348][T16512] netlink_unicast+0x80f/0x9b0 [ 1000.586372][T16512] ? __pfx_netlink_unicast+0x10/0x10 [ 1000.586390][T16512] ? netlink_sendmsg+0x650/0xb40 [ 1000.586407][T16512] ? skb_put+0x11b/0x210 [ 1000.586435][T16512] netlink_sendmsg+0x813/0xb40 [ 1000.586463][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.586482][T16512] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1000.586501][T16512] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1000.586518][T16512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.586535][T16512] ____sys_sendmsg+0xa68/0xad0 [ 1000.586565][T16512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1000.586599][T16512] ? import_iovec+0x73/0xa0 [ 1000.586626][T16512] ___sys_sendmsg+0x2a5/0x360 [ 1000.586652][T16512] ? __pfx____sys_sendmsg+0x10/0x10 [ 1000.586706][T16512] ? __fget_files+0x2a/0x420 [ 1000.586730][T16512] ? __fget_files+0x3a0/0x420 [ 1000.586762][T16512] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1000.586788][T16512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1000.586821][T16512] ? __pfx_ksys_write+0x10/0x10 [ 1000.586872][T16512] do_syscall_64+0x14d/0xf80 [ 1000.586889][T16512] ? trace_irq_disable+0x3b/0x150 [ 1000.586913][T16512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.586931][T16512] ? clear_bhb_loop+0x40/0x90 [ 1000.586952][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.586967][T16512] RIP: 0033:0x7f4c36b9c799 [ 1000.586985][T16512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.587000][T16512] RSP: 002b:00007f4c34df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1000.587019][T16512] RAX: ffffffffffffffda RBX: 00007f4c36e15fa0 RCX: 00007f4c36b9c799 [ 1000.587030][T16512] RDX: 0000000020000080 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1000.587042][T16512] RBP: 00007f4c34df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.587052][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.587062][T16512] R13: 00007f4c36e16038 R14: 00007f4c36e15fa0 R15: 00007ffc629fdd18 [ 1000.587087][T16512] [ 1000.597657][T16507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16883'. [ 1000.605281][T16509] lo speed is unknown, defaulting to 1000 [ 1000.884474][T16509] vxcan1 speed is unknown, defaulting to 1000 [ 1001.007488][T16528] FAULT_INJECTION: forcing a failure. [ 1001.007488][T16528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.041973][T16528] CPU: 1 UID: 0 PID: 16528 Comm: syz.3.16890 Not tainted syzkaller #0 PREEMPT(full) [ 1001.042004][T16528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.042017][T16528] Call Trace: [ 1001.042025][T16528] [ 1001.042034][T16528] dump_stack_lvl+0xe8/0x150 [ 1001.042068][T16528] should_fail_ex+0x412/0x560 [ 1001.042099][T16528] _copy_from_iter+0x1d3/0x1670 [ 1001.042126][T16528] ? rcu_is_watching+0x15/0xb0 [ 1001.042158][T16528] ? __pfx__copy_from_iter+0x10/0x10 [ 1001.042187][T16528] ? netlink_sendmsg+0x650/0xb40 [ 1001.042209][T16528] ? skb_put+0x11b/0x210 [ 1001.042238][T16528] netlink_sendmsg+0x6c0/0xb40 [ 1001.042268][T16528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.042293][T16528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1001.042317][T16528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1001.042338][T16528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1001.042357][T16528] ____sys_sendmsg+0xa68/0xad0 [ 1001.042397][T16528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1001.042431][T16528] ? import_iovec+0x73/0xa0 [ 1001.042459][T16528] ___sys_sendmsg+0x2a5/0x360 [ 1001.042490][T16528] ? __pfx____sys_sendmsg+0x10/0x10 [ 1001.042548][T16528] ? __fget_files+0x2a/0x420 [ 1001.042573][T16528] ? __fget_files+0x3a0/0x420 [ 1001.042606][T16528] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1001.042634][T16528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1001.042668][T16528] ? __pfx_ksys_write+0x10/0x10 [ 1001.042698][T16528] do_syscall_64+0x14d/0xf80 [ 1001.042716][T16528] ? trace_irq_disable+0x3b/0x150 [ 1001.042741][T16528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.042759][T16528] ? clear_bhb_loop+0x40/0x90 [ 1001.042780][T16528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.042798][T16528] RIP: 0033:0x7f776599c799 [ 1001.042817][T16528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1001.042833][T16528] RSP: 002b:00007f7763bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1001.042854][T16528] RAX: ffffffffffffffda RBX: 00007f7765c15fa0 RCX: 00007f776599c799 [ 1001.042866][T16528] RDX: 0000000000000844 RSI: 0000200000000340 RDI: 0000000000000003 [ 1001.042878][T16528] RBP: 00007f7763bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.042889][T16528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.042899][T16528] R13: 00007f7765c16038 R14: 00007f7765c15fa0 R15: 00007ffdb0147348 [ 1001.042928][T16528] [ 1001.674394][T16539] vlan5: entered allmulticast mode [ 1001.688373][T16539] bridge_slave_0: entered allmulticast mode [ 1001.908755][T16561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.16897'. [ 1001.933414][T16561] FAULT_INJECTION: forcing a failure. [ 1001.933414][T16561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.947633][T16561] CPU: 0 UID: 0 PID: 16561 Comm: syz.3.16897 Not tainted syzkaller #0 PREEMPT(full) [ 1001.947663][T16561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.947676][T16561] Call Trace: [ 1001.947684][T16561] [ 1001.947692][T16561] dump_stack_lvl+0xe8/0x150 [ 1001.947726][T16561] should_fail_ex+0x412/0x560 [ 1001.947753][T16561] _copy_to_user+0x31/0xb0 [ 1001.947782][T16561] simple_read_from_buffer+0xe1/0x170 [ 1001.947812][T16561] proc_fail_nth_read+0x1bb/0x230 [ 1001.947840][T16561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.947867][T16561] ? rw_verify_area+0x2a6/0x4d0 [ 1001.947885][T16561] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.947910][T16561] vfs_read+0x20c/0xa70 [ 1001.947926][T16561] ? fdget_pos+0x246/0x320 [ 1001.947954][T16561] ? __pfx___mutex_lock+0x10/0x10 [ 1001.947975][T16561] ? __pfx_vfs_read+0x10/0x10 [ 1001.947995][T16561] ? __fget_files+0x2a/0x420 [ 1001.948023][T16561] ? __fget_files+0x3a0/0x420 [ 1001.948045][T16561] ? __fget_files+0x2a/0x420 [ 1001.948077][T16561] ksys_read+0x150/0x270 [ 1001.948097][T16561] ? __pfx_ksys_read+0x10/0x10 [ 1001.948128][T16561] do_syscall_64+0x14d/0xf80 [ 1001.948142][T16561] ? trace_irq_disable+0x3b/0x150 [ 1001.948166][T16561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.948184][T16561] ? clear_bhb_loop+0x40/0x90 [ 1001.948207][T16561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.948225][T16561] RIP: 0033:0x7f776595cfce [ 1001.948245][T16561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1001.948260][T16561] RSP: 002b:00007f7763bf5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1001.948281][T16561] RAX: ffffffffffffffda RBX: 00007f7763bf66c0 RCX: 00007f776595cfce [ 1001.948295][T16561] RDX: 000000000000000f RSI: 00007f7763bf60a0 RDI: 0000000000000004 [ 1001.948306][T16561] RBP: 00007f7763bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.948318][T16561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.948329][T16561] R13: 00007f7765c16038 R14: 00007f7765c15fa0 R15: 00007ffdb0147348 [ 1001.948360][T16561] [ 1002.483336][T16573] "syz.2.16900" (16573) uses obsolete ecb(arc4) skcipher [ 1004.964415][T16591] lo speed is unknown, defaulting to 1000 [ 1004.974384][T16591] vxcan1 speed is unknown, defaulting to 1000 [ 1005.131475][T16602] bond19: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 1005.160372][T16602] bond19 (unregistering): Released all slaves [ 1005.225587][T16605] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16905'. [ 1005.830245][T16639] netlink: 36 bytes leftover after parsing attributes in process `syz.3.16916'. [ 1005.897281][T16646] netlink: 'syz.4.16918': attribute type 10 has an invalid length. [ 1005.913602][T16648] netlink: 'syz.3.16919': attribute type 3 has an invalid length. [ 1005.974110][T16651] Cannot find del_set index 4 as target [ 1006.010886][T16654] netlink: 'syz.1.16922': attribute type 1 has an invalid length. [ 1006.023928][T16654] netlink: 224 bytes leftover after parsing attributes in process `syz.1.16922'. [ 1006.064915][T16656] nbd: nbd4 already in use [ 1006.073307][T16656] block nbd4: NBD_DISCONNECT [ 1006.083795][T16656] block nbd4: Send disconnect failed -32 [ 1006.091154][T16656] block nbd4: shutting down sockets [ 1006.124540][T16660] tipc: Enabling of bearer rejected, failed to enable media [ 1006.245804][T16666] team0: Caught tx_queue_len zero misconfig [ 1006.440696][T16683] netlink: 56 bytes leftover after parsing attributes in process `syz.0.16932'. [ 1006.466404][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16932'. [ 1006.484784][T16683] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16932'. [ 1006.490138][T16688] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1006.503277][T16687] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1006.520523][T16688] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1006.541612][T16690] netlink: 'syz.4.16934': attribute type 11 has an invalid length. [ 1006.574648][T16690] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.16934'. [ 1006.719594][T16700] tipc: Enabling of bearer rejected, failed to enable media [ 1006.989765][T16723] netlink: 256 bytes leftover after parsing attributes in process `syz.0.16947'. [ 1007.119265][T16732] wg2: entered allmulticast mode [ 1007.196993][T16732] macvlan1: entered promiscuous mode [ 1007.202767][T16732] macvlan1: entered allmulticast mode [ 1007.210740][T16732] veth1_vlan: entered allmulticast mode [ 1007.307710][T16745] bond19: option packets_per_slave: invalid value (18446744073709551615) [ 1007.329766][T16745] bond19: option packets_per_slave: allowed values 0 - 65535 [ 1007.358770][T16745] bond19 (unregistering): Released all slaves [ 1007.525231][T16756] bond17: option arp_all_targets: invalid value (18446744073709551613) [ 1007.535699][T16756] bond17 (unregistering): Released all slaves [ 1007.613709][ T981] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 483 sec [ 1007.979968][T16778] bond0: (slave rose0): Error: Device can not be enslaved while up [ 1008.084821][T16780] netem: incorrect ge model size [ 1008.111487][T16780] netem: change failed [ 1008.117270][T16781] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16967'. [ 1008.129783][T16780] netlink: 'syz.4.16967': attribute type 10 has an invalid length. [ 1008.524699][T16802] xt_NFQUEUE: number of total queues is 0 [ 1008.548897][T16802] syzkaller1: entered promiscuous mode [ 1008.564962][T16802] syzkaller1: entered allmulticast mode [ 1008.698353][T16812] netlink: 56 bytes leftover after parsing attributes in process `syz.1.16978'. [ 1008.847498][T16818] tipc: Enabling of bearer rejected, failed to enable media [ 1008.891339][T16821] netlink: 'syz.0.16979': attribute type 11 has an invalid length. [ 1008.977441][T16825] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1008.993792][T16825] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1009.203460][T16835] "syz.1.16986" (16835) uses obsolete ecb(arc4) skcipher [ 1009.640718][T16854] sctp: [Deprecated]: syz.1.16994 (pid 16854) Use of int in max_burst socket option. [ 1009.640718][T16854] Use struct sctp_assoc_value instead [ 1010.029617][T16875] netlink: 'syz.3.17001': attribute type 3 has an invalid length. [ 1010.037560][T16871] Cannot find set identified by id 4 to match [ 1010.191053][T16883] tipc: Enabling of bearer rejected, failed to enable media [ 1010.252267][T16888] __nla_validate_parse: 2 callbacks suppressed [ 1010.252288][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17006'. [ 1010.346520][T16894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1010.445939][T16906] Cannot find set identified by id 4 to match [ 1010.489458][T16909] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17014'. [ 1010.582705][T16918] netlink: 'syz.3.17017': attribute type 12 has an invalid length. [ 1010.655407][T16920] netlink: 100 bytes leftover after parsing attributes in process `syz.4.17018'. [ 1010.669045][T16920] netlink: 100 bytes leftover after parsing attributes in process `syz.4.17018'. [ 1010.799780][T16936] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17021'. [ 1010.955204][T16950] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1011.061184][T16959] bond0: entered allmulticast mode [ 1011.085376][T16959] bridge16: entered promiscuous mode [ 1011.091585][T16959] bridge16: entered allmulticast mode [ 1011.101098][T16959] bond0: (slave bridge16): Enslaving as an active interface with an up link [ 1011.325600][T16983] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17040'. [ 1011.368976][T16981] sch_fq: defrate 0 ignored. [ 1011.422247][T16988] nbd: couldn't find device at index 3 [ 1011.616031][T17003] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17047'. [ 1011.761315][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17052'. [ 1011.789021][T17017] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17052'. [ 1011.815750][T17017] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17052'. [ 1011.915492][T17018] netlink: 'syz.1.17052': attribute type 4 has an invalid length. [ 1011.927077][T17029] netlink: 'syz.0.17056': attribute type 3 has an invalid length. [ 1011.937146][T17029] netlink: 'syz.0.17056': attribute type 2 has an invalid length. [ 1012.244958][T29321] lec:lec_start_xmit: lec0:No lecd attached [ 1012.371297][T17059] netlink: 'syz.4.17068': attribute type 63 has an invalid length. [ 1012.381304][T17059] netlink: 'syz.4.17068': attribute type 63 has an invalid length. [ 1012.464764][T17059] netlink: 'syz.4.17068': attribute type 21 has an invalid length. [ 1012.492864][T17063] syzkaller0: entered promiscuous mode [ 1012.502594][T17063] syzkaller0: entered allmulticast mode [ 1012.543741][T17059] netlink: 'syz.4.17068': attribute type 6 has an invalid length. [ 1012.691435][T17088] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1012.708341][T17091] openvswitch: netlink: Flow key attr not present in new flow. [ 1012.748612][T17088] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 1013.115581][T17122] netlink: 'syz.0.17087': attribute type 2 has an invalid length. [ 1013.129178][T17116] hsr_slave_0 (unregistering): left promiscuous mode [ 1013.163193][T17122] netlink: 'syz.0.17087': attribute type 1 has an invalid length. [ 1013.291192][T17122] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1013.660728][T17153] netlink: 'syz.1.17099': attribute type 1 has an invalid length. [ 1013.742775][T17153] 8021q: adding VLAN 0 to HW filter on device bond19 [ 1014.760527][T17196] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1014.770747][T17214] Cannot find del_set index 4 as target [ 1014.833600][T17224] sctp: [Deprecated]: syz.1.17123 (pid 17224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1014.833600][T17224] Use struct sctp_sack_info instead [ 1014.889211][T17229] veth0: entered promiscuous mode [ 1014.906744][T17229] veth0: left promiscuous mode [ 1014.954733][T17229] syzkaller0: entered promiscuous mode [ 1014.973483][T17229] syzkaller0: entered allmulticast mode [ 1015.116840][T17241] netlink: 'syz.2.17128': attribute type 11 has an invalid length. [ 1015.326507][T17254] __nla_validate_parse: 26 callbacks suppressed [ 1015.326531][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17132'. [ 1015.353438][T17254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.531199][T17263] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 1015.552870][T17262] bond0: Caught tx_queue_len zero misconfig [ 1015.554271][T17266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1015.852929][T17286] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17139'. [ 1016.200863][T17310] netlink: 284 bytes leftover after parsing attributes in process `syz.3.17149'. [ 1016.379190][T17324] erspan0: entered promiscuous mode [ 1016.391304][T17324] erspan0: entered allmulticast mode [ 1016.432215][T17327] netlink: 88 bytes leftover after parsing attributes in process `syz.3.17157'. [ 1016.642332][T17345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1016.743017][T17353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17164'. [ 1016.827508][T17355] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17167'. [ 1017.369038][T17332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1018.008451][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5760 ms [ 1018.016485][ C1] lec:lec_tx_timeout: lec0 [ 1038.157476][T17403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17180'. [ 1038.251423][T17409] netlink: 164 bytes leftover after parsing attributes in process `syz.4.17182'. [ 1038.386557][T17423] validate_nla: 9 callbacks suppressed [ 1038.386579][T17423] netlink: 'syz.3.17189': attribute type 3 has an invalid length. [ 1038.407268][T17423] netlink: 766 bytes leftover after parsing attributes in process `syz.3.17189'. [ 1038.409728][T17420] netlink: 16 bytes leftover after parsing attributes in process `syz.1.17187'. [ 1038.659536][T17434] netlink: 'syz.4.17195': attribute type 8 has an invalid length. [ 1038.776312][T17452] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17198'. [ 1038.919374][T17464] netlink: 64 bytes leftover after parsing attributes in process `syz.1.17199'. [ 1038.959166][T17457] syzkaller1: entered promiscuous mode [ 1038.964790][T17457] syzkaller1: entered allmulticast mode [ 1039.008452][T17469] Cannot find set identified by id 4 to match [ 1039.035976][T17473] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17204'. [ 1039.155021][T17477] netlink: 'syz.3.17207': attribute type 21 has an invalid length. [ 1039.162653][T17478] xt_l2tp: missing protocol rule (udp|l2tpip) [ 1039.167861][T17477] netlink: 128 bytes leftover after parsing attributes in process `syz.3.17207'. [ 1039.202706][T17477] netlink: 'syz.3.17207': attribute type 4 has an invalid length. [ 1039.211334][T17477] netlink: 'syz.3.17207': attribute type 5 has an invalid length. [ 1039.224633][T17483] netlink: 'syz.3.17207': attribute type 1 has an invalid length. [ 1039.234691][T17477] netlink: 3 bytes leftover after parsing attributes in process `syz.3.17207'. [ 1039.244051][T17484] netlink: 'syz.0.17209': attribute type 1 has an invalid length. [ 1039.289334][T17485] macvtap1: entered promiscuous mode [ 1039.294861][T17485] macvtap1: entered allmulticast mode [ 1039.307683][T17485] º: entered allmulticast mode [ 1039.330949][T17490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17211'. [ 1039.397209][T17495] Cannot find del_set index 4 as target [ 1039.754447][T17522] xt_nat: multiple ranges no longer supported [ 1039.829725][T17526] Cannot find del_set index 4 as target [ 1039.941353][T17527] netlink: 'syz.2.17223': attribute type 11 has an invalid length. [ 1039.977689][T17536] netlink: 'syz.0.17227': attribute type 1 has an invalid length. [ 1039.985937][T17536] netlink: 'syz.0.17227': attribute type 1 has an invalid length. [ 1041.090893][ T5824] block nbd0: Receive control failed (result -107) [ 1041.097703][T17625] block nbd0: reconnected socket [ 1041.473761][T17659] bond20: entered promiscuous mode [ 1041.485028][T17661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1041.583073][T17659] bond21: (slave bond_slave_1): Device is not bonding slave [ 1041.593386][T17659] bond21: option active_slave: invalid value (bond_slave_1) [ 1041.605073][T17659] bond21 (unregistering): Released all slaves [ 1041.753987][T17680] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.206628][T17654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1042.276400][T17712] netlink: Unknown conntrack attr (type=2304, max=9) [ 1042.445282][T17724] Cannot find set identified by id 4 to match [ 1042.639552][T17744] x_tables: unsorted underflow at hook 1 [ 1043.014537][T17772] bond27: Setting coupled_control to off (0) [ 1043.573158][T17781] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1043.801216][T17798] __nla_validate_parse: 17 callbacks suppressed [ 1043.801237][T17798] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17306'. [ 1044.794152][T17854] syzkaller1: entered promiscuous mode [ 1044.808397][T17854] syzkaller1: entered allmulticast mode [ 1044.822016][ T5488] veth0_vlan: left promiscuous mode [ 1044.873088][ T5488] veth0_vlan: entered promiscuous mode [ 1044.948199][T17874] netlink: 9 bytes leftover after parsing attributes in process `syz.1.17326'. [ 1044.964770][T17864] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1045.201030][T17888] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17328'. [ 1045.204201][T17890] netlink: 36 bytes leftover after parsing attributes in process `syz.0.17328'. [ 1045.254860][T17891] validate_nla: 8 callbacks suppressed [ 1045.254881][T17891] netlink: 'syz.2.17330': attribute type 3 has an invalid length. [ 1045.445905][T17908] FAULT_INJECTION: forcing a failure. [ 1045.445905][T17908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.470895][T17908] CPU: 1 UID: 0 PID: 17908 Comm: syz.0.17334 Not tainted syzkaller #0 PREEMPT(full) [ 1045.470921][T17908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1045.470933][T17908] Call Trace: [ 1045.470940][T17908] [ 1045.470948][T17908] dump_stack_lvl+0xe8/0x150 [ 1045.470984][T17908] should_fail_ex+0x412/0x560 [ 1045.471013][T17908] _copy_from_user+0x2d/0xb0 [ 1045.471040][T17908] ___sys_sendmsg+0x1c6/0x360 [ 1045.471075][T17908] ? __pfx____sys_sendmsg+0x10/0x10 [ 1045.471131][T17908] ? __fget_files+0x2a/0x420 [ 1045.471158][T17908] ? __fget_files+0x3a0/0x420 [ 1045.471190][T17908] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1045.471216][T17908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1045.471250][T17908] ? __pfx_ksys_write+0x10/0x10 [ 1045.471279][T17908] do_syscall_64+0x14d/0xf80 [ 1045.471299][T17908] ? trace_irq_disable+0x3b/0x150 [ 1045.471326][T17908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.471345][T17908] ? clear_bhb_loop+0x40/0x90 [ 1045.471366][T17908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.471384][T17908] RIP: 0033:0x7f6bf359c799 [ 1045.471402][T17908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1045.471418][T17908] RSP: 002b:00007f6bf4455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1045.471445][T17908] RAX: ffffffffffffffda RBX: 00007f6bf3815fa0 RCX: 00007f6bf359c799 [ 1045.471459][T17908] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1045.471471][T17908] RBP: 00007f6bf4455090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.471482][T17908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.471492][T17908] R13: 00007f6bf3816038 R14: 00007f6bf3815fa0 R15: 00007ffe8e4efc18 [ 1045.471522][T17908] [ 1046.219215][T17946] openvswitch: netlink: Geneve opt len 3 is not a multiple of 4. [ 1046.250271][T17951] Cannot find del_set index 4 as target [ 1046.429374][T17961] netlink: 9 bytes leftover after parsing attributes in process `syz.3.17350'. [ 1046.591005][T17978] netlink: 48 bytes leftover after parsing attributes in process `syz.0.17357'. [ 1046.676212][T17984] Cannot find del_set index 4 as target [ 1046.765571][T17988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17361'. [ 1047.291044][T18027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17376'. [ 1047.641210][T18056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.662985][T18057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.767674][T18057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1047.815400][T18068] netlink: 9 bytes leftover after parsing attributes in process `syz.2.17388'. [ 1047.996630][T18085] FAULT_INJECTION: forcing a failure. [ 1047.996630][T18085] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.011205][T18085] CPU: 1 UID: 0 PID: 18085 Comm: syz.0.17394 Not tainted syzkaller #0 PREEMPT(full) [ 1048.011234][T18085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1048.011245][T18085] Call Trace: [ 1048.011254][T18085] [ 1048.011262][T18085] dump_stack_lvl+0xe8/0x150 [ 1048.011297][T18085] should_fail_ex+0x412/0x560 [ 1048.011325][T18085] should_failslab+0xa8/0x100 [ 1048.011359][T18085] __kmalloc_noprof+0xe8/0x760 [ 1048.011379][T18085] ? rcu_is_watching+0x15/0xb0 [ 1048.011404][T18085] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1048.011437][T18085] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1048.011470][T18085] genl_family_rcv_msg_doit+0xd9/0x330 [ 1048.011501][T18085] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1048.011536][T18085] ? apparmor_capable+0x126/0x170 [ 1048.011566][T18085] ? bpf_lsm_capable+0x9/0x20 [ 1048.011588][T18085] ? security_capable+0x7e/0x2c0 [ 1048.011612][T18085] genl_rcv_msg+0x61c/0x7a0 [ 1048.011644][T18085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.011669][T18085] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1048.011834][T18085] ? __lock_acquire+0x6b5/0x2cf0 [ 1048.011865][T18085] netlink_rcv_skb+0x232/0x4b0 [ 1048.011888][T18085] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1048.011914][T18085] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1048.011950][T18085] ? down_read+0x272/0x2e0 [ 1048.011968][T18085] ? genl_rcv+0xd/0x40 [ 1048.011994][T18085] genl_rcv+0x28/0x40 [ 1048.012016][T18085] netlink_unicast+0x80f/0x9b0 [ 1048.012042][T18085] ? __pfx_netlink_unicast+0x10/0x10 [ 1048.012063][T18085] ? netlink_sendmsg+0x650/0xb40 [ 1048.012083][T18085] ? skb_put+0x11b/0x210 [ 1048.012112][T18085] netlink_sendmsg+0x813/0xb40 [ 1048.012144][T18085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.012168][T18085] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1048.012192][T18085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.012215][T18085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.012235][T18085] ____sys_sendmsg+0xa68/0xad0 [ 1048.012269][T18085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1048.012304][T18085] ? import_iovec+0x73/0xa0 [ 1048.012335][T18085] ___sys_sendmsg+0x2a5/0x360 [ 1048.012377][T18085] ? __pfx____sys_sendmsg+0x10/0x10 [ 1048.012438][T18085] ? __fget_files+0x2a/0x420 [ 1048.012461][T18085] ? __fget_files+0x3a0/0x420 [ 1048.012493][T18085] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1048.012521][T18085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1048.012557][T18085] ? __pfx_ksys_write+0x10/0x10 [ 1048.012590][T18085] do_syscall_64+0x14d/0xf80 [ 1048.012606][T18085] ? trace_irq_disable+0x3b/0x150 [ 1048.012632][T18085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.012650][T18085] ? clear_bhb_loop+0x40/0x90 [ 1048.012671][T18085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.012688][T18085] RIP: 0033:0x7f6bf359c799 [ 1048.012706][T18085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1048.012721][T18085] RSP: 002b:00007f6bf4455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.012741][T18085] RAX: ffffffffffffffda RBX: 00007f6bf3815fa0 RCX: 00007f6bf359c799 [ 1048.012754][T18085] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1048.012765][T18085] RBP: 00007f6bf4455090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.012776][T18085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.012786][T18085] R13: 00007f6bf3816038 R14: 00007f6bf3815fa0 R15: 00007ffe8e4efc18 [ 1048.012816][T18085] [ 1048.682288][T18108] bridge0: port 1(ipvlan0) entered blocking state [ 1048.690336][T18108] bridge0: port 1(ipvlan0) entered disabled state [ 1048.697071][T18108] ipvlan0: entered allmulticast mode [ 1048.703112][T18108] bridge0: entered allmulticast mode [ 1048.713569][T18108] ipvlan0: left allmulticast mode [ 1048.719062][T18108] bridge0: left allmulticast mode [ 1048.741320][T18106] netlink: 'syz.1.17401': attribute type 6 has an invalid length. [ 1048.754130][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17401'. [ 1048.805199][T18115] netlink: 'syz.1.17401': attribute type 8 has an invalid length. [ 1049.119864][T18141] __nla_validate_parse: 1 callbacks suppressed [ 1049.119886][T18141] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17413'. [ 1049.172087][T18146] delete_channel: no stack [ 1049.410140][T18165] Cannot find del_set index 4 as target [ 1049.561015][T18177] netlink: 'syz.4.17424': attribute type 24 has an invalid length. [ 1049.569360][T18177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17424'. [ 1049.856179][T18200] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17431'. [ 1049.936369][T18202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17434'. [ 1049.982588][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17433'. [ 1049.996999][T18208] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17435'. [ 1050.009360][T18208] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17435'. [ 1050.069748][T18215] netlink: 'syz.4.17436': attribute type 4 has an invalid length. [ 1050.091071][T18205] 8021q: adding VLAN 0 to HW filter on device bond20 [ 1050.272078][T18227] netlink: 'syz.4.17440': attribute type 1 has an invalid length. [ 1050.285894][T18227] netlink: 96 bytes leftover after parsing attributes in process `syz.4.17440'. [ 1050.309385][T18227] netlink: 'syz.4.17440': attribute type 1 has an invalid length. [ 1050.328541][T18227] netlink: 'syz.4.17440': attribute type 8 has an invalid length. [ 1050.347840][T18227] netlink: 606 bytes leftover after parsing attributes in process `syz.4.17440'. [ 1050.368528][T18227] netlink: 1 bytes leftover after parsing attributes in process `syz.4.17440'. [ 1050.871606][T18252] netlink: 'syz.2.17449': attribute type 1 has an invalid length. [ 1051.500258][T18299] vlan5: entered allmulticast mode [ 1051.505725][T18299] bridge21: entered allmulticast mode [ 1051.507756][T18305] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1051.585339][T18307] netlink: 'syz.0.17464': attribute type 1 has an invalid length. [ 1051.611977][T18310] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1051.647051][T18307] bond21: entered promiscuous mode [ 1051.653980][T18307] 8021q: adding VLAN 0 to HW filter on device bond21 [ 1051.676933][T18313] bond21: (slave bridge17): making interface the new active one [ 1051.685423][T18313] bridge17: entered promiscuous mode [ 1051.696386][T18313] bond21: (slave bridge17): Enslaving as an active interface with an up link [ 1051.915629][T18327] lo speed is unknown, defaulting to 1000 [ 1052.062959][T18327] vxcan1 speed is unknown, defaulting to 1000 [ 1052.264609][T18347] sit5: entered promiscuous mode [ 1052.276655][T18347] sit5: entered allmulticast mode [ 1052.902592][T18386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1052.910556][T18386] IPv6: NLM_F_CREATE should be set when creating new route [ 1052.917850][T18386] IPv6: NLM_F_CREATE should be set when creating new route [ 1052.925302][T18386] IPv6: NLM_F_CREATE should be set when creating new route [ 1052.964698][T18387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1053.009122][T18387] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1053.085889][T18393] netlink: 'syz.3.17490': attribute type 1 has an invalid length. [ 1053.114594][T18396] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1053.510015][T18384] nft_compat: unsupported protocol 0 [ 1053.592341][T18423] Cannot find set identified by id 4 to match [ 1053.616523][T18415] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1053.649756][T18421] lo speed is unknown, defaulting to 1000 [ 1053.660840][T18421] vxcan1 speed is unknown, defaulting to 1000 [ 1054.489499][T18469] netlink: 'syz.1.17518': attribute type 1 has an invalid length. [ 1054.503780][T18466] tipc: Enabling of bearer rejected, failed to enable media [ 1054.551420][T18471] __nla_validate_parse: 14 callbacks suppressed [ 1054.551438][T18471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17519'. [ 1054.577315][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1054.581779][T18471] netlink: 'syz.4.17519': attribute type 32 has an invalid length. [ 1054.592435][T18473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17520'. [ 1054.609042][T18473] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1054.624177][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17519'. [ 1054.686131][T18471] bond28: Setting coupled_control to off (0) [ 1054.704379][T18475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17522'. [ 1054.924272][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17525'. [ 1054.953031][T18488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17525'. [ 1054.982017][T18488] netlink: 'syz.3.17525': attribute type 3 has an invalid length. [ 1055.099764][T18506] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17532'. [ 1055.419410][T18519] netlink: 'syz.4.17537': attribute type 33 has an invalid length. [ 1055.448529][T18519] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17537'. [ 1055.469179][T18519] netlink: 14 bytes leftover after parsing attributes in process `syz.4.17537'. [ 1055.648773][T18532] netlink: 'syz.2.17543': attribute type 3 has an invalid length. [ 1055.649791][T18529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17542'. [ 1056.031303][T18557] netlink: 'syz.0.17552': attribute type 1 has an invalid length. [ 1056.147635][T18565] netlink: 'syz.2.17556': attribute type 1 has an invalid length. [ 1056.240650][T18574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1056.342914][T18576] tipc: Enabling of bearer rejected, failed to enable media [ 1056.522053][T18587] tipc: Trying to set illegal importance in message [ 1056.579908][T18593] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1057.303905][T18637] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 1057.789027][T18673] netlink: 'syz.3.17591': attribute type 1 has an invalid length. [ 1058.117710][T18692] openvswitch: netlink: Duplicate key (type 2). [ 1059.327462][T18783] netlink: 'syz.3.17621': attribute type 11 has an invalid length. [ 1059.347958][T18783] netlink: 'syz.3.17621': attribute type 4 has an invalid length. [ 1059.357929][T18783] netlink: 'syz.3.17621': attribute type 5 has an invalid length. [ 1059.366688][T18783] netlink: 'syz.3.17621': attribute type 6 has an invalid length. [ 1059.625983][T18803] __nla_validate_parse: 14 callbacks suppressed [ 1059.626001][T18803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17628'. [ 1059.933501][T18827] syzkaller0: entered promiscuous mode [ 1059.954456][T18827] syzkaller0: entered allmulticast mode [ 1059.966223][T18831] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1059.985487][T18827] tipc: Enabled bearer , priority 0 [ 1060.008183][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5430 ms [ 1060.017266][ C1] lec:lec_tx_timeout: lec0 [ 1060.046579][T18825] tipc: Resetting bearer [ 1060.162615][T18825] tipc: Disabling bearer [ 1060.185424][T18839] netlink: 9 bytes leftover after parsing attributes in process `syz.4.17636'. [ 1060.196773][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17635'. [ 1060.487814][T18863] netem: change failed [ 1060.621527][T18873] netlink: 10 bytes leftover after parsing attributes in process `syz.1.17648'. [ 1060.685854][T18881] netlink: 'syz.0.17650': attribute type 1 has an invalid length. [ 1060.694382][T18881] netlink: 'syz.0.17650': attribute type 2 has an invalid length. [ 1060.764095][T18888] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1060.868954][T18894] nbd: must specify a size in bytes for the device [ 1060.971467][T18902] netlink: 'syz.1.17656': attribute type 11 has an invalid length. [ 1061.322440][T18931] tipc: Enabling of bearer rejected, failed to enable media [ 1061.563125][T18939] syzkaller1: entered promiscuous mode [ 1061.575881][T18939] syzkaller1: entered allmulticast mode [ 1061.880582][T18967] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17675'. [ 1062.108635][T18982] netlink: 'syz.0.17681': attribute type 1 has an invalid length. [ 1062.137448][T18982] netlink: 2084 bytes leftover after parsing attributes in process `syz.0.17681'. [ 1062.200222][T18982] netlink: 'syz.0.17681': attribute type 1 has an invalid length. [ 1062.212074][T18982] netlink: 2084 bytes leftover after parsing attributes in process `syz.0.17681'. [ 1062.269652][T19002] netlink: 'syz.2.17687': attribute type 9 has an invalid length. [ 1062.300355][T18998] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 1062.307618][T18998] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 1062.422163][T19014] FAULT_INJECTION: forcing a failure. [ 1062.422163][T19014] name failslab, interval 1, probability 0, space 0, times 0 [ 1062.468293][T19014] CPU: 1 UID: 0 PID: 19014 Comm: syz.3.17688 Not tainted syzkaller #0 PREEMPT(full) [ 1062.468319][T19014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1062.468338][T19014] Call Trace: [ 1062.468347][T19014] [ 1062.468355][T19014] dump_stack_lvl+0xe8/0x150 [ 1062.468390][T19014] should_fail_ex+0x412/0x560 [ 1062.468418][T19014] should_failslab+0xa8/0x100 [ 1062.468443][T19014] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1062.468466][T19014] ? kasprintf+0xe2/0x140 [ 1062.468498][T19014] kvasprintf+0xeb/0x1a0 [ 1062.468525][T19014] ? __pfx_kvasprintf+0x10/0x10 [ 1062.468561][T19014] kasprintf+0xe2/0x140 [ 1062.468582][T19014] ? pcpu_alloc+0x10/0x360 [ 1062.468694][T19014] ? __pfx_kasprintf+0x10/0x10 [ 1062.468725][T19014] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1062.468757][T19014] ieee80211_alloc_led_names+0x27a/0x2b0 [ 1062.468833][T19014] ieee80211_alloc_hw_nm+0x18f2/0x1f60 [ 1062.468917][T19014] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 1062.468957][T19014] ? stack_trace_save+0xa9/0x100 [ 1062.468976][T19014] ? __pfx_stack_trace_save+0x10/0x10 [ 1062.468999][T19014] ? stack_depot_save_flags+0x33/0x810 [ 1062.469026][T19014] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1062.469051][T19014] ? __kasan_kmalloc+0x93/0xb0 [ 1062.469080][T19014] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1062.469129][T19014] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1062.469166][T19014] ? rcu_is_watching+0x15/0xb0 [ 1062.469192][T19014] ? trace_kmalloc+0x2a/0x110 [ 1062.469215][T19014] ? __nla_parse+0x40/0x60 [ 1062.469242][T19014] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1062.469280][T19014] genl_family_rcv_msg_doit+0x22a/0x330 [ 1062.469314][T19014] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1062.469359][T19014] ? bpf_lsm_capable+0x9/0x20 [ 1062.469382][T19014] ? security_capable+0x7e/0x2c0 [ 1062.469411][T19014] genl_rcv_msg+0x61c/0x7a0 [ 1062.469444][T19014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1062.469469][T19014] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1062.469496][T19014] ? __lock_acquire+0x6b5/0x2cf0 [ 1062.469531][T19014] netlink_rcv_skb+0x232/0x4b0 [ 1062.469554][T19014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1062.469581][T19014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1062.469621][T19014] ? down_read+0x272/0x2e0 [ 1062.469638][T19014] ? genl_rcv+0xd/0x40 [ 1062.469665][T19014] genl_rcv+0x28/0x40 [ 1062.469687][T19014] netlink_unicast+0x80f/0x9b0 [ 1062.469717][T19014] ? __pfx_netlink_unicast+0x10/0x10 [ 1062.469738][T19014] ? netlink_sendmsg+0x650/0xb40 [ 1062.469758][T19014] ? skb_put+0x11b/0x210 [ 1062.469787][T19014] netlink_sendmsg+0x813/0xb40 [ 1062.469819][T19014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.469843][T19014] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1062.469866][T19014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1062.469885][T19014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1062.469904][T19014] ____sys_sendmsg+0xa68/0xad0 [ 1062.469941][T19014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1062.469976][T19014] ? import_iovec+0x73/0xa0 [ 1062.470005][T19014] ___sys_sendmsg+0x2a5/0x360 [ 1062.470037][T19014] ? __pfx____sys_sendmsg+0x10/0x10 [ 1062.470100][T19014] ? __fget_files+0x2a/0x420 [ 1062.470126][T19014] ? __fget_files+0x3a0/0x420 [ 1062.470159][T19014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1062.470187][T19014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1062.470222][T19014] ? __pfx_ksys_write+0x10/0x10 [ 1062.470251][T19014] do_syscall_64+0x14d/0xf80 [ 1062.470290][T19014] ? trace_irq_disable+0x3b/0x150 [ 1062.470315][T19014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.470340][T19014] ? clear_bhb_loop+0x40/0x90 [ 1062.470362][T19014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.470379][T19014] RIP: 0033:0x7f776599c799 [ 1062.470398][T19014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1062.470413][T19014] RSP: 002b:00007f7763bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.470433][T19014] RAX: ffffffffffffffda RBX: 00007f7765c15fa0 RCX: 00007f776599c799 [ 1062.470446][T19014] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1062.470457][T19014] RBP: 00007f7763bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.470468][T19014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1062.470479][T19014] R13: 00007f7765c16038 R14: 00007f7765c15fa0 R15: 00007ffdb0147348 [ 1062.470510][T19014] [ 1062.936574][T19023] FAULT_INJECTION: forcing a failure. [ 1062.936574][T19023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1062.986541][T19023] CPU: 1 UID: 0 PID: 19023 Comm: syz.4.17692 Not tainted syzkaller #0 PREEMPT(full) [ 1062.986569][T19023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1062.986581][T19023] Call Trace: [ 1062.986589][T19023] [ 1062.986598][T19023] dump_stack_lvl+0xe8/0x150 [ 1062.986630][T19023] should_fail_ex+0x412/0x560 [ 1062.986657][T19023] _copy_to_user+0x31/0xb0 [ 1062.986685][T19023] simple_read_from_buffer+0xe1/0x170 [ 1062.986717][T19023] proc_fail_nth_read+0x1bb/0x230 [ 1062.986747][T19023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1062.986774][T19023] ? rw_verify_area+0x2a6/0x4d0 [ 1062.986792][T19023] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1062.986815][T19023] vfs_read+0x20c/0xa70 [ 1062.986832][T19023] ? fdget_pos+0x246/0x320 [ 1062.986861][T19023] ? __pfx___mutex_lock+0x10/0x10 [ 1062.986881][T19023] ? __pfx_vfs_read+0x10/0x10 [ 1062.986901][T19023] ? __fget_files+0x2a/0x420 [ 1062.986929][T19023] ? __fget_files+0x3a0/0x420 [ 1062.986952][T19023] ? __fget_files+0x2a/0x420 [ 1062.986981][T19023] ksys_read+0x150/0x270 [ 1062.987003][T19023] ? __pfx_ksys_read+0x10/0x10 [ 1062.987033][T19023] do_syscall_64+0x14d/0xf80 [ 1062.987050][T19023] ? trace_irq_disable+0x3b/0x150 [ 1062.987075][T19023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.987094][T19023] ? clear_bhb_loop+0x40/0x90 [ 1062.987117][T19023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1062.987136][T19023] RIP: 0033:0x7f03ccd5cfce [ 1062.987164][T19023] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1062.987180][T19023] RSP: 002b:00007f03cdc9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1062.987204][T19023] RAX: ffffffffffffffda RBX: 00007f03cdc9c6c0 RCX: 00007f03ccd5cfce [ 1062.987217][T19023] RDX: 000000000000000f RSI: 00007f03cdc9c0a0 RDI: 0000000000000004 [ 1062.987228][T19023] RBP: 00007f03cdc9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.987240][T19023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.987251][T19023] R13: 00007f03cd016038 R14: 00007f03cd015fa0 R15: 00007ffde5a1bb78 [ 1062.987282][T19023] [ 1063.218939][T19016] lo speed is unknown, defaulting to 1000 [ 1063.226485][T19016] vxcan1 speed is unknown, defaulting to 1000 [ 1063.427280][T19036] Cannot find set identified by id 4 to match [ 1063.473150][T19038] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1063.527906][T19038] syzkaller0: entered promiscuous mode [ 1063.534258][T19038] syzkaller0: entered allmulticast mode [ 1063.582018][T19038] 0: reclassify loop, rule prio 0, protocol 800 [ 1063.597929][T19046] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1063.611264][T19044] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1063.813292][T19059] netlink: 'syz.0.17704': attribute type 28 has an invalid length. [ 1063.830615][T19059] netlink: 'syz.0.17704': attribute type 3 has an invalid length. [ 1063.848987][T19059] netlink: 132 bytes leftover after parsing attributes in process `syz.0.17704'. [ 1063.863792][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17704'. [ 1064.209314][T19081] nbd: must specify at least one socket [ 1064.227213][T19082] nbd: must specify at least one socket [ 1064.245763][T19085] netlink: 'syz.3.17714': attribute type 2 has an invalid length. [ 1064.286096][T19085] netlink: 119 bytes leftover after parsing attributes in process `syz.3.17714'. [ 1064.491608][T19097] vlan5: entered promiscuous mode [ 1064.496991][T19097] vlan5: entered allmulticast mode [ 1064.519588][T19097] hsr_slave_1: entered allmulticast mode [ 1064.530424][T19099] netlink: 'syz.0.17719': attribute type 5 has an invalid length. [ 1064.604922][T19099] geneve3: entered promiscuous mode [ 1064.634940][T19099] geneve3: entered allmulticast mode [ 1064.640655][T19111] FAULT_INJECTION: forcing a failure. [ 1064.640655][T19111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.640698][T19111] CPU: 0 UID: 0 PID: 19111 Comm: syz.2.17723 Not tainted syzkaller #0 PREEMPT(full) [ 1064.640715][T19111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1064.640726][T19111] Call Trace: [ 1064.640733][T19111] [ 1064.640740][T19111] dump_stack_lvl+0xe8/0x150 [ 1064.640773][T19111] should_fail_ex+0x412/0x560 [ 1064.640799][T19111] _copy_from_user+0x2d/0xb0 [ 1064.640827][T19111] ___sys_sendmsg+0x1c6/0x360 [ 1064.640860][T19111] ? __pfx____sys_sendmsg+0x10/0x10 [ 1064.640915][T19111] ? __fget_files+0x2a/0x420 [ 1064.640941][T19111] ? __fget_files+0x3a0/0x420 [ 1064.640972][T19111] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1064.640999][T19111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1064.641032][T19111] ? __pfx_ksys_write+0x10/0x10 [ 1064.641062][T19111] do_syscall_64+0x14d/0xf80 [ 1064.641078][T19111] ? trace_irq_disable+0x3b/0x150 [ 1064.641103][T19111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.641120][T19111] ? clear_bhb_loop+0x40/0x90 [ 1064.641143][T19111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.641160][T19111] RIP: 0033:0x7fd44c99c799 [ 1064.641177][T19111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.641192][T19111] RSP: 002b:00007fd44d8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.641211][T19111] RAX: ffffffffffffffda RBX: 00007fd44cc15fa0 RCX: 00007fd44c99c799 [ 1064.641224][T19111] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1064.641235][T19111] RBP: 00007fd44d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.641247][T19111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.641257][T19111] R13: 00007fd44cc16038 R14: 00007fd44cc15fa0 R15: 00007ffedc7cef28 [ 1064.641285][T19111] [ 1064.742969][T19116] FAULT_INJECTION: forcing a failure. [ 1064.742969][T19116] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.763581][ T978] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 1064.838517][T19116] CPU: 0 UID: 0 PID: 19116 Comm: syz.4.17726 Not tainted syzkaller #0 PREEMPT(full) [ 1064.838551][T19116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1064.838563][T19116] Call Trace: [ 1064.838571][T19116] [ 1064.838582][T19116] dump_stack_lvl+0xe8/0x150 [ 1064.838617][T19116] should_fail_ex+0x412/0x560 [ 1064.838645][T19116] should_failslab+0xa8/0x100 [ 1064.838669][T19116] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1064.838696][T19116] ? kasprintf+0xe2/0x140 [ 1064.838728][T19116] kvasprintf+0xeb/0x1a0 [ 1064.838752][T19116] ? __pfx_kvasprintf+0x10/0x10 [ 1064.838783][T19116] kasprintf+0xe2/0x140 [ 1064.838804][T19116] ? pcpu_alloc+0x10/0x360 [ 1064.838825][T19116] ? __pfx_kasprintf+0x10/0x10 [ 1064.838854][T19116] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1064.838885][T19116] ieee80211_alloc_led_names+0x27a/0x2b0 [ 1064.838909][T19116] ieee80211_alloc_hw_nm+0x18f2/0x1f60 [ 1064.838940][T19116] mac80211_hwsim_new_radio+0x1dc/0x5330 [ 1064.838980][T19116] ? stack_trace_save+0xa9/0x100 [ 1064.838999][T19116] ? __pfx_stack_trace_save+0x10/0x10 [ 1064.839022][T19116] ? stack_depot_save_flags+0x33/0x810 [ 1064.839051][T19116] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1064.839076][T19116] ? __kasan_kmalloc+0x93/0xb0 [ 1064.839105][T19116] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1064.839160][T19116] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1064.839195][T19116] ? rcu_is_watching+0x15/0xb0 [ 1064.839220][T19116] ? trace_kmalloc+0x2a/0x110 [ 1064.839243][T19116] ? __nla_parse+0x40/0x60 [ 1064.839269][T19116] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1064.839305][T19116] genl_family_rcv_msg_doit+0x22a/0x330 [ 1064.839339][T19116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1064.839376][T19116] ? bpf_lsm_capable+0x9/0x20 [ 1064.839399][T19116] ? security_capable+0x7e/0x2c0 [ 1064.839424][T19116] genl_rcv_msg+0x61c/0x7a0 [ 1064.839455][T19116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1064.839479][T19116] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1064.839506][T19116] ? __lock_acquire+0x6b5/0x2cf0 [ 1064.839540][T19116] netlink_rcv_skb+0x232/0x4b0 [ 1064.839563][T19116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1064.839590][T19116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1064.839628][T19116] ? down_read+0x272/0x2e0 [ 1064.839644][T19116] ? genl_rcv+0xd/0x40 [ 1064.839671][T19116] genl_rcv+0x28/0x40 [ 1064.839694][T19116] netlink_unicast+0x80f/0x9b0 [ 1064.839722][T19116] ? __pfx_netlink_unicast+0x10/0x10 [ 1064.839743][T19116] ? netlink_sendmsg+0x650/0xb40 [ 1064.839762][T19116] ? skb_put+0x11b/0x210 [ 1064.839790][T19116] netlink_sendmsg+0x813/0xb40 [ 1064.839822][T19116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.839847][T19116] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1064.839870][T19116] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1064.839891][T19116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.839911][T19116] ____sys_sendmsg+0xa68/0xad0 [ 1064.839946][T19116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1064.839980][T19116] ? import_iovec+0x73/0xa0 [ 1064.840008][T19116] ___sys_sendmsg+0x2a5/0x360 [ 1064.840038][T19116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1064.840099][T19116] ? __fget_files+0x2a/0x420 [ 1064.840122][T19116] ? __fget_files+0x3a0/0x420 [ 1064.840162][T19116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1064.840190][T19116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1064.840223][T19116] ? __pfx_ksys_write+0x10/0x10 [ 1064.840254][T19116] do_syscall_64+0x14d/0xf80 [ 1064.840272][T19116] ? trace_irq_disable+0x3b/0x150 [ 1064.840296][T19116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.840314][T19116] ? clear_bhb_loop+0x40/0x90 [ 1064.840336][T19116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.840354][T19116] RIP: 0033:0x7f03ccd9c799 [ 1064.840373][T19116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.840389][T19116] RSP: 002b:00007f03cdc9c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.840410][T19116] RAX: ffffffffffffffda RBX: 00007f03cd015fa0 RCX: 00007f03ccd9c799 [ 1064.840423][T19116] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1064.840435][T19116] RBP: 00007f03cdc9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.840446][T19116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1064.840457][T19116] R13: 00007f03cd016038 R14: 00007f03cd015fa0 R15: 00007ffde5a1bb78 [ 1064.840487][T19116] [ 1065.128543][T19125] __nla_validate_parse: 2 callbacks suppressed [ 1065.128567][T19125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17729'. [ 1065.351279][ T978] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 1065.422103][ T978] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 1065.468833][ T978] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 1065.674863][T19146] netlink: 256 bytes leftover after parsing attributes in process `syz.1.17736'. [ 1065.694726][T19144] netlink: 256 bytes leftover after parsing attributes in process `syz.4.17735'. [ 1065.709118][T19144] netlink: 256 bytes leftover after parsing attributes in process `syz.4.17735'. [ 1065.745896][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17739'. [ 1065.767314][T19152] netlink: 'syz.1.17739': attribute type 1 has an invalid length. [ 1065.824125][T19158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1065.875230][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17739'. [ 1065.997668][T19170] FAULT_INJECTION: forcing a failure. [ 1065.997668][T19170] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.997767][T19168] syzkaller0: entered promiscuous mode [ 1066.017255][T19168] syzkaller0: entered allmulticast mode [ 1066.040011][T19170] CPU: 1 UID: 0 PID: 19170 Comm: syz.2.17743 Not tainted syzkaller #0 PREEMPT(full) [ 1066.040036][T19170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1066.040046][T19170] Call Trace: [ 1066.040053][T19170] [ 1066.040061][T19170] dump_stack_lvl+0xe8/0x150 [ 1066.040097][T19170] should_fail_ex+0x412/0x560 [ 1066.040119][T19170] should_failslab+0xa8/0x100 [ 1066.040140][T19170] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1066.040156][T19170] ? __lock_acquire+0x6b5/0x2cf0 [ 1066.040174][T19170] ? __kernfs_new_node+0xa9/0x8e0 [ 1066.040199][T19170] kstrdup+0x42/0x100 [ 1066.040252][T19170] __kernfs_new_node+0xa9/0x8e0 [ 1066.040270][T19170] ? arch_stack_walk+0xfb/0x150 [ 1066.040299][T19170] ? __lock_acquire+0x6b5/0x2cf0 [ 1066.040314][T19170] ? __pfx___kernfs_new_node+0x10/0x10 [ 1066.040333][T19170] ? kernfs_root+0x1c/0x230 [ 1066.040356][T19170] ? kernfs_root+0x1c/0x230 [ 1066.040378][T19170] ? kernfs_root+0x1c/0x230 [ 1066.040393][T19170] ? kernfs_root+0x1c/0x230 [ 1066.040413][T19170] kernfs_new_node+0x102/0x210 [ 1066.040440][T19170] kernfs_create_dir_ns+0x44/0x130 [ 1066.040462][T19170] sysfs_create_dir_ns+0x12f/0x2a0 [ 1066.040482][T19170] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1066.040500][T19170] ? do_raw_spin_unlock+0xf5/0x210 [ 1066.040517][T19170] kobject_add_internal+0x62b/0xd00 [ 1066.040601][T19170] kobject_add+0x163/0x240 [ 1066.040621][T19170] ? __pfx_kobject_add+0x10/0x10 [ 1066.040636][T19170] ? do_raw_spin_unlock+0xf5/0x210 [ 1066.040653][T19170] ? get_device_parent+0x366/0x3a0 [ 1066.040753][T19170] device_add+0x408/0xb70 [ 1066.040776][T19170] device_create+0x269/0x300 [ 1066.040791][T19170] ? timer_init_key+0x161/0x2f0 [ 1066.040810][T19170] ? __pfx_device_create+0x10/0x10 [ 1066.040825][T19170] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 1066.040849][T19170] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 1066.040883][T19170] ? __pfx_stack_trace_save+0x10/0x10 [ 1066.040901][T19170] ? stack_depot_save_flags+0x33/0x810 [ 1066.040925][T19170] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1066.040944][T19170] ? __kasan_kmalloc+0x93/0xb0 [ 1066.040972][T19170] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1066.041011][T19170] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1066.041038][T19170] ? rcu_is_watching+0x15/0xb0 [ 1066.041059][T19170] ? trace_kmalloc+0x2a/0x110 [ 1066.041078][T19170] ? __nla_parse+0x40/0x60 [ 1066.041101][T19170] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1066.041131][T19170] genl_family_rcv_msg_doit+0x22a/0x330 [ 1066.041158][T19170] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1066.041187][T19170] ? bpf_lsm_capable+0x9/0x20 [ 1066.041207][T19170] ? security_capable+0x7e/0x2c0 [ 1066.041232][T19170] genl_rcv_msg+0x61c/0x7a0 [ 1066.041259][T19170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1066.041280][T19170] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1066.041304][T19170] ? __lock_acquire+0x6b5/0x2cf0 [ 1066.041333][T19170] netlink_rcv_skb+0x232/0x4b0 [ 1066.041352][T19170] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1066.041373][T19170] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1066.041404][T19170] ? down_read+0x272/0x2e0 [ 1066.041428][T19170] ? genl_rcv+0xd/0x40 [ 1066.041450][T19170] genl_rcv+0x28/0x40 [ 1066.041470][T19170] netlink_unicast+0x80f/0x9b0 [ 1066.041495][T19170] ? __pfx_netlink_unicast+0x10/0x10 [ 1066.041514][T19170] ? netlink_sendmsg+0x650/0xb40 [ 1066.041531][T19170] ? skb_put+0x11b/0x210 [ 1066.041557][T19170] netlink_sendmsg+0x813/0xb40 [ 1066.041586][T19170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1066.041608][T19170] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1066.041627][T19170] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1066.041648][T19170] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1066.041667][T19170] ____sys_sendmsg+0xa68/0xad0 [ 1066.041701][T19170] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1066.041734][T19170] ? import_iovec+0x73/0xa0 [ 1066.041759][T19170] ___sys_sendmsg+0x2a5/0x360 [ 1066.041787][T19170] ? __pfx____sys_sendmsg+0x10/0x10 [ 1066.041845][T19170] ? __fget_files+0x2a/0x420 [ 1066.041869][T19170] ? __fget_files+0x3a0/0x420 [ 1066.041900][T19170] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1066.041925][T19170] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1066.041959][T19170] ? __pfx_ksys_write+0x10/0x10 [ 1066.041986][T19170] do_syscall_64+0x14d/0xf80 [ 1066.042001][T19170] ? trace_irq_disable+0x3b/0x150 [ 1066.042023][T19170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.042041][T19170] ? clear_bhb_loop+0x40/0x90 [ 1066.042064][T19170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.042080][T19170] RIP: 0033:0x7fd44c99c799 [ 1066.042098][T19170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.042112][T19170] RSP: 002b:00007fd44d8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1066.042132][T19170] RAX: ffffffffffffffda RBX: 00007fd44cc15fa0 RCX: 00007fd44c99c799 [ 1066.042145][T19170] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1066.042157][T19170] RBP: 00007fd44d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.042168][T19170] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1066.042179][T19170] R13: 00007fd44cc16038 R14: 00007fd44cc15fa0 R15: 00007ffedc7cef28 [ 1066.042206][T19170] [ 1066.044498][T19170] kobject: kobject_add_internal failed for hwsim62 (error: -12 parent: mac80211_hwsim) [ 1066.692122][T19176] netlink: 84 bytes leftover after parsing attributes in process `syz.1.17748'. [ 1066.714190][T19181] netlink: 20 bytes leftover after parsing attributes in process `syz.4.17749'. [ 1066.870447][T19195] netlink: 780 bytes leftover after parsing attributes in process `syz.4.17755'. [ 1066.904960][T19195] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1067.026293][T19207] bond22: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 1067.040279][T19207] bond22 (unregistering): Released all slaves [ 1067.047850][T19213] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 1067.080543][T19213] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1067.122388][T19213] netlink: 'syz.0.17757': attribute type 29 has an invalid length. [ 1067.153612][T19213] netlink: 'syz.0.17757': attribute type 29 has an invalid length. [ 1067.214057][T19221] netlink: 500 bytes leftover after parsing attributes in process `syz.0.17757'. [ 1067.399623][T19237] syzkaller0: entered allmulticast mode [ 1067.642125][T19262] netlink: 'syz.4.17775': attribute type 26 has an invalid length. [ 1067.810644][T19273] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 1067.828328][T19273] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 1067.897035][T19275] bond4: (slave lo): Releasing backup interface [ 1067.910800][T19275] bond4: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1067.926671][T19275] bond10: (slave veth0_to_bond): Releasing active interface [ 1067.939243][T19275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1067.949016][T19283] netlink: 'syz.4.17779': attribute type 11 has an invalid length. [ 1067.959347][T19275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.979726][T19275] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1068.088523][ T5909] page_pool_release_retry() stalled pool shutdown: id 115, 1 inflight 544 sec [ 1068.179767][T19295] Cannot find set identified by id 4 to match [ 1068.557214][T19323] FAULT_INJECTION: forcing a failure. [ 1068.557214][T19323] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.618649][T19323] CPU: 1 UID: 0 PID: 19323 Comm: syz.0.17798 Not tainted syzkaller #0 PREEMPT(full) [ 1068.618681][T19323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1068.618692][T19323] Call Trace: [ 1068.618701][T19323] [ 1068.618710][T19323] dump_stack_lvl+0xe8/0x150 [ 1068.618743][T19323] should_fail_ex+0x412/0x560 [ 1068.618771][T19323] should_failslab+0xa8/0x100 [ 1068.618797][T19323] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1068.618817][T19323] ? __lock_acquire+0x6b5/0x2cf0 [ 1068.618840][T19323] ? __kernfs_new_node+0xa9/0x8e0 [ 1068.618870][T19323] kstrdup+0x42/0x100 [ 1068.618895][T19323] __kernfs_new_node+0xa9/0x8e0 [ 1068.618918][T19323] ? arch_stack_walk+0xfb/0x150 [ 1068.618948][T19323] ? __lock_acquire+0x6b5/0x2cf0 [ 1068.618969][T19323] ? __pfx___kernfs_new_node+0x10/0x10 [ 1068.618995][T19323] ? kernfs_root+0x1c/0x230 [ 1068.619023][T19323] ? kernfs_root+0x1c/0x230 [ 1068.619045][T19323] ? kernfs_root+0x1c/0x230 [ 1068.619066][T19323] ? kernfs_root+0x1c/0x230 [ 1068.619093][T19323] kernfs_new_node+0x102/0x210 [ 1068.619123][T19323] kernfs_create_dir_ns+0x44/0x130 [ 1068.619152][T19323] sysfs_create_dir_ns+0x12f/0x2a0 [ 1068.619180][T19323] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1068.619205][T19323] ? do_raw_spin_unlock+0xf5/0x210 [ 1068.619227][T19323] kobject_add_internal+0x62b/0xd00 [ 1068.619255][T19323] kobject_add+0x163/0x240 [ 1068.619279][T19323] ? __pfx_kobject_add+0x10/0x10 [ 1068.619299][T19323] ? do_raw_spin_unlock+0xf5/0x210 [ 1068.619320][T19323] ? get_device_parent+0x366/0x3a0 [ 1068.619351][T19323] device_add+0x408/0xb70 [ 1068.619390][T19323] device_create+0x269/0x300 [ 1068.619410][T19323] ? timer_init_key+0x161/0x2f0 [ 1068.619432][T19323] ? __pfx_device_create+0x10/0x10 [ 1068.619459][T19323] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 1068.619489][T19323] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 1068.619526][T19323] ? __pfx_stack_trace_save+0x10/0x10 [ 1068.619545][T19323] ? stack_depot_save_flags+0x33/0x810 [ 1068.619572][T19323] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1068.619597][T19323] ? __kasan_kmalloc+0x93/0xb0 [ 1068.619626][T19323] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1068.619680][T19323] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1068.619712][T19323] ? rcu_is_watching+0x15/0xb0 [ 1068.619733][T19323] ? trace_kmalloc+0x2a/0x110 [ 1068.619755][T19323] ? __nla_parse+0x40/0x60 [ 1068.619782][T19323] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1068.619818][T19323] genl_family_rcv_msg_doit+0x22a/0x330 [ 1068.619849][T19323] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1068.619885][T19323] ? bpf_lsm_capable+0x9/0x20 [ 1068.619906][T19323] ? security_capable+0x7e/0x2c0 [ 1068.619936][T19323] genl_rcv_msg+0x61c/0x7a0 [ 1068.619969][T19323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1068.619993][T19323] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1068.620017][T19323] ? __lock_acquire+0x6b5/0x2cf0 [ 1068.620051][T19323] netlink_rcv_skb+0x232/0x4b0 [ 1068.620073][T19323] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1068.620100][T19323] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1068.620140][T19323] ? down_read+0x272/0x2e0 [ 1068.620158][T19323] ? genl_rcv+0xd/0x40 [ 1068.620180][T19323] genl_rcv+0x28/0x40 [ 1068.620201][T19323] netlink_unicast+0x80f/0x9b0 [ 1068.620227][T19323] ? __pfx_netlink_unicast+0x10/0x10 [ 1068.620248][T19323] ? netlink_sendmsg+0x650/0xb40 [ 1068.620266][T19323] ? skb_put+0x11b/0x210 [ 1068.620294][T19323] netlink_sendmsg+0x813/0xb40 [ 1068.620322][T19323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.620344][T19323] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1068.620372][T19323] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1068.620392][T19323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1068.620409][T19323] ____sys_sendmsg+0xa68/0xad0 [ 1068.620442][T19323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1068.620474][T19323] ? import_iovec+0x73/0xa0 [ 1068.620503][T19323] ___sys_sendmsg+0x2a5/0x360 [ 1068.620534][T19323] ? __pfx____sys_sendmsg+0x10/0x10 [ 1068.620596][T19323] ? __fget_files+0x2a/0x420 [ 1068.620620][T19323] ? __fget_files+0x3a0/0x420 [ 1068.620655][T19323] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1068.620683][T19323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1068.620719][T19323] ? __pfx_ksys_write+0x10/0x10 [ 1068.620750][T19323] do_syscall_64+0x14d/0xf80 [ 1068.620767][T19323] ? trace_irq_disable+0x3b/0x150 [ 1068.620792][T19323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.620811][T19323] ? clear_bhb_loop+0x40/0x90 [ 1068.620834][T19323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.620851][T19323] RIP: 0033:0x7f6bf359c799 [ 1068.620869][T19323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1068.620885][T19323] RSP: 002b:00007f6bf4455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1068.620905][T19323] RAX: ffffffffffffffda RBX: 00007f6bf3815fa0 RCX: 00007f6bf359c799 [ 1068.620918][T19323] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1068.620930][T19323] RBP: 00007f6bf4455090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.620941][T19323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1068.620952][T19323] R13: 00007f6bf3816038 R14: 00007f6bf3815fa0 R15: 00007ffe8e4efc18 [ 1068.620984][T19323] [ 1068.624350][T19323] kobject: kobject_add_internal failed for hwsim64 (error: -12 parent: mac80211_hwsim) [ 1069.245866][T19345] syzkaller1: entered promiscuous mode [ 1069.252113][T19345] syzkaller1: entered allmulticast mode [ 1069.890337][T19375] FAULT_INJECTION: forcing a failure. [ 1069.890337][T19375] name failslab, interval 1, probability 0, space 0, times 0 [ 1069.914211][T19375] CPU: 1 UID: 0 PID: 19375 Comm: syz.2.17812 Not tainted syzkaller #0 PREEMPT(full) [ 1069.914239][T19375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1069.914250][T19375] Call Trace: [ 1069.914258][T19375] [ 1069.914267][T19375] dump_stack_lvl+0xe8/0x150 [ 1069.914301][T19375] should_fail_ex+0x412/0x560 [ 1069.914328][T19375] should_failslab+0xa8/0x100 [ 1069.914351][T19375] ? __kernfs_new_node+0xe9/0x8e0 [ 1069.914377][T19375] kmem_cache_alloc_noprof+0x87/0x650 [ 1069.914407][T19375] ? kernfs_add_one+0x477/0x5c0 [ 1069.914437][T19375] __kernfs_new_node+0xe9/0x8e0 [ 1069.914468][T19375] ? __pfx___kernfs_new_node+0x10/0x10 [ 1069.914501][T19375] ? kernfs_root+0x1c/0x230 [ 1069.914532][T19375] ? kernfs_root+0x1c/0x230 [ 1069.914555][T19375] ? kernfs_root+0x1c/0x230 [ 1069.914575][T19375] ? kernfs_root+0x1c/0x230 [ 1069.914601][T19375] kernfs_new_node+0x102/0x210 [ 1069.914630][T19375] __kernfs_create_file+0x4b/0x2e0 [ 1069.914653][T19375] sysfs_add_file_mode_ns+0x238/0x300 [ 1069.914683][T19375] sysfs_create_file_ns+0x12b/0x1b0 [ 1069.914707][T19375] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 1069.914732][T19375] ? __dev_fwnode+0x50/0x80 [ 1069.914862][T19375] ? device_create_file+0xf4/0x1b0 [ 1069.914892][T19375] device_add+0x440/0xb70 [ 1069.914923][T19375] device_create+0x269/0x300 [ 1069.914945][T19375] ? timer_init_key+0x161/0x2f0 [ 1069.914969][T19375] ? __pfx_device_create+0x10/0x10 [ 1069.914989][T19375] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 1069.915022][T19375] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 1069.915067][T19375] ? __pfx_stack_trace_save+0x10/0x10 [ 1069.915090][T19375] ? stack_depot_save_flags+0x33/0x810 [ 1069.915119][T19375] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1069.915144][T19375] ? __kasan_kmalloc+0x93/0xb0 [ 1069.915175][T19375] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1069.915225][T19375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1069.915262][T19375] ? rcu_is_watching+0x15/0xb0 [ 1069.915288][T19375] ? trace_kmalloc+0x2a/0x110 [ 1069.915312][T19375] ? __nla_parse+0x40/0x60 [ 1069.915340][T19375] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1069.915378][T19375] genl_family_rcv_msg_doit+0x22a/0x330 [ 1069.915412][T19375] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1069.915451][T19375] ? bpf_lsm_capable+0x9/0x20 [ 1069.915473][T19375] ? security_capable+0x7e/0x2c0 [ 1069.915509][T19375] genl_rcv_msg+0x61c/0x7a0 [ 1069.915542][T19375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1069.915567][T19375] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1069.915594][T19375] ? __lock_acquire+0x6b5/0x2cf0 [ 1069.915629][T19375] netlink_rcv_skb+0x232/0x4b0 [ 1069.915663][T19375] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1069.915690][T19375] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1069.915730][T19375] ? down_read+0x272/0x2e0 [ 1069.915751][T19375] ? genl_rcv+0xd/0x40 [ 1069.915778][T19375] genl_rcv+0x28/0x40 [ 1069.915801][T19375] netlink_unicast+0x80f/0x9b0 [ 1069.915830][T19375] ? __pfx_netlink_unicast+0x10/0x10 [ 1069.915853][T19375] ? netlink_sendmsg+0x650/0xb40 [ 1069.915872][T19375] ? skb_put+0x11b/0x210 [ 1069.915903][T19375] netlink_sendmsg+0x813/0xb40 [ 1069.915934][T19375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.915960][T19375] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1069.915985][T19375] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1069.916005][T19375] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1069.916025][T19375] ____sys_sendmsg+0xa68/0xad0 [ 1069.916064][T19375] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1069.916099][T19375] ? import_iovec+0x73/0xa0 [ 1069.916131][T19375] ___sys_sendmsg+0x2a5/0x360 [ 1069.916164][T19375] ? __pfx____sys_sendmsg+0x10/0x10 [ 1069.916236][T19375] ? __fget_files+0x2a/0x420 [ 1069.916260][T19375] ? __fget_files+0x3a0/0x420 [ 1069.916295][T19375] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1069.916322][T19375] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1069.916357][T19375] ? __pfx_ksys_write+0x10/0x10 [ 1069.916389][T19375] do_syscall_64+0x14d/0xf80 [ 1069.916406][T19375] ? trace_irq_disable+0x3b/0x150 [ 1069.916431][T19375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.916449][T19375] ? clear_bhb_loop+0x40/0x90 [ 1069.916472][T19375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1069.916490][T19375] RIP: 0033:0x7fd44c99c799 [ 1069.916514][T19375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1069.916529][T19375] RSP: 002b:00007fd44d8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1069.916549][T19375] RAX: ffffffffffffffda RBX: 00007fd44cc15fa0 RCX: 00007fd44c99c799 [ 1069.916563][T19375] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1069.916576][T19375] RBP: 00007fd44d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1069.916587][T19375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1069.916598][T19375] R13: 00007fd44cc16038 R14: 00007fd44cc15fa0 R15: 00007ffedc7cef28 [ 1069.916630][T19375] [ 1070.403952][T19398] Cannot find del_set index 4 as target [ 1070.539731][T19401] Cannot find set identified by id 4 to match [ 1070.566830][T19405] __nla_validate_parse: 5 callbacks suppressed [ 1070.566850][T19405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17818'. [ 1070.599125][T19405] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17818'. [ 1070.700114][T19415] macsec1: entered promiscuous mode [ 1070.765966][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17824'. [ 1070.824047][T19425] FAULT_INJECTION: forcing a failure. [ 1070.824047][T19425] name failslab, interval 1, probability 0, space 0, times 0 [ 1070.857918][T19425] CPU: 1 UID: 0 PID: 19425 Comm: syz.0.17827 Not tainted syzkaller #0 PREEMPT(full) [ 1070.857945][T19425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1070.857957][T19425] Call Trace: [ 1070.857964][T19425] [ 1070.857972][T19425] dump_stack_lvl+0xe8/0x150 [ 1070.858002][T19425] should_fail_ex+0x412/0x560 [ 1070.858029][T19425] should_failslab+0xa8/0x100 [ 1070.858049][T19425] ? __kernfs_new_node+0xe9/0x8e0 [ 1070.858072][T19425] kmem_cache_alloc_noprof+0x87/0x650 [ 1070.858108][T19425] __kernfs_new_node+0xe9/0x8e0 [ 1070.858136][T19425] ? __pfx___kernfs_new_node+0x10/0x10 [ 1070.858159][T19425] ? kernfs_root+0x1c/0x230 [ 1070.858185][T19425] ? kernfs_root+0x1c/0x230 [ 1070.858207][T19425] ? kernfs_root+0x1c/0x230 [ 1070.858230][T19425] kernfs_new_node+0x102/0x210 [ 1070.858255][T19425] kernfs_create_link+0xa7/0x200 [ 1070.858276][T19425] sysfs_do_create_link_sd+0x83/0x110 [ 1070.858300][T19425] device_add_class_symlinks+0xb6/0x240 [ 1070.858330][T19425] device_add+0x475/0xb70 [ 1070.858359][T19425] device_create+0x269/0x300 [ 1070.858380][T19425] ? timer_init_key+0x161/0x2f0 [ 1070.858402][T19425] ? __pfx_device_create+0x10/0x10 [ 1070.858420][T19425] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 1070.858451][T19425] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 1070.858493][T19425] ? __pfx_stack_trace_save+0x10/0x10 [ 1070.858514][T19425] ? stack_depot_save_flags+0x33/0x810 [ 1070.858543][T19425] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1070.858565][T19425] ? __kasan_kmalloc+0x93/0xb0 [ 1070.858589][T19425] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1070.858626][T19425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1070.858657][T19425] ? rcu_is_watching+0x15/0xb0 [ 1070.858680][T19425] ? trace_kmalloc+0x2a/0x110 [ 1070.858703][T19425] ? __nla_parse+0x40/0x60 [ 1070.858727][T19425] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1070.858759][T19425] genl_family_rcv_msg_doit+0x22a/0x330 [ 1070.858787][T19425] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1070.858819][T19425] ? bpf_lsm_capable+0x9/0x20 [ 1070.858839][T19425] ? security_capable+0x7e/0x2c0 [ 1070.858864][T19425] genl_rcv_msg+0x61c/0x7a0 [ 1070.858906][T19425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.858928][T19425] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1070.858952][T19425] ? __lock_acquire+0x6b5/0x2cf0 [ 1070.858981][T19425] netlink_rcv_skb+0x232/0x4b0 [ 1070.859001][T19425] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1070.859025][T19425] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1070.859056][T19425] ? down_read+0x272/0x2e0 [ 1070.859074][T19425] ? genl_rcv+0xd/0x40 [ 1070.859097][T19425] genl_rcv+0x28/0x40 [ 1070.859118][T19425] netlink_unicast+0x80f/0x9b0 [ 1070.859143][T19425] ? __pfx_netlink_unicast+0x10/0x10 [ 1070.859163][T19425] ? netlink_sendmsg+0x650/0xb40 [ 1070.859181][T19425] ? skb_put+0x11b/0x210 [ 1070.859207][T19425] netlink_sendmsg+0x813/0xb40 [ 1070.859234][T19425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.859256][T19425] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1070.859277][T19425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1070.859297][T19425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1070.859316][T19425] ____sys_sendmsg+0xa68/0xad0 [ 1070.859345][T19425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1070.859374][T19425] ? import_iovec+0x73/0xa0 [ 1070.859399][T19425] ___sys_sendmsg+0x2a5/0x360 [ 1070.859427][T19425] ? __pfx____sys_sendmsg+0x10/0x10 [ 1070.859482][T19425] ? __fget_files+0x2a/0x420 [ 1070.859502][T19425] ? __fget_files+0x3a0/0x420 [ 1070.859535][T19425] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1070.859563][T19425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1070.859599][T19425] ? __pfx_ksys_write+0x10/0x10 [ 1070.859629][T19425] do_syscall_64+0x14d/0xf80 [ 1070.859646][T19425] ? trace_irq_disable+0x3b/0x150 [ 1070.859670][T19425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.859688][T19425] ? clear_bhb_loop+0x40/0x90 [ 1070.859710][T19425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.859728][T19425] RIP: 0033:0x7f6bf359c799 [ 1070.859746][T19425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1070.859763][T19425] RSP: 002b:00007f6bf4455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1070.859782][T19425] RAX: ffffffffffffffda RBX: 00007f6bf3815fa0 RCX: 00007f6bf359c799 [ 1070.859795][T19425] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1070.859807][T19425] RBP: 00007f6bf4455090 R08: 0000000000000000 R09: 0000000000000000 [ 1070.859819][T19425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1070.859830][T19425] R13: 00007f6bf3816038 R14: 00007f6bf3815fa0 R15: 00007ffe8e4efc18 [ 1070.859860][T19425] [ 1071.384685][T19429] netlink: 'syz.3.17828': attribute type 1 has an invalid length. [ 1071.403831][T19429] netlink: 280 bytes leftover after parsing attributes in process `syz.3.17828'. [ 1071.467443][T19435] Cannot find del_set index 4 as target [ 1071.489414][T19433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17830'. [ 1071.644027][T19441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17832'. [ 1071.682584][T19440] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17833'. [ 1071.728974][T19443] syzkaller0: entered promiscuous mode [ 1071.734502][T19443] syzkaller0: entered allmulticast mode [ 1071.917833][T19458] FAULT_INJECTION: forcing a failure. [ 1071.917833][T19458] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.970547][T19458] CPU: 1 UID: 0 PID: 19458 Comm: syz.4.17838 Not tainted syzkaller #0 PREEMPT(full) [ 1071.970573][T19458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1071.970584][T19458] Call Trace: [ 1071.970592][T19458] [ 1071.970600][T19458] dump_stack_lvl+0xe8/0x150 [ 1071.970628][T19458] should_fail_ex+0x412/0x560 [ 1071.970655][T19458] should_failslab+0xa8/0x100 [ 1071.970679][T19458] __kmalloc_noprof+0xe8/0x760 [ 1071.970727][T19458] ? tomoyo_encode+0x28b/0x550 [ 1071.970755][T19458] tomoyo_encode+0x28b/0x550 [ 1071.970781][T19458] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1071.970812][T19458] ? tomoyo_path_number_perm+0x219/0x630 [ 1071.970831][T19458] tomoyo_path_number_perm+0x246/0x630 [ 1071.970852][T19458] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1071.970872][T19458] ? __lock_acquire+0x6b5/0x2cf0 [ 1071.970904][T19458] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1071.970947][T19458] ? __fget_files+0x2a/0x420 [ 1071.970972][T19458] ? __fget_files+0x2a/0x420 [ 1071.970994][T19458] ? __fget_files+0x3a0/0x420 [ 1071.971015][T19458] ? __fget_files+0x2a/0x420 [ 1071.971041][T19458] security_file_ioctl+0xc3/0x2a0 [ 1071.971069][T19458] __se_sys_ioctl+0x47/0x170 [ 1071.971090][T19458] do_syscall_64+0x14d/0xf80 [ 1071.971106][T19458] ? trace_irq_disable+0x3b/0x150 [ 1071.971129][T19458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.971148][T19458] ? clear_bhb_loop+0x40/0x90 [ 1071.971169][T19458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.971186][T19458] RIP: 0033:0x7f03ccd9c799 [ 1071.971203][T19458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1071.971218][T19458] RSP: 002b:00007f03cdc9c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1071.971238][T19458] RAX: ffffffffffffffda RBX: 00007f03cd015fa0 RCX: 00007f03ccd9c799 [ 1071.971251][T19458] RDX: 0000200000000040 RSI: 00000000400448e0 RDI: 0000000000000004 [ 1071.971262][T19458] RBP: 00007f03cdc9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.971273][T19458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.971283][T19458] R13: 00007f03cd016038 R14: 00007f03cd015fa0 R15: 00007ffde5a1bb78 [ 1071.971313][T19458] [ 1071.971404][T19458] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1072.021118][T19460] syzkaller0: entered promiscuous mode [ 1072.233501][T19460] syzkaller0: entered allmulticast mode [ 1072.361209][T19469] netlink: 9 bytes leftover after parsing attributes in process `syz.0.17843'. [ 1072.371173][T19469] 0·: renamed from hsr_slave_1 [ 1072.393270][T19469] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1072.553054][T19477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17846'. [ 1072.575700][T19477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.17846'. [ 1072.757574][T19490] netlink: 'syz.4.17850': attribute type 3 has an invalid length. [ 1072.896817][T19501] Cannot find set identified by id 4 to match [ 1073.272763][T19527] netlink: 'syz.3.17863': attribute type 8 has an invalid length. [ 1073.411798][T19543] Cannot find del_set index 4 as target [ 1073.924242][T19584] block nbd1: Unsupported socket: should be TCP or UNIX. [ 1074.008655][T19590] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 1074.023596][T19593] Cannot find del_set index 4 as target [ 1074.168519][T19603] netlink: 'syz.2.17887': attribute type 33 has an invalid length. [ 1074.251050][T19607] Cannot find set identified by id 4 to match [ 1074.374854][T19615] netlink: 'syz.4.17892': attribute type 2 has an invalid length. [ 1074.433892][T19616] netlink: 'syz.0.17891': attribute type 27 has an invalid length. [ 1074.479924][T19618] bond0: Caught tx_queue_len zero misconfig [ 1074.741871][T19634] IPVS: set_ctl: invalid protocol: 41 100.1.1.2:20004 [ 1075.165544][T19660] openvswitch: netlink: EtherType 53b is less than min 600 [ 1075.182497][T19661] netlink: 'syz.3.17905': attribute type 15 has an invalid length. [ 1075.198481][T19657] dvmrp0: left allmulticast mode [ 1075.210759][T19657] syz_tun: left allmulticast mode [ 1075.243626][T19659] SET target dimension over the limit! [ 1075.444683][T29321] lec:lec_start_xmit: lec0:No lecd attached [ 1075.811333][T19700] syzkaller0: entered promiscuous mode [ 1075.820142][T19700] syzkaller0: entered allmulticast mode [ 1078.125263][T19727] __nla_validate_parse: 10 callbacks suppressed [ 1078.125277][T19727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17921'. [ 1078.196449][T19734] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17921'. [ 1078.265004][T19727] syzkaller1: entered promiscuous mode [ 1078.279484][T19727] syzkaller1: entered allmulticast mode [ 1078.280174][T19737] FAULT_INJECTION: forcing a failure. [ 1078.280174][T19737] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1078.299942][T19737] CPU: 0 UID: 0 PID: 19737 Comm: syz.2.17925 Not tainted syzkaller #0 PREEMPT(full) [ 1078.299964][T19737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1078.299974][T19737] Call Trace: [ 1078.299982][T19737] [ 1078.299989][T19737] dump_stack_lvl+0xe8/0x150 [ 1078.300020][T19737] should_fail_ex+0x412/0x560 [ 1078.300045][T19737] prepare_alloc_pages+0x22a/0x650 [ 1078.300075][T19737] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1078.300101][T19737] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1078.300124][T19737] ? __pfx_policy_nodemask+0x10/0x10 [ 1078.300144][T19737] ? unwind_next_frame+0xa5/0x23c0 [ 1078.300174][T19737] alloc_pages_mpol+0x232/0x4a0 [ 1078.300197][T19737] alloc_pages_noprof+0xa8/0x190 [ 1078.300216][T19737] __pud_alloc+0x3a/0x6e0 [ 1078.300244][T19737] handle_mm_fault+0x2040/0x3310 [ 1078.300271][T19737] ? mt_find+0x186/0x630 [ 1078.300364][T19737] ? __pfx_mt_find+0x10/0x10 [ 1078.300384][T19737] ? handle_mm_fault+0xee/0x3310 [ 1078.300416][T19737] ? __pfx_handle_mm_fault+0x10/0x10 [ 1078.300463][T19737] ? lock_mm_and_find_vma+0xa7/0x340 [ 1078.300485][T19737] do_user_addr_fault+0x75b/0x1340 [ 1078.300530][T19737] exc_page_fault+0x6a/0xc0 [ 1078.300558][T19737] asm_exc_page_fault+0x26/0x30 [ 1078.300576][T19737] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1078.300599][T19737] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1078.300611][T19737] RSP: 0018:ffffc90004167bb8 EFLAGS: 00050246 [ 1078.300627][T19737] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 1078.300638][T19737] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc90004167c20 [ 1078.300649][T19737] RBP: ffffc90004167cb0 R08: ffffc90004167c27 R09: 1ffff9200082cf84 [ 1078.300661][T19737] R10: dffffc0000000000 R11: fffff5200082cf85 R12: dffffc0000000000 [ 1078.300673][T19737] R13: 1ffff9200082cf80 R14: ffffc90004167c20 R15: 0000200000000040 [ 1078.300701][T19737] _copy_from_user+0x7a/0xb0 [ 1078.300726][T19737] hci_dev_cmd+0xae/0x7f0 [ 1078.300803][T19737] ? __pfx_hci_dev_cmd+0x10/0x10 [ 1078.300825][T19737] ? proc_dou8vec_minmax+0x50/0x380 [ 1078.300849][T19737] ? hci_sock_ioctl+0x5e5/0x940 [ 1078.300932][T19737] sock_do_ioctl+0x101/0x320 [ 1078.300954][T19737] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1078.300968][T19737] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1078.300998][T19737] sock_ioctl+0x5c6/0x7f0 [ 1078.301019][T19737] ? __pfx_sock_ioctl+0x10/0x10 [ 1078.301037][T19737] ? __fget_files+0x2a/0x420 [ 1078.301059][T19737] ? __fget_files+0x3a0/0x420 [ 1078.301078][T19737] ? __fget_files+0x2a/0x420 [ 1078.301103][T19737] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1078.301125][T19737] ? __pfx_sock_ioctl+0x10/0x10 [ 1078.301143][T19737] __se_sys_ioctl+0xfc/0x170 [ 1078.301164][T19737] do_syscall_64+0x14d/0xf80 [ 1078.301177][T19737] ? trace_irq_disable+0x3b/0x150 [ 1078.301199][T19737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.301214][T19737] ? clear_bhb_loop+0x40/0x90 [ 1078.301234][T19737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.301249][T19737] RIP: 0033:0x7fd44c99c799 [ 1078.301266][T19737] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.301280][T19737] RSP: 002b:00007fd44d8b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1078.301298][T19737] RAX: ffffffffffffffda RBX: 00007fd44cc15fa0 RCX: 00007fd44c99c799 [ 1078.301308][T19737] RDX: 0000200000000040 RSI: 00000000400448e0 RDI: 0000000000000004 [ 1078.301318][T19737] RBP: 00007fd44d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1078.301328][T19737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1078.301337][T19737] R13: 00007fd44cc16038 R14: 00007fd44cc15fa0 R15: 00007ffedc7cef28 [ 1078.301362][T19737] [ 1078.824154][T19744] Cannot find set identified by id 4 to match [ 1079.145578][T19755] netlink: 9 bytes leftover after parsing attributes in process `syz.2.17933'. [ 1079.424003][T19765] FAULT_INJECTION: forcing a failure. [ 1079.424003][T19765] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1079.438075][T19765] CPU: 0 UID: 0 PID: 19765 Comm: syz.1.17937 Not tainted syzkaller #0 PREEMPT(full) [ 1079.438105][T19765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1079.438115][T19765] Call Trace: [ 1079.438123][T19765] [ 1079.438131][T19765] dump_stack_lvl+0xe8/0x150 [ 1079.438165][T19765] should_fail_ex+0x412/0x560 [ 1079.438194][T19765] prepare_alloc_pages+0x22a/0x650 [ 1079.438225][T19765] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1079.438253][T19765] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1079.438278][T19765] ? __pfx_policy_nodemask+0x10/0x10 [ 1079.438305][T19765] ? do_raw_spin_lock+0x12b/0x2f0 [ 1079.438329][T19765] alloc_pages_mpol+0x232/0x4a0 [ 1079.438356][T19765] alloc_pages_noprof+0xa8/0x190 [ 1079.438381][T19765] __pmd_alloc+0x3a/0x860 [ 1079.438412][T19765] handle_mm_fault+0xe96/0x3310 [ 1079.438448][T19765] ? handle_mm_fault+0xee/0x3310 [ 1079.438478][T19765] ? __pfx_handle_mm_fault+0x10/0x10 [ 1079.438520][T19765] ? lock_mm_and_find_vma+0xa7/0x340 [ 1079.438542][T19765] do_user_addr_fault+0x75b/0x1340 [ 1079.438583][T19765] exc_page_fault+0x6a/0xc0 [ 1079.438612][T19765] asm_exc_page_fault+0x26/0x30 [ 1079.438630][T19765] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1079.438653][T19765] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1079.438668][T19765] RSP: 0018:ffffc9000c66fbb8 EFLAGS: 00050246 [ 1079.438685][T19765] RAX: 00007ffffffff001 RBX: 0000000000000008 RCX: 0000000000000008 [ 1079.438696][T19765] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000c66fc20 [ 1079.438709][T19765] RBP: ffffc9000c66fcb0 R08: ffffc9000c66fc27 R09: 1ffff920018cdf84 [ 1079.438721][T19765] R10: dffffc0000000000 R11: fffff520018cdf85 R12: dffffc0000000000 [ 1079.438734][T19765] R13: 1ffff920018cdf80 R14: ffffc9000c66fc20 R15: 0000200000000040 [ 1079.438763][T19765] _copy_from_user+0x7a/0xb0 [ 1079.438801][T19765] hci_dev_cmd+0xae/0x7f0 [ 1079.438828][T19765] ? __pfx_hci_dev_cmd+0x10/0x10 [ 1079.438851][T19765] ? proc_dou8vec_minmax+0x50/0x380 [ 1079.438875][T19765] ? hci_sock_ioctl+0x5e5/0x940 [ 1079.438904][T19765] sock_do_ioctl+0x101/0x320 [ 1079.438929][T19765] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1079.438946][T19765] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1079.438981][T19765] sock_ioctl+0x5c6/0x7f0 [ 1079.439002][T19765] ? __pfx_sock_ioctl+0x10/0x10 [ 1079.439021][T19765] ? __fget_files+0x2a/0x420 [ 1079.439044][T19765] ? __fget_files+0x3a0/0x420 [ 1079.439066][T19765] ? __fget_files+0x2a/0x420 [ 1079.439093][T19765] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1079.439115][T19765] ? __pfx_sock_ioctl+0x10/0x10 [ 1079.439134][T19765] __se_sys_ioctl+0xfc/0x170 [ 1079.439157][T19765] do_syscall_64+0x14d/0xf80 [ 1079.439174][T19765] ? trace_irq_disable+0x3b/0x150 [ 1079.439199][T19765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.439218][T19765] ? clear_bhb_loop+0x40/0x90 [ 1079.439238][T19765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1079.439256][T19765] RIP: 0033:0x7f4c36b9c799 [ 1079.439274][T19765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1079.439289][T19765] RSP: 002b:00007f4c34df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.439307][T19765] RAX: ffffffffffffffda RBX: 00007f4c36e15fa0 RCX: 00007f4c36b9c799 [ 1079.439320][T19765] RDX: 0000200000000040 RSI: 00000000400448e0 RDI: 0000000000000004 [ 1079.439331][T19765] RBP: 00007f4c34df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1079.439344][T19765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1079.439355][T19765] R13: 00007f4c36e16038 R14: 00007f4c36e15fa0 R15: 00007ffc629fdd18 [ 1079.439386][T19765] [ 1080.968168][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5520 ms [ 1080.976356][ C1] lec:lec_tx_timeout: lec0 [ 1081.011539][T19714] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1081.182165][T19787] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17944'. [ 1081.203257][T19784] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1081.431063][T19798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17948'. [ 1081.468361][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17948'. [ 1081.472553][T19802] netlink: 'syz.0.17950': attribute type 11 has an invalid length. [ 1081.568936][T19804] netlink: 9 bytes leftover after parsing attributes in process `syz.1.17951'. [ 1081.622592][T19809] syzkaller0: entered promiscuous mode [ 1081.632150][T19809] syzkaller0: entered allmulticast mode [ 1081.970512][T19823] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 1081.991161][T19823] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 1082.087267][T19831] FAULT_INJECTION: forcing a failure. [ 1082.087267][T19831] name failslab, interval 1, probability 0, space 0, times 0 [ 1082.102102][T19831] CPU: 1 UID: 0 PID: 19831 Comm: syz.3.17961 Not tainted syzkaller #0 PREEMPT(full) [ 1082.102129][T19831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1082.102140][T19831] Call Trace: [ 1082.102148][T19831] [ 1082.102157][T19831] dump_stack_lvl+0xe8/0x150 [ 1082.102191][T19831] should_fail_ex+0x412/0x560 [ 1082.102219][T19831] should_failslab+0xa8/0x100 [ 1082.102240][T19831] ? __kernfs_new_node+0xe9/0x8e0 [ 1082.102266][T19831] kmem_cache_alloc_noprof+0x87/0x650 [ 1082.102302][T19831] __kernfs_new_node+0xe9/0x8e0 [ 1082.102325][T19831] ? arch_stack_walk+0xfb/0x150 [ 1082.102358][T19831] ? __pfx___kernfs_new_node+0x10/0x10 [ 1082.102384][T19831] ? kernfs_root+0x1c/0x230 [ 1082.102413][T19831] ? kernfs_root+0x1c/0x230 [ 1082.102435][T19831] ? kernfs_root+0x1c/0x230 [ 1082.102456][T19831] ? kernfs_root+0x1c/0x230 [ 1082.102482][T19831] kernfs_new_node+0x102/0x210 [ 1082.102511][T19831] kernfs_create_dir_ns+0x44/0x130 [ 1082.102558][T19831] sysfs_create_dir_ns+0x12f/0x2a0 [ 1082.102585][T19831] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1082.102609][T19831] ? do_raw_spin_unlock+0xf5/0x210 [ 1082.102633][T19831] kobject_add_internal+0x62b/0xd00 [ 1082.102664][T19831] kobject_add+0x163/0x240 [ 1082.102688][T19831] ? __pfx_kobject_add+0x10/0x10 [ 1082.102706][T19831] ? do_raw_spin_unlock+0xf5/0x210 [ 1082.102729][T19831] ? get_device_parent+0x366/0x3a0 [ 1082.102760][T19831] device_add+0x408/0xb70 [ 1082.102791][T19831] tty_register_device_attr+0x422/0x950 [ 1082.102923][T19831] ? __pfx___mutex_lock+0x10/0x10 [ 1082.102942][T19831] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1082.102971][T19831] ? tty_port_register_device+0x5a/0x100 [ 1082.103026][T19831] rfcomm_dev_ioctl+0x1b73/0x21d0 [ 1082.103059][T19831] ? kasan_quarantine_put+0xbb/0x1f0 [ 1082.103078][T19831] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 1082.103110][T19831] ? tomoyo_path_number_perm+0x219/0x630 [ 1082.103131][T19831] ? tomoyo_path_number_perm+0x219/0x630 [ 1082.103159][T19831] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1082.103188][T19831] sock_do_ioctl+0x101/0x320 [ 1082.103213][T19831] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1082.103230][T19831] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1082.103265][T19831] sock_ioctl+0x5c6/0x7f0 [ 1082.103287][T19831] ? __pfx_sock_ioctl+0x10/0x10 [ 1082.103306][T19831] ? __fget_files+0x2a/0x420 [ 1082.103331][T19831] ? __fget_files+0x3a0/0x420 [ 1082.103354][T19831] ? __fget_files+0x2a/0x420 [ 1082.103381][T19831] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1082.103406][T19831] ? __pfx_sock_ioctl+0x10/0x10 [ 1082.103425][T19831] __se_sys_ioctl+0xfc/0x170 [ 1082.103447][T19831] do_syscall_64+0x14d/0xf80 [ 1082.103464][T19831] ? trace_irq_disable+0x3b/0x150 [ 1082.103490][T19831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.103509][T19831] ? clear_bhb_loop+0x40/0x90 [ 1082.103532][T19831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.103549][T19831] RIP: 0033:0x7f776599c799 [ 1082.103573][T19831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1082.103589][T19831] RSP: 002b:00007f7763bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1082.103609][T19831] RAX: ffffffffffffffda RBX: 00007f7765c15fa0 RCX: 00007f776599c799 [ 1082.103623][T19831] RDX: 0000200000000100 RSI: 00000000400452c8 RDI: 0000000000000004 [ 1082.103635][T19831] RBP: 00007f7763bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1082.103647][T19831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1082.103658][T19831] R13: 00007f7765c16038 R14: 00007f7765c15fa0 R15: 00007ffdb0147348 [ 1082.103690][T19831] [ 1082.103941][T19831] kobject: kobject_add_internal failed for rfcomm11 (error: -12 parent: tty) [ 1082.180147][T19835] netlink: 'syz.0.17963': attribute type 11 has an invalid length. [ 1082.498428][T19842] tunl0: Caught tx_queue_len zero misconfig [ 1082.582745][T19846] netlink: 'syz.0.17968': attribute type 1 has an invalid length. [ 1082.600585][T19844] netlink: 56847 bytes leftover after parsing attributes in process `syz.1.17967'. [ 1083.004157][T19864] netlink: 'syz.4.17976': attribute type 4 has an invalid length. [ 1083.039736][T19864] netlink: 'syz.4.17976': attribute type 4 has an invalid length. [ 1083.044840][T19866] netlink: 9 bytes leftover after parsing attributes in process `syz.0.17977'. [ 1083.142043][T19868] netlink: 'syz.1.17978': attribute type 11 has an invalid length. [ 1083.337421][T19881] FAULT_INJECTION: forcing a failure. [ 1083.337421][T19881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1083.399357][T19881] CPU: 0 UID: 0 PID: 19881 Comm: syz.4.17980 Not tainted syzkaller #0 PREEMPT(full) [ 1083.399387][T19881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1083.399399][T19881] Call Trace: [ 1083.399407][T19881] [ 1083.399416][T19881] dump_stack_lvl+0xe8/0x150 [ 1083.399449][T19881] should_fail_ex+0x412/0x560 [ 1083.399477][T19881] _copy_to_user+0x31/0xb0 [ 1083.399507][T19881] simple_read_from_buffer+0xe1/0x170 [ 1083.399534][T19881] proc_fail_nth_read+0x1bb/0x230 [ 1083.399562][T19881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.399589][T19881] ? rw_verify_area+0x2a6/0x4d0 [ 1083.399607][T19881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1083.399631][T19881] vfs_read+0x20c/0xa70 [ 1083.399647][T19881] ? fdget_pos+0x246/0x320 [ 1083.399669][T19881] ? ksys_write+0x1e6/0x270 [ 1083.399691][T19881] ? __pfx___mutex_lock+0x10/0x10 [ 1083.399711][T19881] ? __pfx_vfs_read+0x10/0x10 [ 1083.399731][T19881] ? __fget_files+0x2a/0x420 [ 1083.399759][T19881] ? __fget_files+0x3a0/0x420 [ 1083.399781][T19881] ? __fget_files+0x2a/0x420 [ 1083.399811][T19881] ksys_read+0x150/0x270 [ 1083.399832][T19881] ? __pfx_ksys_read+0x10/0x10 [ 1083.399862][T19881] do_syscall_64+0x14d/0xf80 [ 1083.399878][T19881] ? trace_irq_disable+0x3b/0x150 [ 1083.399903][T19881] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.399921][T19881] ? clear_bhb_loop+0x40/0x90 [ 1083.399941][T19881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.399957][T19881] RIP: 0033:0x7f03ccd5cfce [ 1083.399976][T19881] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1083.399991][T19881] RSP: 002b:00007f03cdc7afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1083.400012][T19881] RAX: ffffffffffffffda RBX: 00007f03cdc7b6c0 RCX: 00007f03ccd5cfce [ 1083.400034][T19881] RDX: 000000000000000f RSI: 00007f03cdc7b0a0 RDI: 0000000000000007 [ 1083.400045][T19881] RBP: 00007f03cdc7b090 R08: 0000000000000000 R09: 0000000000000000 [ 1083.400055][T19881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1083.400066][T19881] R13: 00007f03cd016128 R14: 00007f03cd016090 R15: 00007ffde5a1bb78 [ 1083.400096][T19881] [ 1083.666425][T19890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17982'. [ 1083.732534][T19894] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17982'. [ 1084.072548][T19912] FAULT_INJECTION: forcing a failure. [ 1084.072548][T19912] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.086263][T19912] CPU: 0 UID: 0 PID: 19912 Comm: syz.4.17989 Not tainted syzkaller #0 PREEMPT(full) [ 1084.086291][T19912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1084.086302][T19912] Call Trace: [ 1084.086310][T19912] [ 1084.086317][T19912] dump_stack_lvl+0xe8/0x150 [ 1084.086349][T19912] should_fail_ex+0x412/0x560 [ 1084.086376][T19912] _copy_to_user+0x31/0xb0 [ 1084.086402][T19912] simple_read_from_buffer+0xe1/0x170 [ 1084.086430][T19912] proc_fail_nth_read+0x1bb/0x230 [ 1084.086454][T19912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.086476][T19912] ? rw_verify_area+0x2a6/0x4d0 [ 1084.086501][T19912] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.086524][T19912] vfs_read+0x20c/0xa70 [ 1084.086540][T19912] ? fdget_pos+0x246/0x320 [ 1084.086568][T19912] ? __pfx___mutex_lock+0x10/0x10 [ 1084.086588][T19912] ? __pfx_vfs_read+0x10/0x10 [ 1084.086605][T19912] ? __fget_files+0x2a/0x420 [ 1084.086632][T19912] ? __fget_files+0x3a0/0x420 [ 1084.086653][T19912] ? __fget_files+0x2a/0x420 [ 1084.086683][T19912] ksys_read+0x150/0x270 [ 1084.086699][T19912] ? __pfx_ksys_read+0x10/0x10 [ 1084.086713][T19912] ? __pfx_sock_ioctl+0x10/0x10 [ 1084.086737][T19912] do_syscall_64+0x14d/0xf80 [ 1084.086752][T19912] ? trace_irq_disable+0x3b/0x150 [ 1084.086773][T19912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.086789][T19912] ? clear_bhb_loop+0x40/0x90 [ 1084.086810][T19912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.086826][T19912] RIP: 0033:0x7f03ccd5cfce [ 1084.086843][T19912] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1084.086857][T19912] RSP: 002b:00007f03cdc9bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1084.086876][T19912] RAX: ffffffffffffffda RBX: 00007f03cdc9c6c0 RCX: 00007f03ccd5cfce [ 1084.086889][T19912] RDX: 000000000000000f RSI: 00007f03cdc9c0a0 RDI: 0000000000000003 [ 1084.086898][T19912] RBP: 00007f03cdc9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.086907][T19912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1084.086915][T19912] R13: 00007f03cd016038 R14: 00007f03cd015fa0 R15: 00007ffde5a1bb78 [ 1084.086945][T19912] [ 1084.328685][T19914] netlink: 104 bytes leftover after parsing attributes in process `syz.2.17990'. [ 1084.335509][T19917] netlink: 'syz.0.17991': attribute type 11 has an invalid length. [ 1084.338586][T19914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17990'. [ 1084.382208][T19914] bond29: entered promiscuous mode [ 1084.387681][T19914] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1084.433824][T19922] openvswitch: netlink: EtherType 53b is less than min 600 [ 1084.488907][T19914] bond30: entered promiscuous mode [ 1084.494098][T19914] bond30: entered allmulticast mode [ 1084.500144][T19914] 8021q: adding VLAN 0 to HW filter on device bond30 [ 1084.765257][T19946] x_tables: unsorted underflow at hook 2 [ 1084.879221][T19951] netlink: 'syz.2.18004': attribute type 11 has an invalid length. [ 1085.166803][T19969] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18012'. [ 1085.418035][T19983] syzkaller0: entered promiscuous mode [ 1085.424042][T19983] syzkaller0: entered allmulticast mode [ 1085.506567][T19983] netlink: 'syz.4.18016': attribute type 11 has an invalid length. [ 1085.506832][T19997] gre0: entered promiscuous mode [ 1085.523310][T19998] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 1085.540141][T19983] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.18016'. [ 1085.543838][T19997] gre0: entered allmulticast mode [ 1085.618448][T20008] netlink: 'syz.3.18024': attribute type 39 has an invalid length. [ 1085.698273][T20011] FAULT_INJECTION: forcing a failure. [ 1085.698273][T20011] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.715610][T20011] CPU: 0 UID: 0 PID: 20011 Comm: syz.0.18025 Not tainted syzkaller #0 PREEMPT(full) [ 1085.715641][T20011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1085.715653][T20011] Call Trace: [ 1085.715661][T20011] [ 1085.715669][T20011] dump_stack_lvl+0xe8/0x150 [ 1085.715702][T20011] should_fail_ex+0x412/0x560 [ 1085.715729][T20011] should_failslab+0xa8/0x100 [ 1085.715754][T20011] __kmalloc_cache_noprof+0x88/0x660 [ 1085.715775][T20011] ? nft_array_may_resize+0x18d/0x380 [ 1085.715810][T20011] nft_array_may_resize+0x18d/0x380 [ 1085.715840][T20011] nft_rbtree_walk+0x343/0x640 [ 1085.715876][T20011] nft_map_deactivate+0x15e/0x3c0 [ 1085.715902][T20011] ? __pfx_nft_map_deactivate+0x10/0x10 [ 1085.715919][T20011] ? nft_pernet+0x23/0x240 [ 1085.715935][T20011] ? __pfx_nft_mapelem_deactivate+0x10/0x10 [ 1085.715965][T20011] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1085.715988][T20011] nf_tables_delset+0xe58/0x1160 [ 1085.716033][T20011] ? __pfx_nf_tables_delset+0x10/0x10 [ 1085.716057][T20011] ? nfnl_pernet+0x23/0x240 [ 1085.716085][T20011] ? __nla_parse+0x40/0x60 [ 1085.716111][T20011] nfnetlink_rcv+0x1240/0x27b0 [ 1085.716127][T20011] ? is_bpf_text_address+0x26/0x2b0 [ 1085.716175][T20011] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1085.716203][T20011] ? __lock_acquire+0x6b5/0x2cf0 [ 1085.716256][T20011] ? netlink_deliver_tap+0x2e/0x1b0 [ 1085.716295][T20011] netlink_unicast+0x80f/0x9b0 [ 1085.716323][T20011] ? __pfx_netlink_unicast+0x10/0x10 [ 1085.716345][T20011] ? netlink_sendmsg+0x650/0xb40 [ 1085.716365][T20011] ? skb_put+0x11b/0x210 [ 1085.716395][T20011] netlink_sendmsg+0x813/0xb40 [ 1085.716427][T20011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1085.716453][T20011] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1085.716476][T20011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1085.716497][T20011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1085.716518][T20011] ____sys_sendmsg+0xa68/0xad0 [ 1085.716549][T20011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1085.716582][T20011] ? import_iovec+0x73/0xa0 [ 1085.716611][T20011] ___sys_sendmsg+0x2a5/0x360 [ 1085.716643][T20011] ? __pfx____sys_sendmsg+0x10/0x10 [ 1085.716704][T20011] ? __fget_files+0x2a/0x420 [ 1085.716729][T20011] ? __fget_files+0x3a0/0x420 [ 1085.716763][T20011] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1085.716792][T20011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1085.716827][T20011] ? __pfx_ksys_write+0x10/0x10 [ 1085.716859][T20011] do_syscall_64+0x14d/0xf80 [ 1085.716877][T20011] ? trace_irq_disable+0x3b/0x150 [ 1085.716901][T20011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.716920][T20011] ? clear_bhb_loop+0x40/0x90 [ 1085.716943][T20011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.716962][T20011] RIP: 0033:0x7f6bf359c799 [ 1085.716981][T20011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.717003][T20011] RSP: 002b:00007f6bf4455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.717023][T20011] RAX: ffffffffffffffda RBX: 00007f6bf3815fa0 RCX: 00007f6bf359c799 [ 1085.717036][T20011] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1085.717048][T20011] RBP: 00007f6bf4455090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.717059][T20011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.717070][T20011] R13: 00007f6bf3816038 R14: 00007f6bf3815fa0 R15: 00007ffe8e4efc18 [ 1085.717101][T20011] [ 1085.717849][T20011] ------------[ cut here ]------------ [ 1085.744731][T20017] FAULT_INJECTION: forcing a failure. [ 1085.744731][T20017] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.745414][T20011] iter.err [ 1085.745446][T20011] WARNING: net/netfilter/nf_tables_api.c:845 at nft_map_deactivate+0x34e/0x3c0, CPU#0: syz.0.18025/20011 [ 1085.761629][T20017] CPU: 1 UID: 0 PID: 20017 Comm: syz.2.18028 Not tainted syzkaller #0 PREEMPT(full) [ 1085.761658][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1085.761669][T20017] Call Trace: [ 1085.761677][T20017] [ 1085.761686][T20017] dump_stack_lvl+0xe8/0x150 [ 1085.761720][T20017] should_fail_ex+0x412/0x560 [ 1085.761749][T20017] should_failslab+0xa8/0x100 [ 1085.761771][T20017] ? skb_clone+0x212/0x3a0 [ 1085.761799][T20017] kmem_cache_alloc_noprof+0x87/0x650 [ 1085.761837][T20017] skb_clone+0x212/0x3a0 [ 1085.761862][T20017] ? netlink_broadcast_filtered+0x6a0/0x1020 [ 1085.761887][T20017] netlink_broadcast_filtered+0x6ae/0x1020 [ 1085.761935][T20017] ? __pfx_netlink_broadcast_filtered+0x10/0x10 [ 1085.761958][T20017] ? alloc_uevent_skb+0xeb/0x230 [ 1085.761982][T20017] ? __asan_memcpy+0x40/0x70 [ 1085.762010][T20017] netlink_broadcast+0x37/0x50 [ 1085.762032][T20017] kobject_uevent_net_broadcast+0x378/0x560 [ 1085.762061][T20017] kobject_uevent_env+0x55c/0x9e0 [ 1085.762092][T20017] device_add+0x557/0xb70 [ 1085.762124][T20017] device_create+0x269/0x300 [ 1085.762146][T20017] ? timer_init_key+0x161/0x2f0 [ 1085.762169][T20017] ? __pfx_device_create+0x10/0x10 [ 1085.762189][T20017] ? ieee80211_alloc_hw_nm+0x18fa/0x1f60 [ 1085.762219][T20017] mac80211_hwsim_new_radio+0x3f5/0x5330 [ 1085.762263][T20017] ? __pfx_stack_trace_save+0x10/0x10 [ 1085.762286][T20017] ? stack_depot_save_flags+0x33/0x810 [ 1085.762314][T20017] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1085.762339][T20017] ? __kasan_kmalloc+0x93/0xb0 [ 1085.762379][T20017] hwsim_new_radio_nl+0xf35/0x1bd0 [ 1085.762427][T20017] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1085.762463][T20017] ? rcu_is_watching+0x15/0xb0 [ 1085.762488][T20017] ? trace_kmalloc+0x2a/0x110 [ 1085.762518][T20017] ? __nla_parse+0x40/0x60 [ 1085.762545][T20017] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1085.762580][T20017] genl_family_rcv_msg_doit+0x22a/0x330 [ 1085.762613][T20017] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1085.762655][T20017] ? bpf_lsm_capable+0x9/0x20 [ 1085.762676][T20017] ? security_capable+0x7e/0x2c0 [ 1085.762704][T20017] genl_rcv_msg+0x61c/0x7a0 [ 1085.762736][T20017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1085.762760][T20017] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1085.762785][T20017] ? __lock_acquire+0x6b5/0x2cf0 [ 1085.762819][T20017] netlink_rcv_skb+0x232/0x4b0 [ 1085.762841][T20017] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1085.762867][T20017] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1085.762906][T20017] ? down_read+0x272/0x2e0 [ 1085.762925][T20017] ? genl_rcv+0xd/0x40 [ 1085.762950][T20017] genl_rcv+0x28/0x40 [ 1085.762972][T20017] netlink_unicast+0x80f/0x9b0 [ 1085.763000][T20017] ? __pfx_netlink_unicast+0x10/0x10 [ 1085.763022][T20017] ? netlink_sendmsg+0x650/0xb40 [ 1085.763041][T20017] ? skb_put+0x11b/0x210 [ 1085.763066][T20017] netlink_sendmsg+0x813/0xb40 [ 1085.763097][T20017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1085.763122][T20017] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1085.763146][T20017] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1085.763166][T20017] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1085.763186][T20017] ____sys_sendmsg+0xa68/0xad0 [ 1085.763220][T20017] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1085.763254][T20017] ? import_iovec+0x73/0xa0 [ 1085.763283][T20017] ___sys_sendmsg+0x2a5/0x360 [ 1085.763316][T20017] ? __pfx____sys_sendmsg+0x10/0x10 [ 1085.763376][T20017] ? __fget_files+0x2a/0x420 [ 1085.763399][T20017] ? __fget_files+0x3a0/0x420 [ 1085.763433][T20017] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1085.763459][T20017] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1085.763500][T20017] ? __pfx_ksys_write+0x10/0x10 [ 1085.763530][T20017] do_syscall_64+0x14d/0xf80 [ 1085.763546][T20017] ? trace_irq_disable+0x3b/0x150 [ 1085.763570][T20017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.763588][T20017] ? clear_bhb_loop+0x40/0x90 [ 1085.763611][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.763628][T20017] RIP: 0033:0x7fd44c99c799 [ 1085.763647][T20017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.763664][T20017] RSP: 002b:00007fd44d8b5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.763684][T20017] RAX: ffffffffffffffda RBX: 00007fd44cc15fa0 RCX: 00007fd44c99c799 [ 1085.763697][T20017] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1085.763709][T20017] RBP: 00007fd44d8b5090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.763720][T20017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1085.763731][T20017] R13: 00007fd44cc16038 R14: 00007fd44cc15fa0 R15: 00007ffedc7cef28 [ 1085.763761][T20017] [ 1085.772067][T20011] Modules linked in: [ 1085.829579][T20019] netlink: 16 bytes leftover after parsing attributes in process `syz.1.18029'. [ 1085.833635][T20011] [ 1086.551908][T20011] CPU: 0 UID: 0 PID: 20011 Comm: syz.0.18025 Not tainted syzkaller #0 PREEMPT(full) [ 1086.561565][T20011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1086.572140][T20011] RIP: 0010:nft_map_deactivate+0x34e/0x3c0 [ 1086.578005][T20011] Code: 8b 05 66 1f 47 09 48 3b 84 24 a0 00 00 00 75 62 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 49 a8 db 01 cc e8 d3 ea f0 f7 90 <0f> 0b 90 43 80 7c 35 00 00 0f 85 23 fe ff ff e9 26 fe ff ff 89 d9 [ 1086.597718][T20011] RSP: 0018:ffffc9000cd970e0 EFLAGS: 00010293 [ 1086.603872][T20011] RAX: ffffffff89d4a0dd RBX: 00000000fffffff4 RCX: ffff888079e5bc80 [ 1086.612037][T20011] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1086.620090][T20011] RBP: ffffc9000cd971d0 R08: 0000000000400dc0 R09: 00000000ffffffff [ 1086.628161][T20011] R10: dffffc0000000000 R11: fffffbfff1d14333 R12: ffffc9000cd97140 [ 1086.636155][T20011] R13: 1ffff920019b2e54 R14: dffffc0000000000 R15: ffffc9000cd972a0 [ 1086.644217][T20011] FS: 00007f6bf44556c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 1086.653538][T20011] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1086.660188][T20011] CR2: 00007fd44d74da08 CR3: 000000003bfcc000 CR4: 00000000003526f0 [ 1086.668215][T20011] Call Trace: [ 1086.671508][T20011] [ 1086.674465][T20011] ? __pfx_nft_map_deactivate+0x10/0x10 [ 1086.680540][T20011] ? nft_pernet+0x23/0x240 [ 1086.684985][T20011] ? __pfx_nft_mapelem_deactivate+0x10/0x10 [ 1086.690982][T20011] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1086.697336][T20011] nf_tables_delset+0xe58/0x1160 [ 1086.702407][T20011] ? __pfx_nf_tables_delset+0x10/0x10 [ 1086.707825][T20011] ? nfnl_pernet+0x23/0x240 [ 1086.712453][T20011] ? __nla_parse+0x40/0x60 [ 1086.716904][T20011] nfnetlink_rcv+0x1240/0x27b0 [ 1086.721767][T20011] ? is_bpf_text_address+0x26/0x2b0 [ 1086.727036][T20011] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1086.732268][T20011] ? __lock_acquire+0x6b5/0x2cf0 [ 1086.737289][T20011] ? netlink_deliver_tap+0x2e/0x1b0 [ 1086.742694][T20011] netlink_unicast+0x80f/0x9b0 [ 1086.747502][T20011] ? __pfx_netlink_unicast+0x10/0x10 [ 1086.752911][T20011] ? netlink_sendmsg+0x650/0xb40 [ 1086.757928][T20011] ? skb_put+0x11b/0x210 [ 1086.762323][T20011] netlink_sendmsg+0x813/0xb40 [ 1086.767136][T20011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.772554][T20011] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1086.777518][T20011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1086.782934][T20011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1086.788280][T20011] ____sys_sendmsg+0xa68/0xad0 [ 1086.793183][T20011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1086.798589][T20011] ? import_iovec+0x73/0xa0 [ 1086.803121][T20011] ___sys_sendmsg+0x2a5/0x360 [ 1086.807841][T20011] ? __pfx____sys_sendmsg+0x10/0x10 [ 1086.813200][T20011] ? __fget_files+0x2a/0x420 [ 1086.817820][T20011] ? __fget_files+0x3a0/0x420 [ 1086.822938][T20011] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1086.827914][T20011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1086.833478][T20011] ? __pfx_ksys_write+0x10/0x10 [ 1086.838458][T20011] do_syscall_64+0x14d/0xf80 [ 1086.843075][T20011] ? trace_irq_disable+0x3b/0x150 [ 1086.848196][T20011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.854293][T20011] ? clear_bhb_loop+0x40/0x90 [ 1086.859083][T20011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.864991][T20011] RIP: 0033:0x7f6bf359c799 [ 1086.869514][T20011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.889209][T20011] RSP: 002b:00007f6bf4455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1086.897652][T20011] RAX: ffffffffffffffda RBX: 00007f6bf3815fa0 RCX: 00007f6bf359c799 [ 1086.905780][T20011] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1086.913901][T20011] RBP: 00007f6bf4455090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.922161][T20011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1086.930843][T20011] R13: 00007f6bf3816038 R14: 00007f6bf3815fa0 R15: 00007ffe8e4efc18 [ 1086.939377][T20011] [ 1086.942436][T20011] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1086.949816][T20011] CPU: 0 UID: 0 PID: 20011 Comm: syz.0.18025 Not tainted syzkaller #0 PREEMPT(full) [ 1086.959429][T20011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1086.969483][T20011] Call Trace: [ 1086.972756][T20011] [ 1086.975677][T20011] vpanic+0x56c/0xa60 [ 1086.979659][T20011] ? __pfx__printk+0x10/0x10 [ 1086.984239][T20011] ? __pfx_vpanic+0x10/0x10 [ 1086.988735][T20011] ? is_bpf_text_address+0x292/0x2b0 [ 1086.994010][T20011] ? is_bpf_text_address+0x26/0x2b0 [ 1086.999210][T20011] panic+0xc5/0xd0 [ 1087.002928][T20011] ? __pfx_panic+0x10/0x10 [ 1087.007352][T20011] __warn+0x315/0x4f0 [ 1087.011329][T20011] ? nft_map_deactivate+0x34e/0x3c0 [ 1087.016524][T20011] ? nft_map_deactivate+0x34e/0x3c0 [ 1087.021718][T20011] __report_bug+0x29a/0x540 [ 1087.026325][T20011] ? nft_map_deactivate+0x34e/0x3c0 [ 1087.031513][T20011] ? __pfx___report_bug+0x10/0x10 [ 1087.036536][T20011] ? lockdep_hardirqs_on+0x7a/0x110 [ 1087.042032][T20011] ? rcu_is_watching+0x15/0xb0 [ 1087.046816][T20011] ? __kasan_kmalloc+0x22/0xb0 [ 1087.051586][T20011] ? nft_map_deactivate+0x34e/0x3c0 [ 1087.056788][T20011] report_bug+0x16a/0x220 [ 1087.061115][T20011] ? nft_map_deactivate+0x34e/0x3c0 [ 1087.066337][T20011] ? nft_map_deactivate+0x350/0x3c0 [ 1087.071526][T20011] handle_bug+0x98/0x200 [ 1087.075761][T20011] exc_invalid_op+0x1a/0x50 [ 1087.080255][T20011] asm_exc_invalid_op+0x1a/0x20 [ 1087.085092][T20011] RIP: 0010:nft_map_deactivate+0x34e/0x3c0 [ 1087.090892][T20011] Code: 8b 05 66 1f 47 09 48 3b 84 24 a0 00 00 00 75 62 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 49 a8 db 01 cc e8 d3 ea f0 f7 90 <0f> 0b 90 43 80 7c 35 00 00 0f 85 23 fe ff ff e9 26 fe ff ff 89 d9 [ 1087.110585][T20011] RSP: 0018:ffffc9000cd970e0 EFLAGS: 00010293 [ 1087.116671][T20011] RAX: ffffffff89d4a0dd RBX: 00000000fffffff4 RCX: ffff888079e5bc80 [ 1087.124738][T20011] RDX: 0000000000000000 RSI: 00000000fffffff4 RDI: 0000000000000000 [ 1087.132710][T20011] RBP: ffffc9000cd971d0 R08: 0000000000400dc0 R09: 00000000ffffffff [ 1087.140689][T20011] R10: dffffc0000000000 R11: fffffbfff1d14333 R12: ffffc9000cd97140 [ 1087.148658][T20011] R13: 1ffff920019b2e54 R14: dffffc0000000000 R15: ffffc9000cd972a0 [ 1087.156629][T20011] ? nft_map_deactivate+0x34d/0x3c0 [ 1087.161862][T20011] ? __pfx_nft_map_deactivate+0x10/0x10 [ 1087.167612][T20011] ? nft_pernet+0x23/0x240 [ 1087.172048][T20011] ? __pfx_nft_mapelem_deactivate+0x10/0x10 [ 1087.177953][T20011] ? nft_trans_commit_list_add_tail+0x179/0x520 [ 1087.184193][T20011] nf_tables_delset+0xe58/0x1160 [ 1087.189141][T20011] ? __pfx_nf_tables_delset+0x10/0x10 [ 1087.194515][T20011] ? nfnl_pernet+0x23/0x240 [ 1087.199054][T20011] ? __nla_parse+0x40/0x60 [ 1087.203555][T20011] nfnetlink_rcv+0x1240/0x27b0 [ 1087.208310][T20011] ? is_bpf_text_address+0x26/0x2b0 [ 1087.213549][T20011] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1087.218668][T20011] ? __lock_acquire+0x6b5/0x2cf0 [ 1087.223735][T20011] ? netlink_deliver_tap+0x2e/0x1b0 [ 1087.228957][T20011] netlink_unicast+0x80f/0x9b0 [ 1087.233720][T20011] ? __pfx_netlink_unicast+0x10/0x10 [ 1087.239010][T20011] ? netlink_sendmsg+0x650/0xb40 [ 1087.243940][T20011] ? skb_put+0x11b/0x210 [ 1087.248177][T20011] netlink_sendmsg+0x813/0xb40 [ 1087.252948][T20011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.258305][T20011] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1087.263241][T20011] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1087.268602][T20011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1087.273894][T20011] ____sys_sendmsg+0xa68/0xad0 [ 1087.278662][T20011] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1087.284092][T20011] ? import_iovec+0x73/0xa0 [ 1087.288613][T20011] ___sys_sendmsg+0x2a5/0x360 [ 1087.293298][T20011] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.298528][T20011] ? __fget_files+0x2a/0x420 [ 1087.303202][T20011] ? __fget_files+0x3a0/0x420 [ 1087.307880][T20011] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1087.312820][T20011] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.318395][T20011] ? __pfx_ksys_write+0x10/0x10 [ 1087.323254][T20011] do_syscall_64+0x14d/0xf80 [ 1087.327842][T20011] ? trace_irq_disable+0x3b/0x150 [ 1087.332859][T20011] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.338929][T20011] ? clear_bhb_loop+0x40/0x90 [ 1087.343602][T20011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.349524][T20011] RIP: 0033:0x7f6bf359c799 [ 1087.353951][T20011] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1087.373663][T20011] RSP: 002b:00007f6bf4455028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.382108][T20011] RAX: ffffffffffffffda RBX: 00007f6bf3815fa0 RCX: 00007f6bf359c799 [ 1087.390250][T20011] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1087.398213][T20011] RBP: 00007f6bf4455090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.406283][T20011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1087.414265][T20011] R13: 00007f6bf3816038 R14: 00007f6bf3815fa0 R15: 00007ffe8e4efc18 [ 1087.422285][T20011] [ 1087.425623][T20011] Kernel Offset: disabled [ 1087.429954][T20011] Rebooting in 86400 seconds..